last executing test programs: 4m55.89296594s ago: executing program 1 (id=108): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) setresgid(0x0, 0xee01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f00000000c0)) accept4$x25(r1, &(0x7f0000000100), &(0x7f0000000280)=0x12, 0x80800) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x0, 0x12, 0x600, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x4d, 0x0, &(0x7f0000000000)=0x2f) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000240)={0x876c, 0x205, 0x40003}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) r6 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000140)={r7, @in={{0x2, 0x4e24, @empty}}, 0xe, 0x9f93}, &(0x7f0000000340)=0x90) r8 = syz_open_dev$video4linux(&(0x7f0000000000), 0x8004000000071, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r8, 0xc0585605, &(0x7f0000000100)={0x1, 0x1, @start={0x6}}) close_range(r3, 0xffffffffffffffff, 0x0) 4m54.780863019s ago: executing program 1 (id=115): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000640)={0x28, 0x4, 0x0, {0x0, 0x78618205}}, 0x23) 4m53.553109216s ago: executing program 1 (id=117): r0 = io_uring_setup(0xc54, &(0x7f0000000080)={0x0, 0x1539, 0x400, 0x3, 0x274}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x25, 0x0, 0x0) 4m53.138548287s ago: executing program 1 (id=120): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@delnexthop={0x17, 0x69, 0xb, 0x70bd28, 0x0, {}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8}, {0x8}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}]}, 0x50}}, 0x4000000) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00000ce000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000700)='./file0/../file0\x00', 0x0, 0x219d88b, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x1184, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)) 4m52.794497362s ago: executing program 1 (id=123): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) dup(r2) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000a40)=[{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="fe6abb1be48e556b473cabd427d746ca7d9bbf4f24ec7659b1c254940281f0a248dfc8c103fad1369a53e3402210b77170735064ceae5fcf381d21cc8960440e0a4597", 0x43}], 0x1, 0x0, 0x0, 0x40880}], 0x1, 0x4814) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3], 0x1d8}, 0x1, 0x0, 0x0, 0x805}, 0x0) 4m51.845843391s ago: executing program 1 (id=125): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r2, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000bf080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf9800000000000056080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000780)={0x2, @meta={0x50353543, 0x1e3c8bd4, 0xb5fa, 0x3144, 0x5c2893b5}}) ioctl$KVM_GET_SREGS2(0xffffffffffffffff, 0x8140aecc, &(0x7f00000004c0)) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000080)=0x1e) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x120080100, 0x0, 0xffffff36, 0x0, 0x0, 0x0) 4m50.685463364s ago: executing program 32 (id=125): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r2, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000bf080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf9800000000000056080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000780)={0x2, @meta={0x50353543, 0x1e3c8bd4, 0xb5fa, 0x3144, 0x5c2893b5}}) ioctl$KVM_GET_SREGS2(0xffffffffffffffff, 0x8140aecc, &(0x7f00000004c0)) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000080)=0x1e) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x120080100, 0x0, 0xffffff36, 0x0, 0x0, 0x0) 3m18.246610798s ago: executing program 4 (id=377): syz_usb_connect$cdc_ncm(0x3, 0x78, &(0x7f0000000840)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x2, 0x1, 0x1, 0xb0, 0x5, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, '\x00\x00\x00\x00\x00\x00'}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xb, 0x1, 0x1120, 0x50}, {0x6, 0x24, 0x1a, 0x9, 0x1b}, [@acm={0x4, 0x24, 0x2, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0x9, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x12, 0x4, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x1, 0x40, 0x4}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x5, 0xa, 0x6, 0x40, 0x19}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2801}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x83e}}, {0xae, &(0x7f0000000780)=ANY=[@ANYRES8]}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x42c}}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1740, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x662, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100), 0xfffffd9d) r9 = socket(0x1e, 0x4, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$tipc(r9, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r9, r8, 0x0, 0x8010002b) r10 = fcntl$dupfd(r4, 0x0, r4) r11 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2b0, 0x0, 0x20003, 0x19f}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r11, r12, r13, r14, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f00000008c0)=0x0) syz_ublk_setup_queues(r10, r15, &(0x7f0000000180)={0x0, 0x1, 0x80, 0x3, 0x23}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x1fff, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4830, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x4000, 0x1, 0x40101, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x4000, 0x6, 0x367}}], 0x1, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x80000001, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, 0xffffffffffffffff, 0x0) 3m15.001622128s ago: executing program 4 (id=384): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) socket(0x40000000015, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000007880)=""/102400, 0x19000) r1 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xb, 0x11, r1, 0x0) ftruncate(r1, 0x51a9497) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/stat\x00') pread64(r2, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, 0x0, 0x1d1a00, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4814) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 3m11.890088086s ago: executing program 4 (id=394): syz_usb_connect$cdc_ncm(0x3, 0x78, &(0x7f0000000840)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x2, 0x1, 0x1, 0xb0, 0x5, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, '\x00\x00\x00\x00\x00\x00'}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xb, 0x1, 0x1120, 0x50}, {0x6, 0x24, 0x1a, 0x9, 0x1b}, [@acm={0x4, 0x24, 0x2, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0x9, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x12, 0x4, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x1, 0x40, 0x4}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x5, 0xa, 0x6, 0x40, 0x19}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2801}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x83e}}, {0xae, &(0x7f0000000780)=ANY=[@ANYRES8]}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x42c}}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1740, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x662, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100), 0xfffffd9d) r9 = socket(0x1e, 0x4, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$tipc(r9, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r9, r8, 0x0, 0x8010002b) r10 = fcntl$dupfd(r4, 0x0, r4) r11 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2b0, 0x0, 0x20003, 0x19f}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r11, r12, r13, r14, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f00000008c0)=0x0) syz_ublk_setup_queues(r10, r15, &(0x7f0000000180)={0x0, 0x1, 0x80, 0x3, 0x23}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x1fff, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4830, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x4000, 0x1, 0x40101, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x4000, 0x6, 0x367}}], 0x1, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x80000001, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, 0xffffffffffffffff, 0x0) 3m8.577384155s ago: executing program 4 (id=407): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000080)='./file0/../file0/file0\x00', 0x0, 0x324b0d1, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0\x00', 0x0, 0x2127099, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x3) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102400, 0x19000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000002c0)={0x1000200001ee0000, 0x3}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) getsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180), &(0x7f0000019300)=0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x1d, 0x2}, &(0x7f0000019340)=0x0) r6 = socket$kcm(0x2d, 0x2, 0x0) r7 = dup(r6) read$FUSE(r7, &(0x7f0000001b80)={0x2020}, 0x2020) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) 3m6.608236197s ago: executing program 4 (id=413): syz_usb_connect(0x0, 0x81, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06", @ANYRES8], 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) syz_open_dev$media(&(0x7f0000000040), 0xfffffffffffffff1, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000c00), 0x0, 0x8040) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[], 0x114}, 0x1, 0x0, 0x0, 0x4c094}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x100010, r0, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) timer_create(0x4, &(0x7f0000000340)={0x0, 0x19, 0x2}, &(0x7f0000000380)=0x0) timer_delete(r6) syz_usb_connect$printer(0x1, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xa, 0x60, 0x6, "", [{{0x9, 0x4, 0x0, 0x97, 0x2, 0x7, 0x1, 0x3, 0xe0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x6, 0x6, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x10, 0xc, 0x9}}]}}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x0, 0x5, 0x3d, 0x10, 0xf8}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x5, [{0xd8, &(0x7f0000000440)=@string={0xd8, 0x3, "d01bfc04403b6f2e862fd4a114fda614e06bc10d41ed01e84f342c5d1473867f1cb31b99e1731f3c7416aa9f5299d9b4bb880b5ef2e2e947d07c9e9205fb80c7421acf5e37205cb353424a339b7fd19d610b28da0866da0914e4867dbcc81c4cb238cd4db71a58425f1d099132787333957b276d7b587df88a6aa86854b0a6ba9c6b6c0fc776cb3f8789b6cadb0c30c69d6138034c65636c68bdc2542d578611ec6899821de13d886a4cdbebc5a5edf360ea472a78a7700db5f8c958f750b9e96e4a1edb2da23a49c28639fe3a69556d39c16a7b8ed4"}}, {0x24, &(0x7f0000000540)=@string={0x24, 0x3, "e275b0bc61a70971a6aba5aabd0414d6dfb1bda38a93db6f6823dbbee08bb0897426"}}, {0xa5, &(0x7f0000000680)=@string={0xa5, 0x3, "a8b24317e5c1d4bee816165918cc85c86cc3dc63570afbb1aa574b0767b9115142f6380851759b18570265f0d4f6b865fb07121183051c2565a97f26becee01b308ed5b8d5bcf271eb365c0c2eb215372696fefc977b229ff649e960aa52b8ebfae82196d90c2c5c7ba16ca55cfc34bd8fa62caa0e642bb5a1b82e154b9d2c8ca33f75de69a988321cdcbe4b86f3978b8422be8860ca3a0d70c5aa66a38da6fdcd0413"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x3401}}, {0x4f, &(0x7f0000000780)=@string={0x4f, 0x3, "64db6d919e71fd9453d42f7c465fe9e68f1e903ba82159b33d899c89900426d3e73d4a85aa67c160124ebfc261a974d3a7504f67f74c85ba11edd20e2c9fb9c1bca70e8ad4ae3aa4afaf609a68"}}]}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 3m5.112893199s ago: executing program 4 (id=416): write$bt_hci(0xffffffffffffffff, &(0x7f0000000500)={0x1, @write_ssp_mode={{0xc56, 0x1}, {0x54}}}, 0x5) ioctl$COMEDI_CMD(0xffffffffffffffff, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0x3e8, 0x2, 0x0, 0x20, 0x1, 0x20, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0}) ioctl$COMEDI_BUFCONFIG(0xffffffffffffffff, 0x8020640d, &(0x7f00000002c0)={0x1, 0x2, 0x0, 0x1}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r6, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r9 = accept4$alg(r8, 0x0, 0x0, 0x40800) sendmmsg$alg(r9, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000003240)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0x10}, {&(0x7f0000000480)="439dce3672b42d0ac56da6cfae9bbaa2bbb23fd219a88c55cfb134448890fd3aa11f6574a521422666d0ae8060999be0f9f8c88fa4cd808ff3f1a4a5f0f051b695e9dd25a112e1aff097823d825f94547f6e7783c87dd97a8eb2ecad4d97a561781b3e531157301bac971f273659c064e72603ffb832b8a94d3be8", 0x7b}, {&(0x7f0000000580)="69ec03397cf0ed32bbe95e7e45d7918307939da4b8f86f5733217ac61385d95bef", 0x21}, {&(0x7f0000000680)="08e88d4de4594308ad8ecf5db5f83d72be47105ab5fd2fb7298dc4036dd6d448812651ac61b66c2362979a6bf8e64cf2d7ed9c81089a2c391ca57a6582731c1c81aadfe31838e48a832be9ecc9a94a1b68d17a00d091f39fd10d876e038437ae53cfd6f023194d61033b11dd600001c065ab80a76db7e1d9a26ae5e786a12e2ea88e5fa63bf276dd866724da678fb33f55f971554d9c4c51cdd9661d3db3a5d28823d3f977a45daccca53ab53e53719fd4b8c1b0b205c88caeffbe7ab7c6e2c6bdbab5b50f471f4e7aeae8a78270c29aaae19d351f6f3814e6ed43b45a97ad980165c8e5492345", 0xe7}, {&(0x7f0000000980)="f1ed9f18c3e6655229989e1b55a4ed9be38fcaa1400b280d1d8e65b89e1051719ac4b6d2653a55945fd17ea51772b08749bb488ff980b5d33a560174a3da58f07b21ecd080bfc0ac405e10ceb2e1a7828b57ffc3ce8154000ba4558395985d156739b74b2ec79eb71ee6141487f2bb0e75910262fce0e339f70229d30d543d31ecf635218738d12ea114dee20e7bcdfd07bb34bc816d629bd09c526447c316db6e11262f9c473cc77842ac9926d51d0f1b0fb75cbca5ed965c1691", 0xbb}, {&(0x7f0000002200)="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", 0x79e}], 0x6, &(0x7f0000000640)=ANY=[], 0x3, 0x880}], 0x1, 0x80001) recvmmsg(r9, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f00000042c0)=""/4082, 0xff2}], 0x2}, 0x8005}], 0x1, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="650f1b1bb95b080000b83d000000ba000000000f308fa878c01ef6430f017701c4a191c402000f001e0fc10d08000000450f01f8360f072e6726470f01ca", 0x3e}], 0x1, 0x2, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0, 0xf}], 0x1, 0x0, 0x0, 0x0) r11 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x80012, r11, 0x7ffff000) 3m4.923427009s ago: executing program 33 (id=416): write$bt_hci(0xffffffffffffffff, &(0x7f0000000500)={0x1, @write_ssp_mode={{0xc56, 0x1}, {0x54}}}, 0x5) ioctl$COMEDI_CMD(0xffffffffffffffff, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0x3e8, 0x2, 0x0, 0x20, 0x1, 0x20, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0}) ioctl$COMEDI_BUFCONFIG(0xffffffffffffffff, 0x8020640d, &(0x7f00000002c0)={0x1, 0x2, 0x0, 0x1}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r6, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r9 = accept4$alg(r8, 0x0, 0x0, 0x40800) sendmmsg$alg(r9, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000003240)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0x10}, {&(0x7f0000000480)="439dce3672b42d0ac56da6cfae9bbaa2bbb23fd219a88c55cfb134448890fd3aa11f6574a521422666d0ae8060999be0f9f8c88fa4cd808ff3f1a4a5f0f051b695e9dd25a112e1aff097823d825f94547f6e7783c87dd97a8eb2ecad4d97a561781b3e531157301bac971f273659c064e72603ffb832b8a94d3be8", 0x7b}, {&(0x7f0000000580)="69ec03397cf0ed32bbe95e7e45d7918307939da4b8f86f5733217ac61385d95bef", 0x21}, {&(0x7f0000000680)="08e88d4de4594308ad8ecf5db5f83d72be47105ab5fd2fb7298dc4036dd6d448812651ac61b66c2362979a6bf8e64cf2d7ed9c81089a2c391ca57a6582731c1c81aadfe31838e48a832be9ecc9a94a1b68d17a00d091f39fd10d876e038437ae53cfd6f023194d61033b11dd600001c065ab80a76db7e1d9a26ae5e786a12e2ea88e5fa63bf276dd866724da678fb33f55f971554d9c4c51cdd9661d3db3a5d28823d3f977a45daccca53ab53e53719fd4b8c1b0b205c88caeffbe7ab7c6e2c6bdbab5b50f471f4e7aeae8a78270c29aaae19d351f6f3814e6ed43b45a97ad980165c8e5492345", 0xe7}, {&(0x7f0000000980)="f1ed9f18c3e6655229989e1b55a4ed9be38fcaa1400b280d1d8e65b89e1051719ac4b6d2653a55945fd17ea51772b08749bb488ff980b5d33a560174a3da58f07b21ecd080bfc0ac405e10ceb2e1a7828b57ffc3ce8154000ba4558395985d156739b74b2ec79eb71ee6141487f2bb0e75910262fce0e339f70229d30d543d31ecf635218738d12ea114dee20e7bcdfd07bb34bc816d629bd09c526447c316db6e11262f9c473cc77842ac9926d51d0f1b0fb75cbca5ed965c1691", 0xbb}, {&(0x7f0000002200)="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", 0x79e}], 0x6, &(0x7f0000000640)=ANY=[], 0x3, 0x880}], 0x1, 0x80001) recvmmsg(r9, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f00000042c0)=""/4082, 0xff2}], 0x2}, 0x8005}], 0x1, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="650f1b1bb95b080000b83d000000ba000000000f308fa878c01ef6430f017701c4a191c402000f001e0fc10d08000000450f01f8360f072e6726470f01ca", 0x3e}], 0x1, 0x2, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0, 0xf}], 0x1, 0x0, 0x0, 0x0) r11 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x80012, r11, 0x7ffff000) 6.480879912s ago: executing program 0 (id=1247): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000ff000040720501cb6526010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000340)={0x14, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000840)={0x14, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="00031f0000001f03"]}, 0x0) 5.164328304s ago: executing program 6 (id=1254): socket$inet(0x2, 0x4000000000000001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x22080, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000400), 0x6, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0xc, &(0x7f0000004080)=[{&(0x7f0000002080)=""/4096, 0x1000}], 0x1, 0x4, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r2, 0x7211, 0x3a1a, 0x1, 0x0, 0x0) 5.079950256s ago: executing program 6 (id=1255): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000001a00)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r5, r4, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000000240)={0x10, 0x1, r6}) 4.041021241s ago: executing program 6 (id=1258): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRES16], 0x0) syz_usb_ep_read(r0, 0xa, 0x5d, 0x0) 3.496863942s ago: executing program 3 (id=1262): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000001d80)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000003c0)="18bc419031a1e380", 0x8}], 0x1}}], 0x2, 0x6000000000000000) 3.47094891s ago: executing program 3 (id=1263): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, 0x0, 