last executing test programs: 15.790569268s ago: executing program 1 (id=1273): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1a0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f00000000c0)={0xc, r4}) ioctl$IOMMU_VFIO_IOAS$CLEAR(r3, 0x3b88, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000180)={0x20, r4, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, 0x0) ioctl$IOMMU_VFIO_GET_API_VERSION(r3, 0x3b64) ioctl$IOMMU_VFIO_SET_IOMMU(r3, 0x3b66, 0x3) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000340)={0x18, r4}) ioctl$IOMMU_DESTROY$ioas(r3, 0x3b80, &(0x7f0000000380)={0x8, r4}) 14.376007787s ago: executing program 1 (id=1275): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000205f14120200000000000109022400010000600009040180020300000009210604000122050009058103"], 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1900000004000000040000000a"], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r1}, 0x20) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "e2cd6347"}]}}, 0x0}, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r2 = syz_open_dev$sndctrl(&(0x7f0000000400), 0xffffffffffffa655, 0x400) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r2, 0xc0045520, &(0x7f0000000440)=0x101) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x880) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48000) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000600)) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000080)) read$msr(0xffffffffffffffff, &(0x7f0000000280)=""/228, 0xe4) recvmsg$inet_nvme(0xffffffffffffffff, 0x0, 0x40000163) 14.285803666s ago: executing program 4 (id=1277): syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)="a5ce", 0x2) openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000000)="240000001d005f80004000000000000002000000010000000000080008000100000303ff", 0x24) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0x1bf5f000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000100)={r4, 0x0, r3, 0x0, 0x80000}) r5 = accept$unix(r0, 0x0, &(0x7f00000000c0)) splice(r5, 0x0, r5, 0x0, 0xcea5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x13, 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_open_dev$video(&(0x7f0000000100), 0x5, 0x440001) 11.532363511s ago: executing program 4 (id=1282): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x4004044) r1 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5012, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0x0, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0xff, 0x3, 0x1, 0x2, 0x2, {0x9, 0x21, 0xff7f, 0x79, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x5, 0xf9}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xff, 0x7, 0x5}}]}}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000004580), 0x0}, 0x0) splice(r0, &(0x7f0000000500)=0x15, r0, &(0x7f0000000540)=0x2, 0x9, 0x6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r3, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x14, r4}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r3}) 10.260933713s ago: executing program 3 (id=1284): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffb}, 0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0x400076, 0x484100) fsopen(&(0x7f00000000c0)='msdos\x00', 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000040)={0x1, {"40a568bf607c2094e9c6a0c0f550f7f8", "241e6a0b37e28869f574458eb6417d55", "a34d3bcc4817356e5c266b26fe399bde"}, 0x7, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r4, &(0x7f0000000bc0)={&(0x7f0000000100)={0xa, 0x4e20, 0x1, @mcast1, 0x8004}, 0x1c, 0x0}, 0x44890) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000240)={0x3, {"771c2e09a6afc168243d3e8ca34e208f", "45d5c22cb6cd3148b85d5dbf5f9e3413", "a9929074e915d4b883a44cd492a341be"}, 0x1, 0x4}) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x8) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20200, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r8, 0x4048aecb, &(0x7f0000002400)={0x3, 0x0, [{0x40000001, 0x4, 0x3, 0x8002, 0x27, 0x7, 0x3}, {0xb, 0x5, 0x1, 0xfffffff7, 0xfffffff9, 0xff, 0x9}, {0x80000007, 0xc28, 0x3, 0xfffffffc, 0x5, 0xae, 0xffff}]}) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, 0x0, 0x44050) recvmsg(r9, 0x0, 0x10020) 9.999753073s ago: executing program 1 (id=1285): add_key$user(&(0x7f0000000380), 0x0, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r0 = socket$key(0xf, 0x3, 0x2) ptrace(0x10, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x5, 0x10, 0xfa00, {&(0x7f0000002200)}}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES8], 0x80}}, 0x4008810) r1 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000001700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)={0x40, 0x5, 0x3, "0dcb17"}}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000001d40)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001d00)}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f00000009c0), 0x0, 0xfffffffffffffffe) 9.172550119s ago: executing program 2 (id=1288): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000007b00)={0x2, 0x4e21, @empty}, 0x10}}, {{&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e000000200110000000000"], 0x50}}], 0x2, 0x800) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000006c0)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x80000}, @l2={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xff01, 0x2}, @l2={0x1f, 0xffff, @any, 0x4}, 0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0xe6, 0x2, 0x6}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000100)=0x4) socket(0x2, 0x80805, 0x0) r2 = fanotify_init(0x2, 0x1) fanotify_mark(r2, 0x80, 0x8001018, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) ioctl$FBIOBLANK(r3, 0x4611, 0x2) syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file5\x00', 0x82c0, 0x0) 8.648396589s ago: executing program 0 (id=1289): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='minix\x00', 0x0, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000300)={'fscrypt:', @desc4}, 0x0, 0x0, 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x48810) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newtaction={0x6c, 0x30, 0x9, 0x70bd29, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x8000, 0x0, 0x2}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000000)=0xfff, 0x4) 8.104989677s ago: executing program 3 (id=1290): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000002c0)="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", 0xfc) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 7.665877207s ago: executing program 0 (id=1291): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0xeeee6001, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x4, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0x3909e40c33606d9c, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x1, 0x7}, {0x6000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x5, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x0, 0x12024, 0x2, 0x0, 0x3000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.56044424s ago: executing program 4 (id=1292): sched_setaffinity(0x0, 0x0, 0x0) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) brk(0x200000ffc000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) kexec_load(0x8, 0x0, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001880)={&(0x7f00000005c0)={0x11f0, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x6, 0x5}}}}, [@NL80211_ATTR_FRAME_MATCH={0xd7, 0x5b, "3b41ae5044fcd074d82765c7a037312010b0f1065ed8eaa79eb1e5c5ab9fe84bf99ba7c114012aea37caa418e794d40ab6f27bd2fabac219a619cbd769b48936d0c1dcf96d84fba9ffddb3b957450b7940518c7783a529edb6a8c746802e6c3a9be9d2106fcdbbe9f591b64040ab25b772013ec35b3355e150170743a5cbb095ca75328b20fdd237bf154ba08796f1301bc44351bbc246a69113aacebc7bd8f588e40867f078139a2c40ae1c14e2706e19ef56e843e9683fa1430449f46b82f0841bdf3d9eb1cfa80fee7a2fc0f9c1cd2da1c6"}, @NL80211_ATTR_FRAME_MATCH={0x49, 0x5b, "49880c0bb6e850fe2f6f8d0411dffbde5609f55b1068e9b2ac39fbbc4dd3f5efc028b304a79c0b5e6901b180ed4062aac5d26f20cc33b912ce4c1783e8b499ae9eca7cae4c"}, @NL80211_ATTR_FRAME_MATCH={0x95, 0x5b, "514f8da5eaba2910dda3a10937a02f5dd8d1b09a180cf2c3f31ff02af4b4df3ce134ad0d9d46109652195ad0c91b17f58b68ebcbda4e3e0bb63e4ebb2cf6a69ce519168ae82541a478ff66dd7b1afc421c3266cc0af98cc2162eb44cd95f5011e7fd4d842e554d94bd94f99039cdfbec7e55acbf75ad43dccfd53a54f3fbf2a563977b5d500f066ed58d056a01f86b176b"}, @NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}]}, 0x11f0}, 0x1, 0x0, 0x0, 0x20048810}, 0x811) 7.461094759s ago: executing program 4 (id=1293): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = userfaultfd(0x801) migrate_pages(0x0, 0x201001, 0x0, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) bind$rds(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f00000018c0)={&(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000340)}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015800a00142603600e1208000f0000000406040016c008685c400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1010000007c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bbadd809d50300000000000000e0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0x400000000003, 0x800, 0xffffffffffffffff, 0x400, 0x2, 0x80000000, 0x9, 0xfffffffffffffffd, 0x820000e8}) getpriority(0x1, r3) syz_io_uring_setup(0xe00, &(0x7f00000001c0)={0x0, 0x81a6, 0x10, 0x1, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0, 0x0) syz_io_uring_submit(r6, r7, 0x0, &(0x7f0000000080)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 7.371260088s ago: executing program 0 (id=1294): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, 0x0, 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$CLEAR(r3, 0x3b88, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000180)={0x20, r4, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, 0x0) ioctl$IOMMU_VFIO_GET_API_VERSION(r3, 0x3b64) ioctl$IOMMU_VFIO_SET_IOMMU(r3, 0x3b66, 0x3) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000340)={0x18, r4}) 7.003121185s ago: executing program 3 (id=1295): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = userfaultfd(0x801) migrate_pages(0x0, 0x201001, 0x0, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) bind$rds(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f00000018c0)={&(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000340)}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015800a00142603600e1208000f0000000406040016c008685c400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1010000007c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bbadd809d50300000000000000e0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0x400000000003, 0x800, 0xffffffffffffffff, 0x400, 0x2, 0x80000000, 0x9, 0xfffffffffffffffd, 0x820000e8}) getpriority(0x1, r3) syz_io_uring_setup(0xe00, &(0x7f00000001c0)={0x0, 0x81a6, 0x10, 0x1, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r6, r7, r8, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 6.939062293s ago: executing program 0 (id=1296): r0 = socket$rds(0x15, 0x5, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) userfaultfd(0x801) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0x400000000003, 0x800, 0xffffffffffffffff, 0x400, 0x2, 0x80000000, 0x9, 0xfffffffffffffffd, 0x820000e8}) getpriority(0x1, r1) syz_io_uring_setup(0xe00, &(0x7f00000001c0)={0x0, 0x81a6, 0x10, 0x1, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000240), &(0x7f0000000000)) 6.6888344s ago: executing program 2 (id=1297): ioctl$OCFS2_IOC_RESVSP64(0xffffffffffffffff, 0x4030582a, &(0x7f00000000c0)={0x1, 0x0, 0x6, 0x6, 0x5, 0x8000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000090000000000002007"], 0x48) socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000000), 0x4) r3 = dup3(r1, r2, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r1], 0x48) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b29, &(0x7f0000000040)={'wlan1\x00'}) r4 = syz_open_dev$swradio(&(0x7f0000000280), 0x0, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x83, @dev={0xfe, 0x80, '\x00', 0x2f}, 0xcd}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r5, 0x4000003, &(0x7f00000000c0)) ioctl$VIDIOC_S_PRIORITY(r4, 0x40045644, 0x2) 5.125479724s ago: executing program 1 (id=1298): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) writev(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000240)=0x5, 0x4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 4.648315095s ago: executing program 0 (id=1299): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000e80)=[{{&(0x7f0000000240)=@generic={0x22, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000300)="7024e50c6baecd9e641c05bf3316d61ab81964664369e5ef549542c852f03490cb111b9cdc01ba85f9c8c9", 0x2b}, {0x0}, {&(0x7f0000000740)="4fdd2c0bf9dbae12bacb968762c74aa9f816", 0x12}, {&(0x7f0000000780)="68ffe0aded08ab28b1e3e0a1bbdf13fd3e2b3b086bd6f03cacb78d4253f73cf36a36b80b8be3", 0x26}, {&(0x7f00000007c0)="ecac9231dffcb2ed86a96f5e3cd5a2e7bfd843900245b3ff346c3aafe49ed7b5ec5d02263965514ac786ff626be5d0e6fa5a53bea1068da2d1f98f38ad40d37c14abc8b98e3d54f36bd86324064acb50a5ba5897d67ed8ff852b90d2ff835234b6ddd3d4c6411f1829d44ca458ef533b571c561d6d9eb6fb09f510867332f21c62f6f0a4a5bcc4e89f885a0c28cf5599a3c293582434f62acbd09822459b181c1447879aa99a3556f738f44234585e1ff739f2f3ac007ac5fc5e2b513446047c", 0xc0}, {&(0x7f0000000880)="b256acac512d449caa2962c3eca22e9ed93a528025c72f28650ce13a3d793cf2d011e9af97a5fb45d3a850b07d80aca65fdc4d980427d4968f33e88dd77a2d221e90585920b2b2325f56ba7ee993ea8630ca86d8c153de6c49b3a73c8d99c8620cbd260a4055b8c14e", 0x69}, {&(0x7f0000000900)="f79dd6da895398579211a368b0bc5939cb24f4602e6242976c918c039facf7a8ad94b8edb60d0a3384e636bf96c7b006f0a285e5c8bbbc8b44ad53c9f4ee0542864a8df88cee2aa762820fc3a0399ab7a62b8bad212e893b93fdc47a0a4f3cb992aa35ea8daf60982143709f674348de4a41c7c564784899e5f080b466a8004446265d229f4f755f254230cd22a0d42adb1eda361a51c105f870b83943a2d401d122736e4f24ae442b89e3495bd36f42e5a536a4d299a94a9c4eb2e2b6b245c6f1735c1dc5398f6877b900796acf60", 0xcf}, {&(0x7f0000000a00)="57d336c8e36b44b7c9bf84da3c520c689bfac03e610e", 0x16}, {&(0x7f0000000a40)="45b04f5d4ddbfbe2c8b33bc46287d30daa03d0166e873691de57bee38f0a2103a5c9fabba2b2d73f92b99d51d783ce190f3fa0f805f1586648576a56adce259d17e63cc3b7945926eaccb3bff7b92d5595fb6b6a97c6c9e515e80e6fbbbfb1e702ad92c6bb2fe34db431f23f756ee981712f860a81b1007f4a4e28bb2c0d8d8cfc274b23b8ce3d73ee79cb035303f9a794a6b20e998405995f9ce251481f108152b4e9fb34fb24fa32e9e06e8e89f98ed42512f41081f874f8a4b908bc0fed813fac7695f164c81217130ce997e4b4e3f0712a2808e6a7398ec90690d4156ce6d42752ca62da39", 0xe7}, {&(0x7f0000000b40)="5f6ee660b0ad43aec32d7fca2a094a803743a967a2e21bf3cadeb88cebd24d516ceab23cf216916f13134aef0a9abb0305bcea29b6fc73b6e40b54e8c32861ef416d7b340666d64e1aaa39235f7d9e6e073655fe5765a943272ed0801f7b85d8b0c4765f8057fc6ea1bbad4b7fe056b4538b814b989a9f49a2a8f7308e2bf2d30e19b011787236959e62bd5806bed708ca49d2871252312d88bfd5a5a661adad91c028bd9a902ca81ff3d04d862b2afc83ff88393ab83d5c56b8fe3b09eb621a586d95f572da", 0xc6}], 0xa}}, {{&(0x7f0000000d00)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null]}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000d80)="279c99b3a0c674a40ada55544b33ba09734aae6d9e06129f75c595214d7d27961188375c9a453cbe9329917dd0e382ed", 0x30}], 0x1, &(0x7f0000000e40)=[@timestamping={{0x14, 0x1, 0x25, 0xffff186c}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x30}}], 0x2, 0x4004044) r1 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5012, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0x0, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0xff, 0x3, 0x1, 0x2, 0x2, {0x9, 0x21, 0xff7f, 0x79, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x5, 0xf9}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xff, 0x7, 0x5}}]}}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000004580), 0x0}, 0x0) splice(r0, &(0x7f0000000500)=0x15, r0, &(0x7f0000000540)=0x2, 0x9, 0x6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r4, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x14, r5}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r3, 0x3ba0, &(0x7f00000000c0)={0x48, 0xa, r5, 0x0, r4}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0xffffff8c) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) setsockopt$inet6_int(r2, 0x29, 0xfc, &(0x7f0000000700)=0x7, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.105309704s ago: executing program 4 (id=1300): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="34010000", @ANYRES16, @ANYBLOB="0100000000003fc14d"], 0x134}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xffbf}], 0x1) 3.730440762s ago: executing program 3 (id=1301): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@my=0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f00000001c0)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x101) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) close(0x3) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) preadv(r4, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0x6000203a}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x15, 