last executing test programs: 1m25.339073054s ago: executing program 3 (id=829): ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000780)={r4, 0xfffffffd, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x400, 0x9], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x7]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) close_range(r0, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x88800) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[0x0], &(0x7f00000001c0), 0x0, 0x1, 0x0, 0x0, r9}) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000300)={0x1, 0x1, &(0x7f0000000180)=[r9], &(0x7f00000000c0)=[0x2], &(0x7f0000000240)=[r10], &(0x7f0000000040), 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000100)={&(0x7f0000000040)=[r9], 0x1, r3, r4, 0x5b, 0x8000, 0x5, 0xd7f6, {0xa6, 0x4, 0x9, 0x337, 0x525, 0x7, 0x9, 0x0, 0x8001, 0x7, 0x2, 0x401, 0x0, 0x200, "bbca07f85cb47356a2b7ea72c2e58b4e2fa547894c5cd9620e07befe9c6d717d"}}) 1m25.079065348s ago: executing program 3 (id=839): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000000)=ANY=[], 0x200002e6) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000080)='\x00!', 0x2}], 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) read(r2, &(0x7f00000000c0)=""/60, 0x3c) read$FUSE(r0, &(0x7f0000004400)={0x2020}, 0x2020) fcntl$setpipe(r1, 0x407, 0x7000000) 1m24.762811639s ago: executing program 3 (id=833): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x500, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0xfffffffffffffedf, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0x1400, 0x7, 0x3}]}}]}, 0x48}}, 0x0) 1m24.686838926s ago: executing program 3 (id=834): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r1 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000500)=0x5bbe, 0x4) sendmmsg(r1, &(0x7f0000000bc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000000)=0x4, 0x4) recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2002, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "98b40a7664ff7d56", "bb6710bc8150e4fef9a1a117d7b27caf", "8c76287d", "3d8efa051b509d7d"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) write$P9_RVERSION(r3, &(0x7f0000000c40)=ANY=[], 0x13) connect$vsock_stream(r3, &(0x7f0000000140), 0x10) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000000)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xa7, 0x4) 1m24.500310156s ago: executing program 3 (id=836): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x128) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1c4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x78b76515}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000801}, 0x2400a845) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB="889f61f605fce27649e40f27cfe68e54e22a41042aaefc71bc7cb1c93b829f45de04de82d95855250d5b8906a4b5eb69226c2afa5b6a2da5864ecb59ddefecb70d434487a32b551de23e2c5a80744f24b1ec95d073d6feb865b2d73ee4244f7c73c23f43f8b5b2e0bbb3b8e24febd0246277740991778c454db3e807a1946eb032b948ab9e7f139fd2b25158e8302c4b96086c501fc546c2cacd82306d09015613c6a59a0444424d17f1", @ANYBLOB=',group_id=', @ANYBLOB="e542251380e5661b4a736032a26f06e91bd72dd23799513bf348d69555ed09fe5b11f2309b5cd45f0d90909740566d29da569b67e1d0959c235ade07a22a993b2a2be699bed78fd9a12748367c6db94dedeb1796f52ad6fa75e9473eb0217cf58a3f1795bbdfd456c76a548be320bb068ef4e92ddf66c9a811bbf4d365459f9dfc5b8699a1af93afa7d8ff60387957bde1e80db65c", @ANYRES16=r2]) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='user_id', &(0x7f0000000380)='./file1\x00', r0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xc000002}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x50, r3, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x2a}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x8808}, 0x4000000) 1m24.431192805s ago: executing program 3 (id=837): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a, 0x0, '\x00', [@pad1]}]}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x2, 0x4}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) 1m9.439087081s ago: executing program 32 (id=837): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a, 0x0, '\x00', [@pad1]}]}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x2, 0x4}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) 3.119952597s ago: executing program 1 (id=1694): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x1) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={"e6c6b4c6", 0x5, 0x2, 0x1, 0x0, 0x1, "a723d20367504ebf533893188285b9", "1fa6be2c", "3256067d", "75087a8d", ["da529e1676d4864b512d54fb", "5730aeddddc262c64093c68f", "19f882a499c17a13a4490de3", "8cc93bcc23afb9acbf6e0939"]}) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r1, 0x0) ioctl$XFS_IOC_AG_GEOMETRY(r1, 0xc080583d, &(0x7f00000000c0)={0x4, 0xaf, 0x3, 0xfff, 0x8, 0x5, 0x5, 0x3}) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f0000000140)) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x200000) ioctl$SNDRV_TIMER_IOCTL_CREATE(r3, 0xc02054a5, &(0x7f00000001c0)={0x9bd, r0, 'id0\x00'}) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000240)={0x100, 0x8}) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./file0\x00'}, 0x18) close(r0) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r4, 0xc0106441, &(0x7f0000000300)={0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_PANTHOR_VM_GET_STATE(r4, 0xc0086444, &(0x7f0000000340)={r6}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$P9_RLERRORu(r4, &(0x7f00000003c0)={0xd, 0x7, 0x1, {{}, 0x4}}, 0xd) accept$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f0000000480)={{r5}, 0x9d0, 0xb, 0x3}) socket(0x29, 0x2, 0x5) r7 = syz_open_dev$vcsu(&(0x7f00000004c0), 0x8, 0x40200) ioctl$FE_DISEQC_SEND_MASTER_CMD(r7, 0x40076f3f, &(0x7f0000000500)={"81c693c9b52a", 0x6}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000000540)={{0x1, 0x1, 0x18, r7, {0x4}}, './file0\x00'}) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000002880)={0x9, 0x8400000, {0xffffffffffffffff}, {0xee01}, 0x9, 0x2}) newfstatat(0xffffffffffffff9c, &(0x7f0000002940)='./file0\x00', &(0x7f0000002980)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) ioctl$NS_GET_OWNER_UID(r7, 0xb704, &(0x7f0000002b00)=0x0) getresgid(&(0x7f0000002b40)=0x0, &(0x7f0000002b80), &(0x7f0000002bc0)) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000002c00)={{{@in6=@private1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@initdev}}, &(0x7f0000002d00)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002d40)={{0x1, 0x1, 0x18, r7, {0xee00, 0xee01}}, './file0\x00'}) fstat(r1, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r8, &(0x7f0000000580)="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", 0x2000, &(0x7f00000035c0)={&(0x7f0000002580)={0x50, 0x0, 0xfffffffffffff801, {0x7, 0x2d, 0x4, 0x4, 0x2, 0x8, 0x40, 0x1, 0x0, 0x0, 0x100, 0xfffffff8}}, &(0x7f0000002600)={0x18, 0xfffffffffffffff5, 0x1, {0x2}}, &(0x7f0000002640)={0x18, 0x0, 0x8, {0x9}}, &(0x7f0000002680)={0x18, 0x0, 0x5, {0x21}}, &(0x7f00000026c0)={0x18, 0x0, 0xf, {0x4}}, &(0x7f0000002700)={0x28, 0xffffffffffffffda, 0xa0000000, {{0x100000001, 0x3, 0x1, 0xffffffffffffffff}}}, &(0x7f0000002740)={0x60, 0x0, 0x6, {{0x2, 0x1ce, 0x1, 0x2, 0x6, 0x1, 0xd, 0x8}}}, &(0x7f00000027c0)={0x18, 0x0, 0x8, {0x2}}, &(0x7f0000002800)={0x12, 0x0, 0x0, {'\'\x00'}}, &(0x7f0000002840)={0x20, 0x0, 0xa, {0x0, 0x8}}, &(0x7f00000028c0)={0x78, 0x0, 0xff, {0x80000000, 0x719, 0x0, {0x3, 0x7, 0x0, 0x7f, 0x2, 0x6, 0x800, 0x800, 0x7, 0x2000, 0xfff, r9, 0xffffffffffffffff, 0x10001, 0x9}}}, &(0x7f0000002a00)={0x90, 0x0, 0x80000000, {0x1, 0x3, 0x800000, 0x1, 0x0, 0x462, {0x1, 0xc185, 0x3ff, 0x10000, 0x9, 0x9, 0x9, 0x8, 0x10, 0xc000, 0x6, r10, 0xee01, 0x0, 0x3}}}, &(0x7f0000002ac0)={0x30, 0x0, 0xe724, [{0x6, 0x8, 0x1, 0x1, '\x00'}]}, &(0x7f0000002ec0)={0x2a0, 0x0, 0x4, [{{0x3, 0x1, 0x8, 0x0, 0x4, 0x1, {0x4, 0x5abf1903, 0x4, 0x4, 0x80000000000000, 0x86d, 0xf5, 0x3, 0x9, 0xc000, 0x338, r11, r12, 0x51877578, 0x2}}, {0x6, 0x2, 0x1, 0x9, ','}}, {{0x0, 0x2, 0x4, 0x4b, 0x5, 0x81, {0x1, 0x7, 0x1000, 0xffffffff, 0x0, 0xa, 0x4, 0xfffffc0d, 0x8, 0x4000, 0x1000, r13, 0xee00, 0x9, 0x1}}, {0x1, 0x8d, 0xb, 0x8, '/dev/vcsu#\x00'}}, {{0x6, 0x6, 0x5, 0x9, 0x7, 0x7, {0x2, 0x7, 0xffffffffffffffff, 0xa4, 0xe94, 0xa00000000, 0x9, 0xc1, 0x400, 0x2000, 0xffff1709, r14, r15, 0x3, 0xfc6}}, {0x3, 0xeb, 0xa, 0x4, '/dev/fuse\x00'}}, {{0x4, 0x0, 0x9, 0xffffffffffffffff, 0x1, 0x2, {0x1, 0x9, 0x4, 0xfffffffffffffffe, 0x8000000000000000, 0xc, 0x7, 0x400, 0x1, 0x8000, 0x7, 0x0, 0xee01, 0x7, 0xc90}}, {0x2, 0x2, 0x1, 0xd, '*'}}]}, &(0x7f00000032c0)={0xa0, 0x0, 0x51, {{0x3, 0x3, 0x9, 0x401, 0x81, 0xdd, {0x4, 0x1, 0x2, 0x100000001, 0x7, 0x0, 0x9, 0x7f, 0x0, 0xc000, 0x9, 0x0, 0x0, 0x401, 0x200}}, {0x0, 0x9}}}, &(0x7f0000003380)={0x20, 0x0, 0xcd, {0x10000, 0x0, 0x10, 0x236}}, &(0x7f0000003480)={0x130, 0xfffffffffffffffe, 0x3e23, {0x4, 0x8, 0x0, '\x00', {0x2000, 0x92, 0x7fffffffffffffff, 0x4, 0x0, 0x0, 0x2000, '\x00', 0x1, 0x4, 0x8, 0x1, {0x8, 0x6}, {0x7}, {0x4e105590, 0x9}, {0x4, 0x51a}, 0x38, 0x9, 0x4, 0x5}}}}) 3.116572303s ago: executing program 1 (id=1695): r0 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x0) pwritev(r0, &(0x7f0000002440)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="3591f6ce777150784c16e5dd97ecfb68818166b6b5658a408e4a6a8bf89278c6a0078d9f846c071f2c50d610d7baca9398222e4b1d382d30c563bea0e3df54552fd4876bb5b74f7d262e28eb78a284fb8a144c8c4fdf209eb4aaa10d6004e8d376b7837dde1711223a263d67efe427ae66908da2a83fba52573c15c4", 0x7c}, {&(0x7f00000010c0)="2b55afc4c87bc7a003e6ed69e8a47c136865d73ad8bb547db67812b351d8f951ae270cd6ce1fcc3ff2bac762e93c501d78cf44cc73a464e060c84c848b89a7b5472070c393064eb2575b5d48bf3d387b1789c5ad50b980f8b63a87bdebeececd282d30e349970ed4da2197fdc5b322dee8d351b11ef904f9ea33214e094890aca43a6decbbb2e9ceedf4da86b63dcb8efbed5fee2056512c963fb884ac9f94b58a4d3cacbfe017e53df0d87f6e4c1a62e751345d61ed07e46f447e7faaad3d34fcbf99b0f28562e1ea90d7b4fd54308265b00c9c2735c3915e8b80d9328cf2ad7142cdbf6b5c7f14102180dbef650de46d780cbd558c7c86dee0fedfc96994c379570b613c276e70d8d7af8897aef965a38ca3291b824a03b620354e76eaf044f1e01f9d666e16913266a16ab7d276ca90a9f616804d9137aee4f0557433b144622793117d3005e40e27399975dd2708667c76c0d92ac723c3f95c9a1af5d9abda1a6b3deaa399d551c05974cd72482002831ef1e7bc37ceb98d7d62191356482d8ae96fe9bcdaf11026bab3c6e175bc033168a138281d431df441b635543ba663c78c95c9c6436eca9113fe946a12a6f2879b1f75d3e3a3b6c911bbf7aab684ee79c7ec7555d6922070e42d7a00955f699760d844a1a556f5aefea6520d8aadb8f7a7db1398863cdd75705d701f885b2ef2a88474d0e6c0a25b8c0cd481ddd4847405ab41c1949cb32fb70eb68433285c9c86577f74559f353b964f6c76034f9578130eded2d2c82ae44821c7196feccf062cabec458eb446dd07aecbbbba4941472c74f4975eb371d4225844595a5fabf3b435b9bdea573c4a3cfe58a328535e16403f3ba1cbca0ab062453f96084110b25543f83f214f4e6373aa4dc6c4f6470f59ec10b3fc2a8981ef679f6a31cf1771575d144e9c3aba5cab463d6d96bcdd74f5fba886db759e7a3c00f36dcf532f2975dd4f49bff9a9514efeed63383bd3236ae5b784a8bdc44ec7d66f19899f573f2ae5e5794ec0c542beee760bad3a9ad6831b8b2d6f924bd034b4e41e9c859b18e5c73165c51c7b95f91dfd04d412a86b9f68658cb523b17adafa59eee4c425b9d1679848a604e131ae61bbf3b830e7f64d78dde1563f2f0cf093a49df968ffa2143b44a2633153aabd7badbac6e02e9cc598076c599fd6c6b9f714d8a027c14d048100711e3d946fb3ecc2d81cd4b7b655f05d282dc32febd3d3ac5209cce001405cc286a481eb40ffd92f2fdbfa222f4fbbb20fd154b6efce2b7dc391559f3e25d93aa2eaaa0e7ad6649a50ae93f6ab83d58d1932ab61f4f520246576fd385434cf266faa9e6efb1556f5cd18a96e9a665f81e81f11ba02c61c7135833bbef11452a1ee53624a42b1e1eac662b72940af14a1bf6a5ee780f684cfebc7b06b0377bc44a9718d878c8669081fc4ff4d27adae8e75d38fae8f948e870faac799448b153b482f6cedc236d2a50f72d33deca547bc6edac674c65f2962505321c848ce911982384bed2eb242a12e4ab25fa77d28d3cade41a6c4082e9a3615f5d3d7203969ed2dfbfb62d28d79f1ac259cc7f94643950dd16c4c7e6a70f60179703d0ed465b2c762fec53b3f4ab0a19e44f3101e2e944fcf663361c6f29e1caa004fda3c0041c41732be9e99e7370dd39cccb21a7198565c7f30d21abdf4b05a87abe13d9277716ff59ef34ec44cb9d41379936f70f139b44fd14054ecfe0f295cc3de5e9fa2386d752ead14e3362ccb4a17de25069e18dde33aa9504b1c957a29819dc3623efa25bb92c634f165a7a52460ff1f421f1e1008c38c79d7d772f329c204fdf84e6f7de1fc8d81f1c04a7eeb0429429ae406f3bbb499a5ec2fafc91268d18ac00b2fa00932b4d6340f8aeef84c645abf8814831b21e296603db4e5ca456eaf8d99e75ad79fe105336f48bd61723f86c51f11de76d65c2b7c5eb6d1de6e2e918fe999ee031aad395e2927e86fbdb6ebb5bcf1f76fef59dfdc4318a141592e54c092c5a37923af0f80b97f4b47c5e7e2a959e19adeebb6b272875fce21a14eb38b90d6ebcc331c94f3dac86710dc9b3e65c03aa05ac971a0a1cd1899d654d555f6157324f44eab7083c7f83159ac7e906e70f7ef5d43592ad7748bcc0a70f118c7f1482757b99f43a0fab08c26ac562adc95e95c19b0b3ea996763e0f95830258eedbd8d0c1d198246f081e18d8f2286e6185f2a80a719ffb775fb0870ff56cb31ed4651366c95846b4ee6d90ac27c734a2b6a1620ffb683c1fcc0f6f16f08a80331159b0fa18bebb6243d020d78f4fd25612895e96b2d6915de37e201ec877bcef58cffa0aca8013bee31f3be83b5eb006ab00db46344108ab14bef303e4fcf6ded07de252232fb0e27f67849be82021f9fd36b6782524a4596af522268ff51cfd655dcfdb1782fa41eacfc961ae89148986142374a9d8d8bf45339a51fb001f12d2339659608bb50436c5d8de67204e945e4d95855159e0ea072f98033e87ed2328729adfbdd4062e4482899bd8a62b11d4dc75829d35c375054373707eae8a24d04dffa0cff7737533c775a8cc8a017c8a10d5f4c7106815519dea46ceec1281e85d5582dbbfc35e44146204e255c694aca298cdfbde1a001c90f5aa785deb2455025a8e633a8e969a1e457f18f4bc722411d5f9c1b63c2291867c41276ed4b95de0a9277ec1f295f5c22e72a2f215fd5e847b33a529431eab8445c900e76f72f0ab93f6939781f159f433b94980e588270230008b99239c30cc1beb76e0f9b06f9aa0b498785ba8e5310c561eec471e1b4cbb25addf48e5af08a6bc4ac787be287655de484fbb7b2ddc3f75c0a66bde2249229bf76e5ff68e5adb6bb3b3396afe85dfd076496588debb9bf681592d8b3cd661464ae4fc8c2b369cae77016f287081afa75bec73700b86513d34650a9ddee5fa86caca04450ed13cb30e1bfb58bed965b0abcf5ce7a87728a22fd5d32200ee219b1589370c1b04bb61167ec4db17121e22b225ddb518defbcb0d262749ca26ad65bd1cd104c4a9a3d87171e3885af4e3b791f6253440aa6f6e7985c05abbf5fb2ac76a4952468cc223df6600fa5261fb449bebde317c3c206d80459a261452ab8f6ecfb74df0c91b3443d9b3f6e1e80c58bf36fb776c51a3ab2b59371c49ce21638b39c63f17154fd4cdcbdb9fde055785a5c18e3bf4eae0e21b0ace22bef3cc9a1f50fac02a10e01462c7853c5c04ab55bba840cf6e12e6b38be5ad36a1a50e04f52a92c07e00d21beb9e5682d90ca178d94536e74be4983b379b9af54ca3f64970249bc8b395e84c4d4377dcc1753f5b127fce3b1ad7afa3e35cb05996445eb71a8cb95407307a673a1cf8fb949bbdef6f2ba78b8ea4a084174180a9b79ca4bb6885aae2f88c4f7a69975af787c9d76d6d309214dc4a52606272ee6d9920e9aac7fa0b86d22ae12e5a8c17b8a80178c6da8ac88d66a881a479a5faadaceb3fe712a5fbfad261e6a8bb7b69ff286ed11ec9fd66516c46382428f05bd818c7d1de0efb699cfde8a2cb19f002850ce2f5a0358dcfcbf14587f2c6e3b92a245948fcaef8d039c03aa3f1d97a7dbede42fa5021a14244c45dda3995484fbc4e8c1526eedf34719b79fe6d9485961cc15269a68d50c387f18a56f0f822bc61df94224f48222ad5eff2a0e2f2bf49b36ba2824e993bafb994e31bb8f2a921aa25f40136b962665c85e64363571cb7aeef7614d5007005980fa326fbc0579825c205d208d46ba7d2c22b431795767a013b5743f0a7dbf5b67949c973ef642539dd82509227618590e608fd508c6ddb9d36fee1957a14e1a3fe0add10f42dbe1896d99c9e401196e3921219a8234e8111cfbb1de21cf06b04c9ce2ce3ded2b53415c5d49e3bab023afb002ea9960c78b6dcfc7f73c4343faa375d471c40da4abe7af80dbd0a7ed01658c3696758d7de1b9c1f9dd4e88d3a4c75e0a8343773a0921179d2692fe8ff431ddf821e03594f31945ad4d46dea56a0d33f2519b6db91efeaf2b5f4e0439fda9d416f24ccd3c28a772729d800c66e1fc0d0e4bbfdc0d208b7283ca1af840bc9da84f77e7077e57daed149bcdf0a21c46f7ca9df48f4436953fd7b19ffa3308398e1bf029a26ea7132737ebb4e0b42f3c75a567ab3306bc6a531a0c42543a4a95c619616c75740e6af1cdd6301f5ac907895acd0bd3cb761e195b5fc123378e8e47872172dfd2952b454c90bb9f7ad258832a620e9a3f848be64768677c7e363911948968b39da4cfded3331decdbfde754d70812c847a11e7c6a7376ddfcb11d5188ba1a86892f2bff3cee837d2fc46ceda67d31d53757b06cc06b08ae4780cbe5c9953bfa162c8f0f298ac56863a5b9945f3bb0e5f3157f97628e3cfc777548975fa3f19b950aec2d0a2fb72b01f91101544261875fdf6e3b023c8d0d1002e5a74c2be367b8fa05ba1886e42e1d8c027a4be9cc6c0342409c408389c038bbd4e5dda4e64ef1114cbbda3f87ab32b221dffd2b7354688ba1554c2b6dd68e122f6684d592a0cf3d769378049ffc4fd398c681a88bff8f166eab05396d578423276bc0903fd64dba6e8066ab66c27cb888c0b64426ec622fb58965dad6751ca6f40cb4a3ba763b523aff2552e626d7e5cbd6a9d280aa063b7cf4e7f5aa3546ea5d762ae0cfef821a110c95c215c5f73b91cb2397fcf568129dc5c820f09deb68e68e8829b219e75453614be13a0f5f941daeb30783674e5789ed590d44758b1256bb7ff99b787160e5478e9fd27ff71aeb1d0824b196477db96d09dad6a52c66854898c9cfde6919a0671851c560b2d761ef2a90a31d70d912a2e0aa8473234e6afb9c2b1e615f1c88ede986622f2b45efc73778119f6cefc1781a2844c0a9db8737d149f8b07c0ffe13f3cd38d3b78a203db243b1a0c05ab0fa5d92fcdfb8ed7be83e68b00a576a048246d22a0f74ca1bf209b520840de3f9453106a599cbb646a4b1dfe695937556ec7419ba8ba5581c9a745fd7c032a6a6540c68a620716dace4381547f4b9702d4acb181505ff4d74b84435b39a66a0346c6c57e54c53858219ec9577cf8a9357e95583c06a6f43eb10f196c4f19e723a9bc9b25eb84599a5b1371cba210b1e365c2076f9207373672ec491c1e3198fdd4fbb057cce30156c73d722aa3ac5727cf55c8d58066a99542cc6c99f0736198660d321ff0ce17dbc2a85668bb94affe83c2ca612e819dce3ca364d111277deb4ea7c2582d9a473dd4e6a2814a7aa591dcba7d25346b9bbdddb7a32d1588feb4b015080da48d59d316d6995aa699bc515c88041c11a6cba68c7d10ad4b34c97064406d09363cb49b0f896ef031195599ed385b9b2d84cec9644d025334f2035caa217e2f0499ed4bfa06f0600a6fea8391e58ab64f6f30a332e8dc415d70b271b32843870992926b93449830c0155d4209a18d31a6204dc46395d1381d9fe3f1cbdc32cf9dd106350a0b4ab0cff44d87260edafd9369e106f4e83b7c7c05c88131e52caab400ad1ea920e938143fd2b9b7211d0ca740ac2e0900bd418124c633845164c2a436f5027dc5578e3865b8a7ad1420d305ea0fe2b703109cdd911d4ec4249701c9efa6f9762c3d2c583735c26438a4ea579f48f90e5721bbf5b2463c626a67d7880ac3e0375a54a113b712f52645215e08d20378c5cfd0cb31a43ae68f67205b5e469d6b504f3f06b34d0d585efca68ffbea8ba10e870a88f6f0057d1b9fbc9795bb3d324678ec8d5b05f1f49bd6f50b5a7d4be1171e4", 0x1000}, {&(0x7f00000020c0)="00aea396b0558b1de36ff272963ece6c420faa6204ae48e4644419c3e969071ae44e1a52a1be6de5194b81f71943a8154e542b90d77eb79e352dfdc4008b6c3fa5ea2d7ec893cf4ba34bf5a864caac803189d2de3767d0aa8e7e892ec8c12ee8e4319708c9f71d1efa8ddbcc2582a3a2a5a44c8ec8d6b699865a611873196a81f896264484a0c676f746af628cec2ad9f747310db843918f12629d5bf484b5df1250ace148071cd58e610268081d5585cea15922b3fe84e219006ac93e445148", 0xc0}, {&(0x7f0000002180)="26855122c10adc6112c388c5fd1a2cea949c84edcec14ca0ec510503e21285c001154c42a43185097a10854f39c91d23788b4e10321790af9e9a6020649baa20993e4a998b45052b7b078f8b4286167624d87270f7d84b36c47c6bf21b034853b1339811142e153cafb2ec7a9d7483229f0b5396b9d2af90511c4c93c94a19f74372c7c75572f4ce6dca00316ae7df09", 0x90}, {&(0x7f0000002240)="89c355d779826c79a2b7a84dbc5617a701f9d148b2d2b1d5c383bd05ccb0dbe35a22fb40c639dfa75ba1e1c2", 0x2c}, {&(0x7f0000002280)="c2b3c7fdd6fb15c48018ae596af613f45dd665866794321a53ac87620a6683d864839b60fcf5abef76c8b30aaec2bdb1127b26976ff10d3c2030a2e806e6706fde42f33241ddbf4221cbadd3cfc9d333b6b0c2c0354d931b9162d6d2076e3405b823e83d59af63be1788763f39c84a4fbac63733c26b7c96d0e0749d8f44caf603cebc711a0554e8ac9b9294ee0e73af1fd7b9c2d1622887baaacef0ee0ce8298d57d9ce8e502ab5e89fc3f088381d193256bace3efdad57415c", 0xba}, {&(0x7f0000002340)="3c1d6985af498df6171e1af2fdf2e893d76793286f9b148466b28f72c132188b75b9dbb54a6d3348490fc03be5e4c753afc0055f8c663deb0b9c3cb8efa7d1d7576d6e48c9", 0x45}, {&(0x7f00000023c0)="38df7d87bdaaf60d52398f7261e9f4fb9bfca130bfbe9987e9bfa7c3a979b07b0ff9fdc7d4de1134e99deba80f121ae92abd6d1d5eace5a2b68cb5cf3175b3733b1790e0c3d6463594af462577c94e945a50d9ada3c344f9134d73fa2ca7086f98da80466a591e031526779647354bdbb5a4e874f79ac7eb1a10516c", 0x7c}], 0x9, 0x3, 0xf) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000028c0)={0x0, &(0x7f0000002500)=[@enable_nested={0x12c, 0x18}, @set_irq_handler={0xc8, 0x20, {0x9f, 0x2}}, @set_irq_handler={0xc8, 0x20, {0x71, 0x2}}, @nested_amd_stgi={0x17e, 0x10}, @uexit={0x0, 0x18, 0xb}, @wrmsr={0x65, 0x20, {0x9de, 0x100000001}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_create_vm={0x12d, 0x18, 