0x3000c041) syz_usb_connect(0x0, 0x2d, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0x69, 0xfc, 0x41, 0x10, 0xa2c, 0x8, 0x1d64, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x10, 0x7, 0x80, 0x0, "", [{{0x9, 0x4, 0x2c, 0xa, 0x1, 0x8b, 0x17, 0x65, 0x1, [], [{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x9, 0x80}}]}}]}}]}}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0}) 3.331275367s ago: executing program 0 (id=1265): socket$inet(0x2, 0x4000000000000001, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x22080, 0x0) r0 = openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000400), 0x6, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0xc, &(0x7f0000004080)=[{&(0x7f0000002080)=""/4096, 0x1000}], 0x1, 0x4, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r2, 0x7211, 0x3a1a, 0x1, 0x0, 0x0) 3.279743602s ago: executing program 0 (id=1266): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r2, 0x400, 0x1) read$msr(r1, &(0x7f0000019300)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) syz_emit_vhci(&(0x7f0000004e40)=ANY=[@ANYBLOB], 0x17) bind$can_raw(0xffffffffffffffff, &(0x7f00000001c0), 0x10) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000001040)=0x8aa760e3, 0x4) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r3}, 0x50) 2.803895002s ago: executing program 0 (id=1267): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = dup3(r0, r1, 0x80000) r3 = dup(r2) write$FUSE_CREATE_OPEN(r2, &(0x7f00000002c0)={0xa0, 0x0, 0x0, {{0x4, 0x1, 0xc, 0x6, 0x7, 0x3627, {0x4, 0xbd5, 0x6, 0xffffffff, 0x6, 0x67, 0x3, 0x4, 0xfff, 0xa000, 0x80000001, 0x0, 0x0, 0xa2}}, {0x0, 0x4}}}, 0xa0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, 0x0, 0x1, 0x0, 0x0) read(r3, &(0x7f00000014c0)=""/4096, 0x1000) 2.469587147s ago: executing program 5 (id=1268): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000000)={0x210a, r1}, 0x0) landlock_restrict_self(r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) 2.467634978s ago: executing program 5 (id=1269): socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x3) prlimit64(r0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000080), 0x10) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 2.296561487s ago: executing program 2 (id=1270): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x5bc, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x10, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c) 2.021029335s ago: executing program 2 (id=1271): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)={0x18, 0x44, 0x1, 0x70bd29, 0x4, {0x2}, [@nested={0x4, 0x48}]}, 0x18}}, 0x4008094) 1.893536121s ago: executing program 3 (id=1272): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000049c0)=[@text64={0x40, 0x0}], 0x1, 0x15, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.893368327s ago: executing program 2 (id=1273): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000001d80)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000003c0)="18bc419031a1e380", 0x8}], 0x1}}], 0x2, 0x6000000000000000) 1.864278937s ago: executing program 2 (id=1274): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.40182878s ago: executing program 5 (id=1275): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000180)="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", 0x1000}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, 0x0) 1.262113049s ago: executing program 3 (id=1276): socket$inet(0x2, 0x4000000000000001, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x22080, 0x0) r0 = openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000400), 0x6, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0xc, &(0x7f0000004080)=[{&(0x7f0000002080)=""/4096, 0x1000}], 0x1, 0x4, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r2, 0x7211, 0x3a1a, 0x1, 0x0, 0x0) 1.180126954s ago: executing program 5 (id=1277): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) gettid() openat$comedi(0xffffffffffffff9c, 0x0, 0x46442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mount(&(0x7f0000000000), 0x0, &(0x7f0000000800)='9p\x00', 0x500, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = syz_open_procfs(0x0, &(0x7f0000000900)='smaps\x00') pread64(r2, &(0x7f0000000000)=""/190, 0xbe, 0xa0000000000000) 1.154493503s ago: executing program 3 (id=1278): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f024}) r1 = syz_open_dev$vim2m(0x0, 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f022}) r2 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) 1.108206644s ago: executing program 2 (id=1279): fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(&(0x7f000000cffc)=0x2, 0x189, 0x2, 0x0, 0x0, 0xfffffff7) 767.335608ms ago: executing program 3 (id=1280): syz_open_dev$sndctrl(0x0, 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x34611d41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000052b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005468a9fe52386e52000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000f7ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bb33ea699a80e3f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, r3) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 648.035784ms ago: executing program 5 (id=1281): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x5bc, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x10, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c) 585.834506ms ago: executing program 0 (id=1282): r0 = socket(0x2b, 0x1, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r2 = open(0x0, 0x48141, 0x0) fcntl$getflags(r2, 0x401) read$msr(r1, &(0x7f0000019300)=""/102392, 0x18ff8) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x28, 0x5, 0x0) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000080)=0x37) connect$unix(r3, 0x0, 0x60) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0xa, 0x42032, 0xffffffffffffffff, 0x0) syz_create_resource$binfmt(0x0) openat$userio(0xffffffffffffff9c, 0x0, 0x12940, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000080)=0x1ff, 0x5) socket$netlink(0x10, 0x3, 0x0) 585.668356ms ago: executing program 6 (id=1283): r0 = getpid() syz_open_dev$sndctrl(0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) pivot_root(&(0x7f0000000000)='.\x00', &(0x7f0000000180)='.\x00') 542.5013ms ago: executing program 6 (id=1284): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x35b) 247.988028ms ago: executing program 5 (id=1285): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000002700)=""/79, 0x0, 0x60000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/198, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102882333404f17cf8af43901020301090245"], 0x0) 125.699191ms ago: executing program 6 (id=1286): syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaa0c08004500fdbe000000000011"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000008380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2022012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40806685, &(0x7f0000000000)={0x7, 0x9}) 94.282652ms ago: executing program 2 (id=1287): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f00000001c0)={0x40, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 0 (id=1288): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, 0x0, 0x20000080) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) kernel console output (not intermixed with test programs): [ 256.863491][ T5624] usbtest 6-1:1.0: couldn't get endpoints, -22 [ 256.873285][ T5624] usbtest 6-1:1.0: probe with driver usbtest failed with error -22 [ 256.951634][ T804] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 256.962050][ T5736] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 257.061382][ T5624] usb 6-1: USB disconnect, device number 13 [ 257.111835][ T804] usb 1-1: Using ep0 maxpacket: 16 [ 257.125512][ T804] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 257.144970][ T804] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 257.163756][ T5736] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.180040][ T5736] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 257.190589][ T804] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 257.239649][ T5736] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 257.253370][ T804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.262610][ T5736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.386227][ T804] usb 1-1: Product: á Œ [ 257.390494][ T804] usb 1-1: SerialNumber: Ь [ 257.395845][ T5736] usb 4-1: Product: syz [ 257.406768][ T5736] usb 4-1: Manufacturer: syz [ 257.418428][ T5736] usb 4-1: SerialNumber: syz [ 258.328179][ T29] audit: type=1400 audit(1783711585.400:806): avc: denied { ioctl } for pid=8005 comm="syz.3.519" path="socket:[19503]" dev="sockfs" ino=19503 ioctlcmd=0x582a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 258.440432][ T5736] usb 4-1: unit 4 not found! [ 258.587112][ T5736] usb 4-1: USB disconnect, device number 18 [ 258.751785][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 259.741423][ T29] audit: type=1400 audit(1783711586.810:807): avc: denied { append } for pid=8034 comm="syz.6.528" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 259.823854][ T804] cdc_ncm 1-1:1.0: bind() failure [ 259.863474][ T804] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 259.883210][ T804] cdc_ncm 1-1:1.1: bind() failure [ 260.027416][ T804] usb 1-1: USB disconnect, device number 13 [ 260.113918][ T8045] netlink: 'syz.3.530': attribute type 29 has an invalid length. [ 260.122630][ T8045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.530'. [ 261.065227][ T8060] netlink: 104 bytes leftover after parsing attributes in process `syz.3.534'. [ 261.836990][ T29] audit: type=1400 audit(1783711588.220:808): avc: denied { create } for pid=8048 comm="syz.0.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 263.342256][ T8076] kvm: kvm [8075]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000080 [ 263.527494][ T29] audit: type=1400 audit(1783711590.600:809): avc: denied { getopt } for pid=8058 comm="syz.2.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 264.708670][ T8104] netlink: 27 bytes leftover after parsing attributes in process `syz.6.549'. [ 264.808142][ T8101] syz.2.548 (8101): drop_caches: 2 [ 265.112995][ T44] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 265.368480][ T44] usb 4-1: config 13 has an invalid interface number: 241 but max is 0 [ 265.399723][ T44] usb 4-1: config 13 has no interface number 0 [ 265.429071][ T44] usb 4-1: config 13 interface 241 has no altsetting 0 [ 265.787246][ T44] usb 4-1: New USB device found, idVendor=12d1, idProduct=b812, bcdDevice=e9.50 [ 265.896719][ T8121] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 266.101939][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.111340][ T44] usb 4-1: Product: syz [ 266.121543][ T44] usb 4-1: Manufacturer: syz [ 266.132468][ T44] usb 4-1: SerialNumber: syz [ 266.383868][ T44] huawei_cdc_ncm 4-1:13.241: CDC Union missing and no IAD found [ 266.432014][ T44] huawei_cdc_ncm 4-1:13.241: bind() failure [ 266.467966][ T44] usb 4-1: USB disconnect, device number 19 [ 266.574908][ T29] audit: type=1400 audit(1783711593.650:810): avc: denied { read write } for pid=8130 comm="syz.2.558" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 266.620718][ T29] audit: type=1400 audit(1783711593.680:811): avc: denied { open } for pid=8130 comm="syz.2.558" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 266.644298][ T29] audit: type=1400 audit(1783711593.680:812): avc: denied { ioctl } for pid=8130 comm="syz.2.558" path="/dev/ppp" dev="devtmpfs" ino=710 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 266.784229][ T5757] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 266.891593][ T5723] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 267.463472][ T5624] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 267.472305][ T5723] usb 7-1: Using ep0 maxpacket: 32 [ 267.478940][ T5757] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 267.479033][ T5723] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.502850][ T5757] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 267.504816][ T5723] usb 7-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 267.516229][ T5757] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 267.527293][ T5723] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.538411][ T5757] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 267.556844][ T5723] usb 7-1: Product: syz [ 267.561136][ T5723] usb 7-1: Manufacturer: syz [ 267.567031][ T5723] usb 7-1: SerialNumber: syz [ 267.620986][ T29] audit: type=1400 audit(1783711594.650:813): avc: denied { write } for pid=8141 comm="syz.2.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 267.644305][ T5723] usb 7-1: config 0 descriptor?? [ 267.658342][ T5723] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 268.154820][ T29] audit: type=1400 audit(1783711595.230:814): avc: denied { cmd } for pid=8149 comm="syz.2.565" path="/dev/ublk-control" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 268.229654][ T5757] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.240456][ T5624] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 268.249231][ T5624] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 268.265090][ T5624] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 268.279357][ T5624] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 268.294337][ T5624] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 268.324364][ T29] audit: type=1400 audit(1783711595.400:815): avc: denied { read write } for pid=8154 comm="syz.2.567" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 268.325361][ T5757] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 268.362323][ T5757] usb 6-1: invalid MIDI out EP 0 [ 268.386949][ T5716] hid_parser_main: 5 callbacks suppressed [ 268.386967][ T5716] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 268.389408][ T29] audit: type=1400 audit(1783711595.400:816): avc: denied { open } for pid=8154 comm="syz.2.567" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 268.450532][ T5716] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 268.575601][ T5723] input: gspca_pac7302 as /devices/platform/dummy_hcd.6/usb7/7-1/input/input10 [ 268.578243][ T5624] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 268.591982][ T5624] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 268.602677][ T5624] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 268.614311][ T5624] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 268.635106][ T8158] trusted_key: encrypted_key: insufficient parameters specified [ 268.642914][ T5624] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 268.743667][ T5757] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 268.767303][ T5757] usb 6-1: USB disconnect, device number 14 [ 268.854785][ T5736] usb 7-1: USB disconnect, device number 4 [ 269.018437][ T5624] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 269.026561][ T5624] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 269.037584][ T5624] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 269.049271][ T5624] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 269.060428][ T5624] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 269.171600][ T5723] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 269.271656][ T5716] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 269.323253][ T5723] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.334278][ T5723] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.344386][ T5723] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 269.354687][ T5723] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.364107][ T5723] usb 4-1: config 0 descriptor?? [ 269.431871][ T5716] usb 3-1: Using ep0 maxpacket: 8 [ 269.441302][ T5624] usb 1-1: string descriptor 0 read error: -22 [ 269.448783][ T5716] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 269.457098][ T5624] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 269.457140][ T5624] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.479210][ T5716] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 269.489572][ T5716] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 269.499995][ T5716] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 269.510506][ T5716] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 269.527456][ T5624] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 269.585814][ T5723] usbhid 4-1:0.0: can't add hid device: -71 [ 269.597175][ T5716] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 269.608272][ T5723] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 269.616278][ T5716] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.654687][ T5723] usb 4-1: USB disconnect, device number 20 [ 269.698482][ T804] usb 1-1: USB disconnect, device number 14 [ 271.464401][ T5716] usb 3-1: GET_CAPABILITIES returned 0 [ 271.480179][ T5716] usbtmc 3-1:16.0: can't read capabilities [ 271.571684][ T5624] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 271.680413][ T187] usb 3-1: USB disconnect, device number 27 [ 271.747562][ T5624] usb 7-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 271.760078][ T5624] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 271.777994][ T5624] usb 7-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 271.788745][ T5624] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.797949][ T5624] usb 7-1: Product: syz [ 271.803065][ T5624] usb 7-1: Manufacturer: syz [ 271.808141][ T5624] usb 7-1: SerialNumber: syz [ 271.825677][ T5624] usb 7-1: config 0 descriptor?? [ 271.850807][ T5624] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 271.909984][ T29] audit: type=1400 audit(1783711598.980:817): avc: denied { ioctl } for pid=8181 comm="syz.0.578" path="socket:[20575]" dev="sockfs" ino=20575 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 271.985859][ T29] audit: type=1400 audit(1783711599.060:818): avc: denied { bind } for pid=8185 comm="syz.0.