0x8, &(0x7f0000000000)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000280), &(0x7f00000002c0)=r6}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x29, 0xf, 0x42, 0x2, 0x34, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x88, 0x7f, 0x4}}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r7, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xd50, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000140)={0x7, 0x100000, 0x6, 0x2, 0x0, 0x4}) 3.682479449s ago: executing program 1 (id=1302): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='minix\x00', 0x0, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000300)={'fscrypt:', @desc4}, 0x0, 0x0, 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x48810) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newtaction={0x6c, 0x30, 0x9, 0x70bd29, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x8000, 0x0, 0x2}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000000)=0xfff, 0x4) 3.279004057s ago: executing program 2 (id=1303): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f00000000c0)={0xc, r4}) ioctl$IOMMU_VFIO_IOAS$CLEAR(r3, 0x3b88, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000180)={0x20, r4, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, 0x0) ioctl$IOMMU_VFIO_GET_API_VERSION(r3, 0x3b64) ioctl$IOMMU_VFIO_SET_IOMMU(r3, 0x3b66, 0x3) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000340)={0x18, r4}) ioctl$IOMMU_DESTROY$ioas(r3, 0x3b80, &(0x7f0000000380)={0x8, r4}) 2.27722256s ago: executing program 2 (id=1304): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000500)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000a00)=ANY=[], 0x0}, 0x94) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) sendto(0xffffffffffffffff, &(0x7f00000000c0)="120000001200e7ef", 0x8, 0x0, 0x0, 0x0) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 2.177804785s ago: executing program 2 (id=1305): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000002c0)="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", 0xfc) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 1.592729926s ago: executing program 3 (id=1306): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 244.530032ms ago: executing program 0 (id=1307): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) socket$inet6(0xa, 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) unshare(0x2c020400) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x48810) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newtaction={0x6c, 0x30, 0x9, 0x70bd29, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x8000, 0x0, 0x2}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000000)=0xfff, 0x4) 221.264432ms ago: executing program 1 (id=1308): setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sync_file_range(r0, 0x6, 0x0, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb1048566efbafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, {}, {}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0xed, 0x0, 0x4, 0x0, 0x1, 0x6}) 178.296446ms ago: executing program 2 (id=1309): symlink(&(0x7f0000000080)='.\x00', 0x0) lsetxattr(&(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000280)='sysfs\x00', 0x6, 0x3) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='gadgetfs\x00', 0x10, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x90004) accept4(r0, &(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, &(0x7f0000000100)=0x80, 0x800) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) 142.932036ms ago: executing program 4 (id=1310): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffb}, 0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0x400076, 0x484100) fsopen(&(0x7f00000000c0)='msdos\x00', 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000040)={0x1, {"40a568bf607c2094e9c6a0c0f550f7f8", "241e6a0b37e28869f574458eb6417d55", "a34d3bcc4817356e5c266b26fe399bde"}, 0x7, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r4, &(0x7f0000000bc0)={&(0x7f0000000100)={0xa, 0x4e20, 0x1, @mcast1, 0x8004}, 0x1c, 0x0}, 0x44890) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000240)={0x3, {"771c2e09a6afc168243d3e8ca34e208f", "45d5c22cb6cd3148b85d5dbf5f9e3413", "a9929074e915d4b883a44cd492a341be"}, 0x1, 0x4}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x80101, 0x8) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20200, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r8, 0x4048aecb, &(0x7f0000002400)={0x3, 0x0, [{0x40000001, 0x4, 0x3, 0x8002, 0x27, 0x7, 0x3}, {0xb, 0x5, 0x1, 0xfffffff7, 0xfffffff9, 0xff, 0x9}, {0x80000007, 0xc28, 0x3, 0xfffffffc, 0x5, 0xae, 0xffff}]}) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, 0x0, 0x44050) recvmsg(r9, 0x0, 0x10020) 0s ago: executing program 3 (id=1311): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) socket$inet6(0xa, 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) unshare(0x2c020400) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x48810) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newtaction={0x6c, 0x30, 0x9, 0x70bd29, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x8000, 0x0, 0x2}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000000)=0xfff, 0x4) kernel console output (not intermixed with test programs): 45.414242][ T24] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 445.438649][ T24] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 445.455052][ T5916] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 445.474214][ T24] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 445.648128][ T5916] usb 1-1: USB disconnect, device number 41 [ 445.655916][ T24] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 445.692375][ T24] usb 2-1: USB disconnect, device number 36 [ 446.091094][ T9276] netlink: 'syz.2.929': attribute type 12 has an invalid length. [ 446.338598][ T9160] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 447.663135][ T9160] usb 5-1: unable to get BOS descriptor or descriptor too short [ 448.053730][ T9160] usb 5-1: too many endpoints for config 1 interface 0 altsetting 13: 255, using maximum allowed: 30 [ 448.138851][ T9160] usb 5-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 448.226102][ T9160] usb 5-1: config 1 interface 0 has no altsetting 0 [ 448.278129][ T9160] usb 5-1: string descriptor 0 read error: -22 [ 448.294641][ T9160] usb 5-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.40 [ 448.315739][ T9160] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.659406][ T9306] netlink: 204 bytes leftover after parsing attributes in process `syz.1.937'. [ 448.672508][ T9160] usbhid 5-1:1.0: can't add hid device: -71 [ 448.697836][ T9160] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 448.729746][ T9160] usb 5-1: USB disconnect, device number 29 [ 448.951696][ T9315] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 449.298822][ T5880] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 449.307750][ T9314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.940'. [ 450.649897][ T5880] usb 4-1: Using ep0 maxpacket: 16 [ 450.856023][ T9319] netlink: 'syz.2.942': attribute type 12 has an invalid length. [ 450.857250][ T5880] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.458676][ T5880] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 451.496098][ T5880] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 451.563740][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.596369][ T5880] usb 4-1: config 0 descriptor?? [ 451.619459][ T5880] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 451.742573][ T46] usb 4-1: USB disconnect, device number 31 [ 451.772217][ T24] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 452.009291][ T5821] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 452.463760][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 452.475960][ T24] usb 3-1: too many endpoints for config 1 interface 0 altsetting 13: 255, using maximum allowed: 30 [ 452.487231][ T24] usb 3-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 452.506651][ T24] usb 3-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 452.541302][ T24] usb 3-1: config 1 interface 0 has no altsetting 0 [ 452.565094][ T24] usb 3-1: string descriptor 0 read error: -22 [ 452.572615][ T24] usb 3-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.40 [ 452.591261][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.279777][ T9345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.288655][ T9345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.351645][ T9326] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 453.405797][ T9326] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 453.493833][ T24] usbhid 3-1:1.0: can't add hid device: -71 [ 453.506306][ T24] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 453.528628][ T24] usb 3-1: USB disconnect, device number 29 [ 454.546742][ T9365] netlink: 'syz.3.953': attribute type 12 has an invalid length. [ 454.841290][ T5821] usb 1-1: unable to get BOS descriptor or descriptor too short [ 454.861280][ T5821] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 454.911699][ T5821] usb 1-1: can't read configurations, error -71 [ 456.039469][ T9378] delete_channel: no stack [ 456.793803][ T9383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.956'. [ 457.102396][ T9377] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 457.140423][ T9377] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 457.190218][ T9377] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 457.278656][ T24] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 457.441593][ T24] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 457.453282][ T9392] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 457.466185][ T24] usb 5-1: New USB device strings: Mfr=0, Product=229, SerialNumber=0 [ 457.491618][ T24] usb 5-1: Product: syz [ 457.499976][ T5916] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 457.511834][ T9392] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 457.514618][ T24] usb 5-1: config 0 descriptor?? [ 457.543729][ T24] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 457.612383][ T24] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 457.680492][ T5916] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 457.707956][ T5916] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 457.739686][ T5916] usb 2-1: config 0 interface 0 has no altsetting 0 [ 457.776112][ T5916] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 457.803930][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 457.829184][ T29] audit: type=1400 audit(1776277605.933:339): avc: denied { create } for pid=9380 comm="syz.4.957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 457.831899][ T5916] usb 2-1: Product: syz [ 457.905038][ T5916] usb 2-1: Manufacturer: syz [ 457.912818][ T29] audit: type=1326 audit(1776277605.983:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9380 comm="syz.4.957" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8cd839c819 code=0x0 [ 458.041505][ T5916] usb 2-1: SerialNumber: syz [ 458.083972][ T5916] usb 2-1: config 0 descriptor?? [ 459.228737][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 460.075675][ T5916] usb 2-1: selecting invalid altsetting 0 [ 460.360264][ T9160] usb 5-1: USB disconnect, device number 30 [ 460.385337][ T9160] ftdi_sio 5-1:0.0: device disconnected [ 460.673024][ T5916] usb 2-1: USB disconnect, device number 37 [ 460.859029][ T9160] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 461.203886][ T9414] ceph: Path missing in source [ 461.488602][ T9160] usb 5-1: Using ep0 maxpacket: 8 [ 461.511424][ T9160] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 461.535663][ T9160] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.564240][ T9160] pvrusb2: Hardware description: Terratec Grabster AV400 [ 461.585725][ T9160] pvrusb2: ********** [ 461.598287][ T9160] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 461.665244][ T9160] pvrusb2: Important functionality might not be entirely working. [ 461.670991][ T5916] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 461.816831][ T9160] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 461.828263][ T9160] pvrusb2: ********** [ 461.834917][ T2336] pvrusb2: Invalid write control endpoint [ 462.151956][ T24] usb 5-1: USB disconnect, device number 31 [ 462.497373][ T2336] pvrusb2: Invalid write control endpoint [ 462.526120][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 462.536596][ T9421] netlink: 'syz.3.966': attribute type 12 has an invalid length. [ 462.720220][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 462.745491][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 462.784227][ T2336] pvrusb2: Device being rendered inoperable [ 462.805243][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 463.669748][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 463.778821][ T2336] pvrusb2: Attached sub-driver cx25840 [ 463.830776][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 463.916097][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 464.264371][ T9437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.969'. [ 464.948626][ T5924] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 464.973703][ T9446] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 465.142893][ T5924] usb 4-1: unable to get BOS descriptor or descriptor too short [ 465.163561][ T5924] usb 4-1: too many endpoints for config 1 interface 0 altsetting 13: 255, using maximum allowed: 30 [ 466.145616][ T5924] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 466.157070][ T5924] usb 4-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 466.188415][ T5924] usb 4-1: config 1 interface 0 has no altsetting 0 [ 466.322893][ T5924] usb 4-1: string descriptor 0 read error: -22 [ 466.337803][ T5924] usb 4-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.40 [ 466.346966][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.506024][ T9456] ALSA: mixer_oss: invalid OSS volume ':' [ 466.528031][ T9456] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 466.578680][ T9456] ALSA: mixer_oss: invalid OSS volume '5' [ 466.675536][ T9456] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 466.702583][ T9456] ALSA: mixer_oss: invalid OSS volume '6' [ 467.148767][ T9456] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 467.185062][ T9456] ALSA: mixer_oss: invalid OSS volume '7' [ 467.212104][ T9456] ALSA: mixer_oss: invalid OSS volume 'Iq zy?}' [ 467.222060][ T5924] input: HID 0458:5012 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:0458:5012.0013/input/input45 [ 467.240014][ T9456] ALSA: mixer_oss: invalid OSS volume 'P#dܟQ{i0Rڬk m5' [ 467.248759][ T790] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 467.287337][ T9456] ALSA: mixer_oss: invalid OSS volume '2}f7ج:L' [ 467.306839][ T9456] ALSA: mixer_oss: invalid OSS volume '^@䇵_u@)PY 00V' [ 467.362255][ T9441] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 467.440988][ T790] usb 2-1: Using ep0 maxpacket: 16 [ 467.462056][ T5924] input: HID 0458:5012 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:0458:5012.0013/input/input46 [ 467.467025][ T9465] fuse: Unknown parameter 'fd00000000000000000003' [ 467.494151][ T790] usb 2-1: config 1 has an invalid interface number: 228 but max is 0 [ 467.530400][ T790] usb 2-1: config 1 has no interface number 0 [ 467.550321][ T29] audit: type=1400 audit(1776277615.653:341): avc: denied { watch_mount watch_reads } for pid=9464 comm="syz.4.978" path="/192/file0" dev="tmpfs" ino=1092 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 467.575953][ T790] usb 2-1: config 1 interface 228 has no altsetting 0 [ 467.591937][ T790] usb 2-1: New USB device found, idVendor=0a5c, idProduct=396e, bcdDevice=21.b9 [ 467.618587][ T790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.640907][ T5924] kye 0003:0458:5012.0013: input,hiddev0,hidraw0: USB HID vff.7f Device [HID 0458:5012] on usb-dummy_hcd.3-1/input0 [ 467.658568][ T790] usb 2-1: Product: syz [ 467.670102][ T790] usb 2-1: Manufacturer: syz [ 467.676438][ T790] usb 2-1: SerialNumber: syz [ 467.719581][ T5924] usb 4-1: USB disconnect, device number 32 [ 468.058370][ T9466] fido_id[9466]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 468.072659][ T9461] netlink: 20 bytes leftover after parsing attributes in process `syz.1.976'. [ 469.318124][ T9160] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 469.544924][ T790] usb 2-1: USB disconnect, device number 39 [ 469.552434][ T9160] usb 5-1: Using ep0 maxpacket: 16 [ 469.576779][ T9160] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 469.598508][ T9160] usb 5-1: config 1 has no interface number 1 [ 469.612875][ T9160] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 469.646085][ T9160] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 469.678026][ T9160] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 469.719744][ T9160] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 469.730159][ T9160] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.916345][ T9160] usb 5-1: Product: syz [ 470.922073][ T9160] usb 5-1: Manufacturer: syz [ 470.927788][ T9160] usb 5-1: SerialNumber: syz [ 470.977290][ T9160] usb 5-1: can't set config #1, error -71 [ 471.016163][ T9160] usb 5-1: USB disconnect, device number 32 [ 471.088679][ T790] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 471.758351][ T790] usb 2-1: unable to get BOS descriptor or descriptor too short [ 471.993099][ T790] usb 2-1: too many endpoints for config 1 interface 0 altsetting 13: 255, using maximum allowed: 30 [ 472.010138][ T790] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 472.021740][ T790] usb 2-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 472.069305][ T790] usb 2-1: config 1 interface 0 has no altsetting 0 [ 472.196627][ T790] usb 2-1: string descriptor 0 read error: -22 [ 472.244517][ T790] usb 2-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.40 [ 472.331510][ T790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.092884][ T790] usbhid 2-1:1.0: can't add hid device: -71 [ 473.113975][ T790] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 473.166607][ T790] usb 2-1: USB disconnect, device number 40 [ 473.291862][ T9511] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 473.357625][ T9513] ALSA: mixer_oss: invalid OSS volume ':' [ 473.368615][ T9513] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 473.380199][ T9513] ALSA: mixer_oss: invalid OSS volume '5' [ 473.388859][ T9511] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 473.406683][ T9513] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 473.418954][ T5859] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 473.430448][ T9513] ALSA: mixer_oss: invalid OSS volume '6' [ 473.439315][ T9510] delete_channel: no stack [ 473.451501][ T9511] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 473.462972][ T9513] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 473.501948][ T9513] ALSA: mixer_oss: invalid OSS volume '7' [ 473.532078][ T9513] ALSA: mixer_oss: invalid OSS volume 'Iq zy?