0x2}, @nested_amd_vmload={0x182, 0x18}, @out_dx={0x6a, 0x28, {0x5e88, 0x4, 0x3fffc000000}}, @nested_load_syzos={0x136, 0x78, {0x3, 0xfffffffffffffff9, [@nested_amd_inject_event={0x180, 0x38, {0x0, 0x6, 0x2, 0x0, 0x1}}, @set_irq_handler={0xc8, 0x20, {0x85}}]}}, @nested_load_code={0x12e, 0x55, {0x2, "47f77c95000fc71dbc2900003e0f011f0f300f08c744240026000000c74424024e66d7d1ff1c24360f01c82e660f38815800c4c2fd22f066b85f008ec8"}}, @uexit={0x0, 0x18, 0x200}, @wr_drn={0x68, 0x20, {0x7, 0x5e6}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x6dba, 0x8, 0x1}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @rdmsr={0x66, 0x18, {0x630}}, @nested_amd_clgi={0x17f, 0x10}, @wr_drn={0x68, 0x20, {0x6, 0x7ff}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0xd, 0x1000}}, @nested_amd_invlpga={0x17d, 0x20, {0x2000, 0x2af2}}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0xa0, 0x7, 0x2, 0xa}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @out_dx={0x6a, 0x28, {0xa2d5, 0x4, 0x6}}, @wr_crn={0x67, 0x20, {0x8, 0xa}}], 0x3b5}) ioctl$KVM_RUN(r1, 0xae80, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000002900)) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000002940), 0x102, 0x0) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(0xffffffffffffffff, 0xc0106450, &(0x7f0000002980)={0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_PANTHOR_BO_MMAP_OFFSET(r2, 0xc0106446, &(0x7f00000029c0)={r3}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000002a00)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01864c2, &(0x7f0000002a40)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01864c2, &(0x7f0000002a80)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000002ac0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01864c2, &(0x7f0000002b40)={0x0, 0x1, r1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01864c2, &(0x7f0000002b80)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000002bc0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01864c2, &(0x7f0000002c00)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01864c2, &(0x7f0000002c40)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000002d00)={0x0, 0x1}) ioctl$DRM_IOCTL_PANTHOR_VM_BIND(r2, 0xc0186443, &(0x7f0000002e40)={0x0, 0x1, {0x30, 0x3, &(0x7f0000002d80)=[{0x0, r3, 0x4e, 0x3, 0x2, {0x10, 0x4, &(0x7f0000002b00)=[{0x1, r4, 0x81}, {0x800000ff, r5, 0x4}, {0x1, r6}, {0x0, r7, 0x400}]}}, {0x1, r3, 0x7, 0x200, 0x1ff, {0x10, 0x6, &(0x7f0000002c80)=[{0x1, r8, 0x3}, {0x1, r9}, {0x0, r10, 0x6}, {0x0, r11, 0x3}, {0x1, r12, 0x97}, {0x0, 0x0, 0x9}]}}, {0x1, r3, 0xfffffffffffffffc, 0x401, 0x200, {0x10, 0x1, &(0x7f0000002d40)=[{0x80000000, r13}]}}]}}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000002e80)={r7, r12, 0x1, 0x8, 0x5}) openat$kvm(0xffffffffffffff9c, &(0x7f0000002ec0), 0x200, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000002f00)) ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f0000002f40)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000002f80)={0x3, r14, 0x27d73651, 0x0, 0xafab, 0x3, 0xac}) r15 = accept4$unix(0xffffffffffffffff, &(0x7f0000002fc0), &(0x7f0000003040)=0x6e, 0x800) ioctl$sock_FIOGETOWN(r15, 0x8903, &(0x7f0000003080)) r16 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003100), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000031c0)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003180)={&(0x7f0000003140)={0x30, r16, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000003200)={r10}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000003340)={&(0x7f0000003240)=[0x0, 0x0], &(0x7f0000003280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000032c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x4, 0x7, 0x6}) 3.029497496s ago: executing program 1 (id=1697): r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x18, &(0x7f00000001c0)={0x40, 0x0, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x40004000}) 2.772417496s ago: executing program 2 (id=1702): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r0, 0x4018aee3, &(0x7f0000000080)=@attr_pmu_filter={0x0, 0x1, 0x1, &(0x7f0000000040)={0x8, 0x3ff}}) sendto$phonet(r0, &(0x7f00000000c0)="edafca96", 0x4, 0x8000, &(0x7f0000000100)={0x23, 0x6, 0x5, 0x1}, 0x10) sendfile(r0, r0, &(0x7f0000000140)=0x4, 0x3) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f00000001c0)={0x1, 0x5, 0x1, 'queue0\x00', 0xa990}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000280)={0x5, 0x1, 0xab000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000002c0)={0xffffffffffffff5e, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xa, "57fa1ceb455a2f"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000012c0)={{r2, 0xff, 0x7, 0x100000000, 0x4, 0x7, 0x59, 0x9b1d, 0x1, 0x7, 0x3ff, 0x4, 0x586, 0x2, 0x100000000}}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000022c0)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@private0}}, &(0x7f00000023c0)=0xe8) quotactl_fd$Q_GETNEXTQUOTA(r1, 0xffffffff80000902, r3, &(0x7f0000002400)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000002480)={0x40000000}) fcntl$setsig(r1, 0xa, 0x28) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000024c0)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), r1) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000002b40)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002740)={0x3b8, r4, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_TX_RATES={0xd4, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x8, 0x0, 0xf751, 0x400, 0x2, 0x5, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xa, 0x9, 0x800, 0xf, 0xffff, 0xff, 0x7]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x36, 0x4c, 0xb, 0x18, 0x9, 0x16, 0x36, 0x3, 0x12, 0xc, 0x60, 0xb, 0x9, 0x6c, 0x60, 0x6c, 0xb, 0x1, 0x48, 0x1b, 0x2, 0x1, 0x12, 0x1, 0x24, 0x60, 0x18, 0xc, 0x17]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x5, 0x2}, {0x4, 0xa}, {0x1, 0x6}, {0x7, 0x8}, {0x3, 0x2}, {0x0, 0x4}, {0x0, 0x3}, {0x3, 0x9}, {0x5, 0x9}, {0x5, 0x6}, {0x1, 0xa}, {0x0, 0x6}, {0x0, 0x8}, {0x6}, {0x1, 0x1}, {0x0, 0x3}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x4}, {0x6, 0x9}, {0x2, 0x5}, {0x1, 0x1}, {0x6, 0x4}, {0x5, 0x2}, {0x4, 0x9}, {0x7, 0x3}, {0x7, 0x6}, {0x3, 0x7}, {0x1, 0x1}, {0x7, 0x8}, {0x5, 0x8}, {0x1, 0x9}, {0x2, 0xa}, {0x0, 0x4}, {0x7, 0x9}, {0x7, 0x1}, {0x4, 0x8}, {0x2, 0x3}, {0x6}, {0x3, 0x4}, {0x4, 0x9}, {0x0, 0x4}, {0x1, 0x4}, {0x1, 0x9}, {0x0, 0x8}, {0x6, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x1, 0x2}, {0x5, 0x5}, {0x2, 0x6}, {0x0, 0x2}, {0x6, 0x7}, {0x5, 0x9}, {0x2, 0x2}, {0x2, 0x4}, {0x4, 0x4}, {0x6, 0x4}, {0x2, 0x7}]}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x3, 0x9, 0x100, 0xd4f, 0xf000, 0x6, 0x6]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6c, 0x48, 0x18, 0x36, 0x36, 0x5, 0x2, 0xc, 0x30, 0x12, 0x5, 0x12, 0x36, 0xc, 0x26819a65fbc6d1b5, 0x79, 0x0, 0x16, 0xc34a093da8ebce98, 0x31, 0x6, 0x16, 0xb, 0x4, 0x16, 0xc, 0x1, 0x5d, 0x3]}]}]}, @NL80211_ATTR_TX_RATES={0x2c0, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x91f, 0x5, 0xa, 0x6, 0x9, 0xfe87, 0x5, 0xa]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0xe73, 0x800, 0x5, 0x100, 0x4, 0x1, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xa, 0x2, 0xe, 0x1, 0x7, 0x7f, 0x1]}}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xfeb5, 0x1, 0x5, 0x7ff, 0x3000, 0x0, 0x7]}}]}, @NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x8, 0x4, 0x9, 0x2, 0xf, 0x1]}}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x2, 0x6}, {0x5, 0x7}, {0x4, 0x7}, {0x6, 0x1}, {0x1, 0x9}, {0x2, 0x7}, {0x6, 0x7}, {0x1, 0x1}, {0x7, 0x3}, {0x1, 0x7}, {0x3, 0x5}, {0x7, 0x6}, {0x3, 0x3}, {0x2, 0xa}, {0x0, 0x6}, {0x1, 0x9}, {0x0, 0x2}, {}, {0x1, 0x6}, {0x6, 0x1}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x3}, {0x1, 0x3}, {0x3, 0x7}, {0x1, 0x1}, {0x4}, {0x5, 0xa}, {0x1, 0x7}, {0x4, 0xa}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x5, 0x1b, 0x2, 0x30, 0x2, 0x36, 0xc]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x1, 0x19}, {0x5, 0x6}, {0x1}, {0x4, 0x4}, {0x1, 0x9}, {0x1, 0x3}, {0x5, 0x6}, {0x4, 0x2}, {0x3, 0x2}, {0x7, 0x2}, {0x4, 0x1}, {0x0, 0x9}, {0x3, 0x3}, {0x2, 0x3}, {0x7, 0x5}, {0x1, 0x2}, {0x0, 0x2}, {0x7, 0x9}, {0x5, 0x4}, {0x1, 0x8}, {0x6, 0x7}, {0x1, 0x8}, {0x3, 0x4}, {0x1, 0x5}, {0x3, 0x3}, {0x2, 0x7}, {0x2, 0x5}, {0x2, 0x2}, {0x1, 0x7}, {0x0, 0x1}, {0x7, 0x7}, {0x6, 0x2}, {0x4, 0xa}, {0x2}, {0x0, 0x2}, {0x0, 0x7}, {0x0, 0xa}, {0x0, 0xa}, {0x1, 0x7}, {0x2, 0x4}, {0x1, 0x5}, {0x1}, {0x1, 0x6}, {0x5, 0x9}, {0x0, 0x2}]}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x2, 0xb, 0x60, 0x6c, 0x36, 0x18, 0x3, 0x9, 0xb, 0x4, 0x3, 0x1, 0x5, 0x9, 0x5, 0x18, 0xb, 0x36, 0x30, 0x1b, 0x16, 0x9, 0x48, 0x9, 0x5, 0x48, 0x12, 0x5]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x30, 0x60, 0x6, 0x1b, 0x36, 0x6, 0x24, 0x9, 0x12, 0x6c, 0x48, 0x30, 0x16, 0x12, 0x18, 0x9, 0x30, 0x6, 0x18, 0x18, 0x18, 0x48, 0xb, 0x60, 0x1d, 0x16, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x2, 0x3, 0x0, 0x6, 0x8, 0x3, 0xb]}}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x5, 0x2, 0x6c, 0x6c, 0x1, 0x6, 0x6, 0x3, 0x5, 0x16, 0x3e, 0x36, 0x30, 0xd]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x7, 0xff, 0x100, 0xe, 0x401, 0x2, 0x8001]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x3ff, 0xf, 0xfff9, 0xb38, 0x78, 0xdea]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfff9, 0x9, 0x8, 0x8, 0x6, 0xb, 0x5, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x5354cd3ecf1b3037}, @NL80211_TXRATE_GI={0x5, 0x4, 0x170034e442017bb9}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x1, 0x3}, {0x3, 0x3}, {0x7, 0x3}, {0x6, 0xa}, {0x4, 0x2}, {0x6, 0x5}, {0x2, 0x8}, {0x1, 0x4}, {0x7, 0x4}, {0x0, 0x8}, {0x7, 0x7}, {0x4, 0x8}, {}, {0x1, 0x8}, {0x1, 0x3}, {0x7, 0x8}, {0x1, 0x7}, {0x1, 0x9}, {0x2, 0x5}, {0x1, 0x1}, {0x3, 0x3}, {0x4, 0xa}, {0x7, 0x8}, {0x4, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x8, 0x401, 0xf, 0x3, 0xd7a, 0x8, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x1, 0x7}, {0x3}, {0x2, 0x5}, {0x5}, {0x0, 0x2}, {0x4, 0x8}, {0x2, 0x1}, {0x7, 0x9}, {0x7, 0x1}, {0x0, 0x4}, {0x1, 0x7}, {0x0, 0x6}, {0x2, 0xa}, {0x6}, {0x5, 0x8}, {0x3, 0x6}, {0x6, 0xa}, {0x7, 0x1}, {0x0, 0x8}, {0x3, 0x5}, {0x1, 0x4}, {0x2, 0x9}, {0x2, 0x4}, {0x1, 0xa}, {0x6, 0x4}, {0x7, 0x3}, {0x2, 0x5}, {0x4, 0x9}, {0x6, 0x5}, {0x4, 0x7}, {0x7, 0x2}, {0x3, 0xa}, {0x7, 0x6}, {0x7, 0x2}, {0x5, 0x4}, {0x1}, {0x5, 0x6}, {0x6, 0x4}, {0x1, 0x9}, {0x7, 0x7}, {0x2, 0x4}, {0x6, 0x9}, {0x0, 0x1}, {0x6, 0x6}, {0x2, 0x9}, {0x1}, {0x5, 0x3}, {0x1, 0x4}, {0x2, 0xa}, {0x2, 0x9}, {0x3, 0x9}, {0x4, 0x2}, {0x7, 0x4}, {0x3, 0x3}, {0x0, 0x5}, {0x0, 0xa}, {0x7}, {0x3, 0x4}, {0x4, 0x5}, {0x3, 0x8}, {0x1, 0x4}, {}, {0x0, 0xa}, {0x1, 0x5}, {0x0, 0xa}, {0x5, 0x3}, {0x7, 0x4}, {0x4, 0x7}, {0x6, 0x1}, {0x0, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x10, 0x7fff, 0xdc8, 0x41, 0x0, 0x8000]}}]}]}]}, 0x3b8}, 0x1, 0x0, 0x0, 0x20088c50}, 0x40000) r5 = socket$packet(0x11, 0x1, 0x300) clock_gettime(0x0, &(0x7f0000002bc0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000002b80)={[0x3]}, 0x0, &(0x7f0000002c00)={r6, r7+10000000}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000002c40)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) syz_genetlink_get_family_id$ipvs(&(0x7f0000002c80), r8) newfstatat(0xffffffffffffff9c, &(0x7f0000002cc0)='./file0\x00', &(0x7f0000002d00), 0x6500) ioctl$BLKPG(r0, 0x1269, &(0x7f0000002e40)={0x1, 0x0, 0x98, &(0x7f0000002d80)={0x9, 0x4, 0xb}}) ioctl$BLKPG(r0, 0x1269, &(0x7f0000002f40)={0x1, 0x0, 0x98, &(0x7f0000002e80)={0x1, 0x8001, 0x9}}) ioctl$BTRFS_IOC_SNAP_CREATE(r8, 0x50009401, &(0x7f0000002f80)={{r1}, "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"}) r9 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x35) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r9, 0x4068aea3, &(0x7f0000003f80)) sendmsg$NL80211_CMD_GET_STATION(r8, &(0x7f0000004100)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000040c0)={&(0x7f0000004040)={0x48, r4, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x3, 0x6}}, @NL80211_ATTR_STA_FLAGS={0x18, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_MFP={0x4}]}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x5ae}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000c000) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000004140)={0x8, 0x0, [{0x80000007, 0x5b0, 0x4, 0x4, 0xc, 0xffffff81, 0x1}, {0x7, 0x7, 0x1, 0x13, 0x8001, 0x6, 0xffffe1ef}, {0x80000008, 0x40, 0x0, 0x5, 0x7, 0x4, 0x10}, {0x2, 0xa, 0x0, 0x0, 0x1000, 0x2, 0xffffffcc}, {0xc0000001, 0x0, 0x2, 0x3, 0xffffffff, 0x6, 0x5}, {0x80000019, 0x3, 0x4, 0x4, 0x7f, 0x1, 0x6}, {0x80000001, 0x7, 0x4, 0x4, 0x7, 0x4, 0x10000}, {0x80000019, 0x6f, 0x2, 0x3, 0x2, 0x5, 0x4}]}) 1.850191992s ago: executing program 2 (id=1703): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x600801, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'gretap0\x00', &(0x7f00000004c0)={'erspan0\x00', 0x0, 0x700, 0x1, 0x2, 0x10, {{0x30, 0x4, 0x0, 0x21, 0xc0, 0x64, 0x0, 0x81, 0x29, 0x0, @empty, @multicast2, {[@cipso={0x86, 0x4f, 0x1, [{0x0, 0xa, "71c4a5b4e763e111"}, {0x1, 0xe, "1f6534491ca7f38fb11123e7"}, {0x2, 0xe, "2a241bd5b762e5d1a654c0ca"}, {0x7, 0x4, "f132"}, {0x5, 0x12, "96d26039d7f999000000000000000000"}, {0x7, 0xd, "d0a79ae56a9feb0d1a33bf"}]}, @lsrr={0x83, 0x13, 0x23, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast]}, @timestamp_addr={0x44, 0x24, 0x49, 0x1, 0xa, [{@dev={0xac, 0x14, 0x14, 0x36}, 0x55}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@empty, 0xa}, {@multicast1, 0x1}]}, @lsrr={0x83, 0x23, 0xc2, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @broadcast, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64210101, @loopback, @broadcast]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x1, 0x8000, 0xff27, 0x200, {{0xa, 0x4, 0x2, 0x15, 0x28, 0x66, 0x0, 0x8, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0xaa, [@multicast2, @local]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x29, 0x8, 0xf3, 0x9, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x8, 0x10001, 0x8}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xf4, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4c810}, 0x8090) listen(r0, 0x7) recvfrom$phonet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0) 1.800180515s ago: executing program 2 (id=1704): write(0xffffffffffffffff, &(0x7f0000000640)="240000001e005f02140c00fffffffff80700000001000000000000000500e99c11e85637", 0x24) socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.798025286s ago: executing program 2 (id=1705): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x408342, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0xa04004, &(0x7f0000000200)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000340)) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000080)=0x114c, 0x4) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000000)=0xfffff802, 0x4) (async) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000000)=0xfffff802, 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000100)="cf560feea3c3da71a40d03ca7d57607f690b567d6c268371f227b9eaf00365e1dcc7e8f06b927075cb86140bde69f1e20f3f07d70ec154bba6f119c0422c0e0711bddf71e01d70f38d0bf92538935b444848e4b159dd17ef5a8696f08adf09ee55f29e1bc4b075b76b8e5b208914eb5a4c8da8", 0x73}], 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000280)={0x201, {{0x2, 0x4e22, @empty}}}, 0x88) syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0xe7b7, 0x4000, 0x0, 0x352}, &(0x7f0000000240), &(0x7f0000001880), 0x0) (async) syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0xe7b7, 0x4000, 0x0, 0x352}, &(0x7f0000000240), &(0x7f0000001880), 0x0) 1.669876231s ago: executing program 2 (id=1708): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) 1.59929033s ago: executing program 2 (id=1709): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000406d5798c2400001020301090224000101ff78090904000d01030100200929c4ff7701225b0109058103000203089e"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) syz_open_dev$evdev(&(0x7f0000000300), 0x7, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) write$dsp(r3, &(0x7f00000004c0)='\x00', 0x1) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc1b}, 0x28) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xe, 0x4, 0x4, 0x2, 0x1000, 0xf1, 0x0, 0x7fffffffffff9, 0x10000000005, 0x0, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x3c4210}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0x300, &(0x7f0000000340)=[0x5, 0x0, 0xe, 0x80, 0xe6b4, 0x101, 0xfffffffffffffffa, 0x2, 0xa, 0x2, 0x6, 0x700000000000000, 0xb, 0xffff, 0xfffffffffffffffe, 0x7, 0x7fffffff, 0x5, 0x26, 0x9880, 0x5, 0x6, 0x8, 0x2, 0xfff, 0x20000000009, 0x9, 0x1fd, 0x8, 0x200000000000007, 0x7, 0x5, 0x20005, 0x2, 0x4ff, 0x40, 0xfffffffffffffff5, 0x4, 0x7fffffff, 0x7d, 0x0, 0x6, 0x20008, 0x2e2, 0x101, 0x8, 0x8000000000000001, 0xfffffffffffffff9, 0x4100000000, 0xfffffffffffffffd, 0x8, 0x9, 0x7fff, 0xec, 0x8000000000000000, 0x2, 0x94f, 0x150b0000, 0x7fffffffffffffff, 0x6, 0xffffffffffffffff, 0xd, 0x11, 0xa, 0xe, 0xa8, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x38c, 0x7, 0xdc8c, 0xae8f, 0x100001e30fa4c, 0xa, 0x0, 0x4000008, 0xdac, 0xe94, 0x7, 0xfffffffffffffffc, 0xa8, 0xba00, 0x4, 0x5, 0x0, 0x1, 0x100, 0x7fffffffffffffff, 0xe, 0xfffffffffffffff9, 0x3, 0x5, 0x21, 0x5, 0xfffffffffffffffe, 0x401, 0x9, 0x1e4b, 0x2, 0x79, 0xf, 0x10000, 0xe, 0x2, 0x3, 0x3, 0xfffffffffffffff9, 0x0, 0x4, 0xa, 0x40000001, 0x9, 0x2, 0x4000000000ffe, 0x80, 0x10000003, 0xd, 0x44, 0x6, 0xffff, 0x8000000001, 0x401, 0x4, 0x2, 0x8000000007, 0xea7, 0x1]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000f516100400000000001d000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2}, 0x48) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0xd0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x1a0, 0x20a, 0x278, 0x1a0, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000], [0x0, 0xffffffff], 'ip6gre0\x00', 'team_slave_0\x00', {}, {0xff}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x16, 0x1, 0xf6e6}}}, {{@ipv6={@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xffffffff, 0xffffffff, 0xff], [0x0, 0xffffff00, 0xffffff00], 'veth0_macvtap\x00', 'vxcan1\x00', {}, {0xff}, 0x33, 0x0, 0x2, 0x36}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24000010) syz_usb_control_io(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) 1.598039373s ago: executing program 4 (id=1710): write(0xffffffffffffffff, &(0x7f0000000640)="240000001e005f02140c00fffffffff80700000001000000000000", 0x1b) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.540318791s ago: executing program 4 (id=1711): write(0xffffffffffffffff, &(0x7f0000000640)="240000001e005f02140c00fffffffff80700000001000000000000000500e99c", 0x20) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.480401933s ago: executing program 4 (id=1712): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) epoll_pwait(r1, &(0x7f00000001c0)=[{}, {}, {}], 0x3, 0x2, &(0x7f0000000200)={[0x5]}, 0x8) write$selinux_load(r1, &(0x7f00000006c0)={0xf97cff8c, 0x8, 'SE Linux', "b43b12ccd8ee256cf47cc0b7d81942ad49a0c1361a2a49b78d991a1cb92bbc2e8be80a047c8420f611d9279f89629e33e990f198123ae153ff628863789df88c3e1644d85920a77e4206456243df56b56a4c628f48a5996954d6763b5b95f51bbb851a3842358103c5d37fde5dc6f8e2baf2657550f68b2b518d8f0d292198b0d6071ffb4205474e7491044950ac517a116fe144"}, 0xa4) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) close(r0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x80, &(0x7f00000002c0)="1400000009000000", 0x8) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000040)="157198fd0211c125f4972acc79c56f74233f69c4a6b8cdcafa6de7be64ca01d1e622ecf4e8b56c6a6c6889e1bc74dcba1d60a0e270fbbacec017786bcf6a77f71b02", 