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 272.817299][ T5624] gspca_sunplus: reg_r err -71 [ 272.834297][ T5624] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 272.904699][ T5624] usb 7-1: USB disconnect, device number 5 [ 273.151869][ T804] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 273.189552][ T29] audit: type=1400 audit(1783711600.260:819): avc: denied { create } for pid=8205 comm="syz.5.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 273.312326][ T804] usb 3-1: Using ep0 maxpacket: 32 [ 273.335807][ T804] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 273.349923][ T29] audit: type=1400 audit(1783711600.410:820): avc: denied { bind } for pid=8205 comm="syz.5.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 273.381433][ T804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.468827][ T29] audit: type=1400 audit(1783711600.500:821): avc: denied { connect } for pid=8208 comm="syz.3.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 273.522786][ T804] usb 3-1: config 0 descriptor?? [ 273.604791][ T29] audit: type=1400 audit(1783711600.510:822): avc: denied { write } for pid=8208 comm="syz.3.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 273.655129][ T804] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 273.746289][ T29] audit: type=1400 audit(1783711600.670:823): avc: denied { read } for pid=8208 comm="syz.3.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 273.857126][ T29] audit: type=1400 audit(1783711600.790:824): avc: denied { setopt } for pid=8208 comm="syz.3.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 274.215669][ T804] gspca_nw80x: reg_w err -71 [ 274.220505][ T804] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 274.237339][ T804] usb 3-1: USB disconnect, device number 28 [ 274.465359][ T5624] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 275.791655][ T5624] usb 1-1: Using ep0 maxpacket: 32 [ 275.809174][ T5624] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 275.820033][ T5624] usb 1-1: config 0 has no interface number 0 [ 276.193264][ T5624] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 276.245339][ T5624] usb 1-1: config 0 interface 1 has no altsetting 0 [ 276.291300][ T5624] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 276.305035][ T5624] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.315883][ T5624] usb 1-1: Product: syz [ 276.323327][ T5624] usb 1-1: Manufacturer: syz [ 276.328408][ T5624] usb 1-1: SerialNumber: syz [ 276.339314][ T5624] usb 1-1: config 0 descriptor?? [ 276.559286][ T5736] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 276.575143][ T5624] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 276.677804][ T8259] syzkaller0: entered promiscuous mode [ 276.685008][ T8259] syzkaller0: entered allmulticast mode [ 276.706422][ T5624] cx231xx 1-1:0.1: Failed to read PCB config [ 276.724281][ T5624] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 276.745870][ T8259] tipc: Started in network mode [ 276.760353][ T5624] usb 1-1: USB disconnect, device number 15 [ 276.771868][ T8259] tipc: Node identity 4e8398e62336, cluster identity 4711 [ 276.802039][ T5736] usb 4-1: Using ep0 maxpacket: 16 [ 276.821430][ T5736] usb 4-1: config 0 interface 0 has no altsetting 0 [ 276.842791][ T8259] tipc: Enabled bearer , priority 0 [ 276.846742][ T5736] usb 4-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 276.860703][ T5736] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.887463][ T8263] tipc: Resetting bearer [ 276.899111][ T5736] usb 4-1: config 0 descriptor?? [ 276.976609][ T29] audit: type=1400 audit(1783711604.040:825): avc: denied { setopt } for pid=8264 comm="syz.6.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 277.027665][ T8267] 9pnet_virtio: no channels available for device syz [ 277.217127][ T5624] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 277.363643][ T5736] usbhid 4-1:0.0: can't add hid device: -71 [ 277.494849][ T5736] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 277.652658][ T5624] usb 1-1: Using ep0 maxpacket: 32 [ 278.453431][ T5736] usb 4-1: USB disconnect, device number 21 [ 279.379199][ T5624] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 279.427170][ T8258] tipc: Resetting bearer [ 279.475769][ T5624] usb 1-1: can't read configurations, error -71 [ 280.103951][ T8258] tipc: Disabling bearer [ 280.215135][ T9] tipc: Node number set to 1840617702 [ 280.224856][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.610'. [ 280.256393][ T8279] netlink: 4 bytes leftover after parsing attributes in process `syz.5.611'. [ 280.610674][ T8283] syzkaller0: entered promiscuous mode [ 280.691173][ T8283] syzkaller0: entered allmulticast mode [ 281.278386][ T8290] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 281.307982][ T8290] block device autoloading is deprecated and will be removed. [ 281.322353][ T5624] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 281.495125][ T29] audit: type=1400 audit(1783711608.570:826): avc: denied { write } for pid=8282 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 281.559157][ T5624] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 281.580097][ T5624] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.605691][ T5624] usb 1-1: Product: syz [ 281.616526][ T5624] usb 1-1: Manufacturer: syz [ 281.631865][ T5624] usb 1-1: SerialNumber: syz [ 282.599280][ T8328] syzkaller0: entered promiscuous mode [ 282.611547][ T8328] syzkaller0: entered allmulticast mode [ 282.629103][ T8328] tipc: Started in network mode [ 282.639698][ T8328] tipc: Node identity 1e8110b7065f, cluster identity 4711 [ 282.684041][ T5624] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 282.690004][ T8328] tipc: Enabled bearer , priority 0 [ 282.697146][ T5624] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 282.717764][ T5624] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 282.746998][ T8327] tipc: Resetting bearer [ 282.753553][ T29] audit: type=1400 audit(1783711609.820:827): avc: denied { write } for pid=8313 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 282.783756][ T5624] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 282.806899][ T5624] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 282.867771][ T5624] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 282.888818][ T8327] tipc: Disabling bearer [ 282.913627][ T5624] usb 1-1: USB disconnect, device number 18 [ 283.157031][ T8333] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.171641][ T29] audit: type=1400 audit(1783711610.230:828): avc: denied { ioctl } for pid=8339 comm="syz.0.629" path="/dev/ttyq4" dev="devtmpfs" ino=379 ioctlcmd=0x542a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 283.218213][ T8330] kvm: kvm [8329]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 283.230344][ T29] audit: type=1400 audit(1783711610.290:829): avc: denied { mount } for pid=8339 comm="syz.0.629" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 283.295868][ T5270] veth0_vlan: left promiscuous mode [ 283.361023][ T44] veth0_vlan: entered promiscuous mode [ 283.510901][ T8333] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.601644][ T5723] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 284.117581][ T29] audit: type=1400 audit(1783711610.690:830): avc: denied { listen } for pid=8349 comm="syz.5.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 284.392961][ T5723] usb 3-1: Using ep0 maxpacket: 8 [ 284.412483][ T29] audit: type=1400 audit(1783711610.790:831): avc: denied { block_suspend } for pid=8351 comm="syz.0.631" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 284.462772][ T5723] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 284.486122][ T5723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 284.608806][ T5723] usb 3-1: Product: syz [ 284.633715][ T5723] usb 3-1: Manufacturer: syz [ 284.646697][ T5723] usb 3-1: SerialNumber: syz [ 284.665045][ T8333] bond0: (slave netdevsim1): Releasing backup interface [ 284.673574][ T5723] usb 3-1: config 0 descriptor?? [ 284.707012][ T5723] gspca_main: sq905-2.14.0 probing 2770:9120 [ 284.720468][ T8333] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.795996][ T29] audit: type=1400 audit(1783711611.810:832): avc: denied { watch watch_reads } for pid=8363 comm="syz.5.634" path="/99" dev="tmpfs" ino=526 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 284.868676][ T29] audit: type=1400 audit(1783711611.850:833): avc: denied { getopt } for pid=8363 comm="syz.5.634" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 285.346431][ T8333] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.389067][ T5723] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 285.401903][ T5723] sq905 3-1:0.0: probe with driver sq905 failed with error -71 [ 285.445651][ T5723] usb 3-1: USB disconnect, device number 29 [ 285.765342][ T8383] sg_write: data in/out 458716/136 bytes for SCSI command 0x0-- guessing data in; [ 285.765342][ T8383] program syz.5.638 not setting count and/or reply_len properly [ 285.796368][ T29] audit: type=1400 audit(1783711612.870:834): avc: denied { write } for pid=8359 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 286.681332][ T29] audit: type=1400 audit(1783711613.750:835): avc: denied { bind } for pid=8394 comm="syz.5.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 286.757139][ T29] audit: type=1400 audit(1783711613.830:836): avc: denied { write } for pid=8392 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 286.905348][ T29] audit: type=1400 audit(1783711613.970:837): avc: denied { write } for pid=8400 comm="syz.0.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 287.058047][ T29] audit: type=1400 audit(1783711614.130:838): avc: denied { write } for pid=8410 comm="syz.6.648" lport=51586 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 287.058596][ T8411] sctp: [Deprecated]: syz.6.648 (pid 8411) Use of int in max_burst socket option. [ 287.058596][ T8411] Use struct sctp_assoc_value instead [ 287.142133][ T29] audit: type=1400 audit(1783711614.130:839): avc: denied { getopt } for pid=8410 comm="syz.6.648" lport=51586 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 287.509613][ T5624] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 287.978350][ T29] audit: type=1400 audit(1783711615.010:840): avc: denied { write } for pid=8421 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 288.192470][ T29] audit: type=1400 audit(1783711615.220:841): avc: denied { write } for pid=8448 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 288.248336][ T5624] usb 4-1: Using ep0 maxpacket: 32 [ 288.429750][ T5270] 8021q: adding VLAN 0 to HW filter on device eth9 [ 289.273997][ T5624] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 289.291814][ T5624] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.325689][ T5624] usb 4-1: config 0 descriptor?? [ 290.328596][ T5624] as10x_usb: device has been detected [ 290.356893][ T5624] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 290.389069][ T5624] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 290.443285][ T5624] as10x_usb: error during firmware upload part1 [ 290.457622][ T29] audit: type=1400 audit(1783711617.520:842): avc: denied { firmware_load } for pid=5624 comm="kworker/0:3" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 290.488824][ T5624] Registered device nBox DVB-T Dongle [ 290.491876][ T5624] usb 4-1: USB disconnect, device number 22 [ 291.797235][ T5624] Unregistered device nBox DVB-T Dongle [ 291.834104][ T5624] as10x_usb: device has been disconnected [ 291.976222][ T29] audit: type=1400 audit(1783711619.050:843): avc: denied { write } for pid=8462 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.613708][ T29] audit: type=1400 audit(1783711619.690:844): avc: denied { write } for pid=8519 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.953461][ T5270] 8021q: adding VLAN 0 to HW filter on device eth10 [ 293.089189][ T29] audit: type=1400 audit(1783711620.140:845): avc: denied { getattr } for pid=8533 comm="syz.2.683" path="pid:[4026532785]" dev="nsfs" ino=4026532785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 293.262221][ T29] audit: type=1400 audit(1783711620.300:846): avc: denied { mounton } for pid=8533 comm="syz.2.683" path="/150/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 293.288177][ T29] audit: type=1400 audit(1783711620.330:847): avc: denied { unmount } for pid=5618 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 293.786709][ T187] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 294.178287][ T8569] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 294.281986][ T8550] kvm: kvm [8546]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 294.583480][ T187] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.857815][ T187] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.869491][ T187] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 294.879544][ T187] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.899929][ T187] usb 4-1: config 0 descriptor?? [ 295.083847][ T29] audit: type=1400 audit(1783711622.150:848): avc: denied { write } for pid=8552 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.107005][ T804] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 295.284610][ T29] audit: type=1400 audit(1783711622.360:849): avc: denied { write } for pid=8585 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.311740][ T804] usb 7-1: Using ep0 maxpacket: 32 [ 295.329230][ T804] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 295.357488][ T187] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 295.361271][ T804] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.367501][ T187] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 295.401626][ T187] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 295.417080][ T187] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 295.425521][ T804] usb 7-1: config 0 descriptor?? [ 295.426193][ T187] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 295.438521][ T187] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 295.450608][ T187] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 295.456441][ T5270] 8021q: adding VLAN 0 to HW filter on device eth11 [ 295.494392][ T804] gspca_main: sunplus-2.14.0 probing 041e:400b [ 295.521254][ T187] pyra 0003:1E7D:2CF6.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 295.843838][ T8597] syzkaller0: entered promiscuous mode [ 295.856070][ T8597] syzkaller0: entered allmulticast mode [ 295.892806][ T8597] tipc: Enabled bearer , priority 0 [ 295.968157][ T8597] tipc: Resetting bearer [ 296.571666][ T8593] tipc: Resetting bearer [ 296.591201][ T8593] tipc: Disabling bearer [ 296.802126][ T44] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 296.857251][ T29] audit: type=1400 audit(1783711623.930:850): avc: denied { write } for pid=8596 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 296.939927][ T29] audit: type=1400 audit(1783711623.960:851): avc: denied { write } for pid=8618 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 296.953206][ T50] Bluetooth: hci1: unexpected event for opcode 0x0419 [ 297.001312][ T187] pyra 0003:1E7D:2CF6.0004: couldn't init struct pyra_device [ 297.008767][ T187] pyra 0003:1E7D:2CF6.0004: couldn't install mouse [ 297.018023][ T187] pyra 0003:1E7D:2CF6.0004: probe with driver pyra failed with error -71 [ 297.024202][ T5270] 8021q: adding VLAN 0 to HW filter on device eth12 [ 297.038546][ T187] usb 4-1: USB disconnect, device number 23 [ 297.095499][ T44] usb 6-1: Using ep0 maxpacket: 32 [ 297.107341][ T44] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 297.126913][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.144431][ T44] usb 6-1: config 0 descriptor?? [ 297.162455][ T44] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 297.190911][ T804] gspca_sunplus: reg_w_riv err -71 [ 297.202505][ T804] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 297.791274][ T44] gspca_nw80x: reg_w err -110 [ 297.805492][ T44] nw80x 6-1:0.0: probe with driver nw80x failed with error -110 [ 297.819079][ T804] usb 7-1: USB disconnect, device number 6 [ 299.107700][ T187] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 299.590713][ T187] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 299.883963][ T5624] usb 6-1: USB disconnect, device number 15 [ 300.186886][ T8678] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 300.225863][ T44] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 300.256479][ T29] audit: type=1400 audit(1783711627.230:852): avc: denied { accept } for pid=8670 comm="syz.6.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 300.344273][ T29] audit: type=1400 audit(1783711627.420:853): avc: denied { create } for pid=8682 comm="syz.5.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 300.501390][ T44] usb 4-1: unable to get BOS descriptor or descriptor too short [ 300.562436][ T187] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 300.570162][ T44] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 300.761552][ T187] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 300.761691][ T44] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 300.781607][ T187] usb 1-1: Product: syz [ 300.786229][ T187] usb 1-1: Manufacturer: syz [ 300.810713][ T187] usb 1-1: SerialNumber: syz [ 300.829065][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.851186][ T44] usb 4-1: Product: syz [ 300.855622][ T44] usb 4-1: Manufacturer: syz [ 300.860430][ T44] usb 4-1: SerialNumber: syz [ 300.942998][ T29] audit: type=1400 audit(1783711628.010:854): avc: denied { bind } for pid=8690 comm="syz.5.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 300.982815][ T29] audit: type=1400 audit(1783711628.020:855): avc: denied { connect } for pid=8690 comm="syz.5.