}' [ 473.558563][ T9513] ALSA: mixer_oss: invalid OSS volume 'P#dܟQ{i0Rڬk m5' [ 473.578543][ T9513] ALSA: mixer_oss: invalid OSS volume '2}f7ج:L' [ 473.589971][ T9513] ALSA: mixer_oss: invalid OSS volume '^@䇵_u@)PY 00V' [ 473.606043][ T5859] usb 1-1: unable to get BOS descriptor or descriptor too short [ 473.616953][ T5859] usb 1-1: too many endpoints for config 1 interface 0 altsetting 13: 255, using maximum allowed: 30 [ 473.636260][ T5859] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 473.658615][ T790] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 473.666898][ T5859] usb 1-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 473.686502][ T5859] usb 1-1: config 1 interface 0 has no altsetting 0 [ 473.703458][ T5859] usb 1-1: string descriptor 0 read error: -22 [ 473.711187][ T5859] usb 1-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.40 [ 473.729970][ T5859] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.809162][ T790] usb 2-1: Using ep0 maxpacket: 16 [ 473.906763][ T790] usb 2-1: config 1 has an invalid interface number: 228 but max is 0 [ 474.007908][ T790] usb 2-1: config 1 has no interface number 0 [ 474.096323][ T790] usb 2-1: config 1 interface 228 has no altsetting 0 [ 474.120424][ T790] usb 2-1: New USB device found, idVendor=0a5c, idProduct=396e, bcdDevice=21.b9 [ 474.137733][ T790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.146579][ T790] usb 2-1: Product: syz [ 474.151493][ T9160] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 474.167305][ T790] usb 2-1: Manufacturer: syz [ 474.174138][ T790] usb 2-1: SerialNumber: syz [ 474.258111][ T5859] input: HID 0458:5012 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:0458:5012.0014/input/input47 [ 474.259979][ T9519] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:85:08:00 [ 474.334994][ T9160] usb 5-1: Using ep0 maxpacket: 16 [ 474.352139][ T9160] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 474.357917][ T5859] input: HID 0458:5012 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:0458:5012.0014/input/input48 [ 474.362565][ T9160] usb 5-1: config 1 has no interface number 1 [ 474.404727][ T9508] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 474.417876][ T9160] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 474.438924][ T9160] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 474.439625][ T5859] kye 0003:0458:5012.0014: input,hiddev0,hidraw0: USB HID vff.7f Device [HID 0458:5012] on usb-dummy_hcd.0-1/input0 [ 474.456968][ T9514] netlink: 20 bytes leftover after parsing attributes in process `syz.1.992'. [ 474.491430][ T5859] usb 1-1: USB disconnect, device number 44 [ 474.507947][ T9160] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 474.546094][ T9160] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 474.558558][ T9160] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.592835][ T9160] usb 5-1: Product: syz [ 474.610027][ T9160] usb 5-1: Manufacturer: syz [ 474.628716][ T9160] usb 5-1: SerialNumber: syz [ 474.642051][ T9523] fido_id[9523]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 474.930385][ T9160] usb 5-1: failed to enable PITCH for EP 0x82 [ 474.937967][ T9160] usb 5-1: 2:1: cannot set freq 11994917 to ep 0x82 [ 474.959319][ T24] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 475.006775][ T9160] usb 5-1: USB disconnect, device number 33 [ 475.053108][ T8161] udevd[8161]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 475.130603][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 475.155218][ T24] usb 3-1: too many endpoints for config 1 interface 0 altsetting 13: 255, using maximum allowed: 30 [ 475.186114][ T24] usb 3-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 475.206911][ T24] usb 3-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 475.220763][ T24] usb 3-1: config 1 interface 0 has no altsetting 0 [ 475.232959][ T24] usb 3-1: string descriptor 0 read error: -22 [ 475.244708][ T24] usb 3-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.40 [ 475.358294][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.514699][ T9531] overlayfs: failed to resolve './file1': -2 [ 476.432093][ T790] usb 2-1: USB disconnect, device number 41 [ 477.014923][ T9527] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 477.539439][ T24] input: HID 0458:5012 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:0458:5012.0015/input/input49 [ 477.904182][ T9527] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 477.962118][ T24] input: HID 0458:5012 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:0458:5012.0015/input/input50 [ 478.116864][ T24] kye 0003:0458:5012.0015: input,hiddev0,hidraw0: USB HID vff.7f Device [HID 0458:5012] on usb-dummy_hcd.2-1/input0 [ 478.153144][ T24] usb 3-1: USB disconnect, device number 30 [ 478.215647][ T5924] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 478.278569][ T9160] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 478.315576][ T9548] fido_id[9548]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 478.398656][ T5924] usb 2-1: Using ep0 maxpacket: 16 [ 478.410846][ T5924] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 478.428515][ T5924] usb 2-1: config 1 has no interface number 1 [ 478.438553][ T5924] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 478.458679][ T5924] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 478.482815][ T9160] usb 5-1: unable to get BOS descriptor or descriptor too short [ 478.490571][ T5924] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 478.509599][ T9160] usb 5-1: too many endpoints for config 1 interface 0 altsetting 13: 255, using maximum allowed: 30 [ 478.529386][ T9160] usb 5-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 478.546983][ T9160] usb 5-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 478.565886][ T5924] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 478.585829][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.595832][ T9160] usb 5-1: config 1 interface 0 has no altsetting 0 [ 478.609129][ T5924] usb 2-1: Product: syz [ 478.618382][ T5924] usb 2-1: Manufacturer: syz [ 478.624114][ T9160] usb 5-1: string descriptor 0 read error: -22 [ 478.636414][ T9160] usb 5-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.40 [ 478.646164][ T5924] usb 2-1: SerialNumber: syz [ 478.652730][ T9160] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.671490][ T29] audit: type=1400 audit(1776277626.783:342): avc: denied { create } for pid=9555 comm="syz.2.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 479.164629][ T5924] usb 2-1: failed to enable PITCH for EP 0x82 [ 479.172761][ T5924] usb 2-1: 2:1: cannot set freq 11994917 to ep 0x82 [ 479.293203][ T5924] usb 2-1: USB disconnect, device number 42 [ 479.655993][ T9543] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 479.657746][ T8161] udevd[8161]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 479.711116][ T9160] usbhid 5-1:1.0: can't add hid device: -71 [ 479.723016][ T9160] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 479.750997][ T9160] usb 5-1: USB disconnect, device number 34 [ 479.939233][ T24] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 479.958548][ T5859] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 480.262954][ T9570] ceph: Path missing in source [ 480.508529][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 480.516133][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 480.526346][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 480.541855][ T24] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 480.569102][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.585672][ T24] usb 1-1: config 0 descriptor?? [ 480.605885][ T24] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 480.638606][ T9160] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 480.669062][ T5859] usb 3-1: Using ep0 maxpacket: 16 [ 480.983015][ T5859] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 480.998918][ T29] audit: type=1400 audit(1776277629.113:343): avc: denied { read } for pid=9574 comm="syz.1.1009" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 481.003863][ T5859] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 481.024162][ T29] audit: type=1400 audit(1776277629.113:344): avc: denied { open } for pid=9574 comm="syz.1.1009" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 481.036327][ T5859] usb 3-1: Product: syz [ 481.064172][ T5859] usb 3-1: Manufacturer: syz [ 481.069864][ T5859] usb 3-1: SerialNumber: syz [ 481.079755][ T5859] usb 3-1: config 0 descriptor?? [ 481.105075][ T29] audit: type=1400 audit(1776277629.153:345): avc: denied { ioctl } for pid=9574 comm="syz.1.1009" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 481.152410][ T5924] usb 1-1: USB disconnect, device number 45 [ 481.378961][ T5859] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 481.387421][ T5859] peak_usb 3-1:0.0: unable to read PCAN-Chip USB firmware info (err -71) [ 483.099018][ T5859] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 483.148377][ T5859] usb 3-1: USB disconnect, device number 31 [ 484.097012][ T9604] overlayfs: failed to resolve './file1': -2 [ 485.340067][ T9603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1012'. [ 488.468552][ T5924] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 488.652048][ T5924] usb 2-1: unable to get BOS descriptor or descriptor too short [ 488.688561][ T5859] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 488.707725][ T5924] usb 2-1: too many endpoints for config 1 interface 0 altsetting 13: 255, using maximum allowed: 30 [ 488.780392][ T5924] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 488.823356][ T5924] usb 2-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 488.863857][ T9641] input: syz0 as /devices/virtual/input/input51 [ 488.883591][ T5924] usb 2-1: config 1 interface 0 has no altsetting 0 [ 488.925837][ T5859] usb 3-1: config 0 has an invalid interface number: 170 but max is 0 [ 488.930376][ T5924] usb 2-1: string descriptor 0 read error: -22 [ 488.974290][ T5859] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.023260][ T5859] usb 3-1: config 0 has no interface number 0 [ 489.038636][ T5859] usb 3-1: config 0 interface 170 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 489.158237][ T5859] usb 3-1: config 0 interface 170 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 489.287266][ T5859] usb 3-1: New USB device found, idVendor=07b0, idProduct=0007, bcdDevice=17.c6 [ 489.287403][ T5924] usb 2-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.40 [ 489.338792][ T5859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.339719][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.354202][ T5859] usb 3-1: config 0 descriptor?? [ 489.369699][ T5859] HFC-S_USB 3-1:0.170: probe with driver HFC-S_USB failed with error -5 [ 490.208564][ T5880] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 490.438554][ T5880] usb 4-1: Using ep0 maxpacket: 16 [ 490.580689][ T9654] ceph: Path missing in source [ 490.688228][ T5880] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 490.698447][ T5880] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 490.708406][ T5880] usb 4-1: Product: syz [ 490.712889][ T5880] usb 4-1: Manufacturer: syz [ 490.717568][ T5880] usb 4-1: SerialNumber: syz [ 490.732859][ T5880] usb 4-1: config 0 descriptor?? [ 490.818606][ T790] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 491.054663][ T5880] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 491.077356][ T5880] peak_usb 4-1:0.0: unable to read PCAN-Chip USB firmware info (err -71) [ 491.106218][ T9637] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 491.185674][ T9658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1029'. [ 491.424391][ T9637] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 491.428974][ T5880] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 491.469349][ T5924] usbhid 2-1:1.0: can't add hid device: -71 [ 491.489111][ T5880] usb 4-1: USB disconnect, device number 34 [ 491.512738][ T5924] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 491.602728][ T5924] usb 2-1: USB disconnect, device number 43 [ 491.783380][ T5880] usb 3-1: USB disconnect, device number 32 [ 491.885152][ T9663] 9pnet_virtio: no channels available for device syz [ 491.901444][ T9663] overlayfs: missing 'lowerdir' [ 493.958640][ T5924] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 494.752341][ T5924] usb 3-1: unable to get BOS descriptor or descriptor too short [ 494.761143][ T5924] usb 3-1: too many endpoints for config 1 interface 0 altsetting 13: 255, using maximum allowed: 30 [ 494.772806][ T5924] usb 3-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 494.794466][ T5924] usb 3-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 494.818882][ T9686] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1037'. [ 494.883910][ T5924] usb 3-1: config 1 interface 0 has no altsetting 0 [ 494.912161][ T5924] usb 3-1: string descriptor 0 read error: -22 [ 494.925512][ T5924] usb 3-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.40 [ 495.092081][ T9160] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 495.140262][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.785286][ T9697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1040'. [ 495.881056][ T9160] usb 5-1: unable to get BOS descriptor or descriptor too short [ 496.128320][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 496.135530][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.151397][ T9160] usb 5-1: too many endpoints for config 1 interface 0 altsetting 13: 255, using maximum allowed: 30 [ 496.163212][ T9160] usb 5-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 496.177203][ T9160] usb 5-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 496.190517][ T9160] usb 5-1: config 1 interface 0 has no altsetting 0 [ 496.200203][ T9160] usb 5-1: string descriptor 0 read error: -22 [ 496.208058][ T9160] usb 5-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.40 [ 496.220892][ T9160] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.458933][ T5859] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 496.906571][ T9667] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 496.920033][ T9667] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 496.936644][ T5924] usbhid 3-1:1.0: can't add hid device: -71 [ 496.945869][ T5924] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 496.958443][ T5924] usb 3-1: USB disconnect, device number 33 [ 497.049159][ T5859] usb 4-1: Using ep0 maxpacket: 16 [ 497.059915][ T5859] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 497.069020][ T5859] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 497.077185][ T5859] usb 4-1: Product: syz [ 497.081402][ T5859] usb 4-1: Manufacturer: syz [ 497.086159][ T5859] usb 4-1: SerialNumber: syz [ 497.093745][ T5859] usb 4-1: config 0 descriptor?? [ 497.138609][ T790] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 497.588214][ T9711] ceph: Path missing in source [ 497.734416][ T790] usb 2-1: Using ep0 maxpacket: 32 [ 497.752237][ T790] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 497.765751][ T790] usb 2-1: can't read configurations, error -61 [ 497.776012][ T9684] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 497.787332][ T5859] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 497.797502][ T5859] peak_usb 4-1:0.0: unable to read PCAN-Chip USB firmware info (err -71) [ 497.821939][ T9684] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 497.845097][ T9160] usbhid 5-1:1.0: can't add hid device: -71 [ 497.856390][ T9160] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 497.865454][ T5859] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 497.868170][ T9160] usb 5-1: USB disconnect, device number 35 [ 497.891632][ T5859] usb 4-1: USB disconnect, device number 35 [ 497.908674][ T790] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 497.998575][ T24] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 498.078638][ T790] usb 2-1: Using ep0 maxpacket: 32 [ 498.090564][ T790] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 498.098357][ T790] usb 2-1: can't read configurations, error -61 [ 498.105215][ T790] usb usb2-port1: attempt power cycle [ 498.218562][ T5880] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 498.606393][ T790] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 498.903765][ T9719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.913676][ T9719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.110918][ T790] usb 2-1: Using ep0 maxpacket: 32 [ 499.127571][ T790] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 499.137831][ T790] usb 2-1: can't read configurations, error -61 [ 499.159117][ T9722] trusted_key: syz.4.1047 sent an empty control message without MSG_MORE. [ 499.278587][ T790] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 499.310675][ T790] usb 2-1: Using ep0 maxpacket: 32 [ 499.318722][ T790] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 499.326543][ T790] usb 2-1: can't read configurations, error -61 [ 499.336665][ T790] usb usb2-port1: unable to enumerate USB device [ 499.939736][ T9160] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 500.806949][ T9160] usb 5-1: Using ep0 maxpacket: 16 [ 500.858934][ T9160] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 501.084013][ T9160] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 501.097255][ T9160] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 501.106398][ T9160] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.115400][ T5880] usb 3-1: unable to get BOS descriptor or descriptor too short [ 501.124754][ T5880] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 501.140905][ T9160] usb 5-1: config 0 descriptor?? [ 501.202366][ T9160] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 501.588838][ T5859] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 501.722700][ T5880] usb 3-1: can't read configurations, error -71 [ 501.748716][ T24] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 501.770666][ T5859] usb 4-1: unable to get BOS descriptor or descriptor too short [ 501.820029][ T5859] usb 4-1: too many endpoints for config 1 interface 0 altsetting 13: 255, using maximum allowed: 30 [ 501.838925][ T1940] usb 5-1: USB disconnect, device number 36 [ 501.853835][ T5859] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 501.881808][ T5859] usb 4-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 501.898050][ T5859] usb 4-1: config 1 interface 0 has no altsetting 0 [ 501.911515][ T5859] usb 4-1: string descriptor 0 read error: -22 [ 501.917981][ T5859] usb 4-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.40 [ 501.930419][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.939523][ T9741] kAFS: No cell specified [ 502.051108][ T29] audit: type=1400 audit(1776277650.043:346): avc: denied { setopt } for pid=9740 comm="syz.1.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 502.071218][ T5880] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 502.080958][ T24] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 502.092567][ T24] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 502.154559][ T9743] hugetlbfs: syz.1.1053 (9743): Using mlock ulimits for SHM_HUGETLB is obsolete [ 502.539149][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 502.572809][ T24] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 502.582096][ T24] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 502.590407][ T24] usb 1-1: Product: syz [ 502.594604][ T24] usb 1-1: Manufacturer: syz [ 502.603623][ T24] usb 1-1: SerialNumber: syz [ 502.779095][ T24] usb 1-1: config 0 descriptor?? [ 503.151789][ T9746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.162380][ T9746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.387584][ T24] usb 1-1: selecting invalid altsetting 0 [ 503.421905][ T9748] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 503.636086][ T5859] input: HID 0458:5012 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:0458:5012.0016/input/input52 [ 503.703139][ T24] usb 1-1: USB disconnect, device number 48 [ 503.773515][ T5859] input: HID 0458:5012 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:0458:5012.0016/input/input53 [ 503.848586][ T5924] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 503.861284][ T5859] kye 0003:0458:5012.0016: input,hiddev0,hidraw0: USB HID vff.7f Device [HID 0458:5012] on usb-dummy_hcd.3-1/input0 [ 503.915030][ T5859] usb 4-1: USB disconnect, device number 36 [ 503.983833][ T9758] fido_id[9758]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 504.020793][ T5924] usb 2-1: unable to get BOS descriptor or descriptor too short [ 504.032142][ T5924] usb 2-1: too many endpoints for config 1 interface 0 altsetting 13: 255, using maximum allowed: 30 [ 504.047260][ T5924] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 504.060594][ T5924] usb 2-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 504.079903][ T5924] usb 2-1: config 1 interface 0 has no altsetting 0 [ 504.092028][ T5924] usb 2-1: string descriptor 0 read error: -22 [ 504.099143][ T5924] usb 2-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.40 [ 504.122181][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.398557][ T5880] usb 3-1: unable to get BOS descriptor or descriptor too short [ 504.424954][ T5880] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 504.449612][ T5880] usb 3-1: can't read configurations, error -71 [ 504.472824][ T5880] usb usb3-port1: attempt power cycle [ 504.508685][ T9160] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 504.601629][ T5924] input: HID 0458:5012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:0458:5012.0017/input/input54 [ 504.663281][ T9160] usb 4-1: unable to get BOS descriptor or descriptor too short [ 504.693107][ T5924] input: HID 0458:5012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:0458:5012.0017/input/input55 [ 504.704810][ T9160] usb 4-1: too many endpoints for config 1 interface 0 altsetting 13: 255, using maximum allowed: 30 [ 504.725079][ T9] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 504.736092][ T9160] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 504.797231][ T9768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1060'. [ 504.803692][ T9752] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 504.812555][ T9160] usb 4-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 504.882824][ T5880] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 504.938653][ T5924] kye 0003:0458:5012.0017: input,hiddev0,hidraw0: USB HID vff.7f Device [HID 0458:5012] on usb-dummy_hcd.1-1/input0 [ 504.955434][ T9160] usb 4-1: config 1 interface 0 has no altsetting 0 [ 505.008918][ T5880] usb 3-1: Using ep0 maxpacket: 32 [ 505.077685][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 505.134912][ T5880] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 505.145608][ T5924] usb 2-1: USB disconnect, device number 48 [ 505.155101][ T5880] usb 3-1: can't read configurations, error -61 [ 505.161567][ T9] usb 5-1: too many endpoints for config 1 interface 0 altsetting 13: 255, using maximum allowed: 30 [ 505.178196][ T9160] usb 4-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.40 [ 505.194209][ T9160] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.207927][ T9] usb 5-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 505.222154][ T9769] fido_id[9769]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 505.229376][ T9160] usb 4-1: Product: syz [ 505.252405][ T9] usb 5-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 505.272579][ T9160] usb 4-1: Manufacturer: syz [ 505.277300][ T9160] usb 4-1: SerialNumber: syz [ 505.282757][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 505.295792][ T9] usb 5-1: string descriptor 0 read error: -22 [ 505.303030][ T9] usb 5-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.40 [ 505.312465][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.328675][ T5880] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 505.359638][ T5880] usb 3-1: Using ep0 maxpacket: 32 [ 505.366847][ T5880] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 505.375482][ T5880] usb 3-1: can't read configurations, error -61 [ 505.383213][ T5880] usb usb3-port1: unable to enumerate USB device [ 505.775169][ T9775] ceph: Path missing in source [ 505.848635][ T5924] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 505.858228][ T9760] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 505.891387][ T9760] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 506.456818][ T9160] usbhid 4-1:1.0: can't add hid device: -71 [ 506.463681][ T9160] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 506.774199][ T9160] usb 4-1: USB disconnect, device number 37 [ 506.790071][ T9762] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 506.826297][ T9762] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 506.847179][ T9] usbhid 5-1:1.0: can't add hid device: -71 [ 506.854403][ T9] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 506.879350][ T9] usb 5-1: USB disconnect, device number 37 [ 508.368846][ T24] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 508.640550][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 508.673907][ T24] usb 5-1: too many endpoints for config 1 interface 0 altsetting 13: 255, using maximum allowed: 30 [ 509.155239][ T24] usb 5-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 509.198893][ T24] usb 5-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 509.231659][ T24] usb 5-1: config 1 interface 0 has no altsetting 0 [ 509.252700][ T24] usb 5-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.40 [ 509.275773][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.295056][ T24] usb 5-1: Product: syz [ 509.308107][ T24] usb 5-1: Manufacturer: syz [ 509.321116][ T24] usb 5-1: SerialNumber: syz [ 509.696925][ T9795] lo speed is unknown, defaulting to 1000 [ 509.710286][ T9795] lo speed is unknown, defaulting to 1000 [ 509.743922][ T9795] lo speed is unknown, defaulting to 1000 [ 509.885963][ T9789] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 509.911878][ T9795] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 509.931799][ T9160] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 509.933947][ T9789] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 510.000374][ T24] usbhid 5-1:1.0: can't add hid device: -71 [ 510.009053][ T24] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 510.019292][ T9795] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 510.059991][ T24] usb 5-1: USB disconnect, device number 38 [ 510.158237][ T9795] lo speed is unknown, defaulting to 1000 [ 510.158598][ T9160] usb 3-1: Using ep0 maxpacket: 16 [ 510.167631][ T9795] lo speed is unknown, defaulting to 1000 [ 510.180515][ T9795] lo speed is unknown, defaulting to 1000 [ 510.225861][ T9795] lo speed is unknown, defaulting to 1000 [ 510.241691][ T9160] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 510.261670][ T9795] lo speed is unknown, defaulting to 1000 [ 510.263617][ T9160] usb 3-1: config 1 has no interface number 1 [ 510.273716][ T5924] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 510.301160][ T9160] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 510.325963][ T9160] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 510.368699][ T9160] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 510.390559][ T9160] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 510.418585][ T9160] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.428895][ T9160] usb 3-1: Product: syz [ 510.436406][ T9160] usb 3-1: Manufacturer: syz [ 510.441578][ T5924] usb 1-1: Using ep0 maxpacket: 16 [ 510.449976][ T5924] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 510.460599][ T9160] usb 3-1: SerialNumber: syz [ 510.481409][ T5924] usb 1-1: config 1 has no interface number 1 [ 510.498559][ T5924] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 510.518569][ T5924] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 510.550996][ T5924] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 510.590140][ T5924] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 510.617268][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.643060][ T5924] usb 1-1: Product: syz [ 510.660314][ T5924] usb 1-1: Manufacturer: syz [ 510.695877][ T5924] usb 1-1: SerialNumber: syz [ 510.873300][ T9160] usb 3-1: failed to enable PITCH for EP 0x82 [ 511.313133][ T9160] usb 3-1: 2:1: cannot set freq 11994917 to ep 0x82 [ 511.477169][ T5924] usb 1-1: failed to enable PITCH for EP 0x82 [ 511.485210][ T9160] usb 3-1: USB disconnect, device number 38 [ 511.655637][ T24] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 511.982820][ T5924] usb 1-1: 2:1: cannot set freq 11994917 to ep 0x82 [ 512.171701][ T5924] usb 1-1: USB disconnect, device number 50 [ 512.236600][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 512.272050][ T24] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 512.316379][ T24] usb 2-1: config 1 has no interface number 1 [ 512.335203][ T24] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 512.366152][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 512.397207][ T24] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 512.478295][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 512.558406][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.621981][ T24] usb 2-1: Product: syz [ 512.661444][ T24] usb 2-1: Manufacturer: syz [ 512.701703][ T24] usb 2-1: SerialNumber: syz [ 513.163163][ T24] usb 2-1: failed to enable PITCH for EP 0x82 [ 513.277564][ T24] usb 2-1: 2:1: cannot set freq 11994917 to ep 0x82 [ 513.618224][ T9834] siw: device registration error -23 [ 513.921625][ T24] usb 2-1: USB disconnect, device number 49 [ 514.056745][ T9848] input: syz0 as /devices/virtual/input/input56 [ 514.698564][ T24] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 515.114038][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 515.351150][ T24] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 515.392478][ T24] usb 2-1: config 1 has no interface number 1 [ 515.418970][ T24] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 515.466429][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 515.597131][ T24] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 515.638906][ T5924] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 515.689286][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 515.738540][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.768568][ T24] usb 2-1: Product: syz [ 515.798862][ T24] usb 2-1: Manufacturer: syz [ 515.803517][ T24] usb 2-1: SerialNumber: syz [ 515.856377][ T5924] usb 5-1: config 0 has an invalid interface number: 170 but max is 0 [ 515.937139][ T9865] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 515.946329][ T9865] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 515.960543][ T9865] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 515.987030][ T5924] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.009529][ T5924] usb 5-1: config 0 has no interface number 0 [ 516.029425][ T9867] delete_channel: no stack [ 516.056484][ T5924] usb 5-1: config 0 interface 170 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 517.203009][ T5924] usb 5-1: config 0 interface 170 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 517.547538][ T5924] usb 5-1: New USB device found, idVendor=07b0, idProduct=0007, bcdDevice=17.c6 [ 517.597363][ T24] usb 2-1: failed to enable PITCH for EP 0x82 [ 517.613822][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.615694][ T24] usb 2-1: 2:1: cannot set freq 11994917 to ep 0x82 [ 517.680206][ T5924] usb 5-1: config 0 descriptor?? [ 517.791138][ T24] usb 2-1: USB disconnect, device number 50 [ 517.818672][ T9160] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 517.928611][ T5916] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 517.999978][ T9160] usb 3-1: Using ep0 maxpacket: 16 [ 518.023595][ T9160] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 518.056345][ T9160] usb 3-1: config 1 has no interface number 1 [ 518.078256][ T9160] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 518.110110][ T5916] usb 4-1: unable to get BOS descriptor or descriptor too short [ 518.130792][ T9160] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 518.156394][ T5916] usb 4-1: too many endpoints for config 1 interface 0 altsetting 13: 255, using maximum allowed: 30 [ 518.173605][ T9160] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 518.203371][ T9160] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 518.225213][ T5916] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 518.251896][ T9160] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.280001][ T9160] usb 3-1: Product: syz [ 518.297055][ T9160] usb 3-1: Manufacturer: syz [ 518.303464][ T9160] usb 3-1: SerialNumber: syz [ 518.321820][ T5916] usb 4-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 518.373877][ T5916] usb 4-1: config 1 interface 0 has no altsetting 0 [ 518.397703][ T5916] usb 4-1: string descriptor 0 read error: -22 [ 518.412123][ T5916] usb 4-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.40 [ 518.436322][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.557502][ T5924] usb 5-1: can't set config #0, error -71 [ 518.708742][ T5924] usb 5-1: USB disconnect, device number 39 [ 519.197622][ T9160] usb 3-1: failed to enable PITCH for EP 0x82 [ 519.217730][ T9160] usb 3-1: 2:1: cannot set freq 11994917 to ep 0x82 [ 519.288295][ T5916] input: HID 0458:5012 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:0458:5012.0018/input/input57 [ 519.460463][ T9160] usb 3-1: USB disconnect, device number 39 [ 519.461943][ T9876] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 519.478940][ T5916] input: HID 0458:5012 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:0458:5012.0018/input/input58 [ 519.569236][ T9876] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 519.918633][ T9886] ALSA: mixer_oss: invalid OSS volume ':' [ 519.935469][ T9886] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 519.947421][ T6027] udevd[6027]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 519.963473][ T5916] kye 0003:0458:5012.0018: input,hiddev0,hidraw0: USB HID vff.7f Device [HID 0458:5012] on usb-dummy_hcd.3-1/input0 [ 519.971498][ T9886] ALSA: mixer_oss: invalid OSS volume '5' [ 520.006419][ T9886] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 520.011615][ T5916] usb 4-1: USB disconnect, device number 38 [ 520.038113][ T9892] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:85:08:00 [ 520.054796][ T9886] ALSA: mixer_oss: invalid OSS volume '6' [ 520.078360][ T9886] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 520.094521][ T9886] ALSA: mixer_oss: invalid OSS volume '7' [ 520.130814][ T9886] ALSA: mixer_oss: invalid OSS volume 'Iq zy?}' [ 520.158505][ T9886] ALSA: mixer_oss: invalid OSS volume 'P#dܟQ{i0Rڬk m5' [ 520.180854][ T9886] ALSA: mixer_oss: invalid OSS volume '2}f7ج:L' [ 520.184940][ T9894] fido_id[9894]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 520.211167][ T9886] ALSA: mixer_oss: invalid OSS volume '^@䇵_u@)PY 00V' [ 520.299370][ T5924] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 520.618537][ T5924] usb 5-1: Using ep0 maxpacket: 16 [ 520.640257][ T5924] usb 5-1: config 1 has an invalid interface number: 228 but max is 0 [ 520.669367][ T5924] usb 5-1: config 1 has no interface number 0 [ 520.681092][ T5924] usb 5-1: config 1 interface 228 has no altsetting 0 [ 520.694000][ T5924] usb 5-1: New USB device found, idVendor=0a5c, idProduct=396e, bcdDevice=21.b9 [ 520.717557][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.758559][ T5924] usb 5-1: Product: syz [ 520.773628][ T5924] usb 5-1: Manufacturer: syz [ 520.789903][ T5924] usb 5-1: SerialNumber: syz [ 521.029673][ T9911] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 521.057943][ T9911] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 521.078891][ T9906] binder: 9905:9906 ioctl c0306201 0 returned -14 [ 521.095890][ T9893] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1095'. [ 521.108680][ T9911] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 521.124623][ T9906] binder: 9905:9906 ioctl c0306201 200000000000 returned -22 [ 521.166976][ T9909] delete_channel: no stack [ 521.167562][ T9914] netlink: 'syz.1.1101': attribute type 12 has an invalid length. [ 521.768671][ T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 521.938514][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 521.954033][ T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 521.976969][ T9] usb 3-1: config 1 has no interface number 1 [ 521.994122][ T9] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 522.017202][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 522.045959][ T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 522.075085][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 522.094401][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.111364][ T9] usb 3-1: Product: syz [ 522.122257][ T9] usb 3-1: Manufacturer: syz [ 522.133268][ T9] usb 3-1: SerialNumber: syz [ 522.148583][ T1940] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 522.439795][ T1940] usb 4-1: unable to get BOS descriptor or descriptor too short [ 522.444927][ T9] usb 3-1: failed to enable PITCH for EP 0x82 [ 522.449579][ T1940] usb 4-1: too many endpoints for config 1 interface 0 altsetting 13: 255, using maximum allowed: 30 [ 522.466487][ T1940] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 522.940473][ T9] usb 3-1: 2:1: cannot set freq 11994917 to ep 0x82 [ 522.964973][ T1940] usb 4-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 522.987088][ T1940] usb 4-1: config 1 interface 0 has no altsetting 0 [ 523.000125][ T1940] usb 4-1: string descriptor 0 read error: -22 [ 523.013894][ T1940] usb 4-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.40 [ 523.027439][ T1940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.037658][ T5924] usb 5-1: USB disconnect, device number 40 [ 523.097721][ T9] usb 3-1: USB disconnect, device number 40 [ 523.394654][ T9929] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:85:08:00 [ 523.561806][ T1940] input: HID 0458:5012 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:0458:5012.0019/input/input59 [ 523.667108][ T1940] input: HID 0458:5012 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:0458:5012.0019/input/input60 [ 523.732674][ T9919] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 523.741673][ T1940] kye 0003:0458:5012.0019: input,hiddev0,hidraw0: USB HID vff.7f Device [HID 0458:5012] on usb-dummy_hcd.3-1/input0 [ 524.051761][ T1940] usb 4-1: USB disconnect, device number 39 [ 526.276227][ T9937] netlink: 'syz.2.1110': attribute type 21 has an invalid length. [ 526.295217][ T9937] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1110'. [ 526.378605][ T9] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 526.538997][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 526.556396][ T9] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 526.577125][ T9] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 526.600143][ T5924] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 526.609087][ T9] usb 1-1: Product: syz [ 526.620141][ T9] usb 1-1: Manufacturer: syz [ 526.632516][ T9] usb 1-1: SerialNumber: syz [ 526.650400][ T9] usb 1-1: config 0 descriptor?? [ 526.774855][ T5924] usb 4-1: config 0 has an invalid interface number: 170 but max is 0 [ 526.786829][ T5924] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.805979][ T5924] usb 4-1: config 0 has no interface number 0 [ 526.818385][ T5924] usb 4-1: config 0 interface 170 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 526.838795][ T5924] usb 4-1: config 0 interface 170 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 526.863569][ T5924] usb 4-1: New USB device found, idVendor=07b0, idProduct=0007, bcdDevice=17.c6 [ 526.890674][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.924107][ T5924] usb 4-1: config 0 descriptor?? [ 526.957980][ T9] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 526.968988][ T5924] HFC-S_USB 4-1:0.170: probe with driver HFC-S_USB failed with error -5 [ 526.986344][ T9] peak_usb 1-1:0.0: unable to read PCAN-Chip USB firmware info (err -71) [ 527.059485][ T9] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 527.088926][ T9] usb 1-1: USB disconnect, device number 51 [ 527.219441][ T5916] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 527.781442][ T9968] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:85:08:00 [ 527.782372][ T5916] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 527.833697][ T5916] usb 2-1: config 0 has no interface number 0 [ 527.852899][ T5916] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 527.874033][ T5916] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 527.884065][ T5916] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 527.897891][ T5916] usb 2-1: config 0 interface 1 has no altsetting 0 [ 527.904671][ T5916] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 527.914784][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.930800][ T5916] usb 2-1: config 0 descriptor?? [ 528.390265][ T9978] ceph: Path missing in source [ 528.488575][ T5859] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 528.683345][ T5916] uclogic 0003:145F:0212.001A: failed retrieving string descriptor #100: -71 [ 528.704375][ T5916] uclogic 0003:145F:0212.001A: failed retrieving pen parameters: -71 [ 528.723409][ T5916] uclogic 0003:145F:0212.001A: pen probing failed: -71 [ 528.768220][ T5916] uclogic 0003:145F:0212.001A: failed probing parameters: -71 [ 528.786549][ T5916] uclogic 0003:145F:0212.001A: probe with driver uclogic failed with error -71 [ 528.852211][ T5916] usb 2-1: USB disconnect, device number 51 [ 529.150712][ T9982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1122'. [ 529.167310][ T9160] usb 4-1: USB disconnect, device number 40 [ 529.460886][ T9986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1123'. [ 531.244369][T10000] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:85:08:00 [ 531.338938][ T9] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 531.510840][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 531.522201][ T9] usb 2-1: too many endpoints for config 1 interface 0 altsetting 13: 255, using maximum allowed: 30 [ 531.535366][ T9] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 531.550433][T10005] kAFS: No cell specified [ 531.690325][ T9] usb 2-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 532.180536][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 532.214838][ T9] usb 2-1: string descriptor 0 read error: -22 [ 532.229440][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.40 [ 532.242584][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.453184][T10013] input: syz0 as /devices/virtual/input/input61 [ 533.417823][ T9] input: HID 0458:5012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:0458:5012.001B/input/input62 [ 533.589994][ T9996] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 533.633035][ T9] input: HID 0458:5012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:0458:5012.001B/input/input63 [ 533.786049][ T9] kye 0003:0458:5012.001B: input,hiddev0,hidraw0: USB HID vff.7f Device [HID 0458:5012] on usb-dummy_hcd.1-1/input0 [ 533.888701][ T9] usb 2-1: USB disconnect, device number 52 [ 533.998174][T10025] fido_id[10025]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 534.128650][ T5916] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 534.300338][ T5916] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 534.320502][ T5916] usb 3-1: config 0 has no interface number 0 [ 534.338526][ T5916] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 534.373645][ T5916] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.412045][ T5916] usb 3-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 534.465422][ T5916] usb 3-1: config 0 interface 1 has no altsetting 0 [ 534.486393][ T5916] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 534.515150][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.540979][ T5916] usb 3-1: config 0 descriptor?? [ 534.853327][T10039] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 534.862215][T10039] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 534.874620][T10039] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 536.239600][T10046] batadv0: mtu less than device minimum [ 536.247169][T10046] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 536.258058][T10046] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 536.268949][T10046] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 536.279751][T10046] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 536.290572][T10046] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 536.301363][T10046] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 536.312164][T10046] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 536.322977][T10046] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 536.333765][T10046] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 536.497024][T10053] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 536.627567][T10053] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 536.773581][ T5916] uclogic 0003:145F:0212.001C: failed retrieving string descriptor #100: -71 [ 536.796031][T10056] delete_channel: no stack [ 536.806741][ T5916] uclogic 0003:145F:0212.001C: failed retrieving pen parameters: -71 [ 536.816020][ T5916] uclogic 0003:145F:0212.001C: pen probing failed: -71 [ 536.858747][T10053] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 537.221311][ T5916] uclogic 0003:145F:0212.001C: failed probing parameters: -71 [ 537.231787][ T5916] uclogic 0003:145F:0212.001C: probe with driver uclogic failed with error -71 [ 537.254690][ T5916] usb 3-1: USB disconnect, device number 41 [ 538.951024][ T9160] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 539.693301][ T9160] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 539.726353][ T9160] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 539.763229][ T9160] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 539.795492][ T9160] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.852357][ T9160] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 539.862386][ T9160] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 539.876087][ T9160] usb 5-1: Product: syz [ 539.886836][ T9160] usb 5-1: Manufacturer: syz [ 539.907336][ T9160] cdc_wdm 5-1:1.0: skipping garbage [ 539.918517][ T9160] cdc_wdm 5-1:1.0: skipping garbage [ 539.945942][T10087] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 539.968950][ T9160] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 539.982014][ T9160] cdc_wdm 5-1:1.0: Unknown control protocol [ 540.411898][ T29] audit: type=1400 audit(1776277688.523:347): avc: denied { ioctl } for pid=10065 comm="syz.4.1144" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3693 ioctlcmd=0x7a6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 540.491195][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 540.497983][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 540.504672][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 540.511290][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 540.519803][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 540.526426][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 540.532910][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 540.539486][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 540.545944][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 540.552534][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 540.558778][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 540.565360][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 540.571616][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 540.578191][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 540.584417][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 540.590985][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 540.597255][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 540.603830][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 540.613571][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 540.620197][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 540.681532][ T9160] usb 5-1: USB disconnect, device number 41 [ 542.210949][T10090] Bluetooth: hci3: command 0x0406 tx timeout [ 542.232583][T10105] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 542.240956][T10105] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 542.251765][T10105] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 542.283398][T10104] delete_channel: no stack [ 543.248546][ T5924] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 543.441881][ T5924] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 543.476744][ T5924] usb 1-1: config 0 