0x42}, {&(0x7f00000000c0)="4ead7e6c88212b314a17395e3f0f0f4a51eb6c95d7466e95f28c34eaf7268ecddc16ec9da3b4362be39520b545a1342cfc212a68092d8a3bcc68414019563f31bfd4424d3a0baef15d6bd90cf30b", 0x4e}, {&(0x7f0000000140)="8a149ed01f95ca70eeec9764d9957b369f00d98fa655fffe3d2937cd49163be85f", 0x21}, {&(0x7f0000000300)="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", 0xfc}, {&(0x7f0000000400)="73330b5cf1d6570ee13a0c20529f1df9d4f9f1ca6c7657011d461030488839a8ce84111c8acb3c25ec85fb774c3e67e1394f33157d7ad37988f1165556055ea40d6ce0c30656c83093712525db", 0x4d}, {&(0x7f0000000500)="0cc39f78d466eb4e1448eaf10e4acef6445e10fbf46e276822dcefe08b963cd4b819a32e0fec0afce81bdbb007f73cb4583e23e7357e31a063cb8809bd2b3f8e4f86ba48253d5785026958759961584c279bc51591cc170b80ac511a75833d8a3e3e348e015901aa69eaecf5ac14dcbe70b6d8b25b54880ff24bb099ecab20bc020202e4542835d6e261cb8ba9ed70765155832886b00187fe6b9df91133dcb9c8726571425153cb3203fb59ac5544559a7ee5a2a95274e7bc30311cb7d6427b02aa5feef2128b9daf156609427d0826265e35be32adb770585c78d0048ad574b47c756e8764d83030", 0xe9}, {&(0x7f0000000600)="0261dd3801cf19a404691237531e6c4cf556dfed4b636cdf00308e957a", 0x1d}], 0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x5}], 0x1c) sendto$inet6(r2, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) 1.430202505s ago: executing program 4 (id=1713): write(0xffffffffffffffff, &(0x7f0000000640)="240000001e005f02140c00fffffffff80700000001000000000000000500e99c11e85637", 0x24) socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.429893477s ago: executing program 1 (id=1714): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000012c0)=ANY=[@ANYBLOB="0031aa"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f0000001b40)}) 1.428463876s ago: executing program 4 (id=1715): r0 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r0, 0x7) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd27, 0x700, {0x0, 0x0, 0x0, 0x0, 0x6000, 0x1806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r3}]]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x440b0) recvfrom$phonet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 1.270412756s ago: executing program 4 (id=1716): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x239f, &(0x7f0000000380)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x7, 0x8, r1, 0x0}]) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r4}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000080)={r4}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) r7 = syz_open_dev$I2C(&(0x7f00000000c0), 0x2, 0x40402) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000100)={0x1, 0x4, 0x1, &(0x7f0000000000)={0x10, "c955000000d5ac81e630a59afe000000000200"}}) 987.808806ms ago: executing program 0 (id=1718): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) 985.611117ms ago: executing program 0 (id=1719): write(0xffffffffffffffff, &(0x7f0000000640)="240000001e005f02140c00fffffffff80700000001000000000000", 0x1b) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 890.079098ms ago: executing program 0 (id=1720): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e8}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0x9}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, 0x0, 0x4e}, 0x20) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x1}, 0x18) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000080)={0x20004, r4, 0x2}) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r8, r9, &(0x7f0000000780)={0x0, 0x280f, 0x1000, 0x2, 0x102, 0x0, r8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe30b, 0x10000, 0x0, 0x10002de, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf845, 0x1000, 0x2, 0x3c5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5432, 0x4, 0x4, 0x174}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1be3, 0x4, 0x2, 0x6f, 0x0, r8}}], 0x4, 0x0, 0x0) 756.744131ms ago: executing program 0 (id=1721): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000d042abd4efeee837c406ef1f509", @ANYRES32=0x0, @ANYBLOB="14220100000000002400128009000100626f6e64000000001400028005000100060000000800070000000000"], 0x44}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) 599.326742ms ago: executing program 0 (id=1722): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x4, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000180)=0x1, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000003980), r3) fsopen(&(0x7f0000002640)='pvfs2\x00', 0x0) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000000)=0xfffffffffffffffe, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) 440.099144ms ago: executing program 0 (id=1723): r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x18, &(0x7f00000001c0)={0x40, 0x0, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x40004000}) 181.248µs ago: executing program 1 (id=1724): write(0xffffffffffffffff, &(0x7f0000000640)="240000001e005f02140c00fffffffff80700000001000000000000000500e99c11e85637", 0x24) socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 1 (id=1725): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x48050) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80045b09, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) kernel console output (not intermixed with test programs): ace 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 162.354578][ T858] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 162.360179][ T858] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 162.364136][ T858] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.574836][ T858] usb 9-1: GET_CAPABILITIES returned 0 [ 162.577361][ T858] usbtmc 9-1:16.0: can't read capabilities [ 162.604737][ T5825] usb 9-1: USB disconnect, device number 5 [ 162.623739][ T6004] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 162.709077][ T9773] lo speed is unknown, defaulting to 1000 [ 162.792774][ T6004] usb 7-1: Using ep0 maxpacket: 8 [ 162.794147][ T42] audit: type=1400 audit(162.723:27697): avc: denied { write } for pid=9775 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.800445][ T6004] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.812289][ T6004] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.827590][ T6004] usb 7-1: config 0 interface 0 has no altsetting 0 [ 162.833673][ T6004] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 162.839132][ T6004] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.857812][ T6004] usb 7-1: config 0 descriptor?? [ 162.872746][ T42] audit: type=1400 audit(162.793:27698): avc: denied { write } for pid=9779 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.029230][ T42] audit: type=1400 audit(162.953:27699): avc: denied { write } for pid=9782 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.085031][ T42] audit: type=1400 audit(163.013:27700): avc: denied { write } for pid=9785 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.267274][ T6004] usbhid 7-1:0.0: can't add hid device: -71 [ 163.272535][ T6004] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 163.281554][ T6004] usb 7-1: USB disconnect, device number 26 [ 163.636781][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 163.636794][ T42] audit: type=1400 audit(163.563:27710): avc: denied { write } for pid=9818 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.756001][ T9823] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1168'. [ 163.890863][ T9834] /dev/sg0: Can't lookup blockdev [ 163.892535][ T9835] openvswitch: netlink: IP tunnel dst address not specified [ 163.922123][ T5090] Bluetooth: hci0: command 0x1003 tx timeout [ 163.925385][ T5741] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 163.927570][ T9839] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 164.020527][ T42] audit: type=1400 audit(163.943:27711): avc: denied { watch watch_reads } for pid=9843 comm="syz.1.1174" path="/326/file0" dev="9p" ino=72877409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 164.034352][ T42] audit: type=1400 audit(163.943:27712): avc: denied { setattr } for pid=9843 comm="syz.1.1174" name="/" dev="9p" ino=72877409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 164.285650][ T5519] usb 5-1: USB disconnect, device number 24 [ 164.334183][ T5925] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 164.361276][ T9862] loop4: detected capacity change from 0 to 2640 [ 164.363959][ T9862] buffer_io_error: 11 callbacks suppressed [ 164.363968][ T9862] Buffer I/O error on dev loop4, logical block 0, async page read [ 164.368865][ T9862] Buffer I/O error on dev loop4, logical block 0, async page read [ 164.371621][ T9862] Buffer I/O error on dev loop4, logical block 0, async page read [ 164.377506][ T9862] Buffer I/O error on dev loop4, logical block 0, async page read [ 164.380116][ T9862] Buffer I/O error on dev loop4, logical block 0, async page read [ 164.382990][ T9862] Buffer I/O error on dev loop4, logical block 0, async page read [ 164.385428][ T9862] Buffer I/O error on dev loop4, logical block 0, async page read [ 164.387887][ T9865] usb usb8: usbfs: process 9865 (syz.1.1178) did not claim interface 0 before use [ 164.388004][ T9862] Buffer I/O error on dev loop4, logical block 0, async page read [ 164.394948][ T9862] ldm_validate_partition_table(): Disk read failed. [ 164.397166][ T9862] Buffer I/O error on dev loop4, logical block 0, async page read [ 164.400248][ T9862] Buffer I/O error on dev loop4, logical block 0, async page read [ 164.403693][ T9862] Dev loop4: unable to read RDB block 0 [ 164.406121][ T9862] loop4: unable to read partition table [ 164.408906][ T9862] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 164.452593][ T42] audit: type=1400 audit(164.373:27713): avc: denied { map } for pid=9861 comm="syz.0.1180" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 164.469957][ T42] audit: type=1400 audit(164.373:27714): avc: denied { execute } for pid=9861 comm="syz.0.1180" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 164.492066][ T5925] usb 7-1: Using ep0 maxpacket: 8 [ 164.495334][ T5925] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.499145][ T5925] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.503718][ T5925] usb 7-1: config 0 interface 0 has no altsetting 0 [ 164.505989][ T5925] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 164.509076][ T5925] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.516472][ T5925] usb 7-1: config 0 descriptor?? [ 164.576165][ T9876] cgroup2: Unknown parameter 'usrquota' [ 164.635395][ T42] audit: type=1400 audit(164.563:27715): avc: denied { create } for pid=9877 comm="syz.1.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 164.713722][ T42] audit: type=1400 audit(164.643:27716): avc: denied { connect } for pid=9887 comm="syz.0.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 164.754841][ T42] audit: type=1400 audit(164.683:27717): avc: denied { ioctl } for pid=9896 comm="syz.1.1187" path="socket:[40105]" dev="sockfs" ino=40105 ioctlcmd=0x8981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 164.810417][ T9901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1181'. [ 164.814210][ T9901] block nbd0: Unsupported socket: should be TCP or UNIX. [ 164.931310][ T5925] usbhid 7-1:0.0: can't add hid device: -71 [ 164.933393][ T5925] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 164.937269][ T5925] usb 7-1: USB disconnect, device number 27 [ 164.942120][ T42] audit: type=1400 audit(164.863:27718): avc: denied { map } for pid=9909 comm="syz.4.1191" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 164.952513][ T42] audit: type=1400 audit(164.863:27719): avc: denied { execute } for pid=9909 comm="syz.4.1191" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 165.022393][ T6004] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 165.182156][ T6004] usb 5-1: Using ep0 maxpacket: 16 [ 165.186200][ T6004] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 165.192214][ T6004] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 165.195940][ T6004] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.199448][ T6004] usb 5-1: Product: syz [ 165.201087][ T6004] usb 5-1: Manufacturer: syz [ 165.203197][ T6004] usb 5-1: SerialNumber: syz [ 165.211339][ T6004] usb 5-1: config 0 descriptor?? [ 165.288209][ T9927] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60944 sclass=netlink_route_socket pid=9927 comm=syz.4.1195 [ 165.293557][ T9921] could not allocate digest TFM handle cryptd(blake2b-160) [ 165.494284][ T5925] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 165.539003][ T9952] FAULT_INJECTION: forcing a failure. [ 165.539003][ T9952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.545855][ T9952] CPU: 0 UID: 0 PID: 9952 Comm: syz.4.1204 Tainted: G L syzkaller #0 PREEMPT(full) [ 165.545885][ T9952] Tainted: [L]=SOFTLOCKUP [ 165.545891][ T9952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 165.545901][ T9952] Call Trace: [ 165.545909][ T9952] [ 165.545916][ T9952] dump_stack_lvl+0x100/0x190 [ 165.546080][ T9952] should_fail_ex.cold+0x5/0xa [ 165.546132][ T9952] _copy_from_user+0x2e/0xd0 [ 165.546200][ T9952] copy_msghdr_from_user+0x9f/0x4c0 [ 165.546295][ T9952] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 165.546360][ T9952] ___sys_sendmsg+0x106/0x1e0 [ 165.546386][ T9952] ? __pfx____sys_sendmsg+0x10/0x10 [ 165.546407][ T9952] ? __lock_acquire+0x49f/0x1a40 [ 165.546453][ T9952] ? get_pid_task+0x106/0x250 [ 165.546541][ T9952] __sys_sendmsg+0x160/0x210 [ 165.546569][ T9952] ? __pfx___sys_sendmsg+0x10/0x10 [ 165.546610][ T9952] do_syscall_64+0x115/0x870 [ 165.546701][ T9952] ? clear_bhb_loop+0x40/0x90 [ 165.546723][ T9952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.546742][ T9952] RIP: 0033:0x7f3207f9de59 [ 165.546758][ T9952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.546774][ T9952] RSP: 002b:00007f3208e12028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.546858][ T9952] RAX: ffffffffffffffda RBX: 00007f3208225fa0 RCX: 00007f3207f9de59 [ 165.546870][ T9952] RDX: 0000000000000000 RSI: 0000200000008400 RDI: 0000000000000003 [ 165.546879][ T9952] RBP: 00007f3208e12090 R08: 0000000000000000 R09: 0000000000000000 [ 165.546888][ T9952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.546897][ T9952] R13: 00007f3208226038 R14: 00007f3208225fa0 R15: 00007ffe210c40d8 [ 165.546920][ T9952] [ 165.644139][ T5925] usb 6-1: Using ep0 maxpacket: 8 [ 165.650948][ T5925] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 165.653643][ T5925] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 165.656657][ T5925] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 165.660480][ T5925] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 165.664961][ T5925] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 165.668050][ T5925] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 165.672353][ T5925] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 165.676095][ T5925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.684554][ T5925] usbtmc 6-1:16.0: probe with driver usbtmc failed with error -22 [ 165.694813][ T9958] 8021q: VLANs not supported on syzkaller0 [ 165.701677][ T9965] 8021q: VLANs not supported on syzkaller0 [ 166.460178][ T9957] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 166.567866][ T9972] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 166.580271][ T9972] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 166.601420][ T9972] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1208'. [ 166.607758][ T9972] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1208'. [ 166.792078][ T5825] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 166.952080][ T5825] usb 7-1: Using ep0 maxpacket: 8 [ 166.959387][ T5825] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.963997][ T5825] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.970095][ T5825] usb 7-1: config 0 interface 0 has no altsetting 0 [ 166.977099][ T5825] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 166.984963][ T5825] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.992803][ T5825] usb 7-1: config 0 descriptor?? [ 167.401054][ T5825] usbhid 7-1:0.0: can't add hid device: -71 [ 167.403487][ T5825] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 167.407535][ T5825] usb 7-1: USB disconnect, device number 28 [ 167.820560][ T55] usb 5-1: USB disconnect, device number 25 [ 168.141585][T10034] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 168.235653][ T40] usb 6-1: USB disconnect, device number 25 [ 168.409959][T10060] netlink: 'syz.0.1236': attribute type 6 has an invalid length. [ 168.413400][T10060] netlink: 'syz.0.1236': attribute type 4 has an invalid length. [ 168.415871][T10060] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1236'. [ 168.482168][ T6004] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 168.488235][T10063] netlink: 'syz.1.1239': attribute type 2 has an invalid length. [ 168.632071][ T6004] usb 9-1: Using ep0 maxpacket: 8 [ 168.635092][ T6004] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.638437][ T6004] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.641461][ T6004] usb 9-1: config 0 interface 0 has no altsetting 0 [ 168.643664][ T6004] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 168.646699][ T6004] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.650960][ T6004] usb 9-1: config 0 descriptor?? [ 168.905210][T10065] syzkaller0: entered promiscuous mode [ 168.907717][T10065] syzkaller0: entered allmulticast mode [ 168.913007][T10065] tipc: Started in network mode [ 168.914680][T10065] tipc: Node identity , cluster identity 4711 [ 168.916579][T10065] tipc: Failed to obtain node identity [ 168.918368][T10065] tipc: Enabling of bearer rejected, failed to enable media [ 169.037496][T10078] pim6reg: entered allmulticast mode [ 169.039445][T10079] pim6reg: left allmulticast mode [ 169.054166][T10078] pim6reg: entered allmulticast mode [ 169.063908][ T6004] usbhid 9-1:0.0: can't add hid device: -71 [ 169.065824][ T6004] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 169.070099][ T6004] usb 9-1: USB disconnect, device number 6 [ 169.113163][T10079] pim6reg: left allmulticast mode [ 169.262542][ T55] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 169.412075][ T55] usb 5-1: Using ep0 maxpacket: 8 [ 169.415712][ T55] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 169.418852][ T55] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 169.422608][ T55] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 169.426363][ T55] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 169.430177][ T55] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 169.434021][ T55] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.439036][ T55] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 169.442760][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.451695][ T55] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22 [ 169.462120][ T40] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 169.612198][ T40] usb 7-1: Using ep0 maxpacket: 32 [ 169.615607][ T40] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 128, changing to 11 [ 169.619426][ T40] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 128, changing to 11 [ 169.626627][ T40] usb 7-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 169.629867][ T40] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.632512][ T40] usb 7-1: Product: syz [ 169.634000][ T40] usb 7-1: Manufacturer: syz [ 169.635658][ T40] usb 7-1: SerialNumber: syz [ 169.638635][ T40] usb 7-1: config 0 descriptor?? [ 169.647405][ T40] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input18 [ 169.842235][ T5925] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 169.949777][T10082] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1243'. [ 169.952873][T10089] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1243'. [ 169.993785][ T5925] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 