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 301.042940][ T187] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 301.088837][ T44] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 301.113614][ T44] usb 4-1: 2:1 : bogus bTerminalLink 2 [ 302.362557][ T44] usb 4-1: USB disconnect, device number 24 [ 302.413516][ T8702] trusted_key: encrypted_key: key user:syz not found [ 302.463829][ T29] audit: type=1400 audit(1783711629.520:856): avc: denied { write } for pid=8675 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 303.194025][ T804] usb 1-1: USB disconnect, device number 19 [ 303.268884][ T6119] udevd[6119]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 303.326926][ T804] usblp0: removed [ 303.391816][ T5723] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 303.392032][ T8722] evm: overlay not supported [ 303.407996][ T8719] syzkaller0: entered promiscuous mode [ 303.422635][ T29] audit: type=1400 audit(1783711630.470:857): avc: denied { write } for pid=8723 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 303.478568][ T8719] syzkaller0: entered allmulticast mode [ 303.488243][ T8728] tipc: Enabled bearer , priority 0 [ 303.543801][ T8719] tipc: Resetting bearer [ 303.596453][ T8718] tipc: Resetting bearer [ 303.661724][ T5723] usb 6-1: Using ep0 maxpacket: 32 [ 303.668529][ T5723] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 303.695044][ T8718] tipc: Disabling bearer [ 303.698575][ T5723] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.750616][ T5723] usb 6-1: config 0 descriptor?? [ 303.779111][ T5723] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 304.400537][ T5723] gspca_nw80x: reg_r err -71 [ 304.443148][ T5723] nw80x 6-1:0.0: probe with driver nw80x failed with error -71 [ 304.539014][ T5723] usb 6-1: USB disconnect, device number 16 [ 304.691635][ T5624] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 304.772033][ T804] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 304.860389][ T5624] usb 4-1: unable to get BOS descriptor or descriptor too short [ 304.872126][ T5624] usb 4-1: not running at top speed; connect to a high speed hub [ 304.894511][ T5624] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 304.915735][ T5624] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 304.934772][ T804] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 304.946045][ T5624] usb 4-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 304.957452][ T8783] netlink: 104 bytes leftover after parsing attributes in process `syz.2.747'. [ 304.959958][ T29] audit: type=1400 audit(1783711632.040:858): avc: denied { nlmsg_read } for pid=8782 comm="syz.2.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 304.994838][ T804] usb 1-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 305.033359][ T804] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 305.044816][ T804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.045872][ T5624] usb 4-1: config 14 has no interface number 0 [ 305.059853][ T804] usb 1-1: Product: syz [ 305.059873][ T804] usb 1-1: Manufacturer: syz [ 305.059887][ T804] usb 1-1: SerialNumber: syz [ 305.074823][ T5624] usb 4-1: config 14 has no interface number 1 [ 305.082067][ T5624] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 305.120803][ T5624] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 305.181178][ T5624] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 305.255476][ T5624] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 305.255735][ T8790] syzkaller0: entered promiscuous mode [ 305.281795][ T8790] syzkaller0: entered allmulticast mode [ 305.333915][ T8790] tipc: Started in network mode [ 305.339034][ T8790] tipc: Node identity 02d485f0c145, cluster identity 4711 [ 305.412695][ T8790] tipc: Enabled bearer , priority 0 [ 305.559891][ T8792] tipc: Resetting bearer [ 305.728824][ T8789] tipc: Resetting bearer [ 305.822839][ T8789] tipc: Disabling bearer [ 306.058820][ T5624] usb 4-1: config 14 interface 57 has no altsetting 0 [ 306.066392][ T5624] usb 4-1: config 14 interface 228 has no altsetting 0 [ 306.077816][ T5624] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 306.088147][ T5624] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.096177][ T5624] usb 4-1: Product: syz [ 306.100338][ T5624] usb 4-1: Manufacturer: syz [ 306.104962][ T5624] usb 4-1: SerialNumber: syz [ 306.622601][ T804] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 306.643774][ T804] dvb_usb_af9015 1-1:2.0: probe with driver dvb_usb_af9015 failed with error -22 [ 306.670072][ T804] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 306.694620][ T804] dvb_usb_af9035 1-1:2.0: probe with driver dvb_usb_af9035 failed with error -22 [ 306.720459][ T804] usb 1-1: USB disconnect, device number 20 [ 306.782686][ T5624] legousbtower 4-1:14.57: interrupt endpoints not found [ 306.923067][ T8815] netlink: 8 bytes leftover after parsing attributes in process `syz.5.758'. [ 307.068983][ T8822] openvswitch: netlink: IP tunnel dst address not specified [ 307.102209][ T8824] syzkaller0: entered promiscuous mode [ 307.107777][ T8824] syzkaller0: entered allmulticast mode [ 307.113728][ T5613] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 307.147764][ T8824] tipc: Enabled bearer , priority 0 [ 307.163388][ T8824] tipc: Resetting bearer [ 307.170939][ T8823] tipc: Resetting bearer [ 307.186816][ T8823] tipc: Disabling bearer [ 307.293210][ T5613] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 307.311857][ T5613] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 307.313974][ T5624] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 307.364663][ T5624] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 307.375541][ T5613] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 307.385537][ T187] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 307.712112][ T187] usb 6-1: Using ep0 maxpacket: 32 [ 307.743070][ T5613] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 307.757710][ T5613] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.766098][ T5613] usb 7-1: Product: syz [ 307.770302][ T5613] usb 7-1: Manufacturer: syz [ 307.785117][ T187] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 307.787256][ T5613] usb 7-1: SerialNumber: syz [ 307.797902][ T187] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.811667][ T187] usb 6-1: config 0 descriptor?? [ 307.824515][ T5613] usb 7-1: config 0 descriptor?? [ 307.828866][ T187] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 307.840194][ T8813] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 307.848145][ T8813] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 307.863100][ T5613] usb 7-1: ucan: probing device on interface #0 [ 308.285342][ T187] gspca_nw80x: reg_r err -71 [ 308.300582][ T187] nw80x 6-1:0.0: probe with driver nw80x failed with error -71 [ 308.325528][ T5613] usb 7-1: ucan: device reported invalid device info [ 308.338030][ T187] usb 6-1: USB disconnect, device number 17 [ 308.346207][ T5613] usb 7-1: ucan: probe failed; try to update the device firmware [ 308.360496][ C0] usb 4-1: tower_interrupt_in_callback: usb_submit_urb failed (-1) [ 308.386286][ T804] usb 4-1: USB disconnect, device number 25 [ 308.438133][ T804] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 308.536409][ T5613] usb 7-1: USB disconnect, device number 7 [ 308.692374][ T29] audit: type=1400 audit(1783711635.750:859): avc: denied { write } for pid=8840 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.785348][ T29] audit: type=1400 audit(1783711635.850:860): avc: denied { write } for pid=8854 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.348115][ T29] audit: type=1400 audit(1783711636.420:861): avc: denied { create } for pid=8860 comm="syz.0.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 309.472911][ T29] audit: type=1400 audit(1783711636.440:862): avc: denied { bind } for pid=8860 comm="syz.0.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 309.566770][ T29] audit: type=1400 audit(1783711636.440:863): avc: denied { setopt } for pid=8860 comm="syz.0.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 310.022033][ T29] audit: type=1400 audit(1783711637.010:864): avc: denied { write } for pid=8878 comm="syz.3.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 313.349513][ T5723] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 313.478604][ T29] audit: type=1400 audit(1783711640.550:865): avc: denied { write } for pid=8859 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.514426][ T8908] syzkaller0: entered promiscuous mode [ 313.532401][ T8908] syzkaller0: entered allmulticast mode [ 313.568282][ T8908] tipc: Enabled bearer , priority 0 [ 313.599786][ T5723] usb 6-1: Using ep0 maxpacket: 32 [ 313.612311][ T5723] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 313.636083][ T5723] usb 6-1: config 0 has no interface number 0 [ 313.648311][ T29] audit: type=1400 audit(1783711640.720:866): avc: denied { write } for pid=8915 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.649619][ T8908] tipc: Resetting bearer [ 313.713962][ T5723] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 313.740403][ T5723] usb 6-1: config 0 interface 85 has no altsetting 0 [ 313.774897][ T5723] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 313.803323][ T5723] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.814293][ T5723] usb 6-1: Product: syz [ 313.818577][ T5723] usb 6-1: Manufacturer: syz [ 313.825652][ T5723] usb 6-1: SerialNumber: syz [ 313.841155][ T5723] usb 6-1: config 0 descriptor?? [ 313.862135][ T8907] tipc: Resetting bearer [ 313.891653][ T804] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 313.901990][ T8907] tipc: Disabling bearer [ 314.173064][ T804] usb 1-1: Using ep0 maxpacket: 16 [ 314.184811][ T804] usb 1-1: unable to get BOS descriptor or descriptor too short [ 314.195922][ T804] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.221349][ T804] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 314.235145][ T5613] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 314.266034][ T804] usb 1-1: config 1 interface 1 has no altsetting 0 [ 314.288054][ T804] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 314.311612][ T804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.334130][ T804] usb 1-1: Product: syz [ 314.346302][ T804] usb 1-1: Manufacturer: syz [ 314.351060][ T804] usb 1-1: SerialNumber: syz [ 314.378606][ T29] audit: type=1400 audit(1783711641.420:867): avc: denied { write } for pid=8922 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 314.451598][ T5613] usb 4-1: Using ep0 maxpacket: 16 [ 314.463317][ T5613] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.482754][ T5723] appletouch 6-1:0.85: Geyser mode initialized. [ 314.489385][ T5613] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 314.516028][ T5723] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input11 [ 314.542438][ T5613] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 314.568568][ T29] audit: type=1400 audit(1783711641.640:868): avc: denied { write } for pid=8941 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 314.569300][ T5613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 314.632626][ T804] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 314.648768][ T5613] usb 4-1: SerialNumber: syz [ 314.681076][ T804] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 314.712034][ T5723] usb 6-1: USB disconnect, device number 18 [ 314.718069][ C1] appletouch 6-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 314.846085][ T5723] appletouch 6-1:0.85: input: appletouch disconnected [ 314.883125][ T5613] usb 4-1: 0:2 : does not exist [ 314.900095][ T5613] usb 4-1: unit 5 not found! [ 314.910958][ T804] usb 1-1: USB disconnect, device number 21 [ 315.083345][ T5613] usb 4-1: USB disconnect, device number 26 [ 315.107742][ T6119] udevd[6119]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 315.213920][ T5736] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 315.255073][ T29] audit: type=1400 audit(1783711642.280:869): avc: denied { write } for pid=8949 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 316.673544][ T5736] usb 7-1: Using ep0 maxpacket: 8 [ 316.709898][ T29] audit: type=1400 audit(1783711643.780:870): avc: denied { write } for pid=8969 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 316.710438][ T5736] usb 7-1: unable to get BOS descriptor or descriptor too short [ 316.802433][ T5736] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 316.827569][ T5736] usb 7-1: can't read configurations, error -71 [ 316.866702][ T8977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.798'. [ 316.880242][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.903391][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.461699][ T804] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 317.631743][ T804] usb 3-1: Using ep0 maxpacket: 32 [ 317.678159][ T804] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 317.920871][ T804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.961336][ T8986] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 317.969987][ T8986] IPv6: virt_wifi0: Failed to add prefix route for address fe80::2f; dropping [ 317.996310][ T8986] 8021q: adding VLAN 0 to HW filter on device bond1 [ 318.005864][ T8986] vlan2: left allmulticast mode [ 318.010883][ T8986] bond3: left allmulticast mode [ 318.074612][ T6943] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.103167][ T804] usb 3-1: config 0 descriptor?? [ 318.115565][ T804] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 318.134039][ T6943] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.203353][ T6943] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.422197][ T6943] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.723201][ T804] gspca_nw80x: reg_r err -71 [ 318.762049][ T804] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 318.965365][ T804] usb 3-1: USB disconnect, device number 30 [ 320.941188][ T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 321.157877][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 321.172339][ T5736] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 321.284050][ T9] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 321.293354][ T9] usb 6-1: config 0 has no interface number 0 [ 321.300111][ T29] audit: type=1400 audit(1783711648.370:871): avc: denied { write } for pid=8981 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 321.345166][ T9] usb 6-1: config 0 interface 12 has no altsetting 0 [ 321.363243][ T9] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 321.379768][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.409561][ T9] usb 6-1: Product: syz [ 321.422632][ T9] usb 6-1: Manufacturer: syz [ 321.429808][ T5736] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.448440][ T9] usb 6-1: SerialNumber: syz [ 321.455594][ T5736] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.479058][ T9] usb 6-1: config 0 descriptor?? [ 321.492561][ T5736] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 321.517027][ T5736] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.539128][ T5736] usb 4-1: config 0 descriptor?? [ 321.616956][ T29] audit: type=1400 audit(1783711648.680:872): avc: denied { write } for pid=9029 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 321.667011][ T29] audit: type=1326 audit(1783711648.740:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9030 comm="syz.0.813" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df379de59 code=0x7ffc0000 [ 321.758396][ T29] audit: type=1326 audit(1783711648.740:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9030 comm="syz.0.813" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df379de59 code=0x7ffc0000 [ 321.842648][ T29] audit: type=1326 audit(1783711648.760:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9030 comm="syz.0.813" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df379de59 code=0x7ffc0000 [ 321.900998][ T29] audit: type=1326 audit(1783711648.760:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9030 comm="syz.0.813" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df379de59 code=0x7ffc0000 [ 321.993907][ T29] audit: type=1326 audit(1783711648.780:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9030 comm="syz.0.813" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f8df379de59 code=0x7ffc0000 [ 322.020203][ T29] audit: type=1326 audit(1783711648.780:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9030 comm="syz.0.813" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df379de59 code=0x7ffc0000 [ 322.074485][ T29] audit: type=1326 audit(1783711648.780:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9030 comm="syz.0.813" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df379de59 code=0x7ffc0000 [ 322.117493][ T29] audit: type=1326 audit(1783711648.780:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9030 comm="syz.0.813" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df379de59 code=0x7ffc0000 [ 322.150476][ T9039] syzkaller0: entered promiscuous mode [ 322.158135][ T9039] syzkaller0: entered allmulticast mode [ 322.170513][ T9039] tipc: Enabled bearer , priority 0 [ 322.181256][ T9039] tipc: Resetting bearer [ 322.188177][ T9037] tipc: Resetting bearer [ 322.203612][ T9037] tipc: Disabling bearer [ 322.244010][ T5736] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 322.254033][ T5736] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 322.261306][ T5736] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 322.268774][ T5736] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 322.276787][ T9] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 322.284963][ T9] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 322.295920][ T9] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 322.306069][ T5736] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 322.314043][ T9] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 322.325415][ T5736] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 322.335346][ T5736] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 322.349241][ T9] usb 6-1: USB disconnect, device number 19 [ 322.356117][ T804] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 322.370268][ T5736] pyra 0003:1E7D:2CF6.