last executing test programs: 12m57.467731908s ago: executing program 4 (id=262): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) syz_usb_connect$uac3(0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x9f9, &(0x7f0000000040)={0x0, 0x76be, 0xc000, 0x3, 0x20002f7}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x80, 0x0}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000180)='0', 0x1) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)={0x20, 0x1e, 0x221, 0x0, 0x0, {0x7}, [@nested={0xc, 0x19, 0x0, 0x1, [@nested={0x8, 0xf3, 0x0, 0x1, [@nested={0x4, 0x28}]}]}]}, 0x20}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r3, 0x4188aec6, &(0x7f0000004c80)={0x0, [{0x3, 0x2d0, 0x2, &(0x7f0000000240)="016ae4f60ab230d469f380c660baf6a6ec07afe14b54555c734fb3fa546becda809551d902709d8a4cf662e445c6cedd6712309639900a3873e7f2efac8d54d93f32991245e4c24dc7a4409e5e7c2a576196a55a926baffa0e90"}, {0x0, 0x730, 0x7f, &(0x7f00000002c0)="4c0a65e16b5ca5898e6eed315f86f9b939a4474f9ab5bc338b1ee65dd3578eaa7ec819f06a24d952df238acc0c46b254d65285a4ea435efd851da58e448000ab97be60f23c23f5103ca342355ef9a63884840907c0601a25fd09218a2d5f30fca3612a3024e6c6d896a2bbedc92e1ece378d60b3e9124c3647f7c2f2b0468ba61cb02e4a1dd5e18da119b6f1b4e1d2b4265062e3a47b8adf1c17f60fa9ad06627a01783d5d9aa4273bcfd22cb616dff66dc7872c4499852fdb904a11e0cd011a5d5f211809133bb548c42bc392b61cb776318f185e5a830925b0eba9fc89f42182fcf96be436"}, {0x0, 0x510, 0x40, &(0x7f0000000400)="75cf26df1082b204fc455c0c76f9756a74f1c4af487b8f2582de390f926379713c53dbb4118219db4ec7de354063c80b7eebc42108d6aa94474a4689a4d830ec68560f0bd3bfe11a8786c37d4cb34f7e643c9af4d1953de52762906b6063697bdca2cf819b1717a35a57453835d05a264a5926fd4a77dd4d67a6070600d914747e14e43268f1a1c8831e5ba4efe9f04f43d65a5766d3b9048c9db09757e62dc48573"}, {0x1, 0x8000, 0x7, &(0x7f0000001500)="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"}, {0x7, 0x650, 0x2, &(0x7f0000002500)="187ffe4a557210aefde87d94f31d71230a7f5d4849e97aab7afaa2a30f1f50160d284061638e0fe5e833b78c148e4dcc6240c799da6a2b24ba68a61e2d4991cd021c4b3c4dfbb22946caa84c981fb42cc4527395f97564ba1b5ba4d0345630fdf9d214aa6cd3cca1f7cf268e68f8851570e5b8c380c377fef7948f5e45a6e1d3a6b7cc1c693331a3074619b6f0c9329eb095e11dbda1736cf37c1115bc0b36cb3524294b116c5e88583a9d02e791fe76b220efc16f228a59cbf4d01fdb6c14e110841abe58c6ed494a9b"}, {0x0, 0x8000, 0x1, &(0x7f0000002600)="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"}, {0x0, 0x6e8, 0xa, &(0x7f0000003600)="f826f48d85960963da034473d47b6b060113488ff8134e854f6958a01f4b173851fa9c2214ed79e3478a858e8a276bd4c848826e2fbe18c7fa661aa1b650ca48f1abfdeb1b52c15fa24a89ab3adc6728cc7a94e23cfbfc71833297c4880f7f1dc0ebfc1d77b8b8f6d8eb245afe51c17c127ff3a6ed0c629b3c49e6d49312a55c449a167353569e8968faa923889b1e08ec606535e27895fb3936a9fb77669aef2b93f4cce17851f2a0df9baeb4eaf468ddbaf3eedbfcdefe4731157aaa4ca340caedbda21231c2837ef596fde3eb9e774fc6b776d84bf7be3041e4289b"}, {0x2, 0x4c8, 0x2, &(0x7f0000003700)="b1285be381c83a90d0ac91d91e00da14746c47a732eb1a3153918314e6ab86e20fa49e49a47c8f5f9fbb12337d1cd8de1c55ab693983fa4b7af2073ebce348f8e09ae3ac2c274a6365b46f5dc43458339dae80a9357387fa462f23b27d5482702c27cb2e637c00e42762799d5af1621719ecccef1d95fd6e3678519a3f3ea9200e7dc1480fc4709b49f7c708f6063d5c5565a573c534bd5175"}, {0x2, 0x798, 0x3ff, &(0x7f00000037c0)="1c3d1ae04980fec4e3efcf9c0185a059be40c42cc5e94b84e8519683c0c7840fc1d59f44a72058fa50ab831ceee7f6d35f0fd23c2af9995f41f5bfd3f940f6cab360267d22498e4081d66a1f89fbb5416c1b653c8fb3597a204c5e241cea08b809badd3fb85c39c6182cc682cc86643ec88169d58ca4cb3eea488d6c61f10d95eaf9e419680f92a0cafd16a78569c8992a62c1b80462194a8436132e92f475d8ca8a78e5c5afe0037a4d8667454c6bb4b319dc203271ec8cb143560529933471a24d43cc7366a96068531b59b3f98564bf2aa7ed71d65c69182d345be831e383be9fd1f2ba8b56e172081ae35cfd3e54e2d47c"}, {0x0, 0x518, 0x6, &(0x7f00000038c0)="844c854cdb5b0a9639d3f7903e0a1e644b04c19666c7c51a26e826905e83b2d9fc8112dcf1d789b4d4686845d34eb4fb78807ae7acf9fa43f8e2d40cd09f2909fa49920fa9f5a7d03d9ff5a4db0c322750df7f33ae094a05be68962de13ba0020190b17ba2c561b4f54d49a5b3402b05943cfb59e8568cf3a350a2a4d21fb55ec8646385fa96e37fd9480b09d705307f92b39114df90e2fc53ae0af091b58d7fd16187"}, {0x2, 0x460, 0x7, &(0x7f0000003980)="8d9d4fa6bc039049922bd531082f80dc3c6145f2fa210c8661f8f9eb88f144c4880226622978f948b804079cc0d543592520d25d240949b479bec4976edfe37d5e75c5dd8dd50384367c55b5460aa761a3085231418beb510fc0a5471e872a7f93b46f8ed85e18a9ff1e5c6c6d9a642f2b230f0421b67d3e02135d4ea147d76bb78b2e8c17c75ef577e6061b"}, {0x1, 0x3f8, 0xffffff00, &(0x7f0000003a40)="dc3102d62404758943fcbd4d8e53ca04824c86fd7e3d25a35a4ff140cf8a4aff79359b3b3700f389a4fdd0f82dfdad4b9da14d27ee0d9c559bc3725836c0dd18388a01c9abff71755d67f13a5cb32b8a932fe05ab03e883413cda22fa8d79dad872297ed87938fe1d595487a8e5f183c5761bef258fd8e94bfa5bdca1a7f9f"}, {0x0, 0x8000, 0x7, &(0x7f0000003ac0)="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"}, {0x0, 0x468, 0x1000, &(0x7f0000004ac0)="e632fe5dd0184194450aac164a7fd629cc3b4bcf0fa1b0f2f807549e55f941be1fe877a2db40e2cf9f73ca7c515c72f1c43c3dd0a0f3378956a17854aa06fbbe2943337c607bd9a1b965169be34558c0d4e7692c1a5e5ee8339f006603af302862a4f953427de644daaa4692f4e02099446b95b5568a37df0e52127c5e461eae99ea0eb6792a8ebc7da39e206e"}, {0x1, 0x3c8, 0x3ff, &(0x7f0000004b80)="47962acd1bd31241b9604965501906185e77fbebd0cb3d5f4f79c64c60735586ff3e98128165c882c327eda9470a97f59db912d45887b0b3bb3ff3c94c82ce13f26ec38db798876e99aa84f75bcb2e7addd7ce2d0db3893200cf3a0ca776d9b51e6b2f1615716ad9acf7d6a433289a0641dabd14dde4bc2386"}, {0x1, 0x390, 0x7, &(0x7f0000004c00)="8c3e47559d4cfd949c6d6c7c4a65650c5c5579dead1bd916912e28d734b391e1851b767647dcaead10fca3f010607e432ce5b518290fd57d8389effca5b407806da623cdaece60ca3d0560c97ecf6d833c565d2989e5b22db592eaa0e62040281b64859bb246b12647dd2233af659e0bd26b"}]}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x4c, r4, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00'}) 12m56.281337278s ago: executing program 4 (id=264): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) ftruncate(r2, 0xc17a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x9a, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = fsopen(&(0x7f0000000040)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) io_uring_setup(0x1694, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80) ioctl$SNDRV_PCM_IOCTL_UNLINK(r5, 0x4161, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x3, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000fcdbdf250300000008000100000000001c0007800c000180080001"], 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x10) 12m55.320162795s ago: executing program 4 (id=267): socket(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x2, 0x6, 0xa}, {0x6, 0xfd, 0x0, 0x7ffffcbb}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000005c0)='..&-^\x00', &(0x7f0000000640)='/selinux/status\x00', 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfffa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x29, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 12m53.069724646s ago: executing program 4 (id=274): r0 = socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x230200, 0x0) sendmsg$can_raw(r1, &(0x7f0000000300)={&(0x7f00000001c0), 0x10, &(0x7f00000002c0)={&(0x7f0000000240)=@can={{0x1, 0x1}, 0x4, 0x1, 0x0, 0x0, "49a26849a07e0d92"}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x10) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x311091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x3d5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x70, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x8, 0x2}}}}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r4, 0x80, 0xba, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4040000) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r5, 0xc02c5341, &(0x7f0000000400)) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002200a1ed071225"], 0x0}, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x290, 0xc8, 0x8, 0x0, 0x5803, 0x358, 0x2e8, 0x2e8, 0x358, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xff], [0xff000000, 0xff000000, 0xff, 0x1fe0000ff], 'bridge0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x89, 0x3, 0x0, 0x12}, 0x0, 0x228, 0x290, 0x0, {0x0, 0x2000000000000}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@inet=@hashlimit3={{0x158}, {'veth1_macvtap\x00', {0xeb98, 0x101, 0x7a, 0xfffd, 0x4, 0x9, 0x0, 0x7f, 0x8, 0x78}, {0xaa}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x7, 0x2, 0x563, 'netbios-ns\x00', 'syz1\x00', {0x6}}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0xf0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}, [0xffffffff, 0x0, 0xff, 0xffffff00], [0xff000000, 0x0, 0x0, 0xff000000], 'pim6reg\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x11, 0x2, 0x3, 0x40}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000019080)='net/fib_trie\x00') pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x6}, 0x300, 0x2, 0x2, 0x9, 0x0, 0x7}, 0x20) ioperm(0x0, 0x6, 0x7) syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 12m47.672574207s ago: executing program 4 (id=284): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) rmdir(0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r2, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) setxattr$security_evm(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180), &(0x7f00000006c0)=ANY=[@ANYBLOB="03010e009e1b0c6f5ea642dc6f853b326c620cf207424bb3606980eed13cf2e0ba8ed06e6f0320b2b7986d28ceb227d6bd2b090088177258312e06176bd2a7a6761ed922353fb352712df73e5d76"], 0x67, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x44801) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r8, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r9, 0x4) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r8, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r10, r7, 0x0, r6}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) 12m46.976506826s ago: executing program 4 (id=288): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db28709050201200003100d090585"], 0x0) syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) write(r1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0x1a, {"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", 0x1000}}, 0x1006) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) syz_usb_control_io(r0, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12m45.822710738s ago: executing program 32 (id=288): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db28709050201200003100d090585"], 0x0) syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) write(r1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0x1a, {"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", 0x1000}}, 0x1006) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) syz_usb_control_io(r0, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10m59.892726528s ago: executing program 3 (id=579): syz_usb_connect(0x3, 0x90f, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001280)={0xa, &(0x7f0000000e00)={0xa, 0x6, 0x250, 0x3, 0x40, 0x4, 0xff, 0x17}, 0x42, &(0x7f0000000e40)=ANY=[@ANYBLOB="050f42000410100a02210100000f0000e70000ff0007100212280e0f1c100a0344b900000f0066d85d910300040001050500"]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101302, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) open_by_handle_at(r2, &(0x7f00000002c0)=@shmem={0xc, 0x1, {0x9, 0x38000}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000100)={0x4}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="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", 0xdc1}], 0x1}}], 0x1, 0x40000) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0x7}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c898}, 0x20004804) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff2}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000040)={0x4}) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="040e070204b0"], 0xa) 10m57.769096299s ago: executing program 3 (id=588): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0}, 0x0) ptrace$poke(0x4, r1, &(0x7f0000000e40), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r5 = fanotify_init(0xf00, 0x1) fanotify_mark(r5, 0x105, 0x40009965, r4, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x68042, 0xe) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r6, 0x115, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) eventfd(0x8000) ioctl$KVM_IRQFD(r8, 0x4020ae76, 0x0) 10m56.297273745s ago: executing program 3 (id=592): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket(0x1e, 0x4, 0x0) socket$pptp(0x18, 0x1, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x4fe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x20000050) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10m55.624715733s ago: executing program 3 (id=595): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b80)=@security={'security\x00', 0x64, 0x4, 0x2a8, 0x100000c, 0x0, 0xe0, 0x178, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@dscp={{0x28}, {0x10, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00', {0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x42}}}, {{@ip={@multicast2, @private=0xa010101, 0xff000000, 0xff, 'veth0_macvtap\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x2, 0x7}, {0x2, 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETA(0xffffffffffffffff, 0x8910, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x4, 0x10103) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r5, 0xc10c5541, &(0x7f0000000480)={0x6, 0x4, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x160, 0x1170, 0x1398, 0x160, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x13}, @loopback, [0x0, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x18}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@addrtype1={{0x28}, {0x94, 0x804, 0x9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000004, 0x40010, r4, 0x1abee000) socket(0x2, 0x80805, 0x0) close(r3) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x3a) sendmsg$nl_route_sched(r2, 0x0, 0x0) socket(0x10, 0x803, 0x0) 10m53.258677243s ago: executing program 3 (id=599): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1100000000000000ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x82be43e5b47887a9, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc02d8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r5, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) rmdir(&(0x7f0000000000)='./file0\x00') r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f00000003c0)) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pread64(r7, 0x0, 0x0, 0xfd) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'wg1\x00'}) 10m51.727999677s ago: executing program 3 (id=601): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x6, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) read$msr(0xffffffffffffffff, &(0x7f000001aa40)=""/102400, 0x19000) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x100004) write$eventfd(r3, &(0x7f0000000240), 0xffffff14) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r4, &(0x7f00000009c0)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}, {{&(0x7f0000000540)={0xa, 0x4e20, 0x4, @empty, 0x43}, 0x1c, 0x0, 0x0, &(0x7f0000000900)=[@rthdr={{0x18, 0x29, 0x39, {0x2b, 0x0, 0x1, 0x2}}}], 0x18}}], 0x2, 0x2000c0d1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000808500000070000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) writev(r0, &(0x7f0000001600)=[{&(0x7f0000000300)="7a779c43d62b775cd8df87981640b1dabd5b150276c71580e1706d91383a9fc9ba0720c9284143ed633020b8268558fd7157e9f1259ed914113ece72ab3846d253a45247ed7bf9d342b2bc7be1387ad6aaf72ee077f8df01ef5c49055a805f4b61a605c285fedcf468c71ea829a91f4aa7d2b202c1da5061a208e232fe2e2610ee76380a2b3fe3d37f6fba4a5e93adb519f83f2fd0349951cd31bd7c2d6e6e9d854e6632f2b85725245467cfea028c4d8db4a5cbf4aa002c2201d499f2a45067851dc2a95878aa48637f", 0xca}, {&(0x7f00000004c0)="aceee65bb0a55bdc5190c84f535b98fc5f1dec9f1d9e03937f56c64a7c348d6eb4cba5c958a94be76c2980e2a1e3ab59ce3406ddd3815cae438f2181932fc2ba7cc9b39eaa7f859fb179a33ec66d7e3a0cd92a596d8de6e0b20d2335a7a7ea64ec48a0c07ea27e03c0820bfc33b983", 0x6f}, {&(0x7f0000000540)="f51037cb33219ff2e6ce3e0138050b5b7675d458d6e4d08720c6e741c35e90e9b5ccd170bbe557766d485a76133045efe356ca6cf1f84ac244b8267743880a0c0935db2c7be3c706ec1a962e3526f26f3f109edf8ef47ba6e31afe6e4f3c153bfb2c91c006879c446498675dfe68fe9ed04abdddef01465abeff9bee0199b07323eeca515fc257d7fba387df637aceec9b434cda033ca7ad818ebf8235e3309d1d2fbec1a95f69acf7cba526338e87f66409e25676b27a3fd6eb2d7d81e5fb20c511f2f65980321978dc32451e4972efdbb54db1750dce2bbcf263a53d472822e3ddc6eb38f4258235edf095c5a0be2e1a381be6542e38dfe4dcba5199bd7788f3b3f4c9574c3b7027892441f56d71cd8bfc3101f474648c5617eff727bd5e09cdce5ec57e74bee4985f945aecfca5623c591e185d37de2ab81f04d5584cab1c9ada85abe3ead74bb2a1012bd1c3e8556eb03a9db27ac0bb6fb3383f57de463c1712c3a1a06844dc49ebfd316d7d62252a72659bec456b70c3d353b1bb9216b3b7c88aecae249a9827f0bd171c70084ef87154fc4318197cfb4f0b56c965071b7950e817ceae3dd4d082625874da3398223bf2671a2109b10f7661e17636f82440b57d34e273a1b70bd3f1719cfaa5f34644a3a548c4c2025191ecb3f20d30cd9f80102a0205d51d7f178a60045b34c83f82e1596a8eba6ffe6a7a5e4a91468887c48403527eae1a81c7871320cec4555b740fa20de76ebd04564cdfbdbf200f770a82d0b26d17a353c395290300e7b8765ab43f778c98f38b404af946349d65e1dfd822d9df43db5d72a3829c058103fb61bb0bd1d330f002625e33fed594dd66a67b6ebf516da68aadb47045623abdb1eb6b998570f065a2302cc08ffd6718f2fbe2218043bcd8b81e4a67e20181f90982357be5f8e7df504e6700a0267c1283d49ed0e00a1f0697927e407dbbd5472c182f770b4a5520eecff0b19489152fc4b3fcf8efb6656e4a77d45f4974d4c86ffd926d3629cd5fb6a7c2f20b4c6dc8e111950368", 