169.996913][ T5925] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 170.000676][ T5925] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 170.004270][ T5925] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 170.008054][ T5925] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 170.013906][ T5925] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 170.017002][ T5925] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 170.019771][ T5925] usb 9-1: Product: syz [ 170.021289][ T5925] usb 9-1: Manufacturer: syz [ 170.027093][ T5925] cdc_wdm 9-1:1.0: skipping garbage [ 170.029048][ T5925] cdc_wdm 9-1:1.0: skipping garbage [ 170.033549][ T5925] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 170.035700][ T5925] cdc_wdm 9-1:1.0: Unknown control protocol [ 170.232985][ T40] usb 9-1: USB disconnect, device number 7 [ 170.642140][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 170.788469][T10108] netlink: 'syz.4.1252': attribute type 1 has an invalid length. [ 170.827775][T10108] bond3: entered promiscuous mode [ 170.831030][T10108] 8021q: adding VLAN 0 to HW filter on device bond3 [ 170.839602][T10108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1252'. [ 170.843775][T10108] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1252'. [ 170.936374][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 170.936393][ T42] audit: type=1400 audit(170.863:27725): avc: denied { module_load } for pid=10118 comm="syz.4.1255" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 170.949530][T10121] kernel read not supported for file /policy (pid: 10121 comm: syz.4.1255) [ 171.190032][T10121] deleting an unspecified loop device is not supported. [ 171.318626][T10138] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1261'. [ 171.334017][T10138] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1261'. [ 171.341951][T10138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1261'. [ 171.571312][T10147] comedi comedi4: bad chanlist[0]=0x00008000 chan=32768 range length=2 [ 171.680816][T10156] syzkaller0: entered promiscuous mode [ 171.684226][T10156] syzkaller0: entered allmulticast mode [ 171.801588][ T42] audit: type=1400 audit(171.723:27726): avc: denied { read } for pid=10162 comm="syz.1.1269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 172.010187][T10173] __nla_validate_parse: 2 callbacks suppressed [ 172.010207][T10173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1274'. [ 172.039321][ T5925] usb 5-1: USB disconnect, device number 26 [ 172.073950][T10177] xt_ipcomp: unknown flags 1D [ 172.076362][T10177] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1276'. [ 172.112115][ T5809] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 172.140097][ T42] audit: type=1400 audit(172.063:27727): avc: denied { create } for pid=10178 comm="syz.1.1277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 172.244492][ T40] usb 7-1: USB disconnect, device number 29 [ 172.244517][ C1] xpad 7-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 172.276863][ T5809] usb 9-1: Using ep0 maxpacket: 32 [ 172.307997][ T5809] usb 9-1: unable to get BOS descriptor or descriptor too short [ 172.312954][ T5809] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 172.316275][ T5809] usb 9-1: can't read configurations, error -71 [ 172.642264][ T5925] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 172.793653][ T5925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.797057][ T5925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.800076][ T5925] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 172.807126][ T5925] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 172.809987][ T5925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.814145][ T5925] usb 6-1: config 0 descriptor?? [ 172.992193][ T10] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 173.028150][T10209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.086694][T10210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.143344][T10210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.152131][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 173.156152][ T10] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 173.159625][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 173.163769][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 173.167785][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 173.171957][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 173.176278][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 173.181841][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 173.185819][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.193700][ T10] usbtmc 7-1:16.0: probe with driver usbtmc failed with error -22 [ 173.242759][ T5925] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 173.397899][ T55] usb 7-1: USB disconnect, device number 30 [ 173.440918][ T42] audit: type=1400 audit(173.363:27728): avc: denied { cmd } for pid=10221 comm="syz.4.1292" path="/dev/ublk-control" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 173.782280][ T5824] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 173.851593][ T42] audit: type=1400 audit(173.773:27729): avc: denied { attach_queue } for pid=10234 comm="syz.0.1296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 173.933919][ T5824] usb 9-1: Using ep0 maxpacket: 32 [ 173.963312][T10235] dns_resolver: Unsupported content type (234) [ 174.101111][ T42] audit: type=1400 audit(174.023:27730): avc: denied { listen } for pid=10250 comm="syz.2.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 174.109625][T10251] netlink: 'syz.2.1301': attribute type 2 has an invalid length. [ 174.137801][T10255] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1303'. [ 174.147699][ T42] audit: type=1400 audit(174.073:27731): avc: denied { getopt } for pid=10254 comm="syz.0.1303" lport=42259 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 174.170243][ T42] audit: type=1400 audit(174.093:27732): avc: denied { accept } for pid=10250 comm="syz.2.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 174.223624][ T42] audit: type=1400 audit(174.153:27733): avc: denied { write } for pid=10250 comm="syz.2.1301" path="socket:[43036]" dev="sockfs" ino=43036 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 174.303026][T10262] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 174.319429][T10262] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 174.462153][ T10] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 174.528439][T10185] usb 6-1: string descriptor 0 read error: -71 [ 174.536653][ T5824] usb 9-1: unable to get BOS descriptor or descriptor too short [ 174.542448][ T5824] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 174.545675][ T5824] usb 9-1: can't read configurations, error -71 [ 174.622248][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 174.627815][ T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 174.631117][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 174.635362][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 174.639590][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 174.643751][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 174.647813][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 174.652647][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 174.654154][ T55] usb 6-1: reset high-speed USB device number 26 using dummy_hcd [ 174.655504][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.659048][ T10] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22 [ 174.796925][ T55] usb 6-1: device descriptor read/64, error -32 [ 175.032883][ T55] usb 6-1: reset high-speed USB device number 26 using dummy_hcd [ 175.246269][T10285] macvtap1: mtu less than device minimum [ 175.301028][ T42] audit: type=1400 audit(175.213:27734): avc: denied { append } for pid=10286 comm="syz.4.1311" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 175.632369][ T5925] usb 7-1: new low-speed USB device number 31 using dummy_hcd [ 175.682817][T10303] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 175.793589][ T5925] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.796915][ T5925] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 175.799815][ T5925] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 175.803478][ T5925] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 175.806721][ T5925] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.812769][T10291] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 175.817286][ T5925] hub 7-1:1.0: bad descriptor, ignoring hub [ 175.819914][ T5925] hub 7-1:1.0: probe with driver hub failed with error -5 [ 175.823527][ T5925] cdc_wdm 7-1:1.0: skipping garbage [ 175.825667][ T5925] cdc_wdm 7-1:1.0: skipping garbage [ 175.828564][ T5925] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 175.830495][ T5925] cdc_wdm 7-1:1.0: Unknown control protocol [ 175.912108][ T55] usb 6-1: device descriptor read/64, error -32 [ 175.962349][ T5809] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 176.133458][ T5809] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 176.136836][ T5809] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 176.139967][ T5809] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 176.143594][ T5809] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 176.148584][ T5809] usb 9-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 176.151445][ T5809] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.154290][ T5809] usb 9-1: Product: syz [ 176.155885][ T5809] usb 9-1: Manufacturer: syz [ 176.157352][ T5809] usb 9-1: SerialNumber: syz [ 176.160473][ T5809] usb 9-1: config 0 descriptor?? [ 176.172171][ T55] usb 6-1: reset high-speed USB device number 26 using dummy_hcd [ 176.204627][ T55] usb 6-1: device reset changed ep0 maxpacket size! [ 176.215893][ T5825] usb 6-1: USB disconnect, device number 26 [ 176.352387][ T5825] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 176.367192][ T5809] adutux 9-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 176.512129][ T5825] usb 6-1: Using ep0 maxpacket: 32 [ 176.516272][ T5825] usb 6-1: unable to get BOS descriptor or descriptor too short [ 176.519669][ T5825] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 176.522181][ T5825] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 176.525162][ T5825] usb 6-1: config 14 has no interface number 0 [ 176.527574][ T5825] usb 6-1: config 14 has no interface number 1 [ 176.529586][ T5825] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 176.533369][ T5825] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 176.537187][ T5825] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 176.541205][ T5825] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 176.545773][ T5825] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 176.550984][ T5825] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 176.555079][ T5825] usb 6-1: config 14 interface 57 has no altsetting 0 [ 176.557484][ T5825] usb 6-1: config 14 interface 228 has no altsetting 0 [ 176.564290][ T5825] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 176.568002][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.568309][ T858] usb 9-1: USB disconnect, device number 12 [ 176.571028][ T5825] usb 6-1: Product: syz [ 176.571042][ T5825] usb 6-1: Manufacturer: syz [ 176.571052][ T5825] usb 6-1: SerialNumber: syz [ 176.576804][T10302] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 176.681271][ T10] usb 7-1: reset low-speed USB device number 31 using dummy_hcd [ 176.993424][ T10] usb 7-1: device firmware changed [ 177.004817][ T10] usb 7-1: USB disconnect, device number 31 [ 177.015760][ T5825] legousbtower 6-1:14.57: interrupt endpoints not found [ 177.190007][ T55] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 177.198500][ T55] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 177.203870][ T55] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 177.208776][ T55] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 177.214040][ T5825] legousbtower 6-1:14.228: get version request failed: -71 [ 177.218395][ T55] rtc rtc0: __rtc_set_alarm: err=-22 [ 177.221293][ T5825] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -71 [ 177.229821][ T5825] usb 6-1: USB disconnect, device number 27 [ 177.302579][ T42] audit: type=1400 audit(177.233:27735): avc: denied { create } for pid=10307 comm="syz.4.1320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 177.313022][ T10] usb 7-1: new low-speed USB device number 32 using dummy_hcd [ 177.363302][T10308] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 177.409363][ T5825] usb 5-1: USB disconnect, device number 27 [ 177.427241][ T42] audit: type=1400 audit(177.353:27736): avc: denied { write } for pid=10316 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.484449][ T10] usb 7-1: config index 0 descriptor too short (expected 804, got 36) [ 177.492113][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.498341][ T10] usb 7-1: config 0 has no interfaces? [ 177.500779][ T10] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 177.506564][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.513534][ T42] audit: type=1400 audit(177.443:27737): avc: denied { write } for pid=10324 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.517551][ T10] usb 7-1: config 0 descriptor?? [ 177.563094][ T55] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 177.656270][ T42] audit: type=1400 audit(177.583:27738): avc: denied { write } for pid=10334 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.712087][ T55] usb 9-1: Using ep0 maxpacket: 32 [ 177.715975][ T55] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 177.719471][ T55] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 177.725222][ T55] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.733114][ T42] audit: type=1400 audit(177.663:27739): avc: denied { write } for pid=10339 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.735760][ T55] usb 9-1: config 0 descriptor?? [ 177.882464][ T10] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 177.947422][ T42] audit: type=1400 audit(177.873:27740): avc: denied { setopt } for pid=10307 comm="syz.4.1320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 178.013600][T10350] XFS (nbd1): SB validate failed with error -5. [ 178.029989][ T55] usb 9-1: string descriptor 0 read error: -71 [ 178.036145][ T55] usb 9-1: USB disconnect, device number 13 [ 178.056257][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 178.077603][ T10] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 178.090329][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.094678][ T10] usb 5-1: Product: syz [ 178.096589][ T10] usb 5-1: Manufacturer: syz [ 178.096683][ T42] audit: type=1400 audit(178.023:27741): avc: denied { write } for pid=10356 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.098883][ T10] usb 5-1: SerialNumber: syz [ 178.121947][ T10] usb 5-1: config 0 descriptor?? [ 178.170881][ T42] audit: type=1400 audit(178.093:27742): avc: denied { write } for pid=10360 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.189017][ T5741] Bluetooth: hci3: unexpected event for opcode 0x662f [ 178.239901][ T55] usb 7-1: USB disconnect, device number 32 [ 178.264291][ T42] audit: type=1400 audit(178.193:27743): avc: denied { write } for pid=10366 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.330858][ T42] audit: type=1400 audit(178.253:27744): avc: denied { write } for pid=10371 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.389733][T10376] fuse: Bad value for 'fd' [ 178.502234][ T858] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 178.529380][ T10] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 178.537713][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 178.541089][ T10] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 178.545547][ T10] usb 5-1: media controller created [ 178.553920][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 178.672070][ T858] usb 6-1: Using ep0 maxpacket: 8 [ 178.675395][ T858] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 178.678032][ T858] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 178.681356][ T858] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 178.682216][ T5925] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 178.684504][ T858] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 178.690531][ T858] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 178.693671][ T858] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 178.698816][ T858] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 178.702926][ T858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.715430][ T858] usbtmc 6-1:16.0: probe with driver usbtmc failed with error -22 [ 178.736421][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 178.739792][ T10] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 178.742308][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 178.747744][ T10] usb 5-1: USB disconnect, device number 28 [ 178.770220][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 178.852060][ T5925] usb 7-1: Using ep0 maxpacket: 32 [ 178.854325][ T5925] usb 7-1: unable to get BOS descriptor or descriptor too short [ 178.855159][ T5925] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 178.855173][ T5925] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 178.855184][ T5925] usb 7-1: config 14 has no interface number 0 [ 178.855192][ T5925] usb 7-1: config 14 has no interface number 1 [ 178.855219][ T5925] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 178.855231][ T5925] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 178.855244][ T5925] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 178.855257][ T5925] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 178.855272][ T5925] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 178.855285][ T5925] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 178.855298][ T5925] usb 7-1: config 14 interface 57 has no altsetting 0 [ 178.855307][ T5925] usb 7-1: config 14 interface 228 has no altsetting 0 [ 178.856961][ T5925] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 178.856975][ T5925] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.856985][ T5925] usb 7-1: Product: syz [ 178.856993][ T5925] usb 7-1: Manufacturer: syz [ 178.857000][ T5925] usb 7-1: SerialNumber: syz [ 179.060860][ T5833] usb 6-1: USB disconnect, device number 28 [ 179.266407][ T5925] legousbtower 7-1:14.57: interrupt endpoints not found [ 179.468753][ T5925] legousbtower 7-1:14.228: get version request failed: -71 [ 179.471725][ T5925] legousbtower 7-1:14.228: probe with driver legousbtower failed with error -71 [ 179.477668][ T5925] usb 7-1: USB disconnect, device number 33 [ 179.562125][ T5833] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 179.667205][T10410] tmpfs: Bad value for 'mpol' [ 179.732173][ T5833] usb 9-1: Using ep0 maxpacket: 8 [ 179.736487][ T5833] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 179.740260][ T5833] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.751098][ T5833] pvrusb2: Hardware description: Terratec Grabster AV400 [ 179.754025][ T5833] pvrusb2: ********** [ 179.755757][ T5833] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 179.759838][ T5833] pvrusb2: Important functionality might not be entirely working. [ 179.763013][ T5833] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 179.767541][ T5833] pvrusb2: ********** [ 179.950000][ T2515] pvrusb2: Invalid write control endpoint [ 180.007970][ T2515] pvrusb2: Invalid write control endpoint [ 180.012497][ T2515] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 180.021111][ T2515] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 180.025762][ T2515] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 