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 322.402048][ T5723] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 322.515154][ T804] usb 1-1: Using ep0 maxpacket: 32 [ 322.523520][ T804] usb 1-1: unable to get BOS descriptor or descriptor too short [ 322.543137][ T804] usb 1-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 32 [ 322.555873][ T804] usb 1-1: config 1 interface 0 has no altsetting 0 [ 322.573391][ T5723] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 322.591694][ T5723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.605175][ T804] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 322.616298][ T5723] usb 3-1: Product: syz [ 322.620527][ T804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.629633][ T5723] usb 3-1: Manufacturer: syz [ 322.635103][ T5723] usb 3-1: SerialNumber: syz [ 322.639901][ T804] usb 1-1: Product: syz [ 322.646637][ T804] usb 1-1: Manufacturer: syz [ 322.656146][ T804] usb 1-1: SerialNumber: syz [ 322.672904][ T9042] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 322.927134][ T804] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 322.959444][ T804] usb 1-1: USB disconnect, device number 22 [ 323.060518][ T5723] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 323.072413][ T44] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 323.081315][ T5723] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 323.191613][ T9] usb 6-1: new low-speed USB device number 20 using dummy_hcd [ 323.254828][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.265877][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.268203][ T5736] pyra 0003:1E7D:2CF6.0005: couldn't init struct pyra_device [ 323.279185][ T44] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 323.298920][ T5736] pyra 0003:1E7D:2CF6.0005: couldn't install mouse [ 323.303056][ T44] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 323.309232][ T5736] pyra 0003:1E7D:2CF6.0005: probe with driver pyra failed with error -32 [ 323.316634][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.333246][ T5736] usb 4-1: USB disconnect, device number 27 [ 323.350349][ T9] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 323.351529][ T44] usb 7-1: config 0 descriptor?? [ 323.361438][ T9] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 323.385394][ T9] usb 6-1: config 179 has no interface number 0 [ 323.402857][ T9] usb 6-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 323.417695][ T9] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 323.430078][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.431530][ T804] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 323.614647][ T804] usb 1-1: unable to get BOS descriptor or descriptor too short [ 323.623907][ T804] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 323.632815][ T804] usb 1-1: can't read configurations, error -71 [ 323.651908][ T5613] usb 6-1: USB disconnect, device number 20 [ 323.786918][ T44] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 324.053957][ T44] usb 7-1: USB disconnect, device number 10 [ 324.101368][ T5723] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 324.118772][ T5723] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 324.128695][ T5723] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 324.144079][ T5723] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 324.168054][ T5723] usb 3-1: USB disconnect, device number 31 [ 324.573630][ T44] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 324.754337][ T44] usb 6-1: Using ep0 maxpacket: 8 [ 324.813732][ T44] usb 6-1: config 0 has no interfaces? [ 324.924279][ T44] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 325.004330][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.111980][ T44] usb 6-1: Product: syz [ 325.172238][ T44] usb 6-1: Manufacturer: syz [ 325.225742][ T44] usb 6-1: SerialNumber: syz [ 325.454040][ T44] usb 6-1: config 0 descriptor?? [ 325.827251][ T44] usb 6-1: USB disconnect, device number 21 [ 327.076304][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 327.076321][ T29] audit: type=1800 audit(1783711654.150:893): pid=9078 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.832" name="bus" dev="ramfs" ino=24015 res=0 errno=0 [ 327.257297][ T29] audit: type=1800 audit(1783711654.200:894): pid=9081 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.832" name="bus" dev="ramfs" ino=24015 res=0 errno=0 [ 328.610403][ T50] Bluetooth: hci1: unexpected event for opcode 0x2042 [ 329.232430][ T29] audit: type=1400 audit(1783711656.300:895): avc: denied { setopt } for pid=9139 comm="syz.0.852" lport=55604 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 330.268916][ T9163] binder_alloc: 9156: binder_alloc_buf, no vma [ 330.359942][ T29] audit: type=1400 audit(1783711657.340:896): avc: denied { call } for pid=9156 comm="syz.6.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 330.629977][ T50] Bluetooth: hci1: unexpected event for opcode 0x2042 [ 330.805704][ T29] audit: type=1400 audit(1783711657.880:897): avc: denied { execute } for pid=9175 comm="syz.0.864" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 331.531561][ T5723] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 332.407785][ T5723] usb 7-1: Using ep0 maxpacket: 32 [ 332.416186][ T5723] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 135, changing to 7 [ 332.431075][ T5723] usb 7-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice= 0.40 [ 332.442866][ T5723] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.459293][ T5723] usb 7-1: Product: syz [ 332.601862][ T5723] usb 7-1: Manufacturer: syz [ 332.606993][ T5723] usb 7-1: SerialNumber: syz [ 333.660033][ T5723] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 333.675312][ T5723] gspca_stv06xx: st6422 sensor detected [ 333.932638][ T5723] STV06xx 7-1:1.0: probe with driver STV06xx failed with error -71 [ 333.965680][ T5723] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 334.010408][ T5723] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 334.193713][ T5723] usb 7-1: USB disconnect, device number 11 [ 334.294284][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 337.251528][ T804] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 337.305886][ T9336] syzkaller0: entered promiscuous mode [ 337.311601][ T9336] syzkaller0: entered allmulticast mode [ 337.323167][ T9336] tipc: Enabled bearer , priority 0 [ 337.334867][ T9336] tipc: Resetting bearer [ 337.343681][ T9335] tipc: Resetting bearer [ 337.370207][ T9335] tipc: Disabling bearer [ 337.411548][ T804] usb 4-1: Using ep0 maxpacket: 8 [ 337.418290][ T804] usb 4-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 337.427835][ T804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.466918][ T804] usb 4-1: config 0 descriptor?? [ 337.532850][ T804] gm12u320 4-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 337.568940][ T804] gm12u320 4-1:0.0: probe with driver gm12u320 failed with error -5 [ 337.605924][ T804] usb-storage 4-1:0.0: USB Mass Storage device detected [ 337.647738][ T804] usb-storage 4-1:0.0: device ignored [ 337.672235][ T9] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 338.058071][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 338.082526][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 338.091592][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.104783][ T9] usb 6-1: config 0 descriptor?? [ 338.116893][ T50] Bluetooth: hci3: unexpected event for opcode 0x2042 [ 338.215018][ T804] usb 4-1: USB disconnect, device number 28 [ 338.252356][ T9332] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 339.207923][ T9] logitech-djreceiver 0003:046D:C71F.0007: unknown main item tag 0x0 [ 339.217468][ T9] logitech-djreceiver 0003:046D:C71F.0007: unknown main item tag 0x0 [ 339.231855][ T9] logitech-djreceiver 0003:046D:C71F.0007: unknown main item tag 0x0 [ 339.241532][ T9] logitech-djreceiver 0003:046D:C71F.0007: unknown main item tag 0x0 [ 339.253325][ T9] logitech-djreceiver 0003:046D:C71F.0007: unknown main item tag 0x0 [ 339.261431][ T9] logitech-djreceiver 0003:046D:C71F.0007: unknown main item tag 0x0 [ 339.269558][ T9] logitech-djreceiver 0003:046D:C71F.0007: unknown main item tag 0x0 [ 339.277655][ T9] logitech-djreceiver 0003:046D:C71F.0007: unknown main item tag 0x0 [ 339.285782][ T9] logitech-djreceiver 0003:046D:C71F.0007: unknown main item tag 0x0 [ 339.292556][ T5723] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 339.294271][ T9] logitech-djreceiver 0003:046D:C71F.0007: unknown main item tag 0x0 [ 339.312072][ T9] logitech-djreceiver 0003:046D:C71F.0007: hidraw0: USB HID v7f.fd Device [HID 046d:c71f] on usb-dummy_hcd.5-1/input0 [ 339.661124][ T29] audit: type=1400 audit(1783711666.730:898): avc: denied { listen } for pid=9375 comm="syz.6.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 339.669771][ T9] usb 6-1: USB disconnect, device number 22 [ 339.754733][ T5723] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 339.795516][ T5723] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 339.824910][ T5723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 339.855426][ T5723] usb 3-1: Product: syz [ 339.887044][ T5723] usb 3-1: Manufacturer: syz [ 339.902339][ T9378] fido_id[9378]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 339.903337][ T5723] usb 3-1: SerialNumber: syz [ 340.179387][ T5723] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 340.398244][ T29] audit: type=1400 audit(1783711667.470:899): avc: denied { read write } for pid=9361 comm="syz.2.939" name="lp0" dev="devtmpfs" ino=3101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 340.457773][ T29] audit: type=1400 audit(1783711667.490:900): avc: denied { open } for pid=9361 comm="syz.2.939" path="/dev/usb/lp0" dev="devtmpfs" ino=3101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 340.741544][ T5723] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 340.901620][ T5723] usb 7-1: Using ep0 maxpacket: 8 [ 340.912884][ T5723] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 340.928074][ T5723] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 340.954871][ T5723] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 340.980455][ T5723] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 341.007985][ T5723] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 341.026878][ T50] Bluetooth: hci2: unexpected event for opcode 0x2042 [ 341.043466][ T5723] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.073579][ T5723] hub 7-1:1.0: bad descriptor, ignoring hub [ 341.081166][ T5723] hub 7-1:1.0: probe with driver hub failed with error -5 [ 341.089174][ T5723] cdc_wdm 7-1:1.0: skipping garbage [ 341.094667][ T5723] cdc_wdm 7-1:1.0: skipping garbage [ 341.103873][ T5723] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 341.109876][ T5723] cdc_wdm 7-1:1.0: Unknown control protocol [ 341.642379][ T5723] usb 7-1: USB disconnect, device number 12 [ 341.861264][ T44] usb 3-1: USB disconnect, device number 32 [ 341.891971][ T44] usblp0: removed [ 341.931745][ T5723] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 342.101747][ T5723] usb 6-1: Using ep0 maxpacket: 8 [ 342.127153][ T5723] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 342.183766][ T5723] usb 6-1: config 0 interface 0 has no altsetting 0 [ 342.211131][ T5723] usb 6-1: New USB device found, idVendor=05ac, idProduct=0320, bcdDevice= 0.00 [ 342.236680][ T5723] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.261221][ T5723] usb 6-1: config 0 descriptor?? [ 342.374470][ T9455] netlink: 'syz.2.977': attribute type 5 has an invalid length. [ 342.538791][ T9458] netlink: 'syz.2.977': attribute type 5 has an invalid length. [ 343.346351][ T5723] apple 0003:05AC:0320.0008: hidraw0: USB HID v0.81 Device [HID 05ac:0320] on usb-dummy_hcd.5-1/input0 [ 343.444206][ T5723] usb 6-1: USB disconnect, device number 23 [ 343.713664][ T9463] fido_id[9463]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 344.162143][ T9474] netlink: zone id is out of range [ 345.219621][ T5610] Bluetooth: hci4: command 0x0406 tx timeout [ 345.305454][ T9482] ip6tnl0: Caught tx_queue_len zero misconfig [ 346.315394][ T9503] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.995'. [ 346.342270][ T9503] openvswitch: netlink: Message has 512 unknown bytes. [ 348.303702][ T9516] netlink: 12 bytes leftover after parsing attributes in process `syz.6.999'. [ 348.331435][ T9516] 8021q: adding VLAN 0 to HW filter on device bond1 [ 349.075998][ T9534] Bluetooth: MGMT ver 1.23 [ 349.991528][ T44] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 351.036309][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 351.065387][ T44] usb 3-1: unable to get BOS descriptor or descriptor too short [ 351.103695][ T44] usb 3-1: config 6 interface 0 has no altsetting 0 [ 351.128053][ T44] usb 3-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=7e.1c [ 351.156597][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.191518][ T44] usb 3-1: Product: syz [ 351.195727][ T44] usb 3-1: Manufacturer: syz [ 351.200343][ T44] usb 3-1: SerialNumber: syz [ 351.211631][ T187] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 351.396550][ T187] usb 7-1: Using ep0 maxpacket: 32 [ 351.423480][ T44] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 351.452615][ T44] pwc: Failed to set LED on/off time (-71) [ 351.462396][ T44] pwc: send_video_command error -71 [ 351.472006][ T44] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 351.493163][ T44] Philips webcam 3-1:6.0: probe with driver Philips webcam failed with error -71 [ 351.521895][ T44] usb 3-1: USB disconnect, device number 33 [ 351.626693][ T9540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.646650][ T9540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.667804][ T187] usb 7-1: unable to get BOS descriptor or descriptor too short [ 351.679929][ T187] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 351.693460][ T187] usb 7-1: can't read configurations, error -71 [ 354.736633][ T5723] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 354.941625][ T5723] usb 3-1: Using ep0 maxpacket: 32 [ 354.974748][ T5723] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 355.021237][ T5723] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 355.057549][ T5723] usb 3-1: config 0 interface 0 has no altsetting 0 [ 355.083185][ T5723] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 355.104804][ T5723] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.155641][ T5723] usb 3-1: config 0 descriptor?? [ 355.922733][ T5723] hid_parser_main: 488 callbacks suppressed [ 355.922760][ T5723] corsair-psu 0003:1B1C:1C09.0009: unknown main item tag 0x0 [ 356.019787][ T5723] corsair-psu 0003:1B1C:1C09.0009: unknown main item tag 0x0 [ 356.054869][ T5723] corsair-psu 0003:1B1C:1C09.0009: unknown main item tag 0x0 [ 356.103452][ T5723] corsair-psu 0003:1B1C:1C09.0009: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.2-1/input0 [ 356.243033][ T5723] corsair-psu 0003:1B1C:1C09.0009: unable to initialize device (-90) [ 356.287286][ T5723] corsair-psu 0003:1B1C:1C09.0009: probe with driver corsair-psu failed with error -90 [ 356.338057][ T5723] usb 3-1: USB disconnect, device number 34 [ 358.323268][ T5716] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 358.492202][ T5716] usb 4-1: Using ep0 maxpacket: 8 [ 358.506469][ T5716] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 358.531216][ T5716] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 358.560666][ T5716] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 358.587321][ T5716] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 358.653091][ T5716] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 358.699958][ T5716] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 358.719880][ T5716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.945858][ T5716] usb 4-1: GET_CAPABILITIES returned 0 [ 358.959103][ T5716] usbtmc 4-1:16.0: can't read capabilities [ 359.198784][ T5716] usb 4-1: USB disconnect, device number 29 [ 361.743691][ T5757] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 361.984173][ T5757] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.007156][ T5757] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.039728][ T5757] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 362.076516][ T5757] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.086735][ T9665] syzkaller0: entered promiscuous mode [ 362.092354][ T9665] syzkaller0: entered allmulticast mode [ 362.109741][ T5757] usb 4-1: config 0 descriptor?? [ 362.253648][ T44] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 362.441934][ T44] usb 7-1: Using ep0 maxpacket: 16 [ 362.454201][ T44] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 362.480858][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 362.496282][ T44] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 362.513013][ T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.531545][ T44] usb 7-1: Product: syz [ 362.540657][ T44] usb 7-1: Manufacturer: syz [ 362.555222][ T44] usb 7-1: SerialNumber: syz [ 362.568232][ T44] usb 7-1: config 0 descriptor?? [ 362.584381][ T44] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 362.594268][ T44] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 362.602767][ T5716] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 362.618461][ T5723] kernel read not supported for file /499/net/if_inet6 (pid: 5723 comm: kworker/1:7) [ 362.743466][ T5757] usb 4-1: string descriptor 0 read error: -71 [ 362.764282][ T5757] uclogic 0003:256C:006D.000A: failed retrieving string descriptor #200: -71 [ 362.774868][ T5757] uclogic 0003:256C:006D.000A: failed retrieving pen parameters: -71 [ 362.783864][ T5757] uclogic 0003:256C:006D.000A: failed probing pen v2 parameters: -71 [ 362.784470][ T5716] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.792725][ T5757] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 362.809264][ T5716] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.823037][ T5716] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 362.825458][ T5757] uclogic 0003:256C:006D.000A: probe with driver uclogic failed with error -71 [ 362.833878][ T5716] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.855626][ T5716] usb 3-1: config 0 descriptor?? [ 362.869339][ T5757] usb 4-1: USB disconnect, device number 30 [ 362.953699][ T5723] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 363.111573][ T5723] usb 6-1: Using ep0 maxpacket: 16 [ 363.120236][ T5723] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 363.129486][ T5723] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.137753][ T5723] usb 6-1: Product: syz [ 363.142060][ T5723] usb 6-1: Manufacturer: syz [ 363.146681][ T5723] usb 6-1: SerialNumber: syz [ 363.156908][ T5723] usb 6-1: config 0 descriptor?? [ 363.165394][ T5723] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 363.175282][ T5723] usb 6-1: Detected FT-X [ 363.227861][ T44] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 363.234989][ T44] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 363.277736][ T5716] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0 [ 363.291600][ T5716] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0 [ 363.308915][ T5716] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0 [ 363.316442][ T5716] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0 [ 363.323362][ T5716] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0 [ 363.330242][ T5716] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0 [ 363.340026][ T5716] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0 [ 363.353179][ T5716] pyra 0003:1E7D:2CF6.