0x2e5}], 0x3) 10m35.265453913s ago: executing program 33 (id=601): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x6, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) read$msr(0xffffffffffffffff, &(0x7f000001aa40)=""/102400, 0x19000) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x100004) write$eventfd(r3, &(0x7f0000000240), 0xffffff14) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r4, &(0x7f00000009c0)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}, {{&(0x7f0000000540)={0xa, 0x4e20, 0x4, @empty, 0x43}, 0x1c, 0x0, 0x0, &(0x7f0000000900)=[@rthdr={{0x18, 0x29, 0x39, {0x2b, 0x0, 0x1, 0x2}}}], 0x18}}], 0x2, 0x2000c0d1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000808500000070000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) writev(r0, &(0x7f0000001600)=[{&(0x7f0000000300)="7a779c43d62b775cd8df87981640b1dabd5b150276c71580e1706d91383a9fc9ba0720c9284143ed633020b8268558fd7157e9f1259ed914113ece72ab3846d253a45247ed7bf9d342b2bc7be1387ad6aaf72ee077f8df01ef5c49055a805f4b61a605c285fedcf468c71ea829a91f4aa7d2b202c1da5061a208e232fe2e2610ee76380a2b3fe3d37f6fba4a5e93adb519f83f2fd0349951cd31bd7c2d6e6e9d854e6632f2b85725245467cfea028c4d8db4a5cbf4aa002c2201d499f2a45067851dc2a95878aa48637f", 0xca}, {&(0x7f00000004c0)="aceee65bb0a55bdc5190c84f535b98fc5f1dec9f1d9e03937f56c64a7c348d6eb4cba5c958a94be76c2980e2a1e3ab59ce3406ddd3815cae438f2181932fc2ba7cc9b39eaa7f859fb179a33ec66d7e3a0cd92a596d8de6e0b20d2335a7a7ea64ec48a0c07ea27e03c0820bfc33b983", 0x6f}, {&(0x7f0000000540)="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", 0x2e5}], 0x3) 7m42.156703276s ago: executing program 2 (id=1109): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000180)={r1, &(0x7f0000000080)='{#\x00', 0x4002, &(0x7f00000000c0)={@align=0x9ee3, {0xa168, 0x4f, 0xea, 0xffff}}, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x1}) r2 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x146b, 0x902, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x80, 0x4, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0xf8, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xb, 0xfe}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x7, 0xe8, 0x3}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) socket(0x10, 0x3, 0x0) gettid() timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setfsgid(0xee01) setfsgid(0xee01) syz_usb_control_io(r2, &(0x7f0000000080)={0x2c, &(0x7f0000000240)={0x40, 0x8, 0x2b, {0x2b, 0x31, "f70ba381030000000000000000cb4fdca0560fb30d54f365c5b1d43ee44fbf6fc93f0808251f559626"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 7m38.258957197s ago: executing program 2 (id=1121): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x702, 0xb, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c1", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m38.129698391s ago: executing program 2 (id=1122): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf250700000014000180060001"], 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x40) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000008c0)={0x84, @rand_addr=0x64010102, 0x4e22, 0x1, 'none\x00', 0x0, 0x10002, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @private=0xa010102, 0x4e24, 0x200000001, 'none\x00', 0x0, 0x821, 0x2e}, 0x2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x208, 0x100008b}, 0x0) syz_usb_connect(0x2, 0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b8db3008720541005470012207010902740001000040000904"], 0x0) semget$private(0x0, 0x207, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000100)={@mcast2}, 0x14) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x1, 0x3d9280) link(&(0x7f0000000380)='./cgroup/cgroup.procs\x00', &(0x7f0000000400)='./file0\x00') openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f00000000c0)={0x7, {0x86, 0x49, 0x8, 0x1df}, {0x2, 0xa, 0x5, 0x1}, {0x0, 0x3}}) futex(&(0x7f00000040c0), 0x6, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000240)={0x3, 0x0, {[0x4, 0x9, 0xdf, 0x7f, 0x7, 0x3, 0x7, 0xab5]}}) syz_emit_vhci(&(0x7f0000001fc0)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9}}}, 0xa) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) futex(&(0x7f00000040c0), 0x7, 0x3, 0x0, 0x0, 0x2) pselect6(0x40, &(0x7f00000001c0)={0xfffffffffffffffd, 0xff00000000000000, 0x699c2dee, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x103, 0x0, 0x3, 0x10, 0x4}, 0x0, 0x0) 7m33.984108101s ago: executing program 2 (id=1130): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x4048850}, 0x24044010) syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0x5e99, 0x3000, 0x3, 0x19a}, &(0x7f0000000040), 0x0, &(0x7f00000000c0)) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(r0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) bind$alg(r2, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) getpid() sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x7, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x8000) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r4 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) io_uring_setup(0x45ca, &(0x7f0000000080)={0x0, 0x7b01, 0x4000, 0x2, 0x139, 0x0, r4}) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r3, 0x0, 0x1) fchdir(r5) name_to_handle_at(r2, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0) 7m33.808747412s ago: executing program 2 (id=1131): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd61a7000200442f00fe8000200000000000000000000000bbfe8000000000000000000000000000aa0c2088be0000000201009900000086dd080088be000000031c0885"], 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x44, 0x8, 0x7f, '\x00', 0x8}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x20) 7m33.532527473s ago: executing program 2 (id=1132): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000180)={r1, &(0x7f0000000080)='{#\x00', 0x4002, &(0x7f00000000c0)={@align=0x9ee3, {0xa168, 0x4f, 0xea, 0xffff}}, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x1}) r2 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x146b, 0x902, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x80, 0x4, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0xf8, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xb, 0xfe}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x7, 0xe8, 0x3}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) socket(0x10, 0x3, 0x0) gettid() timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setfsgid(0xee01) syz_usb_control_io(r2, &(0x7f0000000080)={0x2c, &(0x7f0000000240)={0x40, 0x8, 0x2b, {0x2b, 0x31, "f70ba381030000000000000000cb4fdca0560fb30d54f365c5b1d43ee44fbf6fc93f0808251f559626"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 7m33.329970998s ago: executing program 34 (id=1132): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000180)={r1, &(0x7f0000000080)='{#\x00', 0x4002, &(0x7f00000000c0)={@align=0x9ee3, {0xa168, 0x4f, 0xea, 0xffff}}, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x1}) r2 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x146b, 0x902, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x80, 0x4, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0xf8, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xb, 0xfe}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x7, 0xe8, 0x3}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) socket(0x10, 0x3, 0x0) gettid() timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setfsgid(0xee01) syz_usb_control_io(r2, &(0x7f0000000080)={0x2c, &(0x7f0000000240)={0x40, 0x8, 0x2b, {0x2b, 0x31, "f70ba381030000000000000000cb4fdca0560fb30d54f365c5b1d43ee44fbf6fc93f0808251f559626"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 6.569038609s ago: executing program 7 (id=2508): syz_open_dev$loop(&(0x7f0000000040), 0xffffffff80000001, 0x1680a2) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/rcu_normal', 0x82802, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="4f4741494e20274361707475726520566f6c756d65272030303030303030303030303030303030303030300a494741494e0a50486ce2369e9e7101d386d8c8cc4f4e454f55540a535045414b4552202743442043617074757265272030303030303030303133373433383935333437320a50484f4e454f55540a494d495820274344272030"], 0xaf) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000700)=0x8, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000180)=0x7) r7 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r7, 0xc0245720, &(0x7f0000000180)) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x20004014}, 0x20000085) 5.322648308s ago: executing program 7 (id=2512): syz_open_dev$loop(&(0x7f0000000040), 0xffffffff80000001, 0x1680a2) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/rcu_normal', 0x82802, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="4f4741494e20274361707475726520566f6c756d65272030303030303030303030303030303030303030300a494741494e0a50486ce2369e9e7101d386d8c8cc4f4e454f55540a535045414b4552202743442043617074757265272030303030303030303133373433383935333437320a50484f4e454f55540a494d495820274344272030"], 0xaf) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000700)=0x8, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r6, 0xc0245720, &(0x7f0000000180)) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x20004014}, 0x20000085) 4.372780968s ago: executing program 7 (id=2516): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f00000002c0)='devpts\x00', 0x0) fcntl$dupfd(r1, 0x0, r1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_setup(0x3aa5, &(0x7f00000002c0)={0x0, 0x32b6, 0x880, 0x0, 0x35d}) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r2], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x62, 0xfffffffffffffe74, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000cc0)=""/265, 0xcb95, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x3ff}, 0x24) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)) 3.404969488s ago: executing program 7 (id=2520): capset(&(0x7f0000000040)={0x20080522}, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x77, 0x0, 0x2, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x301, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.168667975s ago: executing program 7 (id=2522): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000007c0)={0x1c, &(0x7f00000006c0)={0x40, 0x9, 0x5, "a7bd2d5b42"}, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f0000000200)={0x14, &(0x7f0000000000)={0x20, 0x7, 0x2, {0x2, 0xc}}, 0x0}, &(0x7f0000000580)={0x34, &(0x7f0000000240)={0x0, 0x17, 0x27, "113d8d138c7d56fcfd86d3ccef6444cbcd9bdcec8c4b2e08fcd8e4bf5dec0451aa8af05a07c3ac"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.188003178s ago: executing program 6 (id=2529): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x80000007}) 2.153473629s ago: executing program 0 (id=2531): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x1, 0x25dfdbfb, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4, 0xfffd, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x9, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20004000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x40814) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r1, 0x0, 0x4000) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) 2.042523922s ago: executing program 6 (id=2532): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x88100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.853562548s ago: executing program 6 (id=2535): pipe(&(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x10000000) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x123f41, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000000fe80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x882}, 0x4000000) ioctl$TIOCSETD(r2, 0x5423, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) 1.793114519s ago: executing program 6 (id=2536): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x10, 0x0, 0x0, 0x0, 0x40, 0x4b3, 0x3108, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x5, 0x0, {0x9, 0x21, 0x24, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0x8, 0xc5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000140)="e2b5de1b04c03054271995b320812ed7ded5ec71d0c57c5f11366f435a79a10e509bdfc4425719a03d2647f06c09e0a6dfc63acef45296e824c5c25945387c1840340d7203c4bc7f6228a7b0388ba698f8e8bb15ee5762f41d1f8953e00ef286a2426181912541e43bb71a016fd7cffaccd2cf79da80b0c67a87e82dfa52ac31dac584f37ebe1a25c62d9b55b678598cf6", 0x91}], 0x1) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.152883374s ago: executing program 0 (id=2540): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x80000000, 0x9, 0xfffffffffffffffd, 0x100000001, 0x2, 0x3, 0x10004002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x2, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x4], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 685.231007ms ago: executing program 0 (id=2542): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) ioctl$KVM_RUN(r3, 0xae80, 0x0) 633.003016ms ago: executing program 5 (id=2543): r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x1908, 0x4) sendmmsg(r0, &(0x7f0000000000)=[{{&(0x7f0000000640)=@ieee802154={0x24, @long={0x3, 0x2, {0x300}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d4", 0x1}], 0x1}}], 0x1, 0x24044015) 632.762822ms ago: executing program 1 (id=2544): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000240)={'syz0\x00', {0x508, 0x7, 0x7, 0x1}, 0x4a, [0x5f11bec3, 0x3, 0x5, 0x40, 0x0, 0x3, 0x0, 0x7d, 0x80013, 0x5, 0x0, 0x6, 0x1, 0x0, 0x4000000, 0x2, 0x1a4, 0xfffff605, 0x3, 0x0, 0x46e9, 0x7ff, 0xe2b, 0x7, 0x681c1eb5, 0x11e, 0x0, 0x2, 0x0, 0xe9, 0x0, 0xffff, 0x9, 0x4, 0x0, 0x3, 0x0, 0x1, 0x5de82a4e, 0x0, 0x0, 0x20000, 0x4, 0xfffffffe, 0x1, 0x0, 0x8000, 0x7, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff7, 0x0, 0xd11, 0x0, 0x1ab9, 0x0, 0x2, 0x0, 0xfffffffb, 0x1c15d73a, 0x2], [0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x8, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x61c5fb46, 0x10000, 0x0, 0x4, 0x10001, 0x75, 0x0, 0x4, 0x0, 0xd, 0x80000000, 0x0, 0x61c2, 0x9, 0x0, 0x9, 0x2, 0xff, 0x2, 0x10001, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x9, 0x441238ca, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x0, 0xc50, 0x6, 0x9f5, 0x0, 0xa02, 0x1c75, 0xf51, 0x6, 0x40, 0x0, 0x21, 0x20000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0xfffffffd, 0xc, 0x0, 0x200, 0xcc0, 0x401, 0x6, 0x6, 0x0, 0x0, 0xffffff7f, 0xe, 0x921, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0x4, 0x0, 0x6574, 0x7, 0x4, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0xffffffff, 0xd63, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x3ff, 0x8, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0x4ad, 0x0, 0x0, 0x80000001, 0x3, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x40, 0x8000010, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x800, 0x5, 0xd, 0x0, 0x40000000, 0x0, 0x4, 0x45d, 0x4, 0x0, 0xfff, 0xb2, 0xa, 0xb]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 593.398127ms ago: executing program 5 (id=2545): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x339, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 558.104893ms ago: executing program 1 (id=2546): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x9, 0xfffffffffffffffd, 0x77, 0x0, 0x3, 0xc002004c4, 0x4000001004, 0x4, 0x8, 0x4000000000000000, 0x1, 0x366817b8, 0x2800000000000000, 0x5, 0x2000d30], 0x26000, 0x3013d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x20401, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x804) 484.663139ms ago: executing program 5 (id=2547): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) dup3(r1, r0, 0x0) 453.405023ms ago: executing program 5 (id=2548): wait4(0x0, 0x0, 0x8, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100080, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000080)=0x9) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) 439.839789ms ago: executing program 1 (id=2549): memfd_create(&(0x7f0000000640)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00rz\x8d\x82\xfd\xf0\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4\xf8\xe7\xbe\x03\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x83\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\x00\x00\x00\x00\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xff\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\xd8IS\x1d\xc7]\xe7\x96\xf1\xb9\x8a.H\xa7J5\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x1aX\x87\xf5\x1aP\x06\x9a\xa9\xa0\x98 )\xe3\xa1\xa2\xb1D\xe0\x15S\x89/m\xb71%\x80\x04Q\x1dN\xb0\x19\x81\x16@\xc0\xc4\"g\xd7Z\xb3\x17\xd1\xe7\x1b\xbd\xdck\x95\x16\x17\x95\xce\xa6\x92_\xe4\x9a\xaeA-\x02\x161\x8c\xe7\xa6.)