180.032731][ T2515] pvrusb2: Device being rendered inoperable [ 180.036226][ T2515] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 180.039334][ T2515] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 180.045802][ T2515] pvrusb2: Attached sub-driver cx25840 [ 180.048240][ T2515] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 180.051350][ T2515] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 180.060958][T10417] vlan2: entered allmulticast mode [ 180.065053][T10417] bond0: entered allmulticast mode [ 180.066840][T10417] bond_slave_0: entered allmulticast mode [ 180.068776][T10417] bond_slave_1: entered allmulticast mode [ 180.085189][T10417] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 180.149637][T10404] pvrusb2: Attempted to execute control transfer when device not ok [ 180.213539][T10404] kvm: apic: phys broadcast and lowest prio [ 180.217379][T10404] kvm: Disabled LAPIC found during irq injection [ 180.276382][ T5741] Bluetooth: hci3: unexpected event for opcode 0x6629 [ 180.432139][ T55] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 180.602049][ T55] usb 5-1: Using ep0 maxpacket: 16 [ 180.607094][ T55] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 180.610067][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.613515][ T55] usb 5-1: Product: syz [ 180.615023][ T55] usb 5-1: Manufacturer: syz [ 180.616624][ T55] usb 5-1: SerialNumber: syz [ 180.624441][ T55] usb 5-1: config 0 descriptor?? [ 180.682126][ T5825] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 180.862075][ T5825] usb 6-1: Using ep0 maxpacket: 32 [ 180.871210][ T5825] usb 6-1: unable to get BOS descriptor or descriptor too short [ 180.876499][ T5825] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 180.880026][ T5825] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 180.885365][ T5825] usb 6-1: config 14 has no interface number 0 [ 180.888145][ T5825] usb 6-1: config 14 has no interface number 1 [ 180.890872][ T5825] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 180.896590][ T5825] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 180.902491][ T5825] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 180.907469][ T5825] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 180.911242][ T5825] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 180.914922][ T5825] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.919198][ T5825] usb 6-1: config 14 interface 57 has no altsetting 0 [ 180.921225][ T5825] usb 6-1: config 14 interface 228 has no altsetting 0 [ 180.926464][ T5825] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 180.929569][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.932378][ T5825] usb 6-1: Product: syz [ 180.933736][ T5825] usb 6-1: Manufacturer: syz [ 180.935248][ T5825] usb 6-1: SerialNumber: syz [ 181.034744][ T55] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 181.054904][ T55] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 181.063482][ T55] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 181.070913][ T55] usb 5-1: media controller created [ 181.121227][ T55] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 181.156988][T10451] tipc: Started in network mode [ 181.159287][T10451] tipc: Node identity 4, cluster identity 4711 [ 181.161887][T10451] tipc: Node number set to 4 [ 181.240140][ T55] zl10353_read_register: readreg error (reg=127, ret==0) [ 181.247204][ T55] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 181.252287][ T55] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 181.262516][ T55] usb 5-1: USB disconnect, device number 29 [ 181.276677][ T5741] Bluetooth: hci2: unexpected event for opcode 0x6629 [ 181.305085][ T55] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 181.360002][ T5825] legousbtower 6-1:14.57: interrupt endpoints not found [ 181.565209][ T5825] legousbtower 6-1:14.228: get version request failed: -71 [ 181.568123][ T5825] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -71 [ 181.575365][ T5825] usb 6-1: USB disconnect, device number 29 [ 181.662152][ T5841] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 181.774736][T10462] dummy0: entered allmulticast mode [ 181.780766][T10462] overlay: Bad value for 'nfs_export' [ 181.794583][T10461] dummy0: left allmulticast mode [ 181.822320][ T5841] usb 7-1: Using ep0 maxpacket: 32 [ 181.826552][ T5841] usb 7-1: unable to get BOS descriptor or descriptor too short [ 181.830046][ T5841] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 181.832906][ T5841] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 181.835921][ T5841] usb 7-1: config 14 has no interface number 0 [ 181.838295][ T5841] usb 7-1: config 14 has no interface number 1 [ 181.840351][ T5841] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 181.844241][ T5841] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 181.847957][ T5841] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 181.851494][ T5841] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 181.856375][ T5841] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 181.860663][ T5841] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.865469][ T5841] usb 7-1: config 14 interface 57 has no altsetting 0 [ 181.867668][ T5841] usb 7-1: config 14 interface 228 has no altsetting 0 [ 181.871763][ T5841] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 181.876420][ T5841] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.879274][ T5841] usb 7-1: Product: syz [ 181.880881][ T5841] usb 7-1: Manufacturer: syz [ 181.882636][ T5841] usb 7-1: SerialNumber: syz [ 182.162215][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1362'. [ 182.166159][T10467] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1362'. [ 182.179437][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1362'. [ 182.183429][T10467] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1362'. [ 182.295839][ T5841] legousbtower 7-1:14.57: interrupt endpoints not found [ 182.456391][ T5825] usb 9-1: USB disconnect, device number 14 [ 182.517767][T10485] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1365'. [ 182.525262][ T5741] Bluetooth: hci3: unexpected event for opcode 0x2029 [ 182.580168][T10489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1366'. [ 182.696276][ T5841] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 182.706296][ T5841] legousbtower 7-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 182.872189][ T5833] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 183.043080][ T5833] usb 5-1: Using ep0 maxpacket: 8 [ 183.048797][ T5833] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 183.054383][ T5833] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 183.058730][ T5833] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 183.063396][ T5833] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 183.067653][ T5833] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 183.071954][ T5833] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.079984][ T5833] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 183.085067][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.096092][T10509] netlink: 'syz.1.1373': attribute type 39 has an invalid length. [ 183.096767][ T5833] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22 [ 183.110284][T10511] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1374'. [ 183.284409][T10521] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1376'. [ 183.354510][T10521] kvm: MONITOR instruction emulated as NOP! [ 183.631573][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 183.631593][ T42] audit: type=1326 audit(183.553:27752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10532 comm="syz.1.1380" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9be6d9de59 code=0x0 [ 183.688390][T10539] netlink: 'syz.1.1380': attribute type 11 has an invalid length. [ 183.691618][T10539] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1380'. [ 184.634938][ T6004] usb 7-1: USB disconnect, device number 34 [ 184.673244][ T5841] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 184.703265][ T42] audit: type=1400 audit(184.633:27753): avc: denied { setopt } for pid=10546 comm="syz.2.1383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 184.706099][ T6004] legousbtower 7-1:14.228: LEGO USB Tower #-160 now disconnected [ 184.852084][ T5841] usb 6-1: Using ep0 maxpacket: 8 [ 184.866488][ T5841] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.871394][ T5841] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.876890][ T5841] usb 6-1: config 0 interface 0 has no altsetting 0 [ 184.881004][ T5841] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 184.885258][ T5841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.900861][ T5841] usb 6-1: config 0 descriptor?? [ 184.903831][T10560] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1387'. [ 185.322320][ T5841] usbhid 6-1:0.0: can't add hid device: -71 [ 185.325848][ T5841] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 185.329935][ T5841] usb 6-1: USB disconnect, device number 30 [ 185.700208][ T5925] usb 5-1: USB disconnect, device number 30 [ 185.887317][T10578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.975432][T10587] netlink: 'syz.1.1396': attribute type 2 has an invalid length. [ 186.262170][ T5519] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 186.262170][ T55] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 186.422156][ T5519] usb 7-1: Using ep0 maxpacket: 8 [ 186.422167][ T55] usb 6-1: Using ep0 maxpacket: 8 [ 186.426640][ T55] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 186.427241][ T5519] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.432394][ T55] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 186.433922][ T5519] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.437833][ T55] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 186.441279][ T5519] usb 7-1: config 0 interface 0 has no altsetting 0 [ 186.441314][ T5519] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 186.441331][ T5519] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.443630][ T5519] usb 7-1: config 0 descriptor?? [ 186.445369][ T55] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 186.461780][ T55] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 186.466052][ T55] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 186.471514][ T55] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 186.475495][ T55] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.485004][ T55] usbtmc 6-1:16.0: probe with driver usbtmc failed with error -22 [ 186.823861][ T55] usb 6-1: USB disconnect, device number 31 [ 186.858171][ T5519] hid_parser_main: 101 callbacks suppressed [ 186.858186][ T5519] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 186.862620][ T5519] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 186.864754][ T5519] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 186.866802][ T5519] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 186.868905][ T5519] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 186.871289][ T5519] mcp2221 0003:04D8:00DD.0007: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 187.106858][T10601] overlay: ./file0 is not a directory [ 187.122341][ T5519] usb 7-1: USB disconnect, device number 35 [ 187.593084][ T5741] Bluetooth: hci3: unexpected event for opcode 0x2029 [ 187.780567][T10645] __nla_validate_parse: 2 callbacks suppressed [ 187.780581][T10645] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1421'. [ 187.786332][T10645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1421'. [ 187.792553][ T5809] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 187.801055][T10642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1013 sclass=netlink_route_socket pid=10642 comm=syz.1.1421 [ 187.845529][T10649] befs: (nullb0): No write support. Marking filesystem read-only [ 187.849306][T10649] befs: (nullb0): invalid magic header [ 187.912230][ T5519] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 187.942074][ T5809] usb 5-1: Using ep0 maxpacket: 8 [ 187.946165][ T5809] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 187.950026][ T5809] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 187.963039][ T5809] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 187.967218][ T5809] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 187.973046][ T5809] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 187.977303][ T5809] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 187.982452][ T5809] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 187.986028][ T5809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.025216][ T5809] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22 [ 188.107998][ T5519] usb 9-1: config index 0 descriptor too short (expected 74, got 45) [ 188.111487][ T5519] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 188.116168][ T5519] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 64 [ 188.120663][ T5519] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 188.125955][ T5519] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 188.129830][ T5519] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.225707][ T5809] usb 5-1: USB disconnect, device number 31 [ 188.339748][ T5519] usb 9-1: GET_CAPABILITIES returned 0 [ 188.342839][ T5519] usbtmc 9-1:16.0: can't read capabilities [ 188.350635][ T40] hid (null): unknown global tag 0xc [ 188.359529][ T5825] usb 9-1: USB disconnect, device number 15 [ 188.378644][ T40] hid-generic 0004:0003:0008.0008: unknown main item tag 0x3 [ 188.381088][ T40] hid-generic 0004:0003:0008.0008: unknown main item tag 0x5 [ 188.383965][ T40] hid-generic 0004:0003:0008.0008: unknown main item tag 0x0 [ 188.386327][ T40] hid-generic 0004:0003:0008.0008: unexpected long global item [ 188.389077][ T40] hid-generic 0004:0003:0008.0008: probe with driver hid-generic failed with error -22 [ 188.540069][ T42] audit: type=1400 audit(188.463:27754): avc: denied { append } for pid=10686 comm="syz.2.1434" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 188.639939][T10691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1436'. [ 188.649544][T10691] sctp: [Deprecated]: syz.1.1436 (pid 10691) Use of struct sctp_assoc_value in delayed_ack socket option. [ 188.649544][T10691] Use struct sctp_sack_info instead [ 188.713165][ T5825] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 188.822101][ T55] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 188.862089][ T5825] usb 9-1: Using ep0 maxpacket: 16 [ 188.867048][ T5825] usb 9-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 188.869925][ T5825] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.872561][ T5825] usb 9-1: Product: syz [ 188.873853][ T5825] usb 9-1: Manufacturer: syz [ 188.875798][ T5825] usb 9-1: SerialNumber: syz [ 188.880082][ T5825] usb 9-1: config 0 descriptor?? [ 188.907522][T10709] team0: No ports can be present during mode change [ 188.972892][ T55] usb 7-1: Using ep0 maxpacket: 8 [ 188.977533][ T55] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.981155][ T55] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.985225][ T55] usb 7-1: config 0 interface 0 has no altsetting 0 [ 188.988112][ T55] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 188.991200][ T55] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.002285][ T55] usb 7-1: config 0 descriptor?? [ 189.094718][T10717] openvswitch: netlink: Multiple metadata blocks provided [ 189.098686][ T42] audit: type=1400 audit(189.023:27755): avc: denied { accept } for pid=10716 comm="syz.1.1447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 189.263162][ T5841] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 189.288597][T10725] raw_sendmsg: syz.1.1450 forgot to set AF_INET. Fix it! [ 189.291760][ T5825] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 189.304341][ T5825] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 189.309866][ T5825] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 189.313527][ T5825] usb 9-1: media controller created [ 189.331263][ T5825] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 189.411853][ T55] usbhid 7-1:0.0: can't add hid device: -71 [ 189.415661][ T5841] usb 5-1: Using ep0 maxpacket: 8 [ 189.419668][ T55] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 189.423794][ T5841] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 189.429234][ T5841] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 189.433956][ T55] usb 7-1: USB disconnect, device number 36 [ 189.435900][ T5841] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 189.439083][ T5841] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 189.445244][ T5841] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 189.456292][ T5841] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 189.460360][ T5841] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 189.463171][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.475045][ T5841] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22 [ 189.495187][ T5825] zl10353_read_register: readreg error (reg=127, ret==0) [ 189.499201][ T5825] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 189.501682][ T5825] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 189.506642][ T5825] usb 9-1: USB disconnect, device number 16 [ 189.520729][ T5825] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 189.670949][ T5809] usb 5-1: USB disconnect, device number 32 [ 189.903388][T10751] input: syz1 as /devices/virtual/input/input20 [ 189.920803][T10751] syzkaller0: entered promiscuous mode [ 189.923912][T10751] syzkaller0: entered allmulticast mode [ 189.981542][T10754] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1459'. [ 189.981551][T10753] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1459'. [ 190.059942][T10759] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 190.064185][ T42] audit: type=1400 audit(189.983:27756): avc: denied { mounton } for pid=10755 comm="syz.2.1460" path="/380/file0" dev="tmpfs" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 190.414490][ T5825] usb 9-1: new low-speed USB device number 17 using dummy_hcd [ 190.573996][ T5825] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.578213][ T5825] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 190.581263][ T5825] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 190.582129][ T5519] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 190.587362][ T5825] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 190.591419][ T5825] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.596770][T10767] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 190.601855][ T5825] hub 9-1:1.0: bad descriptor, ignoring hub [ 190.606648][ T5825] hub 9-1:1.0: probe with driver hub failed with error -5 [ 190.609877][ T5825] cdc_wdm 9-1:1.0: skipping garbage [ 190.611596][ T5825] cdc_wdm 9-1:1.0: skipping garbage [ 190.618118][ T5825] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 190.620065][ T5825] cdc_wdm 9-1:1.0: Unknown control protocol [ 190.672091][ T5925] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 190.732141][ T5519] usb 5-1: Using ep0 maxpacket: 8 [ 190.736544][ T5519] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.740925][ T5519] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.744953][ T5519] usb 5-1: config 0 interface 0 has no altsetting 0 [ 190.747314][ T5519] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 190.750593][ T5519] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.756562][ T5519] usb 5-1: config 0 descriptor?? [ 190.802184][ T55] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 190.804668][ T42] audit: type=1400 audit(190.733:27757): avc: denied { read write } for pid=10766 