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 363.374697][ T5723] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 363.801769][ T5723] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 363.846899][ T5723] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 363.894065][ T5716] pyra 0003:1E7D:2CF6.000B: couldn't init struct pyra_device [ 363.917243][ T44] em28xx 7-1:0.0: Unknown AC97 audio processor detected! [ 363.940675][ T5723] usb 6-1: USB disconnect, device number 24 [ 363.962912][ T5716] pyra 0003:1E7D:2CF6.000B: couldn't install mouse [ 364.004866][ T44] em28xx 7-1:0.0: couldn't setup AC97 register 2 [ 364.064299][ T44] em28xx 7-1:0.0: couldn't setup AC97 register 4 [ 364.166331][ T5723] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 364.182922][ T44] em28xx 7-1:0.0: couldn't setup AC97 register 6 [ 364.264417][ T5716] pyra 0003:1E7D:2CF6.000B: probe with driver pyra failed with error -71 [ 364.292262][ T5723] ftdi_sio 6-1:0.0: device disconnected [ 364.304331][ T5716] usb 3-1: USB disconnect, device number 35 [ 364.478106][ T9699] syzkaller0: entered promiscuous mode [ 364.488409][ T9699] syzkaller0: entered allmulticast mode [ 364.694336][ T44] em28xx 7-1:0.0: couldn't setup AC97 register 54 [ 364.745884][ T44] em28xx 7-1:0.0: couldn't setup AC97 register 56 [ 364.957400][ T44] usb 7-1: USB disconnect, device number 15 [ 367.412919][ T44] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 367.681708][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 367.717129][ T44] usb 1-1: no configurations [ 367.728229][ T44] usb 1-1: can't read configurations, error -22 [ 367.871663][ T44] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 368.035991][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 368.047375][ T44] usb 1-1: no configurations [ 368.056563][ T44] usb 1-1: can't read configurations, error -22 [ 368.071157][ T44] usb usb1-port1: attempt power cycle [ 368.211655][ T5716] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 368.712473][ T44] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 368.731575][ T5716] usb 3-1: Using ep0 maxpacket: 16 [ 368.739945][ T5716] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.753823][ T5716] usb 3-1: config 0 interface 0 has no altsetting 0 [ 368.760594][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 368.767623][ T5716] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 368.776902][ T5716] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.786319][ T44] usb 1-1: no configurations [ 368.790990][ T44] usb 1-1: can't read configurations, error -22 [ 368.799829][ T5716] usb 3-1: config 0 descriptor?? [ 368.959462][ T5613] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 368.967131][ T44] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 368.992289][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 368.998249][ T44] usb 1-1: no configurations [ 369.003450][ T44] usb 1-1: can't read configurations, error -22 [ 369.019579][ T44] usb usb1-port1: unable to enumerate USB device [ 369.050548][ T5736] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 369.136507][ T5613] usb 7-1: Using ep0 maxpacket: 32 [ 369.160923][ T5613] usb 7-1: unable to get BOS descriptor or descriptor too short [ 369.176507][ T5613] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 369.185592][ T5613] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 369.203768][ T5613] usb 7-1: config 14 has no interface number 0 [ 369.212418][ T5613] usb 7-1: config 14 has no interface number 1 [ 369.219007][ T5613] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 369.235273][ T5736] usb 6-1: Using ep0 maxpacket: 16 [ 369.246374][ T5613] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 369.337111][ T5613] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 369.369604][ T5716] nzxt-smart2 0003:1E71:2009.000C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 369.370808][ T5736] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 369.390953][ T5613] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 369.390988][ T5613] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 369.391015][ T5613] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 369.391041][ T5613] usb 7-1: config 14 interface 57 has no altsetting 0 [ 369.391058][ T5613] usb 7-1: config 14 interface 228 has no altsetting 0 [ 369.455402][ T5613] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 369.525077][ T5613] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.577406][ T5613] usb 7-1: Product: syz [ 369.585569][ T5736] usb 6-1: config 0 has no interface number 0 [ 369.602484][ T5736] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 369.619741][ T5613] usb 7-1: Manufacturer: syz [ 369.627979][ T5736] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 369.637187][ T5613] usb 7-1: SerialNumber: syz [ 369.704772][ T5736] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 369.720278][ T5736] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.750563][ T5736] usb 6-1: Product: syz [ 369.755712][ T5736] usb 6-1: Manufacturer: syz [ 369.761172][ T5736] usb 6-1: SerialNumber: syz [ 369.767855][ T5716] usb 3-1: USB disconnect, device number 36 [ 369.777656][ T5736] usb 6-1: config 0 descriptor?? [ 369.806499][ T9754] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 369.816541][ T9754] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 370.055267][ T9754] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 370.064009][ T9754] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 370.139324][ T5613] legousbtower 7-1:14.57: interrupt endpoints not found [ 370.277649][ T5736] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 370.421567][ T5716] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 370.541698][ T5613] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 370.557487][ T5613] legousbtower 7-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 370.604517][ T5716] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 370.628660][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.642341][ T5716] usb 4-1: Product: syz [ 370.651611][ T5716] usb 4-1: Manufacturer: syz [ 370.657796][ T5716] usb 4-1: SerialNumber: syz [ 370.662023][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 370.674141][ T5716] usb 4-1: config 0 descriptor?? [ 370.824757][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 370.841171][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 370.855701][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 370.873132][ T9] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 370.883777][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.893054][ T9] usb 3-1: Product: syz [ 370.897645][ T9] usb 3-1: Manufacturer: syz [ 370.905527][ T9] usb 3-1: SerialNumber: syz [ 370.918610][ T9] usb 3-1: config 0 descriptor?? [ 370.983425][ T9778] syzkaller0: entered promiscuous mode [ 370.988985][ T9778] syzkaller0: entered allmulticast mode [ 371.319035][ T5716] peak_usb 4-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 371.339286][ T5716] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 371.345911][ T5757] usb 7-1: USB disconnect, device number 16 [ 371.400344][ T5716] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 371.539247][ T5736] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 371.719394][ T5736] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 371.731968][ T5736] asix 6-1:0.34: probe with driver asix failed with error -71 [ 371.745222][ T5716] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -22 [ 371.773173][ T5757] legousbtower 7-1:14.228: LEGO USB Tower #-160 now disconnected [ 371.781083][ T5736] usb 6-1: USB disconnect, device number 25 [ 371.800976][ T5716] usb 4-1: USB disconnect, device number 31 [ 374.208917][ T9805] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 375.271606][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 375.431610][ T5716] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 375.953532][ T44] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 375.991565][ T5716] usb 6-1: Using ep0 maxpacket: 32 [ 376.319405][ T5716] usb 6-1: no configurations [ 376.341172][ T5716] usb 6-1: can't read configurations, error -22 [ 376.394109][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 376.425289][ T44] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 376.437694][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.453525][ T44] usb 4-1: config 0 descriptor?? [ 376.467822][ T9798] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 376.501542][ T5716] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 376.561818][ T5736] usb 7-1: new low-speed USB device number 17 using dummy_hcd [ 376.691688][ T5716] usb 6-1: Using ep0 maxpacket: 32 [ 376.721601][ T5716] usb 6-1: no configurations [ 376.725140][ T5736] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 376.731529][ T5716] usb 6-1: can't read configurations, error -22 [ 376.736844][ T5736] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 376.756958][ T5736] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 376.797668][ T5716] usb usb6-port1: attempt power cycle [ 376.801533][ T5736] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 376.850654][ T5736] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 376.866805][ T5736] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 376.877064][ T5736] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 376.896710][ T44] usbhid 4-1:0.0: can't add hid device: -71 [ 376.906262][ T44] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 376.906281][ T5736] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 376.927694][ T5736] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 376.940337][ T5736] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 376.943516][ T44] usb 4-1: USB disconnect, device number 32 [ 376.955899][ T5736] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 376.966976][ T5736] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 376.982290][ T5736] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 376.996534][ T5736] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 377.010225][ T5736] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 377.025765][ T5736] usb 7-1: string descriptor 0 read error: -22 [ 377.033207][ T5736] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 377.042706][ T5736] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.066887][ T5736] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 377.455800][ T9838] syzkaller0: entered promiscuous mode [ 377.461297][ T9838] syzkaller0: entered allmulticast mode [ 377.571870][ T5716] usb usb6-port1: Cannot enable. Maybe the USB cable is bad? [ 377.724924][ T5716] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 377.765884][ T5716] usb 6-1: Using ep0 maxpacket: 16 [ 377.790424][ T5716] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 377.815070][ T5716] usb 6-1: config 0 has no interface number 0 [ 377.835247][ T5716] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 377.873103][ T5716] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 377.908118][ T5716] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 377.931686][ T5716] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.954912][ T5716] usb 6-1: Product: syz [ 377.959816][ T5716] usb 6-1: Manufacturer: syz [ 377.970839][ T5716] usb 6-1: SerialNumber: syz [ 377.989225][ T5716] usb 6-1: config 0 descriptor?? [ 378.004675][ T9834] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 378.021702][ T9834] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 378.243185][ T9834] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 378.261766][ T9834] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 378.320805][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.330928][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.478130][ T5716] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 378.803283][ T29] audit: type=1400 audit(1783711705.850:901): avc: denied { setopt } for pid=9857 comm="syz.3.1129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 378.805369][ T9858] bridge0: port 3(dummy0) entered disabled state [ 378.830165][ T9858] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.838213][ T9858] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.850087][ T9858] bridge0: port 3(dummy0) entered blocking state [ 378.856528][ T9858] bridge0: port 3(dummy0) entered forwarding state [ 378.864178][ T9858] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.879522][ T9858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.886976][ T9858] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.894088][ T9858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.909969][ T9858] team0: Port device bridge0 added [ 378.928928][ T9859] bridge0: port 3(dummy0) entered disabled state [ 378.945888][ T9859] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.954307][ T9859] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.230193][ T50] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 379.286367][ T9869] syzkaller0: entered promiscuous mode [ 379.291852][ T9869] syzkaller0: entered allmulticast mode [ 379.484090][ T5716] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 379.494804][ T5716] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 379.505276][ T5716] asix 6-1:0.34: probe with driver asix failed with error -71 [ 379.515856][ T5716] usb 6-1: USB disconnect, device number 29 [ 379.676672][ T5736] usb 7-1: USB disconnect, device number 17 [ 380.201672][ T5736] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 380.365481][ T5736] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.377894][ T5736] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 380.388304][ T5736] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.399151][ T5736] usb 1-1: config 0 descriptor?? [ 380.422504][ T5716] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 380.606498][ T5716] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.639478][ T5716] usb 4-1: config 0 interface 0 has no altsetting 0 [ 380.672868][ T5716] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 380.713981][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.757668][ T5716] usb 4-1: Product: syz [ 380.804184][ T5716] usb 4-1: Manufacturer: syz [ 380.826018][ T5716] usb 4-1: SerialNumber: syz [ 381.030293][ T5736] pwc: Askey VC010 type 2 USB webcam detected. [ 381.044005][ T5716] usb 4-1: config 0 descriptor?? [ 381.058984][ T50] Bluetooth: hci4: unexpected event for opcode 0x0042 [ 381.063789][ T5716] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 381.109064][ T5716] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 381.910926][ T9] iguanair 3-1:0.0: failed to get version [ 381.921695][ C0] iguanair 3-1:0.0: failed to resubmit urb: -1 [ 381.953362][ T5736] pwc: recv_control_msg error -32 req 02 val 2b00 [ 382.035136][ T9] iguanair 3-1:0.0: probe with driver iguanair failed with error -110 [ 382.176122][ T5716] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 382.242063][ T5736] pwc: recv_control_msg error -32 req 02 val 2700 [ 382.326836][ T5716] usb 4-1: media controller created [ 382.329139][ T5736] pwc: recv_control_msg error -32 req 02 val 2c00 [ 382.384209][ T9] usb 3-1: USB disconnect, device number 37 [ 382.393319][ T5736] pwc: recv_control_msg error -32 req 04 val 1000 [ 382.463099][ T5736] pwc: recv_control_msg error -32 req 04 val 1300 [ 382.539513][ T5736] pwc: recv_control_msg error -32 req 04 val 1400 [ 382.609147][ T5736] pwc: recv_control_msg error -32 req 02 val 2000 [ 382.621008][ T5736] pwc: recv_control_msg error -32 req 02 val 2100 [ 382.629070][ T5736] pwc: recv_control_msg error -32 req 04 val 1500 [ 382.641254][ T5736] pwc: recv_control_msg error -32 req 02 val 2500 [ 382.651842][ T5716] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 