\xadpM\x19\x1c\xcd\xf6S\x9a(:\x90\xb1\x8ft\xeb#\x82\x17\x8d\x00\xcaY\xe9\xf7\xee\x91\b*FiO\xaf\x0f\xc4\x11\x83q\xd2x\x80\xa4\xa0\x16\b\x8b,\xdb\x88\x1e\xc1m\x91\xf0S\xc4\xc9\xefEBT\x8e\xff6\xff\xbb\xd4\xbe&\xf5St\v\xe1\x98;q\\\x1c\xe9\xcc\xfeV\xc3M5\xa9\xec\xc9\x8a\xee7\xbb\xa4\x1f\xc8\xfb\xaar15\xdf\\\xf4d\xc0\xc7\xf3\x88\x13\x94^01\xfc_\xa14\xacp\x8f\xfdx\xa5\xa9_t\x86\xe3%\xf1q\x00\x89c\x05H\x92\xa6\x93je\xfaFc\x9ct\xd9\x86\xb2z\xa3\x17\x85\xc9\x8c\x7f\v1CI\xcd$l\xf8]\xb3\x8dv\xa7\xc6\xacS\x9c\x89u', 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020) 361.163898ms ago: executing program 0 (id=2550): r0 = socket(0x10, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x8, 0x80800) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000140)={0xa, 0x0, 0x0, r3, 0x2}) close_range(r0, 0xffffffffffffffff, 0x0) 360.976993ms ago: executing program 1 (id=2551): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x2000e8, 0x4) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000095c0)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000001808a8972bd0b72e4a139697dd2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}], 0x1, 0x0, 0x0, 0x40884}, 0x0) 355.763235ms ago: executing program 5 (id=2552): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000009c0)={0x3, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}, {0xddde4000, 0xb7, &(0x7f0000000880)=""/183}, {0x12000, 0x45, &(0x7f0000000940)=""/69}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) 298.038941ms ago: executing program 1 (id=2553): r0 = syz_open_dev$loop(&(0x7f0000000300), 0x81, 0x2a83) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x3, 0xa8503) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000000)={r1, 0x0, {0x2a12, 0x80010000, 0x0, 0x9, 0x4, 0x0, 0x0, 0x3, 0x1c, "0500000000000000d1f8a0e91ddaaca79603dda1af1ea80000000000edffffff0000deff00ffffffffffffffe300000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) 277.793033ms ago: executing program 5 (id=2554): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x280b40, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x181700, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 212.622584ms ago: executing program 0 (id=2555): creat(&(0x7f00000000c0)='./file0\x00', 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000280)=[{{&(0x7f0000000240)={0x2, 0x4e01, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="340000000000000000000000070000004411", @ANYRES64=r3], 0x38}}], 0x1, 0x46000) 203.268198ms ago: executing program 1 (id=2556): r0 = syz_usb_connect$uac2(0x5, 0xa8, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x1ccc, 0x5}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002700)={0x84, &(0x7f00000022c0)={0x60, 0x15}, 0x0, 0x0, 0x0, &(0x7f0000002400)={0x20, 0x0, 0x4, {0x800, 0x8}}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)={0x40, 0x13, 0x6}, &(0x7f0000002580)={0x40, 0x17, 0x6, @link_local}, &(0x7f00000025c0)={0x40, 0x19, 0x2, "60e6"}, &(0x7f0000002600)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000002640)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000002680)={0x40, 0x1e, 0x1, 0xcd}, &(0x7f00000026c0)={0x40, 0x21, 0x1, 0x10}}) 178.56143ms ago: executing program 6 (id=2557): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) 72.42113ms ago: executing program 7 (id=2558): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x195d, 0xec4d2770249a3ef5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x80043, 0x186) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0x0, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b30c50997d3bef4cd4a5d83cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a0000000200", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x5]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 55.858434ms ago: executing program 0 (id=2559): r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000040)={0x0, 0x1, 0x2, "c5df"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000600)={0x20, 0x16, 0x4, "857a7618"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 6 (id=2560): syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f010000000000000002"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(r1, 0x0, &(0x7f0000000000)={0x1, 0x3, 0x4, 0xc0f}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): eed USB device number 85 using dummy_hcd [ 787.745320][ T5731] usb 7-1: Using ep0 maxpacket: 32 [ 787.752180][ T5731] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 787.763173][ T5731] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 787.773496][ T5731] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 787.786017][ T5731] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.795873][ T5731] usb 7-1: config 0 descriptor?? [ 787.804525][ T5731] hub 7-1:0.0: USB hub found [ 787.835626][ T9663] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 787.975336][ T9663] usb 6-1: device descriptor read/64, error -71 [ 788.215343][ T9663] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 788.345342][ T9663] usb 6-1: device descriptor read/64, error -71 [ 788.455577][ T9663] usb usb6-port1: attempt power cycle [ 788.498765][ T5723] pwc: Failed to set LED on/off time (-71) [ 788.510384][ T5723] pwc: send_video_command error -71 [ 788.516002][ T5723] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 788.538475][ T5723] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 788.544683][ T5731] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 788.572771][ T5723] usb 2-1: USB disconnect, device number 87 [ 788.578782][ T5731] usbhid 7-1:0.0: can't add hid device: -71 [ 788.578864][ T5731] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 788.596283][ T5731] usb 7-1: USB disconnect, device number 85 [ 788.805513][ T9663] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 788.828672][ T9663] usb 6-1: device descriptor read/8, error -71 [ 788.831884][T14311] i2c i2c-1: failure sending STOP [ 788.849289][ T5342] usb 1-1: USB disconnect, device number 96 [ 788.935477][ T5731] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 788.968386][ T5723] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 789.065379][ T9663] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 789.085370][ T5731] usb 7-1: Using ep0 maxpacket: 32 [ 789.091068][ T9663] usb 6-1: device descriptor read/8, error -71 [ 789.098961][ T5731] usb 7-1: config 7 has an invalid interface number: 20 but max is 3 [ 789.107065][ T5731] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 789.117299][ T5731] usb 7-1: config 7 has 1 interface, different from the descriptor's value: 4 [ 789.126178][ T5731] usb 7-1: config 7 has no interface number 0 [ 789.132572][ T5731] usb 7-1: config 7 interface 20 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 789.143410][ T5731] usb 7-1: config 7 interface 20 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 789.150456][ T5723] usb 2-1: unable to get BOS descriptor or descriptor too short [ 789.154304][ T5731] usb 7-1: config 7 interface 20 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 789.163626][ T5723] usb 2-1: not running at top speed; connect to a high speed hub [ 789.177387][ T5731] usb 7-1: New USB device found, idVendor=046d, idProduct=c11f, bcdDevice=59.ce [ 789.192465][ T5731] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.200487][ T5731] usb 7-1: Product: syz [ 789.204643][ T5731] usb 7-1: Manufacturer: syz [ 789.209488][ T5731] usb 7-1: SerialNumber: syz [ 789.214149][ T9663] usb usb6-port1: unable to enumerate USB device [ 789.220856][ T5723] usb 2-1: config 17 has an invalid interface number: 8 but max is 1 [ 789.229513][ T5723] usb 2-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 789.241471][ T5723] usb 2-1: config 17 has no interface number 0 [ 789.248190][ T5723] usb 2-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 86, changing to 4 [ 789.259269][ T5723] usb 2-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 62603, setting to 1023 [ 789.270522][ T5723] usb 2-1: config 17 interface 8 has no altsetting 0 [ 789.279211][ T5723] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 789.288498][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.296560][ T5723] usb 2-1: Product: syz [ 789.300770][ T5723] usb 2-1: Manufacturer: syz [ 789.305432][ T5723] usb 2-1: SerialNumber: syz [ 789.536207][ T5723] usb 2-1: selecting invalid altsetting 0 [ 789.551545][ T5723] usb 2-1: 8:6 : no UAC_FORMAT_TYPE desc [ 789.557290][ T5723] usb 2-1: selecting invalid altsetting 0 [ 789.591570][T14353] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2072'. [ 789.602117][ T5723] usb 2-1: USB disconnect, device number 88 [ 789.673698][T10506] Bluetooth: hci5: unexpected event for opcode 0xb004 [ 789.680633][T10506] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 791.137558][T10506] Bluetooth: hci1: command 0x0406 tx timeout [ 791.143645][T10506] Bluetooth: hci0: command 0x0c1a tx timeout [ 791.156926][T14349] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 791.276721][T14371] comedi comedi0: Minor 2 could not be opened [ 791.872876][T14349] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 791.879087][T14349] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 792.172940][ T5731] usb 7-1: unsupported MDLM descriptors [ 792.185902][ T5342] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 792.194266][ T5731] usb 7-1: USB disconnect, device number 86 [ 792.289909][T14379] kAFS: unable to lookup cell '(,c¾ûL' [ 793.215501][ T5616] Bluetooth: hci5: command 0x0406 tx timeout [ 793.439281][ T5342] usb 2-1: device descriptor read/all, error -71 [ 793.935410][ T5616] Bluetooth: hci0: command 0x0c1a tx timeout [ 794.739456][T14382] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 794.747032][T14382] ALSA: mixer_oss: invalid index 1374389 [ 796.354881][ T30] audit: type=1400 audit(1777310685.741:755): avc: denied { append } for pid=14395 comm="syz.7.2079" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 796.525348][ T9663] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 796.940660][ T9663] usb 2-1: Using ep0 maxpacket: 32 [ 796.952376][ T9663] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 796.962244][ T9663] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.973529][ T9663] usb 2-1: Product: syz [ 796.978346][ T9663] usb 2-1: Manufacturer: syz [ 796.983041][ T9663] usb 2-1: SerialNumber: syz [ 797.015836][ T9663] usb 2-1: config 0 descriptor?? [ 797.238187][ T9663] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 091 [ 798.415762][T14368] Bluetooth: hci0: command 0x0c1a tx timeout [ 798.495374][ T5616] Bluetooth: hci1: command 0x0406 tx timeout [ 798.495902][T14394] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 799.284737][T14394] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 799.295623][T14394] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 799.583591][ T30] audit: type=1400 audit(1777310688.971:756): avc: denied { read } for pid=14421 comm="syz.0.2091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 799.636711][ T30] audit: type=1400 audit(1777310689.021:757): avc: denied { setopt } for pid=14421 comm="syz.0.2091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 799.675590][T14423] binder: BINDER_SET_CONTEXT_MGR already set [ 799.688683][T14423] binder: 14421:14423 ioctl 4018620d 200000000140 returned -16 [ 799.781948][T14429] kAFS: unable to lookup cell '(,c¾ûL' [ 800.243336][T14393] i2c i2c-1: failure sending STOP [ 800.451083][T14268] usb 2-1: USB disconnect, device number 91 [ 800.575543][ T5616] Bluetooth: hci5: command 0x0406 tx timeout [ 800.927027][T14437] netlink: 'syz.1.2095': attribute type 2 has an invalid length. [ 800.943592][ T30] audit: type=1400 audit(1777310690.331:758): avc: denied { connect } for pid=14434 comm="syz.1.2095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 800.997789][ T30] audit: type=1400 audit(1777310690.381:759): avc: denied { accept } for pid=14434 comm="syz.1.2095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 801.137191][T14445] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2098'. [ 801.217935][ T5342] IPVS: starting estimator thread 0... [ 801.262569][T14447] can0: slcan on ttyS3. [ 801.277555][T14453] fuseblk: Bad value for 'rootmode' [ 801.296126][T14447] can0 (unregistered): slcan off ttyS3. [ 801.307100][T14447] IPVS: lc: FWM 3 0x00000003 - no destination available [ 801.325544][T14448] IPVS: using max 42 ests per chain, 100800 per kthread [ 802.226158][ T5616] Bluetooth: hci0: command 0x0c1a tx timeout [ 803.576710][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 803.753386][T14466] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 803.760857][T14466] ALSA: mixer_oss: invalid index 1374389 [ 804.188880][T14268] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 804.437143][ T30] audit: type=1400 audit(1777310693.831:760): avc: denied { ioctl } for pid=14481 comm="syz.7.2102" path="/dev/usbmon3" dev="devtmpfs" ino=725 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 805.494038][T14484] kAFS: unable to lookup cell '(,c¾ûL' [ 805.540750][T14268] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 805.574128][T14268] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 805.588709][T14268] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 805.598949][T14268] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.622697][T14268] usb 2-1: config 0 descriptor?? [ 805.785860][T14492] comedi comedi0: Minor 2 could not be opened [ 805.813406][T14492] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2109'. [ 805.906502][ T5731] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 807.055454][ T5731] usb 1-1: Using ep0 maxpacket: 32 [ 807.071295][ T5731] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 807.095363][ T5731] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 807.105903][ T5731] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 807.115095][ T5731] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.173301][ T5731] usb 1-1: config 0 descriptor?? [ 807.201051][ T5731] hub 1-1:0.0: USB hub found [ 807.228282][T14268] usb 2-1: string descriptor 0 read error: -71 [ 807.263149][T14268] usb 2-1: USB disconnect, device number 92 [ 807.269717][ T30] audit: type=1400 audit(1777310696.661:761): avc: denied { sys_nice } for pid=14507 comm="syz.5.2113" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 807.904183][T14521] xt_hashlimit: size too large, truncated to 1048576 [ 807.966219][ T5731] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 808.017444][ T5731] usbhid 1-1:0.0: can't add hid device: -71 [ 808.052124][ T5731] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 808.293805][ T5731] usb 1-1: reset high-speed USB device number 97 using dummy_hcd [ 808.323265][ T5342] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 808.466172][ T5731] usb 1-1: device firmware changed [ 808.477737][ T5731] usb 1-1: USB disconnect, device number 97 [ 808.545322][ T5342] usb 6-1: Using ep0 maxpacket: 32 [ 808.552536][ T5342] usb 6-1: config 7 has an invalid interface number: 20 but max is 3 [ 808.560898][ T5342] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 808.571162][ T5342] usb 6-1: config 7 has 1 interface, different from the descriptor's value: 4 [ 808.580678][ T5342] usb 6-1: config 7 has no interface number 0 [ 808.586837][ T5342] usb 6-1: config 7 interface 20 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 808.597672][ T5342] usb 6-1: config 7 interface 20 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 808.608649][ T5342] usb 6-1: config 7 interface 20 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 808.623245][ T5342] usb 6-1: New USB device found, idVendor=046d, idProduct=c11f, bcdDevice=59.ce [ 808.632374][ T5342] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.640397][ T5342] usb 6-1: Product: syz [ 808.644552][ T5342] usb 6-1: Manufacturer: syz [ 808.649151][ T5342] usb 6-1: SerialNumber: syz [ 808.786047][ T5731] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 809.265345][ T5731] usb 1-1: Using ep0 maxpacket: 32 [ 810.381511][ T5731] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 810.391391][ T5731] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.400870][ T5731] usb 1-1: Product: syz [ 810.406159][ T5731] usb 1-1: Manufacturer: syz [ 810.410895][ T5731] usb 1-1: SerialNumber: syz [ 810.428651][ T5731] usb 1-1: config 0 descriptor?? [ 810.474892][T14527] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2118'. [ 810.726612][ T5731] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 098 [ 810.903979][ T5342] usb 6-1: unsupported MDLM descriptors [ 810.925618][ T5342] usb 6-1: USB disconnect, device number 90 [ 813.027457][T14568] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2127'. [ 813.335448][T14268] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 813.495530][ T9663] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 813.503771][T14268] usb 2-1: Using ep0 maxpacket: 16 [ 813.513625][T14268] usb 2-1: config 0 has an invalid descriptor of length 235, skipping remainder of the config [ 813.534355][T14268] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC8, changing to 0x88 [ 813.546766][T14268] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 33222, setting to 1024 [ 813.559721][T14268] usb 2-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00 [ 813.570229][T14268] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.583063][T14268] usb 2-1: config 0 descriptor?? [ 813.603306][T14268] usbhid 2-1:0.0: fixing wrong optional hid class descriptors count [ 813.685330][ T9663] usb 7-1: Using ep0 maxpacket: 32 [ 813.697554][ T9663] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.709798][ T9663] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.719855][ T9663] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 813.729205][ T9663] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.742777][ T9663] usb 7-1: config 0 descriptor?? [ 813.760980][ T9663] hub 7-1:0.0: USB hub found [ 813.820805][T14268] usbhid 2-1:0.0: can't add hid device: -71 [ 813.835414][T14268] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 813.855585][T14565] i2c i2c-1: failure writing data [ 813.985171][ T5731] usb 1-1: USB disconnect, device number 98 [ 814.005686][T14268] usb 2-1: USB disconnect, device number 93 [ 814.068910][T14577] FAULT_INJECTION: forcing a failure. [ 