comm="syz.4.1464" name="cdc-wdm0" dev="devtmpfs" ino=3356 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 190.815072][ T42] audit: type=1400 audit(190.733:27758): avc: denied { open } for pid=10766 comm="syz.4.1464" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3356 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 190.822190][ T5925] usb 7-1: Using ep0 maxpacket: 16 [ 190.831841][ T5925] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 190.835857][ T5925] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.839100][ T5925] usb 7-1: Product: syz [ 190.840837][ T5925] usb 7-1: Manufacturer: syz [ 190.842874][ T5925] usb 7-1: SerialNumber: syz [ 190.849741][ T5925] usb 7-1: config 0 descriptor?? [ 190.890885][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 190.893980][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 190.896896][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 190.899750][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 190.903696][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 190.906559][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 190.909239][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 190.952273][ T55] usb 6-1: Using ep0 maxpacket: 32 [ 190.957294][ T55] usb 6-1: unable to get BOS descriptor or descriptor too short [ 190.963685][ T55] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 190.967832][ T55] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 190.971303][ T55] usb 6-1: config 14 has no interface number 0 [ 190.973913][ T55] usb 6-1: config 14 has no interface number 1 [ 190.976493][ T55] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 190.980792][ T55] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 190.985692][ T55] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 190.990827][ T55] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 190.995489][ T55] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 191.000011][ T55] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 191.005189][ T55] usb 6-1: config 14 interface 57 has no altsetting 0 [ 191.007900][ T55] usb 6-1: config 14 interface 228 has no altsetting 0 [ 191.012963][ T55] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 191.016685][ T55] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.019993][ T55] usb 6-1: Product: syz [ 191.021733][ T55] usb 6-1: Manufacturer: syz [ 191.023890][ T55] usb 6-1: SerialNumber: syz [ 191.170665][ T5519] usbhid 5-1:0.0: can't add hid device: -71 [ 191.174071][ T5519] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 191.180797][ T5519] usb 5-1: USB disconnect, device number 33 [ 191.268011][ T5925] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 191.271721][ T5925] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 191.275194][ T5925] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 191.278364][ T5925] usb 7-1: media controller created [ 191.284701][ T5925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 191.439852][ T55] legousbtower 6-1:14.57: interrupt endpoints not found [ 191.440115][T10767] usb 9-1: reset low-speed USB device number 17 using dummy_hcd [ 191.469582][ T5925] zl10353_read_register: readreg error (reg=127, ret==0) [ 191.472890][ T5925] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 191.476172][ T5925] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 191.484880][ T5925] usb 7-1: USB disconnect, device number 37 [ 191.515193][ T5925] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 191.754128][T10767] usb 9-1: device firmware changed [ 191.759408][ T60] usb 9-1: USB disconnect, device number 17 [ 191.765367][T10790] cdc_wdm 9-1:1.0: Error autopm - -16 [ 191.773683][ T55] legousbtower 6-1:14.228: get version request failed: -71 [ 191.776756][ T55] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -71 [ 191.788611][ T55] usb 6-1: USB disconnect, device number 32 [ 191.902525][ T60] usb 9-1: new low-speed USB device number 18 using dummy_hcd [ 192.022274][ T5809] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 192.063921][ T60] usb 9-1: config index 0 descriptor too short (expected 804, got 36) [ 192.066964][ T60] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.070828][ T60] usb 9-1: config 0 has no interfaces? [ 192.073315][ T60] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 192.077180][ T60] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.083032][ T60] usb 9-1: config 0 descriptor?? [ 192.182115][ T5809] usb 5-1: Using ep0 maxpacket: 8 [ 192.185402][ T5809] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 192.188014][ T5809] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 192.191047][ T5809] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 192.194351][ T5809] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 192.197562][ T5809] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 192.201482][ T5809] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.206806][ T5809] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 192.210257][ T5809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.216721][ T5809] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22 [ 192.357617][T10811] mac80211_hwsim hwsim6 »»»»»»: renamed from wlan0 [ 192.420939][ T55] usb 5-1: USB disconnect, device number 34 [ 192.837391][ T60] usb 9-1: USB disconnect, device number 18 [ 192.906513][T10836] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1485'. [ 192.952730][ T5833] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 192.976927][T10836] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1485'. [ 193.055105][T10847] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1488'. [ 193.112818][ T5833] usb 6-1: Using ep0 maxpacket: 16 [ 193.119443][ T5833] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 193.124428][ T5833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.127943][ T5833] usb 6-1: Product: syz [ 193.129698][ T5833] usb 6-1: Manufacturer: syz [ 193.131808][ T5833] usb 6-1: SerialNumber: syz [ 193.136809][ T5833] usb 6-1: config 0 descriptor?? [ 193.172730][ T60] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 193.178935][T10854] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1489'. [ 193.322112][ T60] usb 9-1: Using ep0 maxpacket: 32 [ 193.327353][ T60] usb 9-1: unable to get BOS descriptor or descriptor too short [ 193.331729][ T60] usb 9-1: config 14 has an invalid interface number: 57 but max is 1 [ 193.336183][ T60] usb 9-1: config 14 has an invalid interface number: 228 but max is 1 [ 193.339605][ T60] usb 9-1: config 14 has no interface number 0 [ 193.342861][ T60] usb 9-1: config 14 has no interface number 1 [ 193.346012][ T60] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 193.350377][ T60] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 193.356349][ T60] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 193.361203][ T60] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 193.366622][ T60] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 193.371383][ T60] usb 9-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 193.378091][ T60] usb 9-1: config 14 interface 57 has no altsetting 0 [ 193.381246][ T60] usb 9-1: config 14 interface 228 has no altsetting 0 [ 193.386838][ T60] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 193.390697][ T60] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.394414][ T60] usb 9-1: Product: syz [ 193.396280][ T60] usb 9-1: Manufacturer: syz [ 193.398273][ T60] usb 9-1: SerialNumber: syz [ 193.532483][ T5809] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 193.555161][ T5833] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 193.562799][ T5833] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 193.567156][ T5833] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 193.570305][ T5833] usb 6-1: media controller created [ 193.581183][ T5833] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 193.683812][ T5809] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.687314][ T5809] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 193.690495][ T5809] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 193.693920][ T5809] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 193.696348][ T5809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.700937][T10860] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 193.705206][ T5809] hub 5-1:1.0: bad descriptor, ignoring hub [ 193.706908][ T5809] hub 5-1:1.0: probe with driver hub failed with error -5 [ 193.709075][ T5809] cdc_wdm 5-1:1.0: skipping garbage [ 193.710617][ T5809] cdc_wdm 5-1:1.0: skipping garbage [ 193.714709][ T5809] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 193.716534][ T5809] cdc_wdm 5-1:1.0: Unknown control protocol [ 193.815249][ T60] legousbtower 9-1:14.57: interrupt endpoints not found [ 194.088783][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 194.091562][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 194.094455][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 194.097084][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 194.099572][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 194.101231][ T60] legousbtower 9-1:14.228: get version request failed: -71 [ 194.106638][ T60] legousbtower 9-1:14.228: probe with driver legousbtower failed with error -71 [ 194.117276][ T60] usb 9-1: USB disconnect, device number 19 [ 194.122412][ T5833] zl10353_read_register: readreg error (reg=127, ret==0) [ 194.125376][ T5833] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 194.128749][ T5833] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 194.145589][ T55] usb 6-1: USB disconnect, device number 33 [ 194.163116][ T55] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 194.222561][ T5741] Bluetooth: hci2: unexpected event for opcode 0x2029 [ 194.230200][T10866] gtp0: entered promiscuous mode [ 194.232660][T10866] gtp0: entered allmulticast mode [ 194.242649][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 194.245601][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 194.248350][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 194.251087][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 194.253939][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 194.256716][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 194.259570][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 194.262252][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 194.265026][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 194.267863][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 194.441686][T10869] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1543 sclass=netlink_route_socket pid=10869 comm=syz.2.1494 [ 194.663843][T10871] overlay: filesystem on ./file0 not supported as upperdir [ 194.688404][T10871] input: syz0 as /devices/virtual/input/input21 [ 194.925179][T10892] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1502'. [ 194.930883][T10891] erspan0: entered promiscuous mode [ 194.930981][T10891] macsec1: entered promiscuous mode [ 195.145047][T10903] program syz.2.1506 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.212956][ T60] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 195.242376][ T6004] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 195.362088][ T60] usb 6-1: Using ep0 maxpacket: 32 [ 195.366517][ T60] usb 6-1: unable to get BOS descriptor or descriptor too short [ 195.370741][ T60] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 195.374371][ T60] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 195.377900][ T60] usb 6-1: config 14 has no interface number 0 [ 195.380483][ T60] usb 6-1: config 14 has no interface number 1 [ 195.383141][ T60] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 195.387716][ T60] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 195.392129][ T6004] usb 9-1: Using ep0 maxpacket: 16 [ 195.394375][ T60] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 195.399041][ T6004] usb 9-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 195.399336][ T60] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 195.403304][ T6004] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.407952][ T60] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 195.407978][ T60] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 195.408002][ T60] usb 6-1: config 14 interface 57 has no altsetting 0 [ 195.411466][ T6004] usb 9-1: Product: syz [ 195.415424][ T60] usb 6-1: config 14 interface 228 has no altsetting 0 [ 195.417345][ T60] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 195.421185][ T6004] usb 9-1: Manufacturer: syz [ 195.423714][ T60] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.423727][ T60] usb 6-1: Product: syz [ 195.423735][ T60] usb 6-1: Manufacturer: syz [ 195.423743][ T60] usb 6-1: SerialNumber: syz [ 195.444769][ T6004] usb 9-1: SerialNumber: syz [ 195.451157][ T6004] usb 9-1: config 0 descriptor?? [ 195.836003][ T60] legousbtower 6-1:14.57: interrupt endpoints not found [ 195.861331][ T6004] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 195.869627][ T6004] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 195.876070][ T6004] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 195.879329][ T6004] usb 9-1: media controller created [ 195.892220][ C3] wdm_int_callback: 8000 callbacks suppressed [ 195.892244][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 195.897888][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 195.900746][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 195.903340][ C3] wdm_int_callback: 8002 callbacks suppressed [ 195.903356][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 195.908704][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 195.911573][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 195.914475][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 195.917348][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 195.920172][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 195.923019][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 195.927679][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 195.930551][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 195.933396][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 195.936211][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 195.939059][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 195.941834][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 195.944599][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 195.947261][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 195.949979][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 195.952821][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 195.963828][ T6004] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 196.063857][T10901] FAULT_INJECTION: forcing a failure. [ 196.063857][T10901] name failslab, interval 1, probability 0, space 0, times 0 [ 196.069259][T10901] CPU: 3 UID: 0 PID: 10901 Comm: syz.4.1505 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.069287][T10901] Tainted: [L]=SOFTLOCKUP [ 196.069294][T10901] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 196.069306][T10901] Call Trace: [ 196.069360][T10901] [ 196.069369][T10901] dump_stack_lvl+0x100/0x190 [ 196.069704][T10901] should_fail_ex.cold+0x5/0xa [ 196.069806][T10901] should_failslab+0xc2/0x120 [ 196.069953][T10901] __kmalloc_noprof+0xfc/0x820 [ 196.069998][T10901] ? tomoyo_encode2+0xfb/0x3c0 [ 196.070163][T10901] tomoyo_encode2+0xfb/0x3c0 [ 196.070194][T10901] tomoyo_encode+0x29/0x50 [ 196.070219][T10901] tomoyo_realpath_from_path+0x18c/0x690 [ 196.070252][T10901] tomoyo_path_number_perm+0x23c/0x580 [ 196.070274][T10901] ? tomoyo_path_number_perm+0x22e/0x580 [ 196.070299][T10901] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 196.070352][T10901] ? find_held_lock+0x2b/0x80 [ 196.074847][T10901] ? __fget_files+0x215/0x3d0 [ 196.074938][T10901] ? hook_file_ioctl_common+0x140/0x440 [ 196.074968][T10901] ? __fget_files+0x215/0x3d0 [ 196.075000][T10901] ? __fget_files+0x21f/0x3d0 [ 196.075034][T10901] security_file_ioctl+0xd3/0x230 [ 196.075190][T10901] __x64_sys_ioctl+0xb7/0x210 [ 196.075220][T10901] do_syscall_64+0x115/0x870 [ 196.075463][T10901] ? clear_bhb_loop+0x40/0x90 [ 196.075489][T10901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.075510][T10901] RIP: 0033:0x7f3207f9de59 [ 196.075527][T10901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.075545][T10901] RSP: 002b:00007f3208e12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 196.075707][T10901] RAX: ffffffffffffffda RBX: 00007f3208225fa0 RCX: 00007f3207f9de59 [ 196.075721][T10901] RDX: 0000200000000240 RSI: 0000000000000720 RDI: 0000000000000004 [ 196.075733][T10901] RBP: 00007f3208e12090 R08: 0000000000000000 R09: 0000000000000000 [ 196.075745][T10901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.075758][T10901] R13: 00007f3208226038 R14: 00007f3208225fa0 R15: 00007ffe210c40d8 [ 196.075785][T10901] [ 196.168173][T10901] ERROR: Out of memory at tomoyo_realpath_from_path. [ 196.286629][ T55] usb 5-1: USB disconnect, device number 35 [ 196.291136][ T60] legousbtower 6-1:14.228: get version request failed: -71 [ 196.293839][ T60] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -71 [ 196.307563][ T60] usb 6-1: USB disconnect, device number 34 [ 196.436223][ T42] audit: type=1400 audit(196.363:27759): avc: denied { lock } for pid=10915 comm="syz.0.1510" path="socket:[45546]" dev="sockfs" ino=45546 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 196.485620][T10923] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1512'. [ 196.523049][ T6004] zl10353_read_register: readreg error (reg=127, ret==0) [ 196.529946][ T6004] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 196.534342][ T6004] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 196.540824][ T5741] Bluetooth: hci2: unexpected event for opcode 0x2029 [ 196.550255][ T6004] usb 9-1: USB disconnect, device number 20 [ 196.560544][T10929] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=49 sclass=netlink_tcpdiag_socket pid=10929 comm=syz.0.1515 [ 196.587352][ T6004] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 196.932116][ T858] usb 5-1: new low-speed USB device number 36 using dummy_hcd [ 197.080563][T10945] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 197.089752][ T858] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.094325][ T858] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 197.098083][ T858] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 197.103686][ T858] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 197.107808][ T858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.115229][T10933] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 197.128110][ T858] hub 5-1:1.0: bad descriptor, ignoring hub [ 197.131052][ T858] hub 5-1:1.0: probe with driver hub failed with error -5 [ 197.135708][ T858] cdc_wdm 5-1:1.0: skipping garbage [ 197.137988][ T858] cdc_wdm 5-1:1.0: skipping garbage [ 197.141599][ T858] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 197.144706][ T858] cdc_wdm 5-1:1.0: Unknown control protocol [ 197.235966][T10963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1527'. [ 197.264491][T10963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1527'. [ 197.472070][ T5519] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 197.492121][ T858] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 197.612071][ T6004] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 197.622505][ T5519] usb 6-1: Using ep0 maxpacket: 32 [ 197.627141][ T5519] usb 6-1: unable to get BOS descriptor or descriptor too short [ 197.630386][ T5519] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 197.634257][ T5519] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 