382.661187][ T5736] pwc: recv_control_msg error -32 req 02 val 2400 [ 382.661815][ T9905] syzkaller0: entered promiscuous mode [ 382.679983][ T9905] syzkaller0: entered allmulticast mode [ 382.810028][ T5716] DVB: Unable to find symbol tda10046_attach() [ 382.824750][ T5716] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 382.871391][ T5716] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 382.896270][ T5736] pwc: recv_control_msg error -71 req 02 val 2900 [ 382.925062][ T5736] pwc: recv_control_msg error -71 req 02 val 2800 [ 382.951048][ T5736] pwc: recv_control_msg error -71 req 04 val 1100 [ 382.968867][ T5736] pwc: recv_control_msg error -71 req 04 val 1200 [ 382.999491][ T5736] pwc: Registered as video103. [ 383.021806][ T5736] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 383.093236][ T5736] usb 1-1: USB disconnect, device number 29 [ 383.127245][ T5716] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 383.187897][ T5716] usb 4-1: USB disconnect, device number 33 [ 383.274851][ T50] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 383.286944][ T50] Bluetooth: hci1: Injecting HCI hardware error event [ 383.297084][ T5610] Bluetooth: hci1: hardware error 0x00 [ 383.611967][ T50] Bluetooth: hci3: unexpected event for opcode 0x0042 [ 383.777672][ T5716] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 383.801186][ T9927] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 383.807926][ T9927] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 383.816480][ T9927] vhci_hcd vhci_hcd.0: Device attached [ 383.834251][ T9927] ALSA: mixer_oss: invalid OSS volume '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—' [ 383.843559][ T9927] ALSA: mixer_oss: invalid OSS volume 'Ÿ(' [ 384.040876][ T5716] usb 1-1: config 128 has an invalid interface number: 5 but max is 0 [ 384.110977][ T5716] usb 1-1: config 128 has no interface number 0 [ 384.155001][ T44] usb 46-1: SetAddress Request (2) to port 0 [ 384.176968][ T5716] usb 1-1: config 128 interface 5 has no altsetting 0 [ 384.205933][ T44] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 384.256699][ T5716] usb 1-1: New USB device found, idVendor=1b80, idProduct=e1cc, bcdDevice=26.cb [ 384.318304][ T5716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.394927][ T5716] usb 1-1: Product: syz [ 384.426665][ T5716] usb 1-1: Manufacturer: syz [ 384.474902][ T5716] usb 1-1: SerialNumber: syz [ 384.504942][ T9928] vhci_hcd: connection reset by peer [ 384.561343][ T9935] 9p: Bad value for 'wfdno' [ 384.583892][ T6947] vhci_hcd vhci_hcd.6: stop threads [ 384.662854][ T6947] vhci_hcd vhci_hcd.6: release socket [ 384.727972][ T6947] vhci_hcd vhci_hcd.6: disconnect device [ 384.955781][ T5716] usb 1-1: USB disconnect, device number 30 [ 385.812370][ T5610] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 387.102860][ T187] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 387.311588][ T187] usb 7-1: Using ep0 maxpacket: 32 [ 387.353478][ T187] usb 7-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 387.379266][ T29] audit: type=1400 audit(1783711714.450:902): avc: denied { read } for pid=9958 comm="syz.2.1166" name="usbmon7" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 387.419397][ T187] usb 7-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 387.542411][ T187] usb 7-1: config 0 interface 0 has no altsetting 0 [ 387.549071][ T187] usb 7-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 387.550093][ T29] audit: type=1400 audit(1783711714.450:903): avc: denied { open } for pid=9958 comm="syz.2.1166" path="/dev/usbmon7" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 387.558096][ T187] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.591970][ T187] usb 7-1: config 0 descriptor?? [ 387.701639][ T5716] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 387.893145][ T5716] usb 1-1: config 5 has an invalid interface number: 123 but max is 0 [ 387.901616][ T5716] usb 1-1: config 5 has no interface number 0 [ 387.907768][ T5716] usb 1-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 387.921095][ T5716] usb 1-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid maxpacket 56288, setting to 64 [ 387.931637][ T5736] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 387.932290][ T5716] usb 1-1: config 5 interface 123 has no altsetting 0 [ 387.950527][ T5716] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 387.959701][ T5716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.969284][ T5716] usb 1-1: Product: syz [ 387.978074][ T5716] usb 1-1: Manufacturer: syz [ 387.982960][ T5716] usb 1-1: SerialNumber: syz [ 387.994918][ T9964] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 388.094347][ T5736] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 388.107681][ T5736] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 388.118596][ T5736] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.133923][ T5736] usb 4-1: config 0 descriptor?? [ 388.145794][ T9965] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 388.231709][ T5716] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 388.249044][ T5716] usb 1-1: USB disconnect, device number 31 [ 388.597747][ T5736] logitech-djreceiver 0003:046D:C71F.000D: unknown main item tag 0x0 [ 388.660524][ T9974] IPVS: ip_vs_add_dest(): server weight less than zero [ 388.687944][ T5716] IPVS: starting estimator thread 0... [ 388.797162][ T9975] IPVS: using max 45 ests per chain, 108000 per kthread [ 389.359370][ T44] usb 46-1: device descriptor read/8, error -110 [ 389.521657][ T187] usbhid 7-1:0.0: can't add hid device: -71 [ 389.528349][ T187] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 389.546758][ T5736] logitech-djreceiver 0003:046D:C71F.000D: unknown main item tag 0x0 [ 389.576264][ T5736] logitech-djreceiver 0003:046D:C71F.000D: unknown main item tag 0x0 [ 389.590057][ T187] usb 7-1: USB disconnect, device number 18 [ 389.695503][ T29] audit: type=1400 audit(1783711716.770:904): avc: denied { read } for pid=9991 comm="syz.5.1175" path="socket:[28755]" dev="sockfs" ino=28755 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 389.793551][ T44] usb usb46-port1: attempt power cycle [ 389.850821][ T5736] logitech-djreceiver 0003:046D:C71F.000D: unknown main item tag 0x0 [ 389.900603][ T5736] logitech-djreceiver 0003:046D:C71F.000D: unknown main item tag 0x0 [ 389.946647][ T5736] logitech-djreceiver 0003:046D:C71F.000D: unknown main item tag 0x0 [ 389.983975][ T5736] logitech-djreceiver 0003:046D:C71F.000D: unknown main item tag 0x0 [ 390.090655][ T5736] logitech-djreceiver 0003:046D:C71F.000D: unknown main item tag 0x0 [ 390.115658][ T5736] logitech-djreceiver 0003:046D:C71F.000D: unknown main item tag 0x0 [ 390.393876][ T44] usb usb46-port1: unable to enumerate USB device [ 391.033782][ T5736] logitech-djreceiver 0003:046D:C71F.000D: unknown main item tag 0x0 [ 391.061224][ T5736] logitech-djreceiver 0003:046D:C71F.000D: unbalanced collection at end of report description [ 391.078445][ T5736] logitech-djreceiver 0003:046D:C71F.000D: logi_dj_probe: parse failed [ 391.087685][ T5736] logitech-djreceiver 0003:046D:C71F.000D: probe with driver logitech-djreceiver failed with error -22 [ 391.110134][ T5736] usb 4-1: USB disconnect, device number 34 [ 391.491746][ T187] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 391.861605][ T187] usb 7-1: Using ep0 maxpacket: 16 [ 391.876141][ T187] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 391.905084][ T187] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 391.915126][ T187] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.923139][ T187] usb 7-1: Product: syz [ 392.402323][ T5613] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 392.412355][ T187] usb 7-1: Manufacturer: syz [ 392.416987][ T187] usb 7-1: SerialNumber: syz [ 392.452651][ T187] usb 7-1: config 0 descriptor?? [ 392.701290][ T5613] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 392.735194][ T5613] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 392.748540][T10054] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1190'. [ 392.760431][T10054] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1190'. [ 392.771027][T10054] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1190'. [ 392.782202][T10054] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1190'. [ 392.810524][ T5613] usb 3-1: Product: syz [ 392.827358][ T5613] usb 3-1: config 0 descriptor?? [ 392.878741][ T5613] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 393.006155][ T5613] usb 3-1: Detected FT232H [ 393.108119][ T5613] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 393.249570][ T187] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 393.261692][ T187] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 393.271688][ T44] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 393.431753][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 393.439967][ T44] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.450637][ T44] usb 1-1: config 0 has no interfaces? [ 393.457687][ T44] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 393.469396][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.487682][ T44] usb 1-1: config 0 descriptor?? [ 393.498792][ T187] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 393.559367][ T5613] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 393.723770][ T29] audit: type=1400 audit(1783711720.800:905): avc: denied { setopt } for pid=10066 comm="syz.3.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 393.725067][T10067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1199'. [ 393.781842][ T5613] usb 3-1: USB disconnect, device number 38 [ 393.814479][ T5613] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 393.831415][ T5613] ftdi_sio 3-1:0.0: device disconnected [ 394.615886][ T187] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 394.624995][ T187] em28xx 7-1:0.0: board has no eeprom [ 394.639564][T10022] em28xx 7-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 395.629844][ T187] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 395.639378][ T187] em28xx 7-1:0.0: dvb set to bulk mode. [ 395.646611][ T5736] em28xx 7-1:0.0: Binding DVB extension [ 395.667823][ T187] usb 7-1: USB disconnect, device number 19 [ 395.708255][T10109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1217'. [ 395.723912][ T187] em28xx 7-1:0.0: Disconnecting em28xx [ 395.836116][ T5736] em28xx 7-1:0.0: Registering input extension [ 395.866295][ T187] em28xx 7-1:0.0: Closing input extension [ 396.010255][ T187] em28xx 7-1:0.0: Freeing device [ 396.059913][ T5716] usb 1-1: USB disconnect, device number 32 [ 396.239975][ T29] audit: type=1400 audit(1783711723.310:906): avc: denied { read } for pid=10118 comm="syz.3.1223" path="socket:[29712]" dev="sockfs" ino=29712 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 396.351604][ T5736] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 396.526826][ T5736] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 396.554642][ T5736] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 396.571743][ T5736] usb 3-1: Product: syz [ 396.579510][ T5736] usb 3-1: config 0 descriptor?? [ 396.595208][ T5736] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 396.605398][ T5736] usb 3-1: Detected FT232H [ 396.690775][T10137] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1230'. [ 396.691617][ T187] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 396.774154][ T5716] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 396.796170][ T5736] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 396.854443][ T187] usb 7-1: config 128 has an invalid interface number: 5 but max is 0 [ 396.863104][ T187] usb 7-1: config 128 has no interface number 0 [ 396.869707][ T187] usb 7-1: config 128 interface 5 has no altsetting 0 [ 396.879845][ T187] usb 7-1: New USB device found, idVendor=1b80, idProduct=e1cc, bcdDevice=26.cb [ 396.889482][ T187] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.898090][ T187] usb 7-1: Product: syz [ 396.902543][ T187] usb 7-1: Manufacturer: syz [ 396.907325][ T187] usb 7-1: SerialNumber: syz [ 396.941529][ T5716] usb 1-1: Using ep0 maxpacket: 16 [ 396.949843][ T5716] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.962455][ T5716] usb 1-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 396.971692][ T5716] usb 1-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 396.979800][ T5716] usb 1-1: Manufacturer: syz [ 396.987516][ T5716] usb 1-1: config 0 descriptor?? [ 397.021537][ T44] usb 6-1: new low-speed USB device number 30 using dummy_hcd [ 397.145928][ T187] usb 7-1: USB disconnect, device number 20 [ 397.208216][ T5736] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 397.208253][ T44] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 397.208289][ T44] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 397.232720][ T5736] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 397.264333][ T5736] usb 3-1: USB disconnect, device number 39 [ 397.269754][ T44] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 397.282568][ T44] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 397.287697][ T5736] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 397.294874][ T44] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 397.303761][ T5736] ftdi_sio 3-1:0.0: device disconnected [ 397.332473][ T44] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 397.348729][ T44] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 397.360924][ T44] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 397.373804][ T44] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 397.385244][ T44] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 397.400035][ T5716] hid_parser_main: 453 callbacks suppressed [ 397.400053][ T5716] creative-sb0540 0003:041E:3100.000E: unknown main item tag 0x1 [ 397.452965][ T44] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 397.461692][ T44] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 397.474755][ T44] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 397.486955][ T5716] creative-sb0540 0003:041E:3100.000E: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 397.500263][ T44] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 397.515005][ T44] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 397.537312][ T44] usb 6-1: string descriptor 0 read error: -22 [ 397.543729][ T44] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 397.552848][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.571559][ T5613] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 397.690110][ T5716] usb 1-1: USB disconnect, device number 33 [ 397.709698][ T44] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 397.732540][ T5613] usb 4-1: Using ep0 maxpacket: 8 [ 397.755041][ T5613] usb 4-1: config 0 has no interfaces? [ 397.783971][ T5613] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 397.814323][ T5613] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.832187][ T5613] usb 4-1: Product: syz [ 397.841228][ T5613] usb 4-1: Manufacturer: syz [ 397.858648][ T5613] usb 4-1: SerialNumber: syz [ 397.877455][ T5613] usb 4-1: config 0 descriptor?? [ 398.109799][ T5613] usb 4-1: USB disconnect, device number 35 [ 398.548014][ T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 398.836382][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 399.040960][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 399.180975][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 399.775666][ T9] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 399.785726][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.791835][ T5613] kernel read not supported for file /731/net/if_inet6 (pid: 5613 comm: kworker/1:3) [ 399.794276][ T9] usb 3-1: Product: syz [ 399.794305][ T9] usb 3-1: Manufacturer: syz [ 399.794319][ T9] usb 3-1: SerialNumber: syz [ 399.803958][T10166] tipc: Enabled bearer , priority 0 [ 399.851002][ T9] usb 3-1: config 0 descriptor?? [ 399.869938][ T9] iguanair 3-1:0.0: probe with driver iguanair failed with error -12 [ 399.897860][T10165] tipc: Disabling bearer [ 400.174919][ T187] usb 3-1: USB disconnect, device number 40 [ 400.291534][ T44] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 400.299194][ T5613] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 400.301548][ T9] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 400.453229][ T44] usb 7-1: config 128 has an invalid interface number: 5 but max is 0 [ 400.461686][ T44] usb 7-1: config 128 has no interface number 0 [ 400.463586][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 400.468029][ T44] usb 7-1: config 128 interface 5 has no altsetting 0 [ 400.470298][ T5613] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 400.479785][ T9] usb 4-1: config 255 has an invalid interface number: 2 but max is 1 [ 400.483498][ T5613] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.500871][ T9] usb 4-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 400.509515][ T44] usb 7-1: New USB device found, idVendor=1b80, idProduct=e1cc, bcdDevice=26.cb [ 400.528093][ T9] usb 4-1: config 255 has 1 interface, different from the descriptor's value: 2 [ 400.528122][ T9] usb 4-1: config 255 has no interface number 0 [ 400.544053][ T5613] usb 1-1: Product: syz [ 400.548197][ T5613] usb 1-1: Manufacturer: syz [ 400.552990][ T5613] usb 1-1: SerialNumber: syz [ 400.558366][ T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.567088][ T5613] usb 1-1: config 0 descriptor?? [ 400.572233][ T44] usb 7-1: Product: syz [ 400.576440][ T44] usb 7-1: Manufacturer: syz [ 400.582420][ T44] usb 7-1: SerialNumber: syz [ 400.712787][ T9] usb 4-1: string descriptor 0 read error: -22 [ 400.719520][ T9] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=1e.2d [ 400.729286][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.752126][ T9] as10x_usb: device has been detected [ 400.759787][ T9] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 400.779256][ T9] usb 4-1: DVB: registering adapter 2 frontend 0 (Abilis Systems DVB-Titan)... [ 400.806629][ T44] usb 7-1: USB disconnect, device number 21 [ 400.821593][ T5613] usb 1-1: ignoring: probably an ADSL modem [ 400.858366][ T9] as10x_usb: error during firmware upload part1 [ 400.883743][ T9] Registered device Abilis Systems DVB-Titan [ 401.020348][ T5716] usb 4-1: USB disconnect, device number 36 [ 401.067992][ T5716] Unregistered device Abilis Systems DVB-Titan [ 401.069510][ T5716] as10x_usb: device has been disconnected [ 401.233070][ T5613] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 401.432925][ T9] kernel read not supported for file /428/net/if_inet6 (pid: 9 comm: kworker/0:0) [ 401.476715][ T9] usb 1-1: USB disconnect, device number 34 [ 401.867708][T10202] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 402.476092][ T5736] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 402.500424][ T5613] usb 6-1: USB disconnect, device number 30 [ 402.580880][T10204] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.856191][ T5736] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.910974][ T5736] usb 3-1: config 0 interface 0 has no altsetting 0 [ 402.950269][ T5736] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 402.982544][ T5736] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.995887][ T5736] usb 3-1: Product: syz [ 403.001057][ T5736] usb 3-1: Manufacturer: syz [ 403.008855][ T5736] usb 3-1: SerialNumber: syz [ 403.022681][ T5736] usb 3-1: config 0 descriptor?? [ 403.034117][ T5736] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 403.049190][ T5736] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 403.197731][ T5736] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 403.206399][ T5736] usb 3-1: media controller created [ 403.220588][ T5736] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 403.245090][T10222] 9p: Bad value for 'wfdno' [ 403.275536][ T9] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 403.287328][ T5736] DVB: Unable to find symbol tda10046_attach() [ 403.295814][ T5736] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 403.305454][ T5736] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 403.344180][ T187] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 403.422696][ T9] usb 7-1: device descriptor read/64, error -71 [ 403.645857][ T5736] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 403.661737][ T187] usb 4-1: Using ep0 maxpacket: 16 [ 403.667736][ T5736] usb 3-1: USB disconnect, device number 41 [ 403.679173][ T187] usb 4-1: unable to get BOS descriptor or descriptor too short [ 403.703627][ T187] usb 4-1: config 16 has an invalid interface number: 44 but max is 0 [ 403.717645][ T187] usb 4-1: config 16 has no interface number 0 [ 403.727794][ T187] usb 4-1: config 16 interface 44 altsetting 10 bulk endpoint 0x1 has invalid maxpacket 32 [ 403.745773][ T187] usb 4-1: config 16 interface 44 has no altsetting 0 [ 403.763395][ T9] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 403.775021][ T187] usb 4-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=1d.64 [ 403.786046][ T187] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.795670][ T187] usb 4-1: Product: syz [ 403.800483][ T187] usb 4-1: Manufacturer: syz [ 403.807922][ T187] usb 4-1: SerialNumber: syz [ 403.816100][T10218] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 403.901556][ T9] usb 7-1: device descriptor read/64, error -71 [ 404.012146][ T9] usb usb7-port1: attempt power cycle [ 404.021515][ T5613] usb 1-1: new low-speed USB device number 35 using dummy_hcd [ 404.036647][ T187] cypress_cy7c63 4-1:16.44: Cypress CY7C63xxx device now attached [ 404.049958][ T187] usb 4-1: USB disconnect, device number 37 [ 404.060773][ T187] cypress_cy7c63 4-1:16.44: Cypress CY7C63xxx device now disconnected [ 404.287808][ T5613] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 404.354398][ T5613] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 404.396411][ T5613] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 404.457084][ T5613] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 404.494967][ T5613] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 404.575673][ T5613] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 404.608475][ T5613] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 404.656339][ T5613] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 404.687981][ T5613] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 404.700491][ T5613] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 404.721256][ T5613] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 404.729673][ T5613] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 404.743320][ T5613] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 404.756530][ T5613] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 404.776308][ T5613] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 404.813461][ T5613] usb 1-1: string descriptor 0 read error: -22 [ 404.848905][ T5613] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 404.877395][ T5613] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.943571][ T5613] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 404.990055][ T9] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 405.216728][ T9] usb 7-1: device descriptor read/8, error -71 [ 405.237216][ T187] usb 1-1: USB disconnect, device number 35 [ 405.330087][T10253] 9p: Bad value for 'wfdno' [ 405.481725][ T9] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 405.642569][ T9] usb 7-1: device descriptor read/8, error -71 [ 405.892029][ T9] usb usb7-port1: unable to enumerate USB device [ 406.217085][ T29] audit: type=1400 audit(1783711733.290:907): avc: denied { getopt } for pid=10265 comm="syz.0.1282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 406.771955][ T5613] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 512.571576][ C1] ------------[ cut here ]------------ [ 512.577948][ C1] 1 [ 512.577963][ C1] WARNING: kernel/rcu/tree_stall.h:1048 at rcu_check_gp_start_stall.part.0+0x1c4/0x4b0, CPU#1: syz.3.1280/10264 [ 512.592166][ C1] Modules linked in: [ 512.596495][ C1] CPU: 1 UID: 0 PID: 10264 Comm: syz.3.1280 Tainted: G L syzkaller #0 PREEMPT(full) [ 512.607432][ C1] Tainted: [L]=SOFTLOCKUP [ 512.611743][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 512.621810][ C1] RIP: 0010:rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 512.628760][ C1] Code: 88 61 01 00 00 be 04 00 00 00 48 c7 c7 80 e5 72 9b e8 80 1d 8c 00 b8 01 00 00 00 87 05 75 b3 84 19 85 c0 0f 85 3d 01 00 00 90 <0f> 0b 90 48 c7 c3 64 63 22 91 48 81 fd 40 14 bf 8e 74 5a 48 b8 00 [ 512.648361][ C1] RSP: 0018:ffffc90000a08df0 EFLAGS: 00010046 [ 512.654418][ C1] RAX: 0000000000000000 RBX: 0000000000002904 RCX: ffffffff81ee3200 [ 512.662378][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff9b72e580 [ 512.670428][ C1] RBP: ffffffff8ebf1440 R08: 0000000000000001 R09: fffffbfff36e5cb0 [ 512.678388][ C1] R10: 0000000000000003 R11: 0000000000000000 R12: 1ffffffff1d01e50 [ 512.686348][ C1] R13: 0000000000000246 R14: 0000000000000002 R15: 0000000000000001 [ 512.694309][ C1] FS: 0000000000000000(0000) GS:ffff888123eeb000(0000) knlGS:0000000000000000 [ 512.703237][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 512.709826][ C1] CR2: 0000000000000002 CR3: 000000002a843000 CR4: 00000000003526f0 [ 512.717806][ C1] Call Trace: [ 512.721087][ C1] [ 512.723928][ C1] rcu_core+0x2cb/0x10d0 [ 512.728174][ C1] ? sched_balance_domains+0x2d0/0xb80 [ 512.733639][ C1] ? __pfx_rcu_core+0x10/0x10 [ 512.738316][ C1] ? run_timer_base+0x121/0x190 [ 512.743162][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 512.748356][ C1] handle_softirqs+0x1ea/0x9b0 [ 512.753123][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 512.758404][ C1] ? _raw_spin_unlock+0x28/0x50 [ 512.763252][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 512.768881][ C1] __irq_exit_rcu+0x162/0x210 [ 512.773571][ C1] irq_exit_rcu+0x9/0x30 [ 512.777819][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 512.783451][ C1] [ 512.786370][ C1] [ 512.789290][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 512.795265][ C1] RIP: 0010:smp_call_function_many_cond+0x589/0x16c0 [ 512.801934][ C1] Code: b8 00 00 00 00 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 a9 95 0c 00 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 2c 0f 00 00 8b 45 08 31 [ 512.821532][ C1] RSP: 0018:ffffc9000505f650 EFLAGS: 00000293 [ 512.827594][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81fd3abd [ 512.835552][ C1] RDX: ffff88802d8ba540 RSI: ffffffff81fd3a97 RDI: ffff88802d8ba540 [ 512.843513][ C1] RBP: ffff8880b8443680 R08: 0000000000000005 R09: 0000000000000000 [ 512.851473][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 512.859432][ C1] R13: ffffed10170886d1 R14: 0000000000000001 R15: ffff8880b853c880 [ 512.867399][ C1] ? smp_call_function_many_cond+0x5ad/0x16c0 [ 512.873458][ C1] ? smp_call_function_many_cond+0x587/0x16c0 [ 512.879525][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 512.884723][ C1] ? free_pgd_range+0x2a0/0x10d0 [ 512.889668][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 512.895999][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 512.901194][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 512.906303][ C1] flush_tlb_mm_range+0x45f/0x16f0 [ 512.911416][ C1] ? __pfx_free_pgtables+0x10/0x10 [ 512.916525][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 512.922073][ C1] tlb_finish_mmu+0x3fe/0x810 [ 512.926758][ C1] exit_mmap+0x454/0xa00 [ 512.930999][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 512.935767][ C1] ? uprobe_clear_state+0x49/0x260 [ 512.940875][ C1] ? find_held_lock+0x2b/0x80 [ 512.945566][ C1] ? uprobe_clear_state+0x5f/0x260 [ 512.950682][ C1] ? __mutex_unlock_slowpath+0x35d/0x930 [ 512.956325][ C1] ? arch_uprobe_clear_state+0x107/0x150 [ 512.961960][ C1] __mmput+0x12a/0x410 [ 512.966027][ C1] mmput+0x67/0x80 [ 512.969744][ C1] do_exit+0x8b1/0x2ae0 [ 512.973904][ C1] ? __pfx___schedule+0x10/0x10 [ 512.978774][ C1] ? __pfx_do_exit+0x10/0x10 [ 512.983362][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 512.988733][ C1] ? preempt_schedule_common+0x42/0xc0 [ 512.994197][ C1] do_group_exit+0xd5/0x2a0 [ 512.998704][ C1] get_signal+0x1ec7/0x21e0 [ 513.003210][ C1] ? kick_process+0xf0/0x1a0 [ 513.007800][ C1] ? __pfx_get_signal+0x10/0x10 [ 513.012647][ C1] ? __pfx_vfs_write+0x10/0x10 [ 513.017416][ C1] arch_do_signal_or_restart+0x91/0x7e0 [ 513.022958][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 513.029108][ C1] ? fput+0xd9/0x100 [ 513.033004][ C1] exit_to_user_mode_loop+0x139/0x6f0 [ 513.038374][ C1] ? rcu_is_watching+0x12/0xc0 [ 513.043141][ C1] do_syscall_64+0x666/0x870 [ 513.047731][ C1] ? clear_bhb_loop+0x40/0x90 [ 513.052409][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.058295][ C1] RIP: 0033:0x7efd7679de59 [ 513.062703][ C1] Code: Unable to access opcode bytes at 0x7efd7679de2f. [ 513.069705][ C1] RSP: 002b:00007efd776cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 513.078121][ C1] RAX: 0000000000010000 RBX: 00007efd76a26090 RCX: 00007efd7679de59 [ 513.086084][ C1] RDX: 00000000fffffecc RSI: 0000200000000000 RDI: 0000000000000004 [ 513.094045][ C1] RBP: 00007efd76833e6f R08: 0000000000000000 R09: 0000000000000000 [ 513.102006][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.109966][ C1] R13: 00007efd76a26128 R14: 00007efd76a26090 R15: 00007ffeb21b4e38 [ 513.117942][ C1] [ 513.120952][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 513.128222][ C1] CPU: 1 UID: 0 PID: 10264 Comm: syz.3.1280 Tainted: G L syzkaller #0 PREEMPT(full) [ 513.139148][ C1] Tainted: [L]=SOFTLOCKUP [ 513.143455][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 513.153514][ C1] Call Trace: [ 513.156780][ C1] [ 513.159616][ C1] dump_stack_lvl+0x100/0x190 [ 513.164289][ C1] vpanic+0x552/0x970 [ 513.168263][ C1] ? __pfx_vpanic+0x10/0x10 [ 513.172769][ C1] panic+0xd1/0xe0 [ 513.176480][ C1] ? __pfx_panic+0x10/0x10 [ 513.180895][ C1] ? check_panic_on_warn+0x1f/0x90 [ 513.186025][ C1] check_panic_on_warn.cold+0x19/0x34 [ 513.191390][ C1] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 513.197709][ C1] __warn.cold+0x191/0x318 [ 513.202123][ C1] __report_bug+0x30f/0x440 [ 513.206626][ C1] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 513.212961][ C1] ? __pfx___report_bug+0x10/0x10 [ 513.217993][ C1] ? sched_balance_rq+0x264d/0x3b10 [ 513.223199][ C1] ? __lock_acquire+0x49f/0x1a40 [ 513.228133][ C1] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 513.234451][ C1] report_bug+0xb2/0x220 [ 513.238693][ C1] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 513.245026][ C1] handle_bug+0x16a/0x2a0 [ 513.249369][ C1] exc_invalid_op+0x17/0x50 [ 513.253867][ C1] asm_exc_invalid_op+0x1a/0x20 [ 513.258716][ C1] RIP: 0010:rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 513.265647][ C1] Code: 88 61 01 00 00 be 04 00 00 00 48 c7 c7 80 e5 72 9b e8 80 1d 8c 00 b8 01 00 00 00 87 05 75 b3 84 19 85 c0 0f 85 3d 01 00 00 90 <0f> 0b 90 48 c7 c3 64 63 22 91 48 81 fd 40 14 bf 8e 74 5a 48 b8 00 [ 513.285252][ C1] RSP: 0018:ffffc90000a08df0 EFLAGS: 00010046 [ 513.291311][ C1] RAX: 0000000000000000 RBX: 0000000000002904 RCX: ffffffff81ee3200 [ 513.299272][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff9b72e580 [ 513.307232][ C1] RBP: ffffffff8ebf1440 R08: 0000000000000001 R09: fffffbfff36e5cb0 [ 513.315196][ C1] R10: 0000000000000003 R11: 0000000000000000 R12: 1ffffffff1d01e50 [ 513.323157][ C1] R13: 0000000000000246 R14: 0000000000000002 R15: 0000000000000001 [ 513.331125][ C1] ? rcu_check_gp_start_stall.part.0+0x1b0/0x4b0 [ 513.337455][ C1] rcu_core+0x2cb/0x10d0 [ 513.341692][ C1] ? sched_balance_domains+0x2d0/0xb80 [ 513.347156][ C1] ? __pfx_rcu_core+0x10/0x10 [ 513.351832][ C1] ? run_timer_base+0x121/0x190 [ 513.356677][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 513.361875][ C1] handle_softirqs+0x1ea/0x9b0 [ 513.366642][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 513.371927][ C1] ? _raw_spin_unlock+0x28/0x50 [ 513.376778][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 513.382415][ C1] __irq_exit_rcu+0x162/0x210 [ 513.387100][ C1] irq_exit_rcu+0x9/0x30 [ 513.391336][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 513.396968][ C1] [ 513.399897][ C1] [ 513.402821][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 513.408796][ C1] RIP: 0010:smp_call_function_many_cond+0x589/0x16c0 [ 513.415465][ C1] Code: b8 00 00 00 00 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 a9 95 0c 00 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 2c 0f 00 00 8b 45 08 31 [ 513.435062][ C1] RSP: 0018:ffffc9000505f650 EFLAGS: 00000293 [ 513.441119][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81fd3abd [ 513.449094][ C1] RDX: ffff88802d8ba540 RSI: ffffffff81fd3a97 RDI: ffff88802d8ba540 [ 513.457057][ C1] RBP: ffff8880b8443680 R08: 0000000000000005 R09: 0000000000000000 [ 513.465020][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 513.472982][ C1] R13: ffffed10170886d1 R14: 0000000000000001 R15: ffff8880b853c880 [ 513.480961][ C1] ? smp_call_function_many_cond+0x5ad/0x16c0 [ 513.487024][ C1] ? smp_call_function_many_cond+0x587/0x16c0 [ 513.493092][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 513.498293][ C1] ? free_pgd_range+0x2a0/0x10d0 [ 513.503229][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 513.509564][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 513.514762][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 513.519889][ C1] flush_tlb_mm_range+0x45f/0x16f0 [ 513.525000][ C1] ? __pfx_free_pgtables+0x10/0x10 [ 513.530109][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 513.535657][ C1] tlb_finish_mmu+0x3fe/0x810 [ 513.540340][ C1] exit_mmap+0x454/0xa00 [ 513.544581][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 513.549360][ C1] ? uprobe_clear_state+0x49/0x260 [ 513.554475][ C1] ? find_held_lock+0x2b/0x80 [ 513.559156][ C1] ? uprobe_clear_state+0x5f/0x260 [ 513.564274][ C1] ? __mutex_unlock_slowpath+0x35d/0x930 [ 513.570008][ C1] ? arch_uprobe_clear_state+0x107/0x150 [ 513.575644][ C1] __mmput+0x12a/0x410 [ 513.579709][ C1] mmput+0x67/0x80 [ 513.583424][ C1] do_exit+0x8b1/0x2ae0 [ 513.587581][ C1] ? __pfx___schedule+0x10/0x10 [ 513.592432][ C1] ? __pfx_do_exit+0x10/0x10 [ 513.597020][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 513.602387][ C1] ? preempt_schedule_common+0x42/0xc0 [ 513.607849][ C1] do_group_exit+0xd5/0x2a0 [ 513.612353][ C1] get_signal+0x1ec7/0x21e0 [ 513.616855][ C1] ? kick_process+0xf0/0x1a0 [ 513.621444][ C1] ? __pfx_get_signal+0x10/0x10 [ 513.626293][ C1] ? __pfx_vfs_write+0x10/0x10 [ 513.631059][ C1] arch_do_signal_or_restart+0x91/0x7e0 [ 513.636599][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 513.642752][ C1] ? fput+0xd9/0x100 [ 513.646650][ C1] exit_to_user_mode_loop+0x139/0x6f0 [ 513.652020][ C1] ? rcu_is_watching+0x12/0xc0 [ 513.656789][ C1] do_syscall_64+0x666/0x870 [ 513.661380][ C1] ? clear_bhb_loop+0x40/0x90 [ 513.666052][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.671938][ C1] RIP: 0033:0x7efd7679de59 [ 513.676345][ C1] Code: Unable to access opcode bytes at 0x7efd7679de2f. [ 513.683365][ C1] RSP: 002b:00007efd776cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 513.691775][ C1] RAX: 0000000000010000 RBX: 00007efd76a26090 RCX: 00007efd7679de59 [ 513.699734][ C1] RDX: 00000000fffffecc RSI: 0000200000000000 RDI: 0000000000000004 [ 513.707697][ C1] RBP: 00007efd76833e6f R08: 0000000000000000 R09: 0000000000000000 [ 513.715657][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.723616][ C1] R13: 00007efd76a26128 R14: 00007efd76a26090 R15: 00007ffeb21b4e38 [ 513.731596][ C1] [ 514.836085][ C1] Shutting down cpus with NMI [ 514.841023][ C1] Kernel Offset: disabled [ 514.845340][ C1] Rebooting in 86400 seconds..