814.068910][T14577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 814.115418][T14577] CPU: 1 UID: 0 PID: 14577 Comm: syz.0.2130 Tainted: G L syzkaller #0 PREEMPT(full) [ 814.115446][T14577] Tainted: [L]=SOFTLOCKUP [ 814.115452][T14577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 814.115463][T14577] Call Trace: [ 814.115468][T14577] [ 814.115476][T14577] dump_stack_lvl+0x100/0x190 [ 814.115505][T14577] should_fail_ex.cold+0x5/0xa [ 814.115531][T14577] _copy_from_iter+0x1f4/0x1690 [ 814.115563][T14577] ? __pfx__copy_from_iter+0x10/0x10 [ 814.115588][T14577] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 814.115618][T14577] copy_page_from_iter+0x238/0x300 [ 814.115645][T14577] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 814.115676][T14577] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 814.115698][T14577] ? unwind_get_return_address+0x59/0xa0 [ 814.115725][T14577] ? arch_stack_walk+0xa6/0xf0 [ 814.115764][T14577] ? _kstrtoull+0x13c/0x1f0 [ 814.115781][T14577] ? __pfx__kstrtoull+0x10/0x10 [ 814.115801][T14577] tun_get_user+0x16d6/0x3c20 [ 814.115834][T14577] ? __pfx_tun_get_user+0x10/0x10 [ 814.115857][T14577] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 814.115883][T14577] ? find_held_lock+0x2b/0x80 [ 814.115900][T14577] ? tun_get+0x191/0x370 [ 814.115918][T14577] ? tun_get+0x191/0x370 [ 814.115944][T14577] tun_chr_write_iter+0xdc/0x200 [ 814.115968][T14577] vfs_write+0x6ac/0x1070 [ 814.115987][T14577] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 814.116012][T14577] ? __pfx_vfs_write+0x10/0x10 [ 814.116028][T14577] ? find_held_lock+0x2b/0x80 [ 814.116059][T14577] ksys_write+0x12a/0x250 [ 814.116078][T14577] ? __pfx_ksys_write+0x10/0x10 [ 814.116099][T14577] ? rcu_is_watching+0x12/0xc0 [ 814.116126][T14577] do_syscall_64+0x10b/0xf80 [ 814.116146][T14577] ? clear_bhb_loop+0x40/0x90 [ 814.116168][T14577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.116186][T14577] RIP: 0033:0x7f667b55d60e [ 814.116202][T14577] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 814.116219][T14577] RSP: 002b:00007f667c460fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 814.116236][T14577] RAX: ffffffffffffffda RBX: 00007f667c4616c0 RCX: 00007f667b55d60e [ 814.116248][T14577] RDX: 0000000000000066 RSI: 00002000000004c0 RDI: 00000000000000c8 [ 814.116258][T14577] RBP: 00007f667c461090 R08: 0000000000000000 R09: 0000000000000000 [ 814.116269][T14577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 814.116279][T14577] R13: 00007f667b816038 R14: 00007f667b815fa0 R15: 00007fff95710298 [ 814.116304][T14577] [ 814.542486][T14584] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2133'. [ 814.620343][T14589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2135'. [ 814.673971][T14589] fuse: Bad value for 'fd' [ 814.693436][ T9663] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 814.696125][T14589] fuseblk: Bad value for 'fd' [ 814.724037][ T9663] usbhid 7-1:0.0: can't add hid device: -71 [ 814.745470][ T9663] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 814.784122][T14593] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2137'. [ 814.786363][ T9663] usb 7-1: USB disconnect, device number 88 [ 814.843046][ T5616] Bluetooth: hci5: unexpected event for opcode 0xb004 [ 814.855226][ T5616] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 815.790540][T14598] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 815.798086][T14598] ALSA: mixer_oss: invalid index 1374389 [ 817.786580][ T5342] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 818.043658][T14627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2147'. [ 818.195899][ T5342] usb 2-1: device descriptor read/64, error -71 [ 818.250819][T14630] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2148'. [ 818.292922][ T5616] Bluetooth: hci0: unexpected event for opcode 0xb004 [ 818.300124][ T5616] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 818.435054][T14645] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2152'. [ 818.458220][ T5342] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 818.484102][T14645] fuse: Bad value for 'fd' [ 818.492315][T14645] fuseblk: Bad value for 'fd' [ 818.605354][ T5342] usb 2-1: device descriptor read/64, error -71 [ 818.727253][ T5342] usb usb2-port1: attempt power cycle [ 821.355327][ T5342] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 821.525345][ T5342] usb 2-1: Using ep0 maxpacket: 32 [ 821.546279][ T5342] usb 2-1: config 7 has an invalid interface number: 20 but max is 3 [ 821.568913][ T5342] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 821.593524][ T5342] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 4 [ 821.614642][ T5342] usb 2-1: config 7 has no interface number 0 [ 821.630245][ T5342] usb 2-1: config 7 interface 20 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 821.654199][ T5342] usb 2-1: config 7 interface 20 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 821.715589][ T5342] usb 2-1: config 7 interface 20 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 821.848788][ T5342] usb 2-1: New USB device found, idVendor=046d, idProduct=c11f, bcdDevice=59.ce [ 821.889821][T14678] netlink: 'syz.5.2160': attribute type 6 has an invalid length. [ 821.913414][T14678] netlink: 'syz.5.2160': attribute type 6 has an invalid length. [ 822.050504][ T5342] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.069788][ T5342] usb 2-1: Product: syz [ 822.074051][ T5342] usb 2-1: Manufacturer: syz [ 822.118559][ T5342] usb 2-1: SerialNumber: syz [ 822.327324][ T30] audit: type=1400 audit(1777310711.721:762): avc: denied { mount } for pid=14684 comm="syz.7.2163" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 822.366383][T14687] overlayfs: failed to resolve './bus': -2 [ 822.389006][ T30] audit: type=1400 audit(1777310711.761:763): avc: denied { mounton } for pid=14684 comm="syz.7.2163" path="/198/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 822.430006][T14689] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 822.440536][T14665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2158'. [ 822.537025][ T30] audit: type=1400 audit(1777310711.931:764): avc: denied { unmount } for pid=10682 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 822.635414][ T9663] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 822.709905][ T5342] usb 2-1: unsupported MDLM descriptors [ 822.732254][ T5342] usb 2-1: USB disconnect, device number 97 [ 822.786742][ T9663] usb 6-1: device descriptor read/64, error -71 [ 823.045346][ T9663] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 823.185437][ T9663] usb 6-1: device descriptor read/64, error -71 [ 823.306644][ T9663] usb usb6-port1: attempt power cycle [ 823.536147][T14268] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 823.591810][ T30] audit: type=1400 audit(1777310712.981:765): avc: denied { unmount } for pid=5613 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 823.724452][ T9663] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 823.755352][T14268] usb 2-1: Using ep0 maxpacket: 32 [ 823.761077][ T9663] usb 6-1: device descriptor read/8, error -71 [ 823.768498][T14268] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.779604][T14268] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 823.789449][T14268] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 823.798491][T14268] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.808191][T14268] usb 2-1: config 0 descriptor?? [ 823.815351][T14268] hub 2-1:0.0: USB hub found [ 824.015538][ T9663] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 824.023409][T14268] hub 2-1:0.0: 1 port detected [ 824.045947][ T9663] usb 6-1: device descriptor read/8, error -71 [ 824.165675][ T9663] usb usb6-port1: unable to enumerate USB device [ 824.956136][T14268] hub 2-1:0.0: activate --> -90 [ 825.236011][T14268] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 825.245804][ T5731] usb 2-1: USB disconnect, device number 98 [ 825.819682][T14714] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 825.827211][T14714] ALSA: mixer_oss: invalid index 1374389 [ 825.898056][T14726] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 825.909310][ T5342] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 825.932324][T14726] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 825.951669][T14726] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 826.105466][ T5342] usb 7-1: Using ep0 maxpacket: 16 [ 826.117065][ T5342] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 826.138621][ T5342] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 826.173834][ T5342] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 826.196736][ T5342] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 826.214914][ T5342] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 826.229887][ T5342] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 826.235470][ T5731] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 826.239757][ T5342] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 826.254842][ T5342] usb 7-1: Manufacturer: syz [ 826.281981][ T5342] usb 7-1: config 0 descriptor?? [ 826.406722][ T5731] usb 1-1: Using ep0 maxpacket: 32 [ 826.417056][ T5731] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 826.428035][ T5731] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 826.439690][ T5731] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 826.449149][ T5731] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.466529][ T5731] usb 1-1: config 0 descriptor?? [ 826.488032][ T5731] hub 1-1:0.0: USB hub found [ 826.631546][ T5342] rc_core: IR keymap rc-hauppauge not found [ 826.646664][ T5342] Registered IR keymap rc-empty [ 826.658769][ T5342] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 826.681455][T14742] FAULT_INJECTION: forcing a failure. [ 826.681455][T14742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 826.696111][T14742] CPU: 1 UID: 0 PID: 14742 Comm: syz.7.2181 Tainted: G L syzkaller #0 PREEMPT(full) [ 826.696138][T14742] Tainted: [L]=SOFTLOCKUP [ 826.696148][T14742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 826.696158][T14742] Call Trace: [ 826.696164][T14742] [ 826.696171][T14742] dump_stack_lvl+0x100/0x190 [ 826.696195][T14742] should_fail_ex.cold+0x5/0xa [ 826.696218][T14742] strncpy_from_user+0x3b/0x2d0 [ 826.696245][T14742] do_getname+0x78/0x390 [ 826.696272][T14742] user_path_at+0x26/0x60 [ 826.696292][T14742] __x64_sys_mount+0x1fb/0x310 [ 826.696318][T14742] ? __pfx___x64_sys_mount+0x10/0x10 [ 826.696344][T14742] ? rcu_is_watching+0x12/0xc0 [ 826.696373][T14742] do_syscall_64+0x10b/0xf80 [ 826.696393][T14742] ? clear_bhb_loop+0x40/0x90 [ 826.696414][T14742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.696432][T14742] RIP: 0033:0x7f7a55d9cdd9 [ 826.696447][T14742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 826.696462][T14742] RSP: 002b:00007f7a56c1e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 826.696478][T14742] RAX: ffffffffffffffda RBX: 00007f7a56015fa0 RCX: 00007f7a55d9cdd9 [ 826.696495][T14742] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000000 [ 826.696505][T14742] RBP: 00007f7a56c1e090 R08: 0000000000000000 R09: 0000000000000000 [ 826.696515][T14742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 826.696525][T14742] R13: 00007f7a56016038 R14: 00007f7a56015fa0 R15: 00007ffd6ab39ce8 [ 826.696548][T14742] [ 826.706192][ T5342] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 826.899365][ T5342] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 827.009620][ T5342] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input23 [ 827.251650][ T5342] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 827.349257][ T5342] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 827.427144][T14755] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 827.603383][T14753] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2174'. [ 827.615403][ T5342] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 827.776108][ T5342] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 827.795604][ T5342] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 827.825562][ T5342] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 827.845405][ T5342] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 827.855483][T14368] Bluetooth: hci1: command 0x0406 tx timeout [ 827.865595][ T5342] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 827.885439][ T5342] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 827.905460][ T5342] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 827.936310][T14368] Bluetooth: hci5: command 0x0406 tx timeout [ 827.949942][ T5342] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 827.959514][ T5342] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 828.015493][T14368] Bluetooth: hci0: command 0x0c1a tx timeout [ 828.181790][ T5731] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 828.197578][T14751] vlan0: entered allmulticast mode [ 828.248744][ T5731] usbhid 1-1:0.0: can't add hid device: -71 [ 828.260639][ T5731] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 828.324058][ T5731] usb 1-1: USB disconnect, device number 99 [ 828.432414][T14767] binder: 14764:14767 ioctl 4018620d 0 returned -22 [ 828.809500][ T5731] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 828.813255][T14776] vxfs: unable to read disk superblock at 1 [ 828.823377][T14776] vxfs: unable to read disk superblock at 8 [ 828.829376][T14776] vxfs: can't find superblock. [ 829.257243][ T5731] usb 1-1: device descriptor read/64, error -71 [ 829.418382][T14770] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 829.425858][T14770] ALSA: mixer_oss: invalid index 1374389 [ 829.555705][ T5731] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 829.681411][ T5342] usb 7-1: USB disconnect, device number 89 [ 829.735361][ T5731] usb 1-1: device descriptor read/64, error -71 [ 829.896608][ T5731] usb usb1-port1: attempt power cycle [ 830.000371][T14784] netlink: 'syz.5.2192': attribute type 6 has an invalid length. [ 830.009751][T14784] netlink: 'syz.5.2192': attribute type 6 has an invalid length. [ 831.139281][ T5731] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 831.165744][ T5731] usb 1-1: device descriptor read/8, error -71 [ 831.339012][T14790] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 831.346464][T14790] ALSA: mixer_oss: invalid index 1374389 [ 831.556791][T14810] binder: 14808:14810 ioctl 4018620d 0 returned -22 [ 831.558281][T14809] comedi comedi0: Minor 2 could not be opened [ 831.614277][T14809] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2198'. [ 832.290527][T14820] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2203'. [ 832.377752][T14821] fuseblk: Bad value for 'rootmode' [ 832.390517][T14820] sd 0:0:1:0: PR command failed: 1026 [ 832.428577][T14820] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 832.441739][T14820] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 834.379255][T14841] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 834.388199][T14841] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 834.402486][T14841] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 834.632894][T14854] comedi comedi0: Minor 2 could not be opened [ 834.665359][T14854] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2212'. [ 834.917066][T14856] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2213'. [ 835.012180][T14861] fuseblk: Bad value for 'rootmode' [ 835.140074][T14856] sd 0:0:1:0: PR command failed: 1026 [ 835.173709][T14856] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 835.202243][T14856] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 835.628029][T14875] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2218'. [ 836.530146][ T5616] Bluetooth: hci1: command 0x0406 tx timeout [ 836.537037][T14368] Bluetooth: hci0: command 0x0c1a tx timeout [ 836.537046][T10506] Bluetooth: hci5: command 0x0406 tx timeout [ 837.005120][ T30] audit: type=1400 audit(1777310726.391:766): avc: denied { connect } for pid=14895 comm="syz.5.2224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 837.041565][T14894] comedi comedi0: Minor 2 could not be opened [ 837.055406][T14894] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2223'. [ 837.693164][ T5731] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 837.896431][ T5731] usb 1-1: Using ep0 maxpacket: 16 [ 837.934202][ T5731] usb 1-1: unable to get BOS descriptor or descriptor too short [ 837.972273][ T5731] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 838.005378][ T5731] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 838.017960][ T5731] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 838.028652][ T5731] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.037294][ T5731] usb 1-1: Product: syz [ 838.056421][ T5731] usb 1-1: Manufacturer: syz [ 838.077130][ T5731] usb 1-1: SerialNumber: syz [ 838.205708][ T5723] usb 6-1: new full-speed USB device number 95 using dummy_hcd [ 838.497441][ T5723] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 838.509613][ T5723] usb 6-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 838.518955][ T5723] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.522605][ T5731] usb 1-1: 0:2 : does not exist [ 838.527076][ T5723] usb 6-1: Product: syz [ 838.536659][ T5723] usb 6-1: Manufacturer: syz [ 838.544118][ T5723] usb 6-1: SerialNumber: syz [ 838.552056][ T5723] usb 6-1: config 0 descriptor?? [ 838.663230][ T5731] usb 1-1: USB disconnect, device number 104 [ 