197.636896][ T5519] usb 6-1: config 14 has no interface number 0 [ 197.638826][ T5519] usb 6-1: config 14 has no interface number 1 [ 197.640829][ T5519] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 197.642300][ T858] usb 9-1: Using ep0 maxpacket: 8 [ 197.644858][ T5519] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 197.648193][ T858] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 197.650125][ T5519] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 197.653624][ T858] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 197.657028][ T5519] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 197.657046][ T5519] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 197.657059][ T5519] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 197.661070][ T858] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 197.661093][ T858] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 197.664706][ T5519] usb 6-1: config 14 interface 57 has no altsetting 0 [ 197.664718][ T5519] usb 6-1: config 14 interface 228 has no altsetting 0 [ 197.666897][ T5519] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 197.669498][ T858] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 197.669520][ T858] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 197.669556][ T858] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 197.669581][ T858] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.676139][ T858] usbtmc 9-1:16.0: probe with driver usbtmc failed with error -22 [ 197.677877][ T5519] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.710502][ T5519] usb 6-1: Product: syz [ 197.712645][ T5519] usb 6-1: Manufacturer: syz [ 197.714557][ T5519] usb 6-1: SerialNumber: syz [ 197.772141][ T6004] usb 7-1: Using ep0 maxpacket: 16 [ 197.777669][ T6004] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 197.780365][ T6004] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.782998][ T6004] usb 7-1: Product: syz [ 197.784689][ T6004] usb 7-1: Manufacturer: syz [ 197.786264][ T6004] usb 7-1: SerialNumber: syz [ 197.790541][ T6004] usb 7-1: config 0 descriptor?? [ 197.887576][ T40] usb 9-1: USB disconnect, device number 21 [ 198.127252][ T5519] legousbtower 6-1:14.57: interrupt endpoints not found [ 198.198701][ T6004] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 198.209517][ T6004] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 198.213508][ T6004] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 198.216390][ T6004] usb 7-1: media controller created [ 198.236338][ T6004] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 198.400298][T10972] FAULT_INJECTION: forcing a failure. [ 198.400298][T10972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.404722][T10972] CPU: 2 UID: 0 PID: 10972 Comm: syz.2.1531 Tainted: G L syzkaller #0 PREEMPT(full) [ 198.404742][T10972] Tainted: [L]=SOFTLOCKUP [ 198.404746][T10972] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 198.404753][T10972] Call Trace: [ 198.404757][T10972] [ 198.404763][T10972] dump_stack_lvl+0x100/0x190 [ 198.404784][T10972] should_fail_ex.cold+0x5/0xa [ 198.404799][T10972] _copy_from_user+0x2e/0xd0 [ 198.404853][T10972] i2cdev_ioctl+0x39d/0x830 [ 198.404945][T10972] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 198.404958][T10972] ? selinux_file_ioctl+0x13b/0x290 [ 198.404976][T10972] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 198.404989][T10972] __x64_sys_ioctl+0x18e/0x210 [ 198.405010][T10972] do_syscall_64+0x115/0x870 [ 198.405026][T10972] ? clear_bhb_loop+0x40/0x90 [ 198.405040][T10972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.405052][T10972] RIP: 0033:0x7fe1ea59de59 [ 198.405063][T10972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.405074][T10972] RSP: 002b:00007fe1eb50b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 198.405086][T10972] RAX: ffffffffffffffda RBX: 00007fe1ea825fa0 RCX: 00007fe1ea59de59 [ 198.405093][T10972] RDX: 0000200000000240 RSI: 0000000000000720 RDI: 0000000000000004 [ 198.405100][T10972] RBP: 00007fe1eb50b090 R08: 0000000000000000 R09: 0000000000000000 [ 198.405107][T10972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.405133][T10972] R13: 00007fe1ea826038 R14: 00007fe1ea825fa0 R15: 00007ffdf5e69818 [ 198.405148][T10972] [ 198.408118][ T6004] zl10353_read_register: readreg error (reg=127, ret==0) [ 198.483280][ T6004] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 198.486818][ T6004] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 198.495130][ T6004] usb 7-1: USB disconnect, device number 38 [ 198.532921][ T6004] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 198.983160][T10982] SELinux: syz.2.1533 (10982) wrote to user. This is no longer supported. [ 199.238826][ T42] audit: type=1400 audit(199.163:27760): avc: denied { bind } for pid=10993 comm="syz.2.1537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 199.239803][T10994] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1537'. [ 199.444119][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.446254][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.624554][ T5825] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 199.688554][ T5925] usb 5-1: USB disconnect, device number 36 [ 199.690081][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 199.698624][ T5519] legousbtower 6-1:14.228: get version request failed: -71 [ 199.705889][ T5519] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -71 [ 199.710746][ T5519] usb 6-1: USB disconnect, device number 35 [ 199.786093][ T5825] usb 9-1: Using ep0 maxpacket: 8 [ 199.794552][ T5825] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 199.802296][ T5825] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 199.808187][ T5825] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 199.812702][ T5825] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 199.817170][ T5825] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 199.821385][ T5825] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 199.827220][ T5825] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 199.828486][ T42] audit: type=1400 audit(199.753:27761): avc: denied { write } for pid=11026 comm="syz.2.1549" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 199.828513][T11027] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 199.831089][ T5825] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.856091][ T5825] usbtmc 9-1:16.0: probe with driver usbtmc failed with error -22 [ 199.928311][T11037] trusted_key: encrypted_key: keylen parameter is missing [ 200.045498][T11047] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 200.058576][ T5825] usb 9-1: USB disconnect, device number 22 [ 200.100066][T11050] overlay: Unknown parameter 'fowner>00000000000000000000' [ 200.109526][T11049] xt_NFQUEUE: number of queues (5) out of range (got 65536) [ 200.114096][T11049] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 200.158679][T11050] overlayfs: statfs failed on './file0' [ 200.303196][T11066] vlan0: entered promiscuous mode [ 200.314025][T11065] vlan0: left promiscuous mode [ 200.437408][ T42] audit: type=1400 audit(200.363:27762): avc: denied { write } for pid=11074 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.495187][ T42] audit: type=1400 audit(200.423:27763): avc: denied { write } for pid=11077 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.570183][ T42] audit: type=1400 audit(200.493:27764): avc: denied { write } for pid=11079 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.670136][ T42] audit: type=1400 audit(200.593:27765): avc: denied { write } for pid=11087 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.727782][ T42] audit: type=1400 audit(200.643:27766): avc: denied { mount } for pid=11096 comm="syz.1.1573" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 200.742682][T11097] smbdirect: ib_dev[sz1] renamed to [syz0] [ 200.791044][ T42] audit: type=1400 audit(200.713:27767): avc: denied { unmount } for pid=5738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 200.840859][T11105] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1576'. [ 200.855803][T11107] loop3: detected capacity change from 0 to 7 [ 200.871100][T11107] Dev loop3: unable to read RDB block 7 [ 200.873989][T11107] loop3: unable to read partition table [ 200.876365][T11107] loop3: partition table beyond EOD, truncated [ 200.879819][T11107] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 200.912451][ T40] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 200.953254][ T42] audit: type=1400 audit(200.883:27768): avc: denied { ioctl } for pid=11108 comm="syz.0.1578" path="socket:[45826]" dev="sockfs" ino=45826 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 201.002533][T11109] cgroup: fork rejected by pids controller in /syz1 [ 201.083134][ T40] usb 9-1: Using ep0 maxpacket: 32 [ 201.095771][ T40] usb 9-1: unable to get BOS descriptor or descriptor too short [ 201.100638][ T40] usb 9-1: config 14 has an invalid interface number: 57 but max is 1 [ 201.107999][ T40] usb 9-1: config 14 has an invalid interface number: 228 but max is 1 [ 201.112724][ T40] usb 9-1: config 14 has no interface number 0 [ 201.115437][ T40] usb 9-1: config 14 has no interface number 1 [ 201.118022][ T40] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 201.128950][ T40] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 201.142097][ T40] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 201.149023][ T40] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 201.153880][ T40] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 201.161606][ T40] usb 9-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.167795][ T40] usb 9-1: config 14 interface 57 has no altsetting 0 [ 201.170965][ T40] usb 9-1: config 14 interface 228 has no altsetting 0 [ 201.174378][T11282] netlink: 'syz.1.1583': attribute type 3 has an invalid length. [ 201.177128][T11282] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1583'. [ 201.178658][ T40] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 201.183971][ T40] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.187391][ T40] usb 9-1: Product: syz [ 201.189157][ T40] usb 9-1: Manufacturer: syz [ 201.191113][ T40] usb 9-1: SerialNumber: syz [ 201.233664][T11174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.241607][T11174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.605567][ T40] legousbtower 9-1:14.57: interrupt endpoints not found [ 201.736957][ T5741] Bluetooth: hci3: unexpected event for opcode 0x0c58 [ 201.786369][T11319] program syz.2.1592 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.810643][ T40] legousbtower 9-1:14.228: get version request failed: -71 [ 201.821491][ T40] legousbtower 9-1:14.228: probe with driver legousbtower failed with error -71 [ 201.848981][ T40] usb 9-1: USB disconnect, device number 23 [ 201.994782][T11342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1602'. [ 202.009369][T11342] syzkaller1: entered promiscuous mode [ 202.011836][T11342] syzkaller1: entered allmulticast mode [ 202.222337][ T5519] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 202.372295][ T5519] usb 6-1: Using ep0 maxpacket: 8 [ 202.380654][ T5519] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 202.384612][ T5519] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 202.388746][ T5519] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 202.393210][ T5519] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 202.397378][ T5519] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.404214][ T5519] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 202.408068][ T5519] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.421630][ T5741] Bluetooth: hci2: unexpected event for opcode 0x2029 [ 202.572139][T11378] sctp: [Deprecated]: syz.2.1614 (pid 11378) Use of struct sctp_assoc_value in delayed_ack socket option. [ 202.572139][T11378] Use struct sctp_sack_info instead [ 202.588730][T11381] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1615'. [ 202.747341][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 202.747423][ T42] audit: type=1400 audit(202.673:27770): avc: denied { setopt } for pid=11387 comm="syz.0.1618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 202.833849][ T42] audit: type=1400 audit(202.763:27771): avc: denied { getopt } for pid=11396 comm="syz.2.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 202.866857][T11401] overlay: Unknown parameter 'hash' [ 202.882111][ T42] audit: type=1400 audit(202.803:27772): avc: denied { ioctl } for pid=11400 comm="syz.0.1623" path="socket:[48441]" dev="sockfs" ino=48441 ioctlcmd=0xf507 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 203.003504][ T858] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 203.152955][ T858] usb 9-1: Using ep0 maxpacket: 32 [ 203.161686][ T858] usb 9-1: unable to get BOS descriptor or descriptor too short [ 203.168294][ T858] usb 9-1: config 14 has an invalid interface number: 57 but max is 1 [ 203.171905][ T858] usb 9-1: config 14 has an invalid interface number: 228 but max is 1 [ 203.176049][ T858] usb 9-1: config 14 has no interface number 0 [ 203.178738][ T858] usb 9-1: config 14 has no interface number 1 [ 203.182604][ T858] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 203.191873][ T858] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 203.199621][ T858] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 203.200465][ T42] audit: type=1400 audit(203.123:27773): avc: denied { mount } for pid=11413 comm="syz.0.1628" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 203.204830][ T858] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 203.218318][ T858] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 203.223298][ T858] usb 9-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 203.226135][T11416] usbtmc 6-1:16.0: simple usb_control_msg returned 0 [ 203.228667][ T858] usb 9-1: config 14 interface 57 has no altsetting 0 [ 203.237009][ T858] usb 9-1: config 14 interface 228 has no altsetting 0 [ 203.248717][ T858] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 203.253108][ T858] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.256596][ T858] usb 9-1: Product: syz [ 203.258502][ T858] usb 9-1: Manufacturer: syz [ 203.260541][ T858] usb 9-1: SerialNumber: syz [ 203.429900][ T5833] usb 6-1: USB disconnect, device number 36 [ 203.685995][ T858] legousbtower 9-1:14.57: interrupt endpoints not found [ 203.828975][T11443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1639'. [ 203.892698][ T858] legousbtower 9-1:14.228: get version request failed: -71 [ 203.896872][ T858] legousbtower 9-1:14.228: probe with driver legousbtower failed with error -71 [ 203.906578][ T858] usb 9-1: USB disconnect, device number 24 [ 204.472185][ T858] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 204.604262][ T858] usb 6-1: device descriptor read/64, error -71 [ 204.732163][ T40] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 204.872651][ T858] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 204.893126][ T40] usb 9-1: Using ep0 maxpacket: 8 [ 204.897301][ T40] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 204.900040][ T40] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 204.903906][ T40] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 204.907849][ T40] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 204.911311][ T40] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 204.915083][ T40] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 204.920535][ T40] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 204.926299][ T40] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.937872][ T40] usbtmc 9-1:16.0: probe with driver usbtmc failed with error -22 [ 205.002364][ T858] usb 6-1: device descriptor read/64, error -71 [ 205.124556][ T858] usb usb6-port1: attempt power cycle [ 205.462154][ T858] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 205.482907][ T858] usb 6-1: device descriptor read/8, error -71 [ 205.622109][ T55] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 205.722246][ T858] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 205.742928][ T858] usb 6-1: device descriptor read/8, error -71 [ 205.782144][ T55] usb 7-1: Using ep0 maxpacket: 32 [ 205.786965][ T55] usb 7-1: unable to get BOS descriptor or descriptor too short [ 205.791704][ T55] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 205.795378][ T55] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 205.798950][ T55] usb 7-1: config 14 has no interface number 0 [ 205.801814][ T55] usb 7-1: config 14 has no interface number 1 [ 205.804678][ T55] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 205.809393][ T55] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 205.814648][ T55] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 205.819598][ T55] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 205.824623][ T55] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 205.829679][ T55] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 205.835505][ T55] usb 7-1: config 14 interface 57 has no altsetting 0 [ 205.838494][ T55] usb 7-1: config 14 interface 228 has no altsetting 0 [ 205.845082][ T55] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 205.849222][ T55] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.852781][ T55] usb 7-1: Product: syz [ 205.854611][ T55] usb 7-1: Manufacturer: syz [ 205.857312][ T55] usb 7-1: SerialNumber: syz [ 205.863004][ T858] usb usb6-port1: unable to enumerate USB device [ 206.268855][ T55] legousbtower 7-1:14.57: interrupt endpoints not found [ 206.473286][ T55] legousbtower 7-1:14.228: get version request failed: -71 [ 206.475928][ T55] legousbtower 7-1:14.228: probe with driver legousbtower failed with error -71 [ 206.482077][ T55] usb 7-1: USB disconnect, device number 40 [ 206.652686][ T5090] Bluetooth: hci1: command 0x0406 tx timeout [ 206.916873][ T42] audit: type=1400 audit(206.843:27774): avc: denied { ioctl } for pid=11532 comm="syz.0.1657" path="socket:[48551]" dev="sockfs" ino=48551 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 207.029181][T11539] btrfs: Unknown parameter 'aclD' [ 207.058955][T11539] »»»»»»: renamed from bridge_slave_1 (while UP) [ 207.312135][ T5841] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 207.472149][ T5841] usb 7-1: Using ep0 maxpacket: 32 [ 207.480049][ T55] usb 9-1: USB disconnect, device number 25 [ 207.487123][ T5841] usb 7-1: unable to get BOS descriptor or descriptor too short [ 207.493373][ T5841] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 207.496280][ T5841] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 207.499805][ T5841] usb 7-1: config 14 has no interface number 0 [ 207.501902][ T5841] usb 7-1: config 14 has no interface number 1 [ 207.504424][ T5841] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 207.508309][ T5841] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 207.512469][ T5841] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 207.518756][ T5841] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 207.540780][ T5841] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 207.549341][ T5841] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.555345][ T5841] usb 7-1: config 14 interface 57 has no altsetting 0 [ 207.558063][ T5841] usb 7-1: config 14 interface 228 has no altsetting 0 [ 207.562763][ T5841] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 207.565787][ T5841] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.568821][ T5841] usb 7-1: Product: syz [ 207.570378][ T5841] usb 7-1: Manufacturer: syz [ 207.573214][ T5841] usb 7-1: SerialNumber: syz [ 207.630952][ T5880] bond0: (slave bond_slave_0): interface is now down [ 207.632727][T11560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.636313][ T5880] bond0: (slave bond_slave_1): interface is now down [ 207.647140][ T5880] bond0: now running without any active interface! [ 207.720524][T11560] netlink: 'syz.1.1667': attribute type 12 has an invalid length. [ 207.985595][ T5841] legousbtower 7-1:14.57: interrupt endpoints not found [ 208.140949][T11586] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1678'. [ 208.193865][ T5841] legousbtower 7-1:14.228: get version request failed: -71 [ 208.196352][ T5841] legousbtower 7-1:14.228: probe with driver legousbtower failed with error -71 [ 208.202267][ T5519] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 208.209718][ T5841] usb 7-1: USB disconnect, device number 41 [ 208.224108][T11590] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1680'. [ 208.277308][ T42] audit: type=1400 audit(208.203:27775): avc: denied { connect } for pid=11591 comm="syz.1.1681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 208.352482][ T5519] usb 5-1: Using ep0 maxpacket: 8 [ 208.356614][ T5519] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 208.360212][ T5519] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 208.365185][ T5519] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 208.369338][ T5519] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 208.375293][ T5519] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 208.379537][ T5519] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 208.385189][ T5519] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 208.389012][ T5519] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.397877][ T5519] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22 [ 208.432089][ T5809] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 208.592135][ T5809] usb 9-1: Using ep0 maxpacket: 16 [ 208.605912][ T5809] usb 9-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 208.611736][ T5809] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.616179][ T5809] usb 9-1: Product: syz [ 208.618023][ T5809] usb 9-1: Manufacturer: syz [ 208.620100][ T5809] usb 9-1: SerialNumber: syz [ 208.633867][ T5809] usb 9-1: config 0 descriptor?? [ 208.643605][ T42] audit: type=1800 audit(208.573:27776): pid=11606 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1688" name="file0" dev="overlay" ino=2563 res=0 errno=0 [ 208.674865][ T42] audit: type=1400 audit(208.603:27777): avc: denied { shutdown } for pid=11605 comm="syz.1.