has no interface number 0 [ 543.497986][ T5924] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 543.533286][ T5924] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.556362][ T24] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 543.570185][ T5924] usb 1-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 543.627845][ T5924] usb 1-1: config 0 interface 1 has no altsetting 0 [ 543.646363][ T5924] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 543.664505][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.692686][ T5924] usb 1-1: config 0 descriptor?? [ 543.761368][ T24] usb 2-1: config 0 has an invalid interface number: 170 but max is 0 [ 543.773954][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 543.820108][ T24] usb 2-1: config 0 has no interface number 0 [ 543.840992][ T24] usb 2-1: config 0 interface 170 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 543.871044][ T24] usb 2-1: config 0 interface 170 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 543.892945][T10130] binder: 10128:10130 ioctl c0306201 0 returned -14 [ 543.900859][T10130] binder: 10128:10130 ioctl c0306201 200000000000 returned -22 [ 543.908534][ T1940] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 543.939553][ T24] usb 2-1: New USB device found, idVendor=07b0, idProduct=0007, bcdDevice=17.c6 [ 543.964092][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.996653][ T24] usb 2-1: config 0 descriptor?? [ 544.026754][ T24] HFC-S_USB 2-1:0.170: probe with driver HFC-S_USB failed with error -5 [ 544.078616][ T1940] usb 4-1: Using ep0 maxpacket: 32 [ 544.318859][ T1940] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 544.341025][ T1940] usb 4-1: can't read configurations, error -61 [ 544.450853][ T5924] uclogic 0003:145F:0212.001D: failed retrieving string descriptor #100: -71 [ 544.539539][ T1940] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 544.546584][ T5924] uclogic 0003:145F:0212.001D: failed retrieving pen parameters: -71 [ 544.556079][ T5924] uclogic 0003:145F:0212.001D: pen probing failed: -71 [ 544.563253][ T5924] uclogic 0003:145F:0212.001D: failed probing parameters: -71 [ 544.571418][ T5924] uclogic 0003:145F:0212.001D: probe with driver uclogic failed with error -71 [ 544.597672][ T5924] usb 1-1: USB disconnect, device number 53 [ 544.858497][ T1940] usb 4-1: Using ep0 maxpacket: 32 [ 544.942522][ T1940] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 544.971487][ T1940] usb 4-1: can't read configurations, error -61 [ 544.989944][ T1940] usb usb4-port1: attempt power cycle [ 545.388710][ T1940] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 545.498547][ T1940] usb 4-1: Using ep0 maxpacket: 32 [ 545.520499][ T1940] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 545.540835][ T1940] usb 4-1: can't read configurations, error -61 [ 545.871432][ T1940] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 546.578811][ T1940] usb 4-1: device descriptor read/8, error -71 [ 547.715856][ T1940] usb usb4-port1: unable to enumerate USB device [ 548.303029][T10161] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1170'. [ 548.339976][T10161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1170'. [ 548.569689][ T5924] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 548.899938][ T1940] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 549.008605][ T5924] usb 5-1: Using ep0 maxpacket: 16 [ 549.024879][ T5924] usb 5-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 549.046098][ T5924] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 549.055620][ T5880] usb 2-1: USB disconnect, device number 53 [ 549.078528][ T9] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 549.099201][ T5924] usb 5-1: Product: syz [ 549.115383][ T5924] usb 5-1: Manufacturer: syz [ 549.125946][ T5924] usb 5-1: SerialNumber: syz [ 549.145134][ T5924] usb 5-1: config 0 descriptor?? [ 549.481095][T10172] lo speed is unknown, defaulting to 1000 [ 549.702444][T10173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.712393][T10173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.818750][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 549.869625][ T9] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 549.886709][T10175] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 549.911073][ T9] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 549.945987][T10175] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 549.949566][ T9] usb 4-1: Product: syz [ 549.981739][ T9] usb 4-1: Manufacturer: syz [ 550.002356][ T9] usb 4-1: SerialNumber: syz [ 550.031719][ T9] usb 4-1: config 0 descriptor?? [ 550.045015][ T5924] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 550.074680][ T5924] peak_usb 5-1:0.0: unable to read PCAN-Chip USB firmware info (err -71) [ 550.119113][ T24] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 550.170017][ T5924] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 550.186281][ T5924] usb 5-1: USB disconnect, device number 42 [ 550.484577][ T9] peak_usb 4-1:0.0 can1: unable to request usb[type=0 value=1] err=-71 [ 550.496071][ T9] peak_usb 4-1:0.0: unable to read PCAN-Chip USB firmware info (err -71) [ 550.655360][T10181] lo speed is unknown, defaulting to 1000 [ 550.895007][T10182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.903830][T10182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.970237][ T9] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 550.986344][ T9] usb 4-1: USB disconnect, device number 45 [ 551.488698][ T9] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 551.499054][ T5916] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 551.567160][ T1940] usb 3-1: unable to get BOS descriptor or descriptor too short [ 551.584889][ T1940] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 551.594171][ T1940] usb 3-1: can't read configurations, error -71 [ 551.660293][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 551.660399][ T5916] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 551.678709][ T5916] usb 1-1: config 0 has no interface number 0 [ 551.779801][ T5916] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 551.791749][ T5916] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.797576][ T9] usb 5-1: too many endpoints for config 1 interface 0 altsetting 13: 255, using maximum allowed: 30 [ 551.802014][ T5916] usb 1-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 551.823671][ T9] usb 5-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 551.826397][ T5916] usb 1-1: config 0 interface 1 has no altsetting 0 [ 551.837749][ T9] usb 5-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 551.843899][ T5916] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 551.843927][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.849985][ T5916] usb 1-1: config 0 descriptor?? [ 551.884760][ T29] audit: type=1400 audit(1776277699.993:348): avc: denied { mounton } for pid=10193 comm="syz.3.1178" path="/240/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 551.916092][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 551.944255][ T9] usb 5-1: string descriptor 0 read error: -22 [ 551.955368][ T9] usb 5-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.40 [ 551.965321][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.596959][T10188] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 552.612923][T10202] kAFS: No cell specified [ 552.784533][T10188] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 552.815402][ T9] usbhid 5-1:1.0: can't add hid device: -71 [ 553.328232][ T5916] uclogic 0003:145F:0212.001E: failed retrieving string descriptor #100: -71 [ 553.337525][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 553.345739][ T5916] uclogic 0003:145F:0212.001E: failed retrieving pen parameters: -71 [ 553.354010][ T5916] uclogic 0003:145F:0212.001E: pen probing failed: -71 [ 553.362723][ T5916] uclogic 0003:145F:0212.001E: failed probing parameters: -71 [ 553.370766][ T24] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 553.378823][ T9] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 553.395565][ T24] usb 2-1: can't read configurations, error -71 [ 553.403016][ T5916] uclogic 0003:145F:0212.001E: probe with driver uclogic failed with error -71 [ 553.525375][ T9] usb 5-1: USB disconnect, device number 43 [ 553.536852][ T5916] usb 1-1: USB disconnect, device number 54 [ 553.773087][T10212] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 553.781994][T10212] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 553.793823][T10212] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 554.645586][T10211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1180'. [ 555.828696][ T9] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 556.041343][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 556.081230][ T9] usb 4-1: too many endpoints for config 1 interface 0 altsetting 13: 255, using maximum allowed: 30 [ 556.110376][ T9] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 556.238527][ T9] usb 4-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 556.370765][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 556.405214][ T9] usb 4-1: string descriptor 0 read error: -22 [ 556.411988][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.40 [ 556.446116][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.830048][ T5804] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 557.368831][ T5804] usb 3-1: unable to get BOS descriptor or descriptor too short [ 557.391633][ T5804] usb 3-1: too many endpoints for config 1 interface 0 altsetting 13: 255, using maximum allowed: 30 [ 557.425023][T10248] kAFS: No cell specified [ 557.492290][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.548185][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.560826][ T5804] usb 3-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 557.628839][ T5804] usb 3-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 558.022242][ T9] input: HID 0458:5012 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:0458:5012.001F/input/input66 [ 558.033856][ T5804] usb 3-1: config 1 interface 0 has no altsetting 0 [ 558.058927][ T29] audit: type=1400 audit(1776277706.173:349): avc: denied { read } for pid=5162 comm="acpid" name="mouse1" dev="devtmpfs" ino=3710 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 558.083604][ T5804] usb 3-1: string descriptor 0 read error: -22 [ 558.090536][T10232] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 558.099538][ T5804] usb 3-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.40 [ 558.115814][ T5804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.141546][ T29] audit: type=1400 audit(1776277706.173:350): avc: denied { open } for pid=5162 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3710 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 558.191012][ T9] input: HID 0458:5012 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:0458:5012.001F/input/input67 [ 558.241577][ T29] audit: type=1400 audit(1776277706.233:351): avc: denied { ioctl } for pid=5162 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3710 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 558.460457][ T9] kye 0003:0458:5012.001F: input,hiddev0,hidraw0: USB HID vff.7f Device [HID 0458:5012] on usb-dummy_hcd.3-1/input0 [ 560.352077][ T9] usb 4-1: USB disconnect, device number 46 [ 560.369008][T10245] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 560.419196][T10245] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 560.440379][ T5804] input: HID 0458:5012 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:0458:5012.0020/input/input68 [ 560.631232][T10263] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 560.640130][T10263] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 560.651895][T10263] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 561.624400][T10254] fido_id[10254]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 561.779089][ T5804] input: HID 0458:5012 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:0458:5012.0020/input/input69 [ 561.940574][ T5804] kye 0003:0458:5012.0020: input,hiddev0,hidraw0: USB HID vff.7f Device [HID 0458:5012] on usb-dummy_hcd.2-1/input0 [ 561.967328][ T5804] usb 3-1: USB disconnect, device number 44 [ 562.863517][T10281] fido_id[10281]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 563.109234][T10290] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1199'. [ 567.838538][T10322] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 567.847961][T10322] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 567.860130][T10322] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 570.520066][ T9160] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 570.874386][ T9160] usb 2-1: unable to get BOS descriptor or descriptor too short [ 570.896524][ T9160] usb 2-1: too many endpoints for config 1 interface 0 altsetting 13: 255, using maximum allowed: 30 [ 570.912820][ T9160] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 570.931990][ T9160] usb 2-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 570.945724][ T9160] usb 2-1: config 1 interface 0 has no altsetting 0 [ 570.961807][ T9160] usb 2-1: string descriptor 0 read error: -22 [ 570.969732][ T9160] usb 2-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.40 [ 571.119194][ T9160] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.269518][ T9160] usbhid 2-1:1.0: can't add hid device: -71 [ 573.276403][ T9160] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 573.287526][ T9160] usb 2-1: USB disconnect, device number 56 [ 573.966357][T10363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1214'. [ 574.278521][ T5804] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 575.011072][T10370] lo speed is unknown, defaulting to 1000 [ 575.184315][T10373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.193226][T10373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.233195][ T46] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 575.487247][ T46] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 575.498556][ T46] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 575.509840][ T46] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 575.519605][ T46] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.534159][ T46] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 575.543579][ T46] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 575.551759][ T46] usb 3-1: Product: syz [ 575.556042][ T46] usb 3-1: Manufacturer: syz [ 575.611068][ T46] cdc_wdm 3-1:1.0: skipping garbage [ 575.692672][ T46] cdc_wdm 3-1:1.0: skipping garbage [ 575.718356][ T46] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 575.737590][ T46] cdc_wdm 3-1:1.0: Unknown control protocol [ 576.601362][ T5804] usb 5-1: unable to get BOS descriptor or descriptor too short [ 576.616504][ T5804] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 576.728193][ T5804] usb 5-1: can't read configurations, error -71 [ 577.031395][ T9] usb 3-1: USB disconnect, device number 45 [ 577.033039][ C1] wdm_int_callback: 261 callbacks suppressed [ 577.033061][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 577.049921][ C1] wdm_int_callback: 261 callbacks suppressed [ 577.049941][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 577.062003][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 577.527019][ T5804] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 577.764325][ T5804] usb 5-1: unable to get BOS descriptor or descriptor too short [ 577.807239][ T5804] usb 5-1: too many endpoints for config 1 interface 0 altsetting 13: 255, using maximum allowed: 30 [ 577.859011][ T46] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 577.866873][ T5804] usb 5-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 577.904352][T10405] kAFS: No cell specified [ 578.031628][ T5804] usb 5-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 578.045235][ T5804] usb 5-1: config 1 interface 0 has no altsetting 0 [ 578.054990][ T5804] usb 5-1: string descriptor 0 read error: -22 [ 578.061452][ T5804] usb 5-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.40 [ 578.070621][ T5804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.091424][ T46] usb 2-1: unable to get BOS descriptor or descriptor too short [ 578.110084][ T46] usb 2-1: too many endpoints for config 1 interface 0 altsetting 13: 255, using maximum allowed: 30 [ 578.140455][ T46] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 578.152106][ T46] usb 2-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 578.198580][ T5916] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 578.585667][ T46] usb 2-1: config 1 interface 0 has no altsetting 0 [ 578.602325][ T46] usb 2-1: string descriptor 0 read error: -22 [ 578.608892][ T46] usb 2-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.40 [ 578.618088][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.842103][ T5916] usb 3-1: unable to get BOS descriptor or descriptor too short [ 578.855574][ T5916] usb 3-1: too many endpoints for