838.764951][ T30] audit: type=1400 audit(1777310728.151:767): avc: denied { write } for pid=14901 comm="syz.5.2225" path="socket:[54909]" dev="sockfs" ino=54909 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 838.833605][ T30] audit: type=1400 audit(1777310728.151:768): avc: denied { read } for pid=14901 comm="syz.5.2225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 839.055704][T14905] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 839.063113][T14905] ALSA: mixer_oss: invalid index 1374389 [ 840.985135][T14930] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2234'. [ 841.505320][ T5804] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 841.665367][ T5804] usb 1-1: Using ep0 maxpacket: 32 [ 841.681382][ T5804] usb 1-1: no configurations [ 841.707212][ T5804] usb 1-1: can't read configurations, error -22 [ 841.855314][ T5804] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 842.018361][ T5804] usb 1-1: Using ep0 maxpacket: 32 [ 842.030890][ T5804] usb 1-1: no configurations [ 842.049068][ T5804] usb 1-1: can't read configurations, error -22 [ 842.069080][ T5804] usb usb1-port1: attempt power cycle [ 842.603310][T14945] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 842.610779][T14945] ALSA: mixer_oss: invalid index 1374389 [ 843.214323][ T5804] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 843.255921][ T5804] usb 1-1: Using ep0 maxpacket: 32 [ 843.265546][ T5804] usb 1-1: no configurations [ 843.274162][ T5804] usb 1-1: can't read configurations, error -22 [ 843.316152][T14947] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 843.323548][T14947] ALSA: mixer_oss: invalid index 1374389 [ 843.415969][ T5804] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 843.437933][T14957] comedi comedi0: Minor 2 could not be opened [ 843.466467][ T5804] usb 1-1: device descriptor read/8, error -71 [ 843.497311][T14957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2240'. [ 843.595566][ T5804] usb usb1-port1: unable to enumerate USB device [ 843.693635][ T5723] ati_remote 6-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 843.842544][T14966] 9p: Bad value for 'rfdno' [ 843.865998][T14268] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 844.905400][T14268] usb 7-1: Using ep0 maxpacket: 16 [ 844.927616][T14268] usb 7-1: config 0 has an invalid interface number: 34 but max is 0 [ 844.949244][T14268] usb 7-1: config 0 has no interface number 0 [ 844.971851][T14268] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 844.999460][T14268] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 845.035595][T14268] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 845.055524][T14268] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.133475][T14268] usb 7-1: Product: syz [ 845.140595][T14973] netlink: 'syz.0.2246': attribute type 10 has an invalid length. [ 845.159718][T14268] usb 7-1: Manufacturer: syz [ 845.186218][T14268] usb 7-1: SerialNumber: syz [ 845.212337][T14268] usb 7-1: config 0 descriptor?? [ 845.230513][T14962] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 845.238610][T14962] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 845.464014][T14962] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 845.472844][T14962] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 845.694781][T14268] asix 7-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 845.961563][ T5804] usb 6-1: USB disconnect, device number 95 [ 845.997886][ T9663] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 846.145390][ T9663] usb 2-1: device descriptor read/64, error -71 [ 846.272778][T14989] vlan0: entered allmulticast mode [ 846.299476][T14268] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 846.309818][T14268] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 846.355567][T14268] asix 7-1:0.34: probe with driver asix failed with error -71 [ 846.365701][T14268] usb 7-1: USB disconnect, device number 90 [ 846.395539][ T9663] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 846.535330][ T9663] usb 2-1: device descriptor read/64, error -71 [ 846.725452][ T9663] usb usb2-port1: attempt power cycle [ 847.447798][ T9663] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 847.758057][T14993] kAFS: unable to lookup cell '(,c¾ûL' [ 847.796377][ T9663] usb 2-1: device descriptor read/8, error -71 [ 848.007043][T15002] binder: 14998:15002 ioctl c0306201 0 returned -14 [ 848.045384][ T9663] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 848.096882][ T9663] usb 2-1: device descriptor read/8, error -71 [ 848.233123][ T9663] usb usb2-port1: unable to enumerate USB device [ 848.267093][T15004] netlink: 'syz.6.2254': attribute type 6 has an invalid length. [ 848.277018][T15004] netlink: 'syz.6.2254': attribute type 6 has an invalid length. [ 848.691388][ T30] audit: type=1400 audit(1777310738.041:769): avc: denied { setopt } for pid=15006 comm="syz.0.2255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 849.512854][T15023] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2260'. [ 849.632402][T15027] fuseblk: Bad value for 'rootmode' [ 849.635723][T15026] comedi comedi0: Minor 2 could not be opened [ 849.639295][T15027] sd 0:0:1:0: PR command failed: 1026 [ 849.645211][T15026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2258'. [ 849.660953][T15027] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 849.679843][T15027] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 850.493896][ T30] audit: type=1400 audit(1777310739.611:770): avc: denied { mount } for pid=15030 comm="syz.1.2262" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 850.526195][ T30] audit: type=1400 audit(1777310739.621:771): avc: denied { remount } for pid=15030 comm="syz.1.2262" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 850.737691][T15032] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2262'. [ 851.046887][ T9663] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 851.156866][ T30] audit: type=1400 audit(1777310740.551:772): avc: denied { unmount } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 851.234500][ T9663] usb 1-1: Using ep0 maxpacket: 8 [ 851.259434][ T9663] usb 1-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 851.280689][ T9663] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.296884][ T9663] usb 1-1: Product: syz [ 851.315409][ T9663] usb 1-1: Manufacturer: syz [ 851.325416][ T9663] usb 1-1: SerialNumber: syz [ 851.355963][ T9663] usb 1-1: config 0 descriptor?? [ 851.382142][ T9663] usb 1-1: selecting invalid altsetting 3 [ 851.389375][ T9663] comedi comedi5: could not set alternate setting 3 in high speed [ 851.400800][ T9663] usbdux 1-1:0.0: driver 'usbdux' failed to auto-configure device. [ 851.598384][ T9663] usbdux 1-1:0.0: probe with driver usbdux failed with error -22 [ 851.614694][ T5804] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 852.585356][ T5804] usb 7-1: device descriptor read/64, error -71 [ 852.636574][ T9663] usb 1-1: USB disconnect, device number 109 [ 852.865284][T15051] kAFS: unable to lookup cell '(,c¾ûL' [ 853.785374][ T5804] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 853.986082][ T5804] usb 7-1: device descriptor read/64, error -71 [ 854.308121][ T5804] usb usb7-port1: attempt power cycle [ 854.588195][ T5804] usb usb7-port1: Cannot enable. Maybe the USB cable is bad? [ 854.725212][T15083] comedi comedi0: Minor 2 could not be opened [ 854.772509][T15083] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2272'. [ 854.784896][ T5804] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 854.815782][ T5804] usb 7-1: Using ep0 maxpacket: 32 [ 854.827230][ T5804] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 854.847073][ T5804] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 854.864593][ T5804] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 854.882525][ T5804] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.920109][ T5804] usb 7-1: config 0 descriptor?? [ 854.940036][ T5804] hub 7-1:0.0: USB hub found [ 855.834857][T15093] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 855.842444][T15093] ALSA: mixer_oss: invalid index 1374389 [ 857.342489][ T5804] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 857.374611][ T5804] usbhid 7-1:0.0: can't add hid device: -71 [ 857.390254][ T5804] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 857.398124][ T5723] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 857.447083][ T5804] usb 7-1: USB disconnect, device number 94 [ 857.567724][ T5723] usb 6-1: device descriptor read/64, error -71 [ 857.859808][T15134] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2288'. [ 857.915390][ T5723] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 857.986178][T15139] fuseblk: Bad value for 'rootmode' [ 858.032381][T15134] sd 0:0:1:0: PR command failed: 1026 [ 858.038684][T15134] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 858.052131][T15134] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 858.065365][ T5723] usb 6-1: device descriptor read/64, error -71 [ 858.185609][ T5723] usb usb6-port1: attempt power cycle [ 858.545360][ T5723] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 858.604075][ T5723] usb 6-1: device descriptor read/8, error -71 [ 858.888716][ T5723] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 859.366478][ T5723] usb 6-1: device descriptor read/8, error -71 [ 859.425508][ T30] audit: type=1400 audit(1777310748.811:773): avc: denied { connect } for pid=15155 comm="syz.7.2295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 859.451484][T15143] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 859.458953][T15143] ALSA: mixer_oss: invalid index 1374389 [ 859.541801][ T5723] usb usb6-port1: unable to enumerate USB device [ 859.569227][T15158] FAULT_INJECTION: forcing a failure. [ 859.569227][T15158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 859.588688][T15158] CPU: 0 UID: 0 PID: 15158 Comm: syz.6.2293 Tainted: G L syzkaller #0 PREEMPT(full) [ 859.588716][T15158] Tainted: [L]=SOFTLOCKUP [ 859.588722][T15158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 859.588732][T15158] Call Trace: [ 859.588739][T15158] [ 859.588746][T15158] dump_stack_lvl+0x100/0x190 [ 859.588772][T15158] should_fail_ex.cold+0x5/0xa [ 859.588799][T15158] _copy_to_user+0x32/0xd0 [ 859.588826][T15158] simple_read_from_buffer+0xcb/0x170 [ 859.588851][T15158] proc_fail_nth_read+0x1af/0x230 [ 859.588871][T15158] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 859.588892][T15158] ? rw_verify_area+0xce/0x6d0 [ 859.588919][T15158] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 859.588938][T15158] vfs_read+0x1e4/0xb30 [ 859.588960][T15158] ? __pfx_vfs_read+0x10/0x10 [ 859.588978][T15158] ? __fget_files+0x215/0x3d0 [ 859.589005][T15158] ? __fget_files+0x21f/0x3d0 [ 859.589033][T15158] ksys_read+0x12a/0x250 [ 859.589051][T15158] ? __pfx_ksys_read+0x10/0x10 [ 859.589070][T15158] ? rcu_is_watching+0x12/0xc0 [ 859.589101][T15158] do_syscall_64+0x10b/0xf80 [ 859.589121][T15158] ? clear_bhb_loop+0x40/0x90 [ 859.589143][T15158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.589161][T15158] RIP: 0033:0x7f502275d60e [ 859.589176][T15158] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 859.589193][T15158] RSP: 002b:00007f502366afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 859.589211][T15158] RAX: ffffffffffffffda RBX: 00007f502366b6c0 RCX: 00007f502275d60e [ 859.589222][T15158] RDX: 000000000000000f RSI: 00007f502366b0a0 RDI: 0000000000000004 [ 859.589232][T15158] RBP: 00007f502366b090 R08: 0000000000000000 R09: 0000000000000000 [ 859.589249][T15158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 859.589259][T15158] R13: 00007f5022a16038 R14: 00007f5022a15fa0 R15: 00007ffccef6b778 [ 859.589283][T15158] [ 859.891718][T15164] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2297'. [ 859.900848][T15164] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2297'. [ 859.910685][T15164] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2297'. [ 860.081871][T15169] kAFS: unable to lookup cell '(,c¾ûL' [ 861.448172][ T24] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 861.628372][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 861.724563][ T24] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 861.757692][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.793980][ T24] usb 6-1: Product: syz [ 861.812087][ T24] usb 6-1: Manufacturer: syz [ 861.914807][ T24] usb 6-1: SerialNumber: syz [ 861.941364][ T24] usb 6-1: config 0 descriptor?? [ 862.523113][ T24] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: version d4.15 found at bus 006 address 100 [ 863.520341][T15215] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 863.527831][T15215] ALSA: mixer_oss: invalid index 1374389 [ 864.874460][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 865.578918][T15235] xt_hashlimit: size too large, truncated to 1048576 [ 865.724731][T15239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2308'. [ 865.815368][ T24] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 865.855053][T15234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2308'. [ 865.945449][T15239] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2308'. [ 865.975403][ T24] usb 2-1: device descriptor read/64, error -71 [ 866.017406][ T30] audit: type=1326 audit(1777310755.411:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15230 comm="syz.0.2308" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f667b59cdd9 code=0x0 [ 866.335957][T15228] i2c i2c-1: failure writing data [ 866.685401][T15253] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 867.006359][ T24] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 867.043576][ T5703] usb 6-1: USB disconnect, device number 100 [ 867.165498][ T24] usb 2-1: device descriptor read/64, error -71 [ 867.202859][T15259] FAULT_INJECTION: forcing a failure. [ 867.202859][T15259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 867.234625][T15259] CPU: 1 UID: 0 PID: 15259 Comm: syz.0.2314 Tainted: G L syzkaller #0 PREEMPT(full) [ 867.234653][T15259] Tainted: [L]=SOFTLOCKUP [ 867.234659][T15259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 867.234670][T15259] Call Trace: [ 867.234677][T15259] [ 867.234683][T15259] dump_stack_lvl+0x100/0x190 [ 867.234710][T15259] should_fail_ex.cold+0x5/0xa [ 867.234737][T15259] _copy_from_user+0x2e/0xd0 [ 867.234763][T15259] bpf_test_init.isra.0+0xaf/0x100 [ 867.234795][T15259] bpf_prog_test_run_xdp+0x57e/0x1670 [ 867.234823][T15259] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 867.234850][T15259] ? fput+0x79/0x100 [ 867.234874][T15259] ? __bpf_prog_get+0x97/0x2a0 [ 867.234896][T15259] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 867.234916][T15259] __sys_bpf+0x1725/0x4b90 [ 867.234953][T15259] ? __pfx___sys_bpf+0x10/0x10 [ 867.234978][T15259] ? proc_fail_nth_write+0x9f/0x220 [ 867.234997][T15259] ? find_held_lock+0x2b/0x80 [ 867.235019][T15259] ? find_held_lock+0x2b/0x80 [ 867.235036][T15259] ? ksys_write+0x190/0x250 [ 867.235054][T15259] ? ksys_write+0x190/0x250 [ 867.235076][T15259] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 867.235102][T15259] ? kernel_write+0x663/0x6c0 [ 867.235121][T15259] ? __fget_files+0x215/0x3d0 [ 867.235155][T15259] ? fput+0x79/0x100 [ 867.235177][T15259] ? ksys_write+0x1ac/0x250 [ 867.235196][T15259] ? __pfx_ksys_write+0x10/0x10 [ 867.235220][T15259] __x64_sys_bpf+0x7b/0xc0 [ 867.235236][T15259] ? lockdep_hardirqs_on+0x78/0x100 [ 867.235255][T15259] do_syscall_64+0x10b/0xf80 [ 867.235274][T15259] ? clear_bhb_loop+0x40/0x90 [ 867.235295][T15259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.235313][T15259] RIP: 0033:0x7f667b59cdd9 [ 867.235329][T15259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 867.235346][T15259] RSP: 002b:00007f667c461028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 867.235364][T15259] RAX: ffffffffffffffda RBX: 00007f667b815fa0 RCX: 00007f667b59cdd9 [ 867.235376][T15259] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 867.235387][T15259] RBP: 00007f667c461090 R08: 0000000000000000 R09: 0000000000000000 [ 867.235398][T15259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 867.235409][T15259] R13: 00007f667b816038 R14: 00007f667b815fa0 R15: 00007fff95710298 [ 867.235434][T15259] [ 867.305455][ T24] usb usb2-port1: attempt power cycle [ 867.585432][ T5703] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 867.845382][ T5703] usb 6-1: device descriptor read/64, error -71 [ 868.085515][ T24] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 868.092879][T15268] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2316'. [ 868.110376][ T5703] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 868.121778][ T24] usb 2-1: device descriptor read/8, error -71 [ 868.255358][ T5703] usb 6-1: device descriptor read/64, error -71 [ 868.375476][ T24] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 868.383869][ T5703] usb usb6-port1: attempt power cycle [ 868.426493][ T24] usb 2-1: device descriptor read/8, error -71 [ 868.545475][ T24] usb usb2-port1: unable to enumerate USB device [ 868.735683][ T5703] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 868.812718][T15275] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2317'. [ 868.949793][ T5703] usb 6-1: device descriptor read/8, error -71 [ 869.658325][ T5703] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 869.685781][ T5703] usb 6-1: device descriptor read/8, error -71 [ 869.762380][T15284] gretap1: entered promiscuous mode [ 869.805528][ T5703] usb usb6-port1: unable to enumerate USB device [ 869.884246][T15277] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 869.892857][T15277] ALSA: mixer_oss: invalid index 1374389 [ 869.947499][T15286] xt_hashlimit: invalid interval [ 871.195365][ T9] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 871.357116][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 871.371141][ T9] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 871.381615][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.390051][ T9] usb 1-1: Product: syz [ 871.415389][ T5804] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 871.425375][ T9] usb 1-1: Manufacturer: syz [ 871.430087][ T9] usb 1-1: SerialNumber: syz [ 871.435364][T15310] comedi comedi0: Minor 2 could not be opened [ 871.447561][ T9] usb 1-1: config 0 descriptor?? [ 871.565341][ T5804] usb 6-1: device descriptor read/64, error -71 [ 871.666330][ T9] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 110 [ 871.807083][ T5804] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 871.966557][ T5804] usb 6-1: device descriptor read/64, error -71 [ 873.010756][ T5804] usb usb6-port1: attempt power cycle [ 873.415459][ T5804] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 873.441805][ T5804] usb 6-1: device descriptor read/8, error -71 [ 873.495399][ T9] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 873.673314][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 873.687222][ T5804] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 873.702999][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 873.716614][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 873.727973][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 873.738089][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 873.748472][ T5804] usb 6-1: device descriptor read/8, error -71 [ 873.754855][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 873.769410][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 873.784544][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 873.794619][ T9] usb 2-1: Manufacturer: syz [ 873.804219][ T9] usb 2-1: config 0 descriptor?? [ 873.855695][ T5804] usb usb6-port1: unable to enumerate USB device [ 873.985550][ T5703] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 874.145420][ T5703] usb 7-1: Using ep0 maxpacket: 8 [ 874.175499][T15314] i2c i2c-1: failure writing data [ 874.213264][ T5703] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 874.303432][ T5703] usb 7-1: config 179 has no interface number 0 [ 874.363586][ T5703] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 874.386770][ T5703] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 874.398533][ T5703] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 874.410137][ T5703] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 874.421821][ T5703] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 874.428790][ T9] rc_core: IR keymap rc-hauppauge not found [ 874.438061][ T5703] usb 7-1: config 179 interface 65 has no altsetting 0 [ 874.442837][ T9] Registered IR keymap rc-empty [ 874.454317][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 874.458629][ T5703] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 874.472227][ T5703] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.475408][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 874.510862][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 874.523426][T15322] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 874.526627][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input25 [ 874.531286][T15322] ALSA: mixer_oss: invalid index 1374389 [ 874.547033][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 874.550737][ T5703] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input26 [ 874.611229][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 874.635455][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 874.686504][T15330] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 874.699253][ T4961] input input26: unable to receive magic message: -110 [ 874.709800][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 874.722852][T15330] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 874.767370][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 874.776699][T15334] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2332'. [ 874.802798][ T4961] input input26: unable to receive magic message: -32 [ 874.845383][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 874.869518][ T4961] input input26: unable to receive magic message: -32 [ 874.907206][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 874.935556][ T4961] input input26: unable to receive magic message: -32 [ 874.951738][ T5703] usb 7-1: USB disconnect, device number 95 [ 874.957711][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 874.957771][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 875.062146][ T24] usb 1-1: USB disconnect, device number 110 [ 875.121537][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 875.175543][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 875.206848][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 875.250220][ T9] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 875.270312][ T9] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 875.535406][ T24] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 875.675342][ T24] usb 1-1: device descriptor read/64, error -71 [ 875.919361][ T24] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 875.995356][ T5703] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 876.055314][ T24] usb 1-1: device descriptor read/64, error -71 [ 876.075334][ T5731] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 876.145459][ T5703] usb 7-1: Using ep0 maxpacket: 32 [ 876.152032][ T5703] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 876.163134][ T5703] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 876.173762][ T24] usb usb1-port1: attempt power cycle [ 876.180290][ T5703] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 876.190449][ T5703] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.202760][ T5703] usb 7-1: config 0 descriptor?? [ 876.216087][ T5703] hub 7-1:0.0: USB hub found [ 876.225457][ T5731] usb 6-1: Using ep0 maxpacket: 16 [ 876.232863][ T5731] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 876.246143][ T5731] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 876.258289][ T5731] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 876.268189][ T5731] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 876.278646][ T5731] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 876.292757][ T5731] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 876.303069][ T5731] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 876.311381][ T5731] usb 6-1: Manufacturer: syz [ 876.319302][ T5731] usb 6-1: config 0 descriptor?? [ 876.556070][ T24] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 876.608428][ T24] usb 1-1: device descriptor read/8, error -71 [ 876.735466][T14368] Bluetooth: hci5: command 0x0406 tx timeout [ 876.766365][ T5616] Bluetooth: hci1: command 0x0406 tx timeout [ 876.856452][ T5731] rc_core: IR keymap rc-hauppauge not found [ 876.862441][ T5731] Registered IR keymap rc-empty [ 876.867615][ T5731] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 876.885467][ T5731] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 876.910491][ T5731] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1 [ 876.910666][ T5804] usb 2-1: USB disconnect, device number 107 [ 876.949208][ T5731] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1/input27 [ 876.973802][ T24] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 876.996370][ T5731] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 877.006082][ T24] usb 1-1: device descriptor read/8, error -71 [ 877.016683][ T5731] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 877.045581][ T5731] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 877.065410][ T5731] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 877.085318][ T5731] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 877.105383][ T5731] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 877.115632][ T24] usb usb1-port1: unable to enumerate USB device [ 877.125721][ T5731] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 877.145450][ T5731] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 877.165421][ T5731] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 877.185374][ T5731] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 877.206265][ T5731] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 877.215923][ T5731] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 877.305374][ T5804] usb 2-1: new low-speed USB device number 108 using dummy_hcd [ 877.335014][ T5703] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 877.368165][ T5703] usbhid 7-1:0.0: can't add hid device: -71 [ 877.381065][ T5703] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 877.422026][T15354] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2341'. [ 877.432240][ T5703] usb 7-1: USB disconnect, device number 96 [ 877.458268][ T5804] usb 2-1: config 7 has an invalid interface number: 41 but max is 1 [ 877.469828][ T5804] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 877.470258][T15354] xt_hashlimit: size too large, truncated to 1048576 [ 877.493436][T15355] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2339'. [ 877.507784][ T5804] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 877.527514][ T5804] usb 2-1: config 7 has no interface number 0 [ 877.535622][ T5804] usb 2-1: config 7 interface 41 has no altsetting 0 [ 877.556113][ T5804] usb 2-1: string descriptor 0 read error: -22 [ 877.563024][ T5804] usb 2-1: New USB device found, idVendor=04e2, idProduct=1401, bcdDevice=e7.f5 [ 877.572217][ T5804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.586952][ T5804] xr_serial 2-1:7.41: More than one union descriptor, skipping ... [ 877.976740][ T30] audit: type=1400 audit(1777310767.371:775): avc: denied { mounton } for pid=15349 comm="syz.1.2340" path="/486/file0" dev="tmpfs" ino=2591 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 878.851552][T15369] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2346'. [ 878.930137][T15370] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 879.233358][ T5731] usb 7-1: new full-speed USB device number 97 using dummy_hcd [ 879.313650][T15371] fuseblk: Bad value for 'rootmode' [ 879.323492][T15369] sd 0:0:1:0: PR command failed: 1026 [ 879.330635][T15369] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 879.339146][T15369] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 879.348572][T15375] ªªªªªª: renamed from vlan0 (while UP) [ 879.363419][T15375] netlink: 'syz.0.2347': attribute type 12 has an invalid length. [ 879.371346][ T30] audit: type=1400 audit(1777310768.751:776): avc: denied { execute } for pid=15374 comm="syz.0.2347" path="/proc/1585/task/1586/net/vlan/vlan0" dev="proc" ino=4026533792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 879.396838][ T5731] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 879.413061][ T5731] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 879.422500][ T5731] usb 7-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 879.433928][ T5731] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.444642][ T5731] usb 7-1: rejected 1 configuration due to insufficient available bus power [ 879.454071][ T5731] usb 7-1: no configuration chosen from 1 choice [ 879.491542][ T5804] usb 6-1: USB disconnect, device number 109 [ 879.609141][T15377] netlink: 'syz.5.2348': attribute type 2 has an invalid length. [ 879.655312][ T5723] usb 1-1: new full-speed USB device number 115 using dummy_hcd [ 879.816454][ T5723] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 879.827573][ T5723] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 879.837389][ T5723] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 879.846664][ T5723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.857965][ T5723] usb 1-1: config 0 descriptor?? [ 880.100939][ T5804] usb 2-1: USB disconnect, device number 108 [ 880.356693][T15387] netlink: 'syz.1.2351': attribute type 6 has an invalid length. [ 880.383010][T15387] netlink: 'syz.1.2351': attribute type 6 has an invalid length. [ 880.506982][ T5723] elan 0003:04F3:0755.000C: unknown main item tag 0x0 [ 880.541911][ T5723] elan 0003:04F3:0755.000C: unknown main item tag 0x0 [ 880.576558][ T5723] elan 0003:04F3:0755.000C: unknown main item tag 0x0 [ 880.598978][ T5723] elan 0003:04F3:0755.000C: unknown main item tag 0x0 [ 880.616017][ T5723] elan 0003:04F3:0755.000C: unknown main item tag 0x0 [ 880.627778][ T5723] elan 0003:04F3:0755.000C: failed to start in urb: -90 [ 880.650978][ T5723] elan 0003:04F3:0755.000C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 880.735993][ T5731] usb 1-1: USB disconnect, device number 115 [ 880.875421][ T5804] usb 6-1: new full-speed USB device number 110 using dummy_hcd [ 881.234825][T15393] fido_id[15393]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 881.474664][ T5804] usb 6-1: device descriptor read/64, error -71 [ 881.583768][T15402] nfs: Unknown parameter 'lo' [ 881.805419][ T5804] usb 6-1: new full-speed USB device number 111 using dummy_hcd [ 881.945363][ T5804] usb 6-1: device descriptor read/64, error -71 [ 881.959989][ T24] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 881.969431][T14268] usb 7-1: USB disconnect, device number 97 [ 882.055576][ T5804] usb usb6-port1: attempt power cycle [ 882.105352][ T24] usb 2-1: device descriptor read/64, error -71 [ 882.345427][ T24] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 882.415415][ T5804] usb 6-1: new full-speed USB device number 112 using dummy_hcd [ 882.445915][ T5804] usb 6-1: device descriptor read/8, error -71 [ 882.475346][ T24] usb 2-1: device descriptor read/64, error -71 [ 882.586721][ T24] usb usb2-port1: attempt power cycle [ 882.695392][ T5804] usb 6-1: new full-speed USB device number 113 using dummy_hcd [ 882.715719][ T5804] usb 6-1: device descriptor read/8, error -71 [ 882.825764][ T5804] usb usb6-port1: unable to enumerate USB device [ 882.925629][ T24] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 882.957909][ T24] usb 2-1: device descriptor read/8, error -71 [ 883.180024][T15409] bond3: Removing last arp target with arp_interval on [ 883.191182][T15409] bond3: entered promiscuous mode [ 883.196358][T15409] bond3: entered allmulticast mode [ 883.203180][T15409] 8021q: adding VLAN 0 to HW filter on device bond3 [ 883.275421][ T24] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 883.307789][ T24] usb 2-1: device descriptor read/8, error -71 [ 883.425842][ T24] usb usb2-port1: unable to enumerate USB device [ 883.805320][ T24] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 884.217293][ T24] usb 7-1: config 6 has an invalid descriptor of length 255, skipping remainder of the config [ 884.227713][ T24] usb 7-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 884.238403][ T24] usb 7-1: New USB device found, idVendor=093a, idProduct=010e, bcdDevice=91.f6 [ 884.247622][ T24] usb 7-1: New USB device strings: Mfr=108, Product=2, SerialNumber=3 [ 884.256275][ T24] usb 7-1: Product: syz [ 884.263851][ T24] usb 7-1: Manufacturer: syz [ 884.273106][ T24] usb 7-1: SerialNumber: syz [ 884.361438][T15423] netlink: 'syz.1.2363': attribute type 2 has an invalid length. [ 884.660693][T15416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=15416 comm=syz.6.2361 [ 884.734600][ T24] usb 7-1: USB disconnect, device number 98 [ 884.760082][T15435] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2367'. [ 885.500639][T15435] fuseblk: Bad value for 'rootmode' [ 885.644463][ T30] audit: type=1400 audit(1777310775.031:777): avc: denied { listen } for pid=15447 comm="syz.1.2370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 885.733050][ T30] audit: type=1400 audit(1777310775.051:778): avc: denied { accept } for pid=15447 comm="syz.1.2370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 886.185309][ T5703] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 886.345293][ T5703] usb 7-1: Using ep0 maxpacket: 32 [ 886.356229][ T5703] usb 7-1: config 7 has an invalid interface number: 20 but max is 3 [ 886.364449][ T5703] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 886.379404][ T5703] usb 7-1: config 7 has 1 interface, different from the descriptor's value: 4 [ 886.409951][ T5703] usb 7-1: config 7 has no interface number 0 [ 886.432462][ T5703] usb 7-1: config 7 interface 20 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 886.485376][ T5723] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 886.532780][ T5703] usb 7-1: config 7 interface 20 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 886.544548][ T5703] usb 7-1: config 7 interface 20 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 886.564005][ T5703] usb 7-1: New USB device found, idVendor=046d, idProduct=c11f, bcdDevice=59.ce [ 886.574097][ T5703] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.582213][ T5703] usb 7-1: Product: syz [ 886.589271][ T5703] usb 7-1: Manufacturer: syz [ 886.598210][ T5703] usb 7-1: SerialNumber: syz [ 887.649203][ T5723] usb 6-1: Using ep0 maxpacket: 8 [ 887.664035][T15459] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2373'. [ 887.725956][ T5616] Bluetooth: hci5: unexpected event for opcode 0xb004 [ 887.732903][ T5616] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 887.817848][ T5723] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 887.826996][ T5723] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 887.849582][ T5723] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 887.879449][ T5723] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 887.909144][ T5723] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 887.980574][ T5723] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 888.018961][ T5723] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.067841][ T5703] usb 7-1: unsupported MDLM descriptors [ 888.107230][ T5703] usb 7-1: USB disconnect, device number 99 [ 888.380598][T15478] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 888.380598][T15478] The task syz.5.2374 (15478) triggered the difference, watch for misbehavior. [ 888.411686][ T5723] usb 6-1: GET_CAPABILITIES returned 0 [ 888.422904][ T5723] usbtmc 6-1:16.0: can't read capabilities [ 889.192207][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 889.201443][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 889.210477][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 889.219511][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 889.228532][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 889.237559][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 889.246590][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 889.255616][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 889.264637][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 889.273666][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 889.283789][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 889.292850][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 889.301879][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 889.310908][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 889.319933][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 889.328958][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 889.386011][T15484] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 889.406556][T15484] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 889.637051][ T30] audit: type=1400 audit(1777310779.021:779): avc: denied { lock } for pid=15486 comm="syz.0.2381" path="socket:[57957]" dev="sockfs" ino=57957 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 889.931059][ T30] audit: type=1400 audit(1777310779.321:780): avc: denied { execute } for pid=15500 comm="syz.0.2383" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=58047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 890.384213][ T5723] usb 6-1: USB disconnect, device number 114 [ 890.765612][T15517] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 891.226129][T14368] Bluetooth: hci1: command 0x0406 tx timeout [ 891.393436][T15521] netlink: 'syz.7.2390': attribute type 2 has an invalid length. [ 891.455423][T14368] Bluetooth: hci5: command 0x0406 tx timeout [ 891.505336][ T5723] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 891.515394][T14268] usb 6-1: new full-speed USB device number 115 using dummy_hcd [ 891.667022][ T5723] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 891.677275][ T5723] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 891.686544][ T5723] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.686870][T14268] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 891.707767][ T5723] usb 7-1: config 0 descriptor?? [ 891.709456][T14268] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 891.722066][T14268] usb 6-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 891.729354][ T5723] pwc: Askey VC010 type 2 USB webcam detected. [ 891.731356][T14268] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.747900][T14268] usb 6-1: rejected 1 configuration due to insufficient available bus power [ 891.756942][T14268] usb 6-1: no configuration chosen from 1 choice [ 891.842837][T15527] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 891.904491][T15528] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 892.127284][ T5723] pwc: recv_control_msg error -32 req 02 val 2b00 [ 892.188807][ T5723] pwc: recv_control_msg error -32 req 02 val 2700 [ 892.206403][ T5723] pwc: recv_control_msg error -32 req 02 val 2c00 [ 892.216455][ T5723] pwc: recv_control_msg error -32 req 04 val 1000 [ 892.229708][ T5723] pwc: recv_control_msg error -32 req 04 val 1300 [ 892.244952][ T5723] pwc: recv_control_msg error -32 req 04 val 1400 [ 892.254441][ T5723] pwc: recv_control_msg error -32 req 02 val 2000 [ 892.272560][ T5723] pwc: recv_control_msg error -32 req 02 val 2100 [ 892.367638][ T5723] pwc: recv_control_msg error -32 req 04 val 1500 [ 892.421233][ T5723] pwc: recv_control_msg error -71 req 02 val 2500 [ 892.445843][ T5723] pwc: recv_control_msg error -71 req 02 val 2400 [ 892.454302][ T5723] pwc: recv_control_msg error -71 req 02 val 2600 [ 892.469463][ T5723] pwc: recv_control_msg error -71 req 02 val 2900 [ 892.479288][ T5723] pwc: recv_control_msg error -71 req 02 val 2800 [ 892.496214][ T5723] pwc: recv_control_msg error -71 req 04 val 1100 [ 892.527298][ T5723] pwc: recv_control_msg error -71 req 04 val 1200 [ 892.649432][ T5723] pwc: Registered as video103. [ 892.671712][ T5723] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input28 [ 892.710330][ T5723] usb 7-1: USB disconnect, device number 100 [ 893.150210][T14268] usb 1-1: new full-speed USB device number 116 using dummy_hcd [ 893.240499][T15548] tipc: Enabled bearer , priority 0 [ 893.253652][T15548] syzkaller0: MTU too low for tipc bearer [ 893.260056][T15548] tipc: Disabling bearer [ 893.316626][T14268] usb 1-1: config 4 has an invalid interface number: 44 but max is 0 [ 893.325043][T14268] usb 1-1: config 4 has no interface number 0 [ 893.331397][T14268] usb 1-1: config 4 interface 44 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 893.345563][T14268] usb 1-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 893.354701][T14268] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.386056][T14268] usb 1-1: Product: syz [ 893.397177][T14268] usb 1-1: Manufacturer: syz [ 893.404429][T14268] usb 1-1: SerialNumber: syz [ 893.557835][ T24] usb 6-1: USB disconnect, device number 115 [ 893.619003][T15551] netlink: 'syz.1.2399': attribute type 6 has an invalid length. [ 893.629339][T15551] netlink: 'syz.1.2399': attribute type 6 has an invalid length. [ 894.109804][T14268] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 894.127813][T14268] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 894.139690][ T24] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 894.168392][T14268] dib0700: firmware download failed at 7 with -22 [ 894.203366][T14268] usb 1-1: USB disconnect, device number 116 [ 894.348503][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 894.371445][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 894.396839][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 894.882748][ T24] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 894.903329][T15567] comedi comedi0: Minor 2 could not be opened [ 894.915575][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.943722][ T24] usb 6-1: config 0 descriptor?? [ 895.000442][ T24] hub 6-1:0.0: USB hub found [ 895.006056][T15554] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 895.055504][T15554] ALSA: mixer_oss: invalid index 1374389 [ 895.865472][ T5703] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 896.056752][ T5703] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 896.065587][ T5703] usb 7-1: config 0 has no interface number 0 [ 896.072075][ T5703] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 896.085624][ T5703] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 896.096082][ T5703] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.104132][ T5703] usb 7-1: Product: syz [ 896.108391][ T5703] usb 7-1: Manufacturer: syz [ 896.114319][ T5703] usb 7-1: SerialNumber: syz [ 896.130181][ T5703] usb 7-1: config 0 descriptor?? [ 896.141506][ T5703] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 896.254047][ T24] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 896.301338][T15582] netlink: 'syz.0.2408': attribute type 4 has an invalid length. [ 896.495191][ T30] audit: type=1400 audit(1777310785.781:781): avc: denied { getopt } for pid=15580 comm="syz.0.2408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 896.621543][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 896.722618][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 897.014787][ T24] usb 6-1: USB disconnect, device number 116 [ 897.651608][T15571] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 897.807287][ T24] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 897.952139][T15571] overlayfs: workdir and upperdir must be separate subtrees [ 898.043786][T15594] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 898.058671][T15594] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 898.078545][T15595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 898.088493][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 898.094433][T15597] netlink: 'syz.0.2413': attribute type 6 has an invalid length. [ 898.105570][ T24] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 898.115152][T15597] netlink: 'syz.0.2413': attribute type 6 has an invalid length. [ 898.123319][T15595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 898.132613][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.147839][T14268] usb 7-1: USB disconnect, device number 101 [ 898.157444][T14268] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 898.163719][ T24] usb 6-1: Product: syz [ 898.167939][ T24] usb 6-1: Manufacturer: syz [ 898.175680][ T24] usb 6-1: SerialNumber: syz [ 898.202334][ T24] usb 6-1: config 0 descriptor?? [ 898.414426][ T24] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: version d4.15 found at bus 006 address 117 [ 898.625350][ T5731] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 898.785391][ T5731] usb 1-1: Using ep0 maxpacket: 32 [ 899.639465][ T5731] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 899.650751][ T5731] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 899.660736][ T5731] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 899.670085][ T5731] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.683861][ T5731] usb 1-1: config 0 descriptor?? [ 899.691867][ T5731] hub 1-1:0.0: USB hub found [ 899.756086][T14268] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 899.891414][ T5731] hub 1-1:0.0: 1 port detected [ 899.905347][T14268] usb 2-1: Using ep0 maxpacket: 32 [ 899.911797][T14268] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 899.922701][T14268] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 899.932810][T14268] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 899.942175][T14268] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.952236][T14268] usb 2-1: config 0 descriptor?? [ 899.961162][T14268] hub 2-1:0.0: USB hub found [ 899.976108][ T5804] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 900.015480][T14368] Bluetooth: hci1: command 0x0406 tx timeout [ 900.091746][ T30] audit: type=1400 audit(1777310789.481:782): avc: denied { map } for pid=15607 comm="syz.0.2416" path="/dev/vcsa" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 900.095351][T14368] Bluetooth: hci5: command 0x0406 tx timeout [ 900.125322][ T5804] usb 7-1: Using ep0 maxpacket: 32 [ 900.131782][ T5804] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 900.142731][ T5804] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 900.152594][ T5804] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 900.163509][ T5804] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.180242][ T5804] usb 7-1: config 0 descriptor?? [ 900.227006][ T5804] hub 7-1:0.0: USB hub found [ 900.541994][ T5731] hub 1-1:0.0: activate --> -90 [ 900.744789][ T5731] hub 1-1:0.0: hub_ext_port_status failed (err = 0) [ 900.895395][T15611] i2c i2c-1: failure writing data [ 900.985460][ T5731] usb 6-1: USB disconnect, device number 117 [ 901.105540][ T5723] usb 1-1: USB disconnect, device number 117 [ 901.281525][T14268] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 901.300866][T14268] usbhid 2-1:0.0: can't add hid device: -71 [ 901.307500][T14268] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 901.336461][T14268] usb 2-1: USB disconnect, device number 113 [ 901.575390][T15631] syzkaller0: entered promiscuous mode [ 901.581097][T15631] syzkaller0: entered allmulticast mode [ 902.126350][T15624] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 902.156029][T15624] ALSA: mixer_oss: invalid index 1374389 [ 902.250112][ T5804] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 902.311097][ T5804] usbhid 7-1:0.0: can't add hid device: -71 [ 902.336337][ T5804] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 902.389182][ T5804] usb 7-1: USB disconnect, device number 102 [ 902.445313][ T5723] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 902.780703][ T5723] usb 1-1: Using ep0 maxpacket: 16 [ 902.870377][ T5723] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 902.881040][ T5723] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 902.914166][ T5723] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 902.931531][ T5723] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 902.941635][ T5723] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 902.986699][ T5723] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 903.003585][ T5723] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 903.012301][ T5723] usb 1-1: Manufacturer: syz [ 903.023722][ T5723] usb 1-1: config 0 descriptor?? [ 903.316699][T15643] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 903.324119][T15643] ALSA: mixer_oss: invalid index 1374389 [ 903.506404][ T5723] rc_core: IR keymap rc-hauppauge not found [ 903.638608][ T5723] Registered IR keymap rc-empty [ 903.656245][ T5723] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 903.720391][ T5723] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 903.812238][ T5723] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 903.873447][ T5723] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input29 [ 904.381754][ T5723] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 904.455546][ T5723] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 904.505423][ T5723] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 904.572422][ T5723] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 904.608642][ T5723] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 904.642132][ T5723] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 904.696431][ T5723] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 904.765427][ T5723] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 904.807148][ T5723] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 904.875434][ T5723] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 904.939517][ T5723] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 905.009167][ T5723] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 905.213505][T14268] usb 1-1: USB disconnect, device number 118 [ 905.487759][ T5616] Bluetooth: hci5: command 0x0406 tx timeout [ 907.266128][T15662] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 907.273661][T15662] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 907.407918][ T30] audit: type=1400 audit(1777310796.791:783): avc: denied { map } for pid=15714 comm="syz.7.2434" path="/dev/usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 907.595505][T14268] usb 6-1: new full-speed USB device number 118 using dummy_hcd [ 907.637136][ T5723] usb 7-1: new full-speed USB device number 103 using dummy_hcd [ 907.840384][ T5723] usb 7-1: config 4 has an invalid interface number: 44 but max is 0 [ 907.852813][ T5723] usb 7-1: config 4 has no interface number 0 [ 907.859271][ T5723] usb 7-1: config 4 interface 44 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 907.885572][ T5723] usb 7-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 907.895312][ T5723] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.903530][ T5723] usb 7-1: Product: syz [ 907.910042][ T5723] usb 7-1: Manufacturer: syz [ 907.923799][ T5723] usb 7-1: SerialNumber: syz [ 908.132945][T15728] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 908.469298][T15733] netlink: 'syz.1.2441': attribute type 6 has an invalid length. [ 908.478536][T15733] netlink: 'syz.1.2441': attribute type 6 has an invalid length. [ 908.582372][ T30] audit: type=1400 audit(1777310797.971:784): avc: denied { watch } for pid=15734 comm="syz.1.2442" path="/511/bus/file1" dev="overlay" ino=2725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 908.814871][ T5723] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 908.835270][T15722] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 908.842661][T15722] ALSA: mixer_oss: invalid index 1374389 [ 908.859899][ T5723] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 908.870626][ T5723] dib0700: firmware download failed at 7 with -22 [ 908.897276][ T5723] usb 7-1: USB disconnect, device number 103 [ 909.298543][T14368] Bluetooth: hci5: command 0x0406 tx timeout [ 909.304594][ T5616] Bluetooth: hci1: command 0x0406 tx timeout [ 909.875547][T15758] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 909.929548][T15758] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 909.941387][T14268] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 