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 208.683480][ T42] audit: type=1400 audit(208.603:27778): avc: denied { write } for pid=11605 comm="syz.1.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 208.872986][T11615] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1690'. [ 208.877606][T11620] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1692'. [ 208.991875][ T42] audit: type=1400 audit(208.913:27779): avc: denied { shutdown } for pid=11625 comm="syz.1.1694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 209.087830][ T5809] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 209.120750][ T5809] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 209.125818][ T5809] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 209.125883][ T5809] usb 9-1: media controller created [ 209.146085][ T5809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 209.238899][T11642] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1699'. [ 209.251182][T11642] 8021q: adding VLAN 0 to HW filter on device bond8 [ 209.259647][T11642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1699'. [ 209.263132][T11642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11642 comm=syz.2.1699 [ 209.271288][T11642] bond8: (slave hsr0): The slave device specified does not support setting the MAC address [ 209.277006][T11642] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 209.280902][T11642] bond8: (slave hsr0): Error -22 calling dev_set_mtu [ 209.293975][ T5809] zl10353_read_register: readreg error (reg=127, ret==0) [ 209.298881][ T5809] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 209.302463][ T5809] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 209.322053][ T5841] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 209.472063][ T5841] usb 6-1: Using ep0 maxpacket: 32 [ 209.475568][ T5841] usb 6-1: unable to get BOS descriptor or descriptor too short [ 209.479153][ T5841] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 209.481811][ T5841] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 209.484996][ T5841] usb 6-1: config 14 has no interface number 0 [ 209.487545][ T5841] usb 6-1: config 14 has no interface number 1 [ 209.489623][ T5841] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 209.494130][ T5841] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 209.498669][ T5841] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 209.503414][ T5841] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 209.507893][ T5841] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 209.511827][ T5841] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.516024][ T5841] usb 6-1: config 14 interface 57 has no altsetting 0 [ 209.518182][ T5841] usb 6-1: config 14 interface 228 has no altsetting 0 [ 209.523401][ T5841] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 209.526358][ T5841] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.528994][ T5841] usb 6-1: Product: syz [ 209.531428][ T5841] usb 6-1: Manufacturer: syz [ 209.533440][ T5841] usb 6-1: SerialNumber: syz [ 209.834361][ T55] usb 9-1: USB disconnect, device number 26 [ 209.852874][ T55] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 209.945403][ T5841] legousbtower 6-1:14.57: interrupt endpoints not found [ 210.153548][ T5841] legousbtower 6-1:14.228: get version request failed: -71 [ 210.156013][ T5841] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -71 [ 210.163955][ T5841] usb 6-1: USB disconnect, device number 41 [ 210.450301][T11664] Bluetooth: MGMT ver 1.23 [ 210.704898][T11680] netlink: 'syz.4.1715': attribute type 1 has an invalid length. [ 210.726069][T11680] bond4: entered promiscuous mode [ 210.728027][T11680] 8021q: adding VLAN 0 to HW filter on device bond4 [ 210.752735][ T5841] usb 7-1: new full-speed USB device number 42 using dummy_hcd [ 210.757619][T11680] 8021q: adding VLAN 0 to HW filter on device bond4 [ 210.760808][T11680] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 210.765054][T11680] bond4: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 210.772488][T11680] bond4: (slave vti0): making interface the new active one [ 210.775514][T11680] vti0: entered promiscuous mode [ 210.779256][T11680] bond4: (slave vti0): Enslaving as an active interface with an up link [ 210.904255][ T5841] usb 7-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 210.909049][ T5841] usb 7-1: config 1 interface 0 has no altsetting 0 [ 210.912134][ T60] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 210.916098][ T5841] usb 7-1: string descriptor 0 read error: -22 [ 210.918993][ T5841] usb 7-1: New USB device found, idVendor=576d, idProduct=c298, bcdDevice= 0.40 [ 210.923092][ T5841] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.933759][T11670] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 210.989886][ T5841] usb 5-1: USB disconnect, device number 37 [ 211.072511][ T5833] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 211.082694][ T60] usb 6-1: Using ep0 maxpacket: 8 [ 211.124735][ T60] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.129465][ T60] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.134001][ T60] usb 6-1: config 0 interface 0 has no altsetting 0 [ 211.137010][ T60] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 211.140878][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.147105][ T60] usb 6-1: config 0 descriptor?? [ 211.233819][ T5833] usb 9-1: Using ep0 maxpacket: 16 [ 211.246103][ T5833] usb 9-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 211.262115][ T5833] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.265990][ T5833] usb 9-1: Product: syz [ 211.267862][ T5833] usb 9-1: Manufacturer: syz [ 211.272906][ T5833] usb 9-1: SerialNumber: syz [ 211.276987][T11699] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 211.287098][ T5833] usb 9-1: config 0 descriptor?? [ 211.374882][T11702] bond6: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 211.384263][T11702] bond6 (unregistering): Released all slaves [ 211.559363][ T60] usbhid 6-1:0.0: can't add hid device: -71 [ 211.565044][ T60] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 211.570558][ T60] usb 6-1: USB disconnect, device number 42 [ 211.709254][ T5833] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 211.713280][ T5833] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 211.717025][ T5833] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 211.719624][ T5833] usb 9-1: media controller created [ 211.731037][ T5833] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 211.911133][ T42] audit: type=1400 audit(211.833:27780): avc: denied { ioctl } for pid=11682 comm="syz.4.1716" path="socket:[47936]" dev="sockfs" ino=47936 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 211.912675][ T858] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 211.922910][T11683] syzkaller1: entered promiscuous mode [ 211.926369][T11683] syzkaller1: entered allmulticast mode [ 212.072097][ T858] usb 5-1: Using ep0 maxpacket: 32 [ 212.075991][ T858] usb 5-1: unable to get BOS descriptor or descriptor too short [ 212.079524][ T858] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 212.082354][ T858] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 212.085195][ T858] usb 5-1: config 14 has no interface number 0 [ 212.087273][ T858] usb 5-1: config 14 has no interface number 1 [ 212.092695][ T858] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 212.097298][ T858] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 212.102596][ T858] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 212.107128][ T858] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 212.112495][ T858] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 212.117170][ T858] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.122674][ T858] usb 5-1: config 14 interface 57 has no altsetting 0 [ 212.125530][ T858] usb 5-1: config 14 interface 228 has no altsetting 0 [ 212.132323][ T858] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 212.135871][ T858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.138447][ T858] usb 5-1: Product: syz [ 212.139851][ T858] usb 5-1: Manufacturer: syz [ 212.141404][ T858] usb 5-1: SerialNumber: syz [ 212.272271][ T5833] zl10353_read_register: readreg error (reg=127, ret==0) [ 212.274595][ T5833] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 212.277126][ T5833] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 212.293108][T11683] ------------[ cut here ]------------ [ 212.294988][T11683] usb 9-1: BOGUS control dir, pipe 80001b80 doesn't match bRequestType c0 [ 212.297981][T11683] WARNING: drivers/usb/core/urb.c:411 at usb_submit_urb+0x15ff/0x19b0, CPU#0: syz.4.1716/11683 [ 212.301509][T11683] Modules linked in: [ 212.303504][T11683] CPU: 0 UID: 0 PID: 11683 Comm: syz.4.1716 Tainted: G L syzkaller #0 PREEMPT(full) [ 212.307067][T11683] Tainted: [L]=SOFTLOCKUP [ 212.308470][T11683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 212.311650][T11683] RIP: 0010:usb_submit_urb+0x160d/0x19b0 [ 212.313516][T11683] Code: 48 89 54 24 40 e8 a3 62 8a fa 4c 89 e7 e8 ab 13 dc fe 48 89 c6 48 8d 3d d1 09 b0 09 44 8b 44 24 20 8b 4c 24 30 48 8b 54 24 40 <67> 48 0f b9 3a e9 28 ed ff ff e8 74 62 8a fa 89 ee bf ff 00 00 00 [ 212.319712][T11683] RSP: 0018:ffffc900037d7680 EFLAGS: 00010287 [ 212.321720][T11683] RAX: ffffffff8ca5df80 RBX: ffff888027f07600 RCX: 0000000080001b80 [ 212.325136][T11683] RDX: ffff888022d4a520 RSI: ffffffff8ca5df80 RDI: ffffffff912f7760 [ 212.328621][T11683] RBP: ffff88802a90f058 R08: 00000000000000c0 R09: 0000000000000000 [ 212.332230][T11683] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802a90f0b0 [ 212.335639][T11683] R13: ffff8880225d6500 R14: ffff8880225d6506 R15: ffff8880225d6507 [ 212.339044][T11683] FS: 00007f3208e126c0(0000) GS:ffff8880d5def000(0000) knlGS:0000000000000000 [ 212.342096][T11683] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 212.344153][T11683] CR2: 00007f9be6d87480 CR3: 00000000371b1000 CR4: 0000000000352ef0 [ 212.346702][T11683] DR0: 000004000002002c DR1: fffeffffff7fff02 DR2: 0000000080000002 [ 212.349265][T11683] DR3: 0000000000000003 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 212.352375][T11683] Call Trace: [ 212.353441][T11683] [ 212.354390][T11683] ? __init_swait_queue_head+0xca/0x150 [ 212.357808][T11683] usb_start_wait_urb+0x10e/0x580 [ 212.359393][T11683] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 212.361525][T11683] ? trace_kmalloc+0xeb/0x110 [ 212.363263][T11683] ? __asan_memset+0x23/0x50 [ 212.364754][T11683] usb_control_msg+0x328/0x4b0 [ 212.366287][T11683] ? __pfx_usb_control_msg+0x10/0x10 [ 212.367992][T11683] dtv5100_i2c_msg+0x1be/0x340 [ 212.369601][T11683] dtv5100_i2c_xfer+0x131/0x3d0 [ 212.371175][T11683] ? do_raw_spin_lock+0x128/0x260 [ 212.372910][T11683] ? find_held_lock+0x2b/0x80 [ 212.374736][T11683] __i2c_transfer+0x5d9/0x1740 [ 212.376877][T11683] ? try_to_take_rt_mutex+0x59a/0xf80 [ 212.379267][T11683] ? __pfx___i2c_transfer+0x10/0x10 [ 212.381407][T11683] ? _raw_spin_lock_irq+0x45/0x50 [ 212.383663][T11683] i2c_smbus_xfer_emulated+0x235/0x1110 [ 212.386002][T11683] ? __pfx_i2c_smbus_xfer_emulated+0x10/0x10 [ 212.388526][T11683] ? __rt_mutex_slowlock_locked.constprop.0+0x253/0x760 [ 212.391403][T11683] __i2c_smbus_xfer+0x619/0x1100 [ 212.393285][T11683] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 212.394982][T11683] i2c_smbus_xfer+0x185/0x3c0 [ 212.396697][T11683] i2cdev_ioctl_smbus+0x389/0xac0 [ 212.398866][T11683] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 212.401189][T11683] ? __might_fault+0xc5/0x140 [ 212.403361][T11683] ? __might_fault+0xc5/0x140 [ 212.405361][T11683] i2cdev_ioctl+0x3cf/0x830 [ 212.407318][T11683] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 212.409329][T11683] ? selinux_file_ioctl+0x13b/0x290 [ 212.411163][T11683] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 212.412853][T11683] __x64_sys_ioctl+0x18e/0x210 [ 212.414499][T11683] do_syscall_64+0x115/0x870 [ 212.416449][T11683] ? clear_bhb_loop+0x40/0x90 [ 212.418560][T11683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.421061][T11683] RIP: 0033:0x7f3207f9de59 [ 212.423095][T11683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.430955][T11683] RSP: 002b:00007f3208e12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 212.434422][T11683] RAX: ffffffffffffffda RBX: 00007f3208225fa0 RCX: 00007f3207f9de59 [ 212.437112][T11683] RDX: 0000200000000100 RSI: 0000000000000720 RDI: 000000000000000a [ 212.439640][T11683] RBP: 00007f3208033e6f R08: 0000000000000000 R09: 0000000000000000 [ 212.442188][T11683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.444624][T11683] R13: 00007f3208226038 R14: 00007f3208225fa0 R15: 00007ffe210c40d8 [ 212.447147][T11683] [ 212.448128][T11683] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 212.450452][T11683] CPU: 0 UID: 0 PID: 11683 Comm: syz.4.1716 Tainted: G L syzkaller #0 PREEMPT(full) [ 212.454273][T11683] Tainted: [L]=SOFTLOCKUP [ 212.456040][T11683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 212.460165][T11683] Call Trace: [ 212.461552][T11683] [ 212.462729][T11683] dump_stack_lvl+0x100/0x190 [ 212.464799][T11683] vpanic+0x552/0x970 [ 212.466597][T11683] ? __pfx_vpanic+0x10/0x10 [ 212.468565][T11683] panic+0xd1/0xe0 [ 212.470177][T11683] ? __pfx_panic+0x10/0x10 [ 212.472093][T11683] check_panic_on_warn.cold+0x19/0x34 [ 212.474152][T11683] ? usb_submit_urb+0x15ff/0x19b0 [ 212.475761][T11683] __warn.cold+0x191/0x318 [ 212.477306][T11683] __report_bug+0x30f/0x440 [ 212.478865][T11683] ? usb_submit_urb+0x15ff/0x19b0 [ 212.480728][T11683] ? __pfx___report_bug+0x10/0x10 [ 212.482359][T11683] ? lockdep_hardirqs_on+0x78/0x100 [ 212.483990][T11683] ? usb_submit_urb+0x160d/0x19b0 [ 212.485805][T11683] report_bug_entry+0xe1/0x290 [ 212.487705][T11683] ? usb_submit_urb+0x160d/0x19b0 [ 212.489298][T11683] handle_bug+0x1cd/0x2a0 [ 212.490688][T11683] exc_invalid_op+0x17/0x50 [ 212.492109][T11683] asm_exc_invalid_op+0x1a/0x20 [ 212.493620][T11683] RIP: 0010:usb_submit_urb+0x160d/0x19b0 [ 212.495451][T11683] Code: 48 89 54 24 40 e8 a3 62 8a fa 4c 89 e7 e8 ab 13 dc fe 48 89 c6 48 8d 3d d1 09 b0 09 44 8b 44 24 20 8b 4c 24 30 48 8b 54 24 40 <67> 48 0f b9 3a e9 28 ed ff ff e8 74 62 8a fa 89 ee bf ff 00 00 00 [ 212.501382][T11683] RSP: 0018:ffffc900037d7680 EFLAGS: 00010287 [ 212.503426][T11683] RAX: ffffffff8ca5df80 RBX: ffff888027f07600 RCX: 0000000080001b80 [ 212.505836][T11683] RDX: ffff888022d4a520 RSI: ffffffff8ca5df80 RDI: ffffffff912f7760 [ 212.508332][T11683] RBP: ffff88802a90f058 R08: 00000000000000c0 R09: 0000000000000000 [ 212.510804][T11683] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802a90f0b0 [ 212.513425][T11683] R13: ffff8880225d6500 R14: ffff8880225d6506 R15: ffff8880225d6507 [ 212.515924][T11683] ? __init_swait_queue_head+0xca/0x150 [ 212.517731][T11683] usb_start_wait_urb+0x10e/0x580 [ 212.519510][T11683] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 212.521238][T11683] ? trace_kmalloc+0xeb/0x110 [ 212.522779][T11683] ? __asan_memset+0x23/0x50 [ 212.524235][T11683] usb_control_msg+0x328/0x4b0 [ 212.525750][T11683] ? __pfx_usb_control_msg+0x10/0x10 [ 212.527455][T11683] dtv5100_i2c_msg+0x1be/0x340 [ 212.529002][T11683] dtv5100_i2c_xfer+0x131/0x3d0 [ 212.530541][T11683] ? do_raw_spin_lock+0x128/0x260 [ 212.532131][T11683] ? find_held_lock+0x2b/0x80 [ 212.533664][T11683] __i2c_transfer+0x5d9/0x1740 [ 212.535168][T11683] ? try_to_take_rt_mutex+0x59a/0xf80 [ 212.536869][T11683] ? __pfx___i2c_transfer+0x10/0x10 [ 212.538489][T11683] ? _raw_spin_lock_irq+0x45/0x50 [ 212.540098][T11683] i2c_smbus_xfer_emulated+0x235/0x1110 [ 212.541850][T11683] ? __pfx_i2c_smbus_xfer_emulated+0x10/0x10 [ 212.543711][T11683] ? __rt_mutex_slowlock_locked.constprop.0+0x253/0x760 [ 212.546058][T11683] __i2c_smbus_xfer+0x619/0x1100 [ 212.547646][T11683] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 212.549317][T11683] i2c_smbus_xfer+0x185/0x3c0 [ 212.550860][T11683] i2cdev_ioctl_smbus+0x389/0xac0 [ 212.552432][T11683] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 212.554171][T11683] ? __might_fault+0xc5/0x140 [ 212.555677][T11683] ? __might_fault+0xc5/0x140 [ 212.557181][T11683] i2cdev_ioctl+0x3cf/0x830 [ 212.558612][T11683] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 212.560178][T11683] ? selinux_file_ioctl+0x13b/0x290 [ 212.561862][T11683] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 212.563426][T11683] __x64_sys_ioctl+0x18e/0x210 [ 212.564938][T11683] do_syscall_64+0x115/0x870 [ 212.566711][T11683] ? clear_bhb_loop+0x40/0x90 [ 212.568213][T11683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.570043][T11683] RIP: 0033:0x7f3207f9de59 [ 212.571437][T11683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.577424][T11683] RSP: 002b:00007f3208e12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 212.580009][T11683] RAX: ffffffffffffffda RBX: 00007f3208225fa0 RCX: 00007f3207f9de59 [ 212.582462][T11683] RDX: 0000200000000100 RSI: 0000000000000720 RDI: 000000000000000a [ 212.584938][T11683] RBP: 00007f3208033e6f R08: 0000000000000000 R09: 0000000000000000 [ 212.587445][T11683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.589981][T11683] R13: 00007f3208226038 R14: 00007f3208225fa0 R15: 00007ffe210c40d8 [ 212.592430][T11683] [ 212.594346][T11683] Kernel Offset: disabled [ 212.595739][T11683] Rebooting in 86400 seconds..