config 1 interface 0 altsetting 13: 255, using maximum allowed: 30 [ 578.866642][ T5916] usb 3-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 578.877837][ T5916] usb 3-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 578.901353][ T5916] usb 3-1: config 1 interface 0 has no altsetting 0 [ 580.074642][ T5916] usb 3-1: string descriptor 0 read error: -22 [ 580.099026][ T5916] usb 3-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.40 [ 580.118717][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.135765][T10422] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1232'. [ 580.138642][ T46] input: HID 0458:5012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:0458:5012.0021/input/input70 [ 580.251394][ T46] input: HID 0458:5012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:0458:5012.0021/input/input71 [ 580.255250][T10392] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 580.290458][T10401] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 580.324274][ T46] kye 0003:0458:5012.0021: input,hiddev0,hidraw0: USB HID vff.7f Device [HID 0458:5012] on usb-dummy_hcd.1-1/input0 [ 580.393930][T10392] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 580.462201][ T5804] usbhid 5-1:1.0: can't add hid device: -71 [ 580.490328][ T5804] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 580.524718][ T9] usb 2-1: USB disconnect, device number 57 [ 580.538864][ T24] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 580.567137][ T5804] usb 5-1: USB disconnect, device number 45 [ 580.664868][ T5916] input: HID 0458:5012 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:0458:5012.0022/input/input72 [ 580.701431][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 580.718860][ T24] usb 1-1: config 0 has no interface number 0 [ 580.733949][ T24] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 580.761611][ T24] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 580.772933][ T24] usb 1-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 580.790005][T10407] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 580.843780][T10407] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 580.909551][ T5916] input: HID 0458:5012 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:0458:5012.0022/input/input73 [ 580.922922][ T24] usb 1-1: config 0 interface 1 has no altsetting 0 [ 581.562195][ T24] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 581.574095][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.621168][ T24] usb 1-1: config 0 descriptor?? [ 581.659058][ T5916] kye 0003:0458:5012.0022: input,hiddev0,hidraw0: USB HID vff.7f Device [HID 0458:5012] on usb-dummy_hcd.2-1/input0 [ 581.728256][ T5916] usb 3-1: USB disconnect, device number 46 [ 581.888069][ T5859] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 581.939640][T10435] fido_id[10435]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 582.020606][ T9] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 582.082925][T10444] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1240'. [ 582.112794][ T5859] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 582.126869][ T5859] usb 5-1: config 0 has no interface number 0 [ 582.141529][ T5859] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 582.168483][ T5859] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 582.188518][ T5859] usb 5-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 582.188541][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 582.214186][ T9] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 582.228507][ T5859] usb 5-1: config 0 interface 1 has no altsetting 0 [ 582.235233][ T5859] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 582.244431][ T9] usb 2-1: config 1 has no interface number 1 [ 582.252435][ T5859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.260576][ T9] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 582.260601][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 582.260635][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 582.290796][ T5859] usb 5-1: config 0 descriptor?? [ 582.303168][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 582.313199][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.321689][ T9] usb 2-1: Product: syz [ 582.333240][ T9] usb 2-1: Manufacturer: syz [ 582.338118][ T9] usb 2-1: SerialNumber: syz [ 582.346886][ T24] uclogic 0003:145F:0212.0023: failed retrieving string descriptor #100: -71 [ 582.373830][ T24] uclogic 0003:145F:0212.0023: failed retrieving pen parameters: -71 [ 582.390175][ T24] uclogic 0003:145F:0212.0023: pen probing failed: -71 [ 582.408716][ T24] uclogic 0003:145F:0212.0023: failed probing parameters: -71 [ 582.416343][ T24] uclogic 0003:145F:0212.0023: probe with driver uclogic failed with error -71 [ 582.442275][ T24] usb 1-1: USB disconnect, device number 55 [ 582.580787][ T9] usb 2-1: failed to enable PITCH for EP 0x82 [ 582.588089][ T9] usb 2-1: 2:1: cannot set freq 11994917 to ep 0x82 [ 582.698257][ T9] usb 2-1: USB disconnect, device number 58 [ 582.747075][ T8163] udevd[8163]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 583.096239][ T5859] uclogic 0003:145F:0212.0024: failed retrieving string descriptor #100: -71 [ 583.514526][ T5859] uclogic 0003:145F:0212.0024: failed retrieving pen parameters: -71 [ 583.522829][ T5859] uclogic 0003:145F:0212.0024: pen probing failed: -71 [ 583.529727][ T5859] uclogic 0003:145F:0212.0024: failed probing parameters: -71 [ 583.537280][ T5859] uclogic 0003:145F:0212.0024: probe with driver uclogic failed with error -71 [ 583.568297][ T5859] usb 5-1: USB disconnect, device number 46 [ 583.731078][T10462] kAFS: No cell specified [ 584.734734][T10463] input: syz0 as /devices/virtual/input/input74 [ 584.741795][ T5804] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 585.121368][ T5804] usb 1-1: unable to get BOS descriptor or descriptor too short [ 585.150021][ T5804] usb 1-1: too many endpoints for config 1 interface 0 altsetting 13: 255, using maximum allowed: 30 [ 585.181251][ T5804] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 585.203696][ T5804] usb 1-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 585.221481][ T5804] usb 1-1: config 1 interface 0 has no altsetting 0 [ 585.232611][ T5804] usb 1-1: string descriptor 0 read error: -22 [ 585.245021][ T5804] usb 1-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.40 [ 585.255039][ T5804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.458609][ T9160] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 585.620242][ T9160] usb 4-1: config 0 has an invalid interface number: 170 but max is 0 [ 585.633086][ T9160] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 585.656684][ T9160] usb 4-1: config 0 has no interface number 0 [ 585.675551][ T9160] usb 4-1: config 0 interface 170 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 585.708079][ T9160] usb 4-1: config 0 interface 170 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 585.755629][ T9160] usb 4-1: New USB device found, idVendor=07b0, idProduct=0007, bcdDevice=17.c6 [ 585.777252][ T5804] input: HID 0458:5012 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:0458:5012.0025/input/input75 [ 585.791827][ T9160] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.847009][ T9160] usb 4-1: config 0 descriptor?? [ 585.877726][ T9160] HFC-S_USB 4-1:0.170: probe with driver HFC-S_USB failed with error -5 [ 585.890289][ T5804] input: HID 0458:5012 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:0458:5012.0025/input/input76 [ 585.929328][T10457] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 585.973410][T10457] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 586.054247][ T5804] kye 0003:0458:5012.0025: input,hiddev0,hidraw0: USB HID vff.7f Device [HID 0458:5012] on usb-dummy_hcd.0-1/input0 [ 586.141297][ T5804] usb 1-1: USB disconnect, device number 56 [ 586.250492][T10488] fido_id[10488]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 586.597718][T10491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1250'. [ 587.751957][ T24] usb 4-1: USB disconnect, device number 47 [ 588.488778][T10477] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 589.028868][ T29] audit: type=1400 audit(1776277737.143:352): avc: denied { write } for pid=10521 comm="syz.2.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 589.054222][ T5804] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 589.338324][ T46] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 589.408513][ T5804] usb 1-1: Using ep0 maxpacket: 16 [ 589.430906][ T5804] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 589.460084][ T5804] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 589.480653][ T5804] usb 1-1: Product: syz [ 589.484882][ T5804] usb 1-1: Manufacturer: syz [ 589.491168][T10528] mmap: syz.2.1262 (10528): VmData 37466112 exceed data ulimit 1. Update limits or use boot option ignore_rlimit_data. [ 589.503930][ T5804] usb 1-1: SerialNumber: syz [ 589.505964][ T5804] usb 1-1: config 0 descriptor?? [ 589.510498][ T46] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 589.534182][ T46] usb 4-1: config 0 has no interface number 0 [ 589.546677][ T29] audit: type=1400 audit(1776277737.653:353): avc: denied { audit_write } for pid=10527 comm="syz.2.1262" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 589.555143][ T46] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 589.587810][ T46] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.597950][ T5916] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 589.611871][ T46] usb 4-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 589.624971][ T46] usb 4-1: config 0 interface 1 has no altsetting 0 [ 589.632049][ T46] usb 4-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 589.641331][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.653208][ T46] usb 4-1: config 0 descriptor?? [ 589.762110][ T5804] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 589.771796][ T5804] peak_usb 1-1:0.0: unable to read PCAN-Chip USB firmware info (err -71) [ 589.781459][ T5916] usb 2-1: unable to get BOS descriptor or descriptor too short [ 589.789634][ T24] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 589.798318][ T5916] usb 2-1: too many endpoints for config 1 interface 0 altsetting 13: 255, using maximum allowed: 30 [ 589.811311][ T5916] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 589.822537][ T5916] usb 2-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 589.835696][ T5916] usb 2-1: config 1 interface 0 has no altsetting 0 [ 589.843233][ T5804] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 589.845468][ T5916] usb 2-1: string descriptor 0 read error: -22 [ 589.856672][ T5804] usb 1-1: USB disconnect, device number 57 [ 589.857868][ T5916] usb 2-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.40 [ 589.873675][ T5859] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 589.883583][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.959432][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 589.966516][ T24] usb 3-1: config 247 has an invalid interface number: 111 but max is 0 [ 589.974986][ T24] usb 3-1: config 247 has no interface number 0 [ 589.981570][ T24] usb 3-1: config 247 interface 111 altsetting 246 bulk endpoint 0x8 has invalid maxpacket 511 [ 589.992467][ T24] usb 3-1: config 247 interface 111 has no altsetting 0 [ 590.001190][ T24] usb 3-1: New USB device found, idVendor=0499, idProduct=1003, bcdDevice=ec.77 [ 590.010312][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.018304][ T24] usb 3-1: Product: syz [ 590.022682][ T24] usb 3-1: Manufacturer: syz [ 590.027419][ T24] usb 3-1: SerialNumber: syz [ 590.035308][T10528] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 590.369719][T10532] lo speed is unknown, defaulting to 1000 [ 590.597696][T10533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.607970][T10533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.684189][ T29] audit: type=1400 audit(1776277738.793:354): avc: denied { setopt } for pid=10527 comm="syz.2.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 590.757468][ T46] uclogic 0003:145F:0212.0026: failed retrieving string descriptor #100: -71 [ 590.781993][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 590.792700][ T46] uclogic 0003:145F:0212.0026: failed retrieving pen parameters: -71 [ 590.807325][ T46] uclogic 0003:145F:0212.0026: pen probing failed: -71 [ 590.828124][ T46] uclogic 0003:145F:0212.0026: failed probing parameters: -71 [ 590.848657][ T46] uclogic 0003:145F:0212.0026: probe with driver uclogic failed with error -71 [ 590.874375][ T24] snd-usb-audio 3-1:247.111: probe with driver snd-usb-audio failed with error -2 [ 590.880350][T10525] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 590.894995][ T46] usb 4-1: USB disconnect, device number 48 [ 590.920880][ T24] usb 3-1: USB disconnect, device number 47 [ 590.945030][T10539] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 590.952977][ T5795] udevd[5795]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:247.111/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 591.017838][ T5916] usbhid 2-1:1.0: can't add hid device: -71 [ 591.028780][ T5916] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 591.053572][ T5916] usb 2-1: USB disconnect, device number 59 [ 591.518492][ T5804] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 591.748502][ T5804] usb 1-1: Using ep0 maxpacket: 8 [ 591.766647][ T5804] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 591.776113][ T5804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.801377][ T5804] pvrusb2: Hardware description: Terratec Grabster AV400 [ 592.170427][ T5804] pvrusb2: ********** [ 592.174549][ T5804] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 592.184976][ T5804] pvrusb2: Important functionality might not be entirely working. [ 592.193096][ T5804] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 592.214239][ T5804] pvrusb2: ********** [ 592.274465][ T2336] pvrusb2: Invalid write control endpoint [ 592.370063][ T2336] pvrusb2: Invalid write control endpoint [ 592.393669][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 592.410048][T10558] ALSA: mixer_oss: invalid OSS volume ':' [ 592.422793][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 592.430470][T10558] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 592.443301][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 592.453962][T10558] ALSA: mixer_oss: invalid OSS volume '5' [ 592.533594][T10558] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 592.542723][ T2336] pvrusb2: Device being rendered inoperable [ 592.548898][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 592.557143][T10558] ALSA: mixer_oss: invalid OSS volume '6' [ 592.563087][T10558] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 592.571278][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 592.582190][ T2336] pvrusb2: Attached sub-driver cx25840 [ 592.587669][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 592.651172][ T5859] usb 5-1: unable to get BOS descriptor or descriptor too short [ 592.662052][T10558] ALSA: mixer_oss: invalid OSS volume '7' [ 592.669599][ T5859] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 592.694043][ T5859] usb 5-1: can't read configurations, error -71 [ 592.700836][T10558] ALSA: mixer_oss: invalid OSS volume 'Iq zy?