910.229484][T14268] usb 1-1: Using ep0 maxpacket: 32 [ 910.259440][T14268] usb 1-1: config 7 has an invalid interface number: 20 but max is 3 [ 910.292071][T14268] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 910.303714][T14268] usb 1-1: config 7 has 1 interface, different from the descriptor's value: 4 [ 910.312843][T14268] usb 1-1: config 7 has no interface number 0 [ 910.867285][T14268] usb 1-1: config 7 interface 20 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 910.916968][T14268] usb 1-1: config 7 interface 20 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 910.937877][T14268] usb 1-1: config 7 interface 20 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 910.965597][T14268] usb 1-1: New USB device found, idVendor=046d, idProduct=c11f, bcdDevice=59.ce [ 910.985007][T14268] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.999999][T14268] usb 1-1: Product: syz [ 911.008541][T14268] usb 1-1: Manufacturer: syz [ 911.022136][T14268] usb 1-1: SerialNumber: syz [ 911.235361][ T9663] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 911.390461][T15752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2447'. [ 911.400058][ T9663] usb 2-1: Using ep0 maxpacket: 32 [ 911.408842][ T9663] usb 2-1: config 7 has an invalid interface number: 20 but max is 3 [ 911.426492][ T9663] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 911.436961][ T9663] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 4 [ 911.446249][ T9663] usb 2-1: config 7 has no interface number 0 [ 911.452449][ T9663] usb 2-1: config 7 interface 20 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 911.463555][ T9663] usb 2-1: config 7 interface 20 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 911.474821][ T9663] usb 2-1: config 7 interface 20 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 911.493171][ T9663] usb 2-1: New USB device found, idVendor=046d, idProduct=c11f, bcdDevice=59.ce [ 911.504261][ T9663] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.512617][ T9663] usb 2-1: Product: syz [ 911.517123][ T9663] usb 2-1: Manufacturer: syz [ 911.521792][ T9663] usb 2-1: SerialNumber: syz [ 911.535131][T15783] vlan2: entered allmulticast mode [ 911.546328][T14368] Bluetooth: hci1: command 0x0406 tx timeout [ 911.630219][T14268] usb 1-1: unsupported MDLM descriptors [ 911.650720][T14268] usb 1-1: USB disconnect, device number 119 [ 911.755690][T15775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2452'. [ 911.881077][ T9663] usb 2-1: unsupported MDLM descriptors [ 911.893089][ T9663] usb 2-1: USB disconnect, device number 114 [ 911.935442][T14368] Bluetooth: hci5: command 0x0406 tx timeout [ 911.965300][ T24] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 912.115399][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 912.124257][ T24] usb 7-1: config 7 has an invalid interface number: 20 but max is 3 [ 912.138456][ T24] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 912.148737][ T24] usb 7-1: config 7 has 1 interface, different from the descriptor's value: 4 [ 912.158637][ T24] usb 7-1: config 7 has no interface number 0 [ 912.164809][ T24] usb 7-1: config 7 interface 20 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 912.176015][ T24] usb 7-1: config 7 interface 20 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 912.187832][ T24] usb 7-1: config 7 interface 20 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 912.211675][ T24] usb 7-1: New USB device found, idVendor=046d, idProduct=c11f, bcdDevice=59.ce [ 912.221752][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.230612][ T24] usb 7-1: Product: syz [ 912.235746][ T24] usb 7-1: Manufacturer: syz [ 912.245294][ T24] usb 7-1: SerialNumber: syz [ 912.566770][T15788] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2453'. [ 912.625495][T14368] Bluetooth: hci5: unexpected event for opcode 0xb004 [ 912.632411][T14368] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 912.831877][T15808] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 912.850908][T15808] tipc: Enabling of bearer rejected, failed to enable media [ 913.575444][ T9663] usb 1-1: new full-speed USB device number 120 using dummy_hcd [ 913.761945][ T24] usb 7-1: unsupported MDLM descriptors [ 913.792461][ T24] usb 7-1: USB disconnect, device number 104 [ 913.808338][ T9663] usb 1-1: config 4 has an invalid interface number: 44 but max is 0 [ 913.836538][ T9663] usb 1-1: config 4 has no interface number 0 [ 913.860009][ T9663] usb 1-1: config 4 interface 44 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 913.885981][ T9663] usb 1-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 913.895821][ T9663] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.905046][ T9663] usb 1-1: Product: syz [ 913.951301][ T9663] usb 1-1: Manufacturer: syz [ 913.963929][ T9663] usb 1-1: SerialNumber: syz [ 914.216060][T15825] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 914.579876][T15827] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 914.805404][ T5731] usb 6-1: new full-speed USB device number 119 using dummy_hcd [ 914.966868][ T5731] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 914.978707][ T5731] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 914.995414][ T5731] usb 6-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 915.004878][ T5731] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.114837][ T5731] usb 6-1: rejected 1 configuration due to insufficient available bus power [ 915.123990][ T5731] usb 6-1: no configuration chosen from 1 choice [ 915.271724][T15831] vlan2: entered promiscuous mode [ 915.276853][T15831] bridge0: entered promiscuous mode [ 915.367145][ T9] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 915.435567][ T30] audit: type=1400 audit(1777310804.631:785): avc: denied { write } for pid=15828 comm="syz.7.2465" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 915.589165][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 915.661064][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 915.687870][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 915.698609][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.712076][ T9663] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 915.714888][ T9] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 915.732180][ T9663] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 915.734911][ T30] audit: type=1400 audit(1777310805.121:786): avc: denied { bpf } for pid=15833 comm="syz.6.2466" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 915.744615][ T9663] dib0700: firmware download failed at 7 with -22 [ 915.767869][ T9] usb 2-1: no configuration chosen from 1 choice [ 915.776529][ T30] audit: type=1400 audit(1777310805.121:787): avc: denied { perfmon } for pid=15833 comm="syz.6.2466" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 915.782678][ T9663] usb 1-1: USB disconnect, device number 120 [ 915.976706][ T5731] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 916.155478][ T5731] usb 7-1: Using ep0 maxpacket: 16 [ 916.165647][ T5731] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 916.177013][ T5731] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 916.188974][ T5731] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 916.199190][ T5731] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 916.210101][ T5731] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 916.224430][ T5731] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 916.234400][ T5731] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 916.248000][ T5731] usb 7-1: Manufacturer: syz [ 916.259146][ T5731] usb 7-1: config 0 descriptor?? [ 916.735561][ T5731] rc_core: IR keymap rc-hauppauge not found [ 916.761646][ T5731] Registered IR keymap rc-empty [ 916.779282][ T5731] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 916.807966][ T5731] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 916.842248][ T5731] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 916.878628][ T5731] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input30 [ 916.918683][ T5731] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 916.948690][ T5731] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 917.876406][T14268] usb 2-1: USB disconnect, device number 115 [ 917.896202][ T5731] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 917.943909][T15855] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2466'. [ 917.957548][ T5731] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 918.005462][ T5731] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 918.026120][ T30] audit: type=1400 audit(1777310807.421:788): avc: denied { getopt } for pid=15856 comm="syz.1.2471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 918.055680][ T5731] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 918.107048][ T5731] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 918.136517][ T5731] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 918.175541][ T5731] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 918.207300][ T5731] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 918.239682][ T5731] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 918.249175][ T5731] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 918.359168][T15864] netlink: 'syz.1.2473': attribute type 10 has an invalid length. [ 918.368720][T15864] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.375515][ T9] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 918.375894][T15864] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.460851][T15864] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.467948][T15864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 918.477113][T15864] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.484214][T15864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 918.508625][T15864] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 918.519351][T15866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 918.535301][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 918.553084][ T9] usb 1-1: config 7 has an invalid interface number: 20 but max is 3 [ 918.574554][ T9] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 918.603193][ T9] usb 1-1: config 7 has 1 interface, different from the descriptor's value: 4 [ 918.617162][T15866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 918.626656][ T9] usb 1-1: config 7 has no interface number 0 [ 918.640010][ T9] usb 1-1: config 7 interface 20 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 918.657935][ T9] usb 1-1: config 7 interface 20 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 918.677176][ T9] usb 1-1: config 7 interface 20 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 918.709627][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c11f, bcdDevice=59.ce [ 918.727914][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.743376][ T9] usb 1-1: Product: syz [ 918.751406][ T9] usb 1-1: Manufacturer: syz [ 918.761077][ T9] usb 1-1: SerialNumber: syz [ 919.061376][T15862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2472'. [ 919.066133][T14268] usb 6-1: USB disconnect, device number 119 [ 919.332577][ T9] usb 1-1: unsupported MDLM descriptors [ 919.342681][ T9] usb 1-1: USB disconnect, device number 121 [ 919.590712][T15878] can0: slcan on ttyS3. [ 919.686500][T15878] can0 (unregistered): slcan off ttyS3. [ 919.741971][ T30] audit: type=1326 audit(1777310809.131:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15880 comm="syz.7.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a55d9cdd9 code=0x7ffc0000 [ 919.743801][T15884] syz.7.2478 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 919.803047][ T30] audit: type=1326 audit(1777310809.131:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15880 comm="syz.7.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a55d9cdd9 code=0x7ffc0000 [ 919.803093][ T30] audit: type=1326 audit(1777310809.131:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15880 comm="syz.7.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a55d9cdd9 code=0x7ffc0000 [ 919.803132][ T30] audit: type=1326 audit(1777310809.131:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15880 comm="syz.7.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a55d9cdd9 code=0x7ffc0000 [ 919.803169][ T30] audit: type=1326 audit(1777310809.131:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15880 comm="syz.7.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f7a55d9cdd9 code=0x7ffc0000 [ 919.803205][ T30] audit: type=1326 audit(1777310809.171:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15880 comm="syz.7.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a55d9cdd9 code=0x7ffc0000 [ 919.918151][T15889] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2478'. [ 920.138592][ T24] usb 7-1: USB disconnect, device number 105 [ 920.325434][T14268] usb 1-1: new full-speed USB device number 122 using dummy_hcd [ 920.412935][T15896] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 920.522105][T14268] usb 1-1: config 4 has an invalid interface number: 44 but max is 0 [ 920.522174][T14268] usb 1-1: config 4 has no interface number 0 [ 920.522341][T14268] usb 1-1: config 4 interface 44 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 920.532298][T14268] usb 1-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 920.532351][T14268] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.532401][T14268] usb 1-1: Product: syz [ 920.532442][T14268] usb 1-1: Manufacturer: syz [ 920.532483][T14268] usb 1-1: SerialNumber: syz [ 920.725752][ T24] usb 7-1: new full-speed USB device number 106 using dummy_hcd [ 920.784427][ T30] kauditd_printk_skb: 105 callbacks suppressed [ 920.784442][ T30] audit: type=1326 audit(1777310810.171:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15880 comm="syz.7.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7a55d9cdd9 code=0x7ffc0000 [ 920.794289][ T30] audit: type=1326 audit(1777310810.181:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15880 comm="syz.7.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7a55d9cdd9 code=0x7ffc0000 [ 920.895714][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 920.895742][ T24] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 920.895923][ T24] usb 7-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 920.991183][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.996371][ T24] usb 7-1: rejected 1 configuration due to insufficient available bus power [ 920.996388][ T24] usb 7-1: no configuration chosen from 1 choice [ 921.580120][T14268] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 921.597237][T14268] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 921.614109][T14268] dib0700: firmware download failed at 7 with -22 [ 921.639421][T14268] usb 1-1: USB disconnect, device number 122 [ 921.867530][ T30] audit: type=1400 audit(1777310811.261:902): avc: denied { mount } for pid=15906 comm="syz.7.2484" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 922.061891][ T30] audit: type=1400 audit(1777310811.451:903): avc: denied { unmount } for pid=10682 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 922.765331][ T9] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 922.925375][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 922.932754][ T9] usb 6-1: config 7 has an invalid interface number: 20 but max is 3 [ 922.941109][ T9] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 922.951347][ T9] usb 6-1: config 7 has 1 interface, different from the descriptor's value: 4 [ 922.960262][ T9] usb 6-1: config 7 has no interface number 0 [ 922.966382][ T9] usb 6-1: config 7 interface 20 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 922.977179][ T9] usb 6-1: config 7 interface 20 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 922.988120][ T9] usb 6-1: config 7 interface 20 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 923.003246][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c11f, bcdDevice=59.ce [ 923.012384][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.020437][ T9] usb 6-1: Product: syz [ 923.024738][ T9] usb 6-1: Manufacturer: syz [ 923.029393][ T9] usb 6-1: SerialNumber: syz [ 923.191069][ T24] usb 7-1: USB disconnect, device number 106 [ 923.312468][T15919] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2487'. [ 923.362983][T15933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2492'. [ 923.392592][T14368] Bluetooth: hci1: unexpected event for opcode 0xb004 [ 923.403529][T14368] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 923.526428][ T9] usb 6-1: unsupported MDLM descriptors [ 923.537296][ T9] usb 6-1: USB disconnect, device number 120 [ 924.065431][ T9] usb 2-1: new full-speed USB device number 116 using dummy_hcd [ 924.271892][T15946] FAULT_INJECTION: forcing a failure. [ 924.271892][T15946] name failslab, interval 1, probability 0, space 0, times 0 [ 924.285794][T15946] CPU: 0 UID: 0 PID: 15946 Comm: syz.6.2498 Tainted: G L syzkaller #0 PREEMPT(full) [ 924.285827][T15946] Tainted: [L]=SOFTLOCKUP [ 924.285833][T15946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 924.285843][T15946] Call Trace: [ 924.285849][T15946] [ 924.285856][T15946] dump_stack_lvl+0x100/0x190 [ 924.285882][T15946] should_fail_ex.cold+0x5/0xa [ 924.285904][T15946] ? tomoyo_realpath_from_path+0xb6/0x690 [ 924.285929][T15946] should_failslab+0xc2/0x120 [ 924.285948][T15946] __kmalloc_noprof+0xe0/0x850 [ 924.285973][T15946] ? kfree+0x1dd/0x6c0 [ 924.285999][