}' [ 592.702330][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 592.762627][T10558] ALSA: mixer_oss: invalid OSS volume 'P#dܟQ{i0Rڬk m5' [ 592.810996][T10558] ALSA: mixer_oss: invalid OSS volume '2}f7ج:L' [ 592.862800][ T24] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 592.940973][T10558] ALSA: mixer_oss: invalid OSS volume '^@䇵_u@)PY 00V' [ 593.088706][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 593.212698][ T24] usb 3-1: config 1 has an invalid interface number: 228 but max is 0 [ 593.222608][ T24] usb 3-1: config 1 has no interface number 0 [ 593.237339][ T24] usb 3-1: config 1 interface 228 has no altsetting 0 [ 593.404270][ T24] usb 3-1: New USB device found, idVendor=0a5c, idProduct=396e, bcdDevice=21.b9 [ 593.415288][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.431493][ T24] usb 3-1: Product: syz [ 593.439931][ T24] usb 3-1: Manufacturer: syz [ 593.449989][ T24] usb 3-1: SerialNumber: syz [ 593.679007][T10576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1272'. [ 594.070018][T10559] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1268'. [ 594.540920][ T9] usb 1-1: USB disconnect, device number 58 [ 595.286641][T10594] netlink: 'syz.0.1276': attribute type 12 has an invalid length. [ 595.565362][ T24] usb 3-1: USB disconnect, device number 48 [ 595.619487][ T5859] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 595.892145][ T5859] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 595.902186][ T5859] usb 2-1: config 0 has no interface number 0 [ 595.914108][ T5859] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 595.960377][T10602] 9pnet_virtio: no channels available for device syz [ 595.982750][T10602] overlayfs: missing 'lowerdir' [ 596.833054][ T5859] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.847944][ T5859] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 596.861819][ T5859] usb 2-1: config 0 interface 1 has no altsetting 0 [ 596.891594][ T5859] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 597.391586][ T5859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.402257][ T5859] usb 2-1: config 0 descriptor?? [ 597.809047][ T46] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 598.222269][T10608] siw: device registration error -23 [ 598.352704][T10616] lo speed is unknown, defaulting to 1000 [ 598.519250][T10617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.529182][T10617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.552180][ T9] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 598.911431][ T5859] uclogic 0003:145F:0212.0027: failed retrieving string descriptor #100: -71 [ 598.920544][ T5859] uclogic 0003:145F:0212.0027: failed retrieving pen parameters: -71 [ 598.934644][ T5859] uclogic 0003:145F:0212.0027: pen probing failed: -71 [ 598.948762][ T5859] uclogic 0003:145F:0212.0027: failed probing parameters: -71 [ 598.957217][ T5859] uclogic 0003:145F:0212.0027: probe with driver uclogic failed with error -71 [ 598.998048][ T5859] usb 2-1: USB disconnect, device number 60 [ 599.100432][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 599.109481][ T9] usb 5-1: too many endpoints for config 1 interface 0 altsetting 13: 255, using maximum allowed: 30 [ 599.376556][ T9] usb 5-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 599.404239][ T9] usb 5-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 599.442493][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 599.470339][ T9] usb 5-1: string descriptor 0 read error: -22 [ 599.482446][ T9] usb 5-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.40 [ 599.494332][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.212505][ T9] input: HID 0458:5012 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:0458:5012.0028/input/input77 [ 600.268567][ T5859] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 600.301353][ T9] input: HID 0458:5012 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:0458:5012.0028/input/input78 [ 600.640047][ T46] usb 1-1: unable to get BOS descriptor or descriptor too short [ 600.690728][ T5859] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 600.694053][T10610] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 600.792841][ T46] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 600.811571][ T5859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.824655][ T46] usb 1-1: can't read configurations, error -71 [ 600.837500][ T5859] usb 2-1: Product: syz [ 600.842398][ T5859] usb 2-1: Manufacturer: syz [ 600.851276][ T5859] usb 2-1: SerialNumber: syz [ 600.859873][ T9] kye 0003:0458:5012.0028: input,hiddev0,hidraw0: USB HID vff.7f Device [HID 0458:5012] on usb-dummy_hcd.4-1/input0 [ 600.878064][T10638] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 601.040461][ T9160] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 601.090129][ T9] usb 5-1: USB disconnect, device number 49 [ 601.106522][T10641] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 601.212804][T10642] fido_id[10642]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 601.213906][ T9160] usb 3-1: Using ep0 maxpacket: 16 [ 601.262579][ T9160] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 601.273880][ T9160] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 601.282981][ T9160] usb 3-1: Product: syz [ 601.289588][ T9160] usb 3-1: Manufacturer: syz [ 601.294394][ T9160] usb 3-1: SerialNumber: syz [ 601.306162][ T9160] usb 3-1: config 0 descriptor?? [ 601.467215][T10646] netlink: 'syz.3.1290': attribute type 12 has an invalid length. [ 601.815704][ T5859] (unnamed net_device) (uninitialized): Assigned a random MAC address: 62:fe:85:40:07:f8 [ 601.847567][ T9160] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 601.860239][ T5859] rtl8150 2-1:1.0: eth1: rtl8150 is detected [ 601.865673][ T9160] peak_usb 3-1:0.0: unable to read PCAN-Chip USB firmware info (err -71) [ 601.920352][ T9160] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 601.961638][ T9160] usb 3-1: USB disconnect, device number 49 [ 602.516837][T10656] netlink: 'syz.4.1293': attribute type 21 has an invalid length. [ 602.542832][T10656] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1293'. [ 603.247754][ C0] usb 2-1: Rx status -71 [ 603.248833][ T46] usb 2-1: USB disconnect, device number 61 [ 603.252104][ C0] usb 2-1: eth1: intr status -71 [ 603.320340][ T5472] usb 2-1: device reset failed [ 603.599519][ T9160] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 603.790098][ T9160] usb 3-1: Using ep0 maxpacket: 16 [ 603.843325][ T9160] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 603.872021][ T9160] usb 3-1: config 1 has no interface number 1 [ 603.893031][ T9160] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 603.930151][ T9160] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 603.976660][ T9160] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 604.026958][ T9160] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 604.065077][ T9160] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.088722][ T9160] usb 3-1: Product: syz [ 604.103618][ T9160] usb 3-1: Manufacturer: syz [ 604.122487][ T9160] usb 3-1: SerialNumber: syz [ 605.006586][ T9160] usb 3-1: failed to enable PITCH for EP 0x82 [ 605.030069][ T9160] usb 3-1: 2:1: cannot set freq 11994917 to ep 0x82 [ 605.035358][T10699] siw: device registration error -23 [ 605.352218][ T9160] usb 3-1: USB disconnect, device number 50 [ 605.359802][ T5804] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 605.425242][ T8161] udevd[8161]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 605.546727][ T5804] usb 1-1: unable to get BOS descriptor or descriptor too short [ 605.559688][ T5804] usb 1-1: too many endpoints for config 1 interface 0 altsetting 13: 255, using maximum allowed: 30 [ 605.583067][ T5804] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 605.607466][ T5804] usb 1-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 605.637121][ T5804] usb 1-1: config 1 interface 0 has no altsetting 0 [ 605.646103][T10706] syzkaller0: entered promiscuous mode [ 605.656296][ T5804] usb 1-1: string descriptor 0 read error: -22 [ 605.662785][ T5804] usb 1-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.40 [ 605.672696][T10706] syzkaller0: entered allmulticast mode [ 605.683853][ T5804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.967130][T10710] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 606.206084][ T46] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 606.319033][T10703] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 606.460930][ T46] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 606.470725][ T46] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 606.506229][ T46] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 606.623720][ T46] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.717511][ T46] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 606.807626][ T46] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 606.901581][ T46] usb 4-1: Product: syz [ 606.915025][ T46] usb 4-1: Manufacturer: syz [ 606.942070][ T46] cdc_wdm 4-1:1.0: skipping garbage [ 606.947781][ T46] cdc_wdm 4-1:1.0: skipping garbage [ 606.968263][ T46] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 606.974997][ T46] cdc_wdm 4-1:1.0: Unknown control protocol [ 607.410058][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 607.410475][ T9] usb 4-1: USB disconnect, device number 49 [ 607.416723][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 607.416746][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 608.147159][ T9] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 608.298668][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 608.306791][ T9] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 608.315534][ T9] usb 4-1: config 0 has no interface number 0 [ 608.323497][ T9] usb 4-1: config 0 interface 12 has no altsetting 0 [ 608.333014][ T9] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 608.342444][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.352386][ T9] usb 4-1: Product: syz [ 608.356625][ T9] usb 4-1: Manufacturer: syz [ 608.362447][ T9] usb 4-1: SerialNumber: syz [ 608.380720][ T9] usb 4-1: config 0 descriptor?? [ 608.821727][ T9] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 608.829534][ T9] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 608.836891][ T9] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 608.844593][ T9] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 608.862927][ T9] usb 4-1: USB disconnect, device number 50 [ 609.136938][T10727] netlink: 'syz.2.1305': attribute type 12 has an invalid length. [ 609.209391][ T5804] usbhid 1-1:1.0: can't add hid device: -71 [ 609.220459][ T5804] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 609.232928][ T5804] usb 1-1: USB disconnect, device number 61 [ 609.372855][ T29] audit: type=1400 audit(1776277757.463:355): avc: denied { accept } for pid=10733 comm="syz.2.1309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 610.277303][ T5805] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 610.287449][ T5805] CPU: 0 UID: 0 PID: 5805 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 610.287482][ T5805] Tainted: [L]=SOFTLOCKUP [ 610.287489][ T5805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 610.287503][ T5805] Workqueue: hci4 hci_rx_work [ 610.287529][ T5805] Call Trace: [ 610.287535][ T5805] [ 610.287542][ T5805] dump_stack_lvl+0x100/0x190 [ 610.287567][ T5805] sysfs_warn_dup.cold+0x1c/0x28 [ 610.287596][ T5805] sysfs_create_dir_ns+0x24b/0x2b0 [ 610.287625][ T5805] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 610.287653][ T5805] ? find_held_lock+0x2b/0x80 [ 610.287682][ T5805] ? kobject_add_internal+0x25f/0x930 [ 610.287709][ T5805] ? kobject_add_internal+0x25f/0x930 [ 610.287738][ T5805] ? do_raw_spin_unlock+0x145/0x1e0 [ 610.287764][ T5805] kobject_add_internal+0x2c8/0x930 [ 610.287795][ T5805] kobject_add+0x16a/0x1e0 [ 610.287820][ T5805] ? __pfx_kobject_add+0x10/0x10 [ 610.287847][ T5805] ? __sanitizer_cov_trace_pc+0x5d/0x70 [ 610.287868][ T5805] ? kobject_put+0xb9/0x640 [ 610.287890][ T5805] ? _raw_spin_unlock+0x28/0x50 [ 610.287916][ T5805] device_add+0x294/0x1920 [ 610.287940][ T5805] ? __pfx_dev_set_name+0x10/0x10 [ 610.287967][ T5805] ? __pfx_device_add+0x10/0x10 [ 610.287990][ T5805] ? mgmt_send_event_skb+0x2fb/0x460 [ 610.288019][ T5805] hci_conn_add_sysfs+0x1a3/0x260 [ 610.288046][ T5805] le_conn_complete_evt+0x11eb/0x1f60 [ 610.288075][ T5805] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 610.288104][ T5805] hci_le_conn_complete_evt+0x23c/0x3a0 [ 610.288128][ T5805] ? skb_pull_data+0x15f/0x1e0 [ 610.288159][ T5805] hci_le_meta_evt+0x34a/0x5f0 [ 610.288189][ T5805] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 610.288215][ T5805] hci_event_packet+0x51c/0xcd0 [ 610.288237][ T5805] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 610.288262][ T5805] ? __pfx_hci_event_packet+0x10/0x10 [ 610.288286][ T5805] ? kcov_remote_start+0x374/0x660 [ 610.288304][ T5805] ? lockdep_hardirqs_on+0x78/0x100 [ 610.288333][ T5805] hci_rx_work+0x451/0xfc0 [ 610.288361][ T5805] process_one_work+0xa0e/0x1980 [ 610.288398][ T5805] ? __pfx_process_one_work+0x10/0x10 [ 610.288431][ T5805] ? __pfx_hci_rx_work+0x10/0x10 [ 610.288452][ T5805] worker_thread+0x5ef/0xe50 [ 610.288483][ T5805] ? kthread+0x13a/0x450 [ 610.288504][ T5805] ? __pfx_worker_thread+0x10/0x10 [ 610.288525][ T5805] kthread+0x370/0x450 [ 610.288545][ T5805] ? __pfx_kthread+0x10/0x10 [ 610.288568][ T5805] ret_from_fork+0x72b/0xd50 [ 610.288592][ T5805] ? __pfx_ret_from_fork+0x10/0x10 [ 610.288617][ T5805] ? __switch_to+0x800/0x1100 [ 610.288642][ T5805] ? __pfx_kthread+0x10/0x10 [ 610.288664][ T5805] ret_from_fork_asm+0x1a/0x30 [ 610.288700][ T5805] [ 610.758711][ T5805] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 611.723433][ T5805] Bluetooth: hci4: failed to register connection device [ 611.916995][ T5805] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] SMP KASAN NOPTI [ 611.929102][ T5805] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267] [ 611.937514][ T5805] CPU: 1 UID: 0 PID: 5805 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 611.948543][ T5805] Tainted: [L]=SOFTLOCKUP [ 611.952861][ T5805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 611.962916][ T5805] Workqueue: hci4 hci_rx_work [ 611.967602][ T5805] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 611.973503][ T5805] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 e9 0e 9e 22 09 66 66 2e 0f 1f 84 00 00 00 [ 611.993122][ T5805] RSP: 0018:ffffc900040df740 EFLAGS: 00010282 [ 611.999214][ T5805] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 612.007183][ T5805] RDX: 0000000000000000 RSI: ffffffff89596d61 RDI: dffffc000000004c [ 612.015154][ T5805] RBP: 0000000000000260 R08: 0000000000000001 R09: 0000000000000000 [ 612.023119][ T5805] R10: ffffc900040df830 R11: 0000000000000000 R12: ffffffff89596d61 [ 612.031086][ T5805] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 612.039049][ T5805] FS: 0000000000000000(0000) GS:ffff88812440d000(0000) knlGS:0000000000000000 [ 612.047974][ T5805] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 612.054555][ T5805] CR2: 000020000000a030 CR3: 0000000079702000 CR4: 00000000003526f0 [ 612.062523][ T5805] Call Trace: [ 612.065795][ T5805] [ 612.068718][ T5805] __kasan_check_byte+0x13/0x50 [ 612.073608][ T5805] lock_acquire+0x12a/0x370 [ 612.078110][ T5805] ? do_raw_read_unlock+0x3f/0x70 [ 612.083139][ T5805] lock_sock_nested+0x41/0xf0 [ 612.087812][ T5805] ? l2cap_sock_new_connection_cb+0x4c/0x260 [ 612.093801][ T5805] l2cap_sock_new_connection_cb+0x4c/0x260 [ 612.099621][ T5805] l2cap_connect_cfm+0x4e2/0xf80 [ 612.104563][ T5805] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 612.110019][ T5805] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 612.115479][ T5805] le_conn_complete_evt+0x197c/0x1f60 [ 612.120855][ T5805] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 612.126571][ T5805] hci_le_conn_complete_evt+0x23c/0x3a0 [ 612.132114][ T5805] ? skb_pull_data+0x15f/0x1e0 [ 612.136903][ T5805] hci_le_meta_evt+0x34a/0x5f0 [ 612.141663][ T5805] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 612.147729][ T5805] hci_event_packet+0x51c/0xcd0 [ 612.152580][ T5805] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 612.158144][ T5805] ? __pfx_hci_event_packet+0x10/0x10 [ 612.163517][ T5805] ? kcov_remote_start+0x374/0x660 [ 612.168624][ T5805] ? lockdep_hardirqs_on+0x78/0x100 [ 612.173850][ T5805] hci_rx_work+0x451/0xfc0 [ 612.178267][ T5805] process_one_work+0xa0e/0x1980 [ 612.183209][ T5805] ? __pfx_process_one_work+0x10/0x10 [ 612.188578][ T5805] ? __pfx_hci_rx_work+0x10/0x10 [ 612.193516][ T5805] worker_thread+0x5ef/0xe50 [ 612.198107][ T5805] ? kthread+0x13a/0x450 [ 612.202345][ T5805] ? __pfx_worker_thread+0x10/0x10 [ 612.207454][ T5805] kthread+0x370/0x450 [ 612.211520][ T5805] ? __pfx_kthread+0x10/0x10 [ 612.216105][ T5805] ret_from_fork+0x72b/0xd50 [ 612.220693][ T5805] ? __pfx_ret_from_fork+0x10/0x10 [ 612.225800][ T5805] ? __switch_to+0x800/0x1100 [ 612.230478][ T5805] ? __pfx_kthread+0x10/0x10 [ 612.235060][ T5805] ret_from_fork_asm+0x1a/0x30 [ 612.239825][ T5805] [ 612.242845][ T5805] Modules linked in: [ 612.247419][ T5805] ---[ end trace 0000000000000000 ]--- [ 612.486342][ T5805] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 612.493356][ T5805] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 e9 0e 9e 22 09 66 66 2e 0f 1f 84 00 00 00 [ 612.514390][ T29] audit: type=1400 audit(1776277760.613:356): avc: denied { read } for pid=5159 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 612.537783][ T5805] RSP: 0018:ffffc900040df740 EFLAGS: 00010282 [ 612.544013][ T5805] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 612.553964][ T5805] RDX: 0000000000000000 RSI: ffffffff89596d61 RDI: dffffc000000004c [ 612.562181][ T5805] RBP: 0000000000000260 R08: 0000000000000001 R09: 0000000000000000 [ 612.570217][ T5805] R10: ffffc900040df830 R11: 0000000000000000 R12: ffffffff89596d61 [ 612.576016][ T29] audit: type=1400 audit(1776277760.613:357): avc: denied { search } for pid=5159 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 612.578249][ T5805] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 612.608313][ T5805] FS: 0000000000000000(0000) GS:ffff88812430d000(0000) knlGS:0000000000000000 [ 612.617636][ T5805] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 612.624771][ T5805] CR2: 00007ffdf5964f40 CR3: 000000005d276000 CR4: 00000000003526f0 [ 612.632901][ T5805] Kernel panic - not syncing: Fatal exception [ 612.639244][ T5805] Kernel Offset: disabled [ 612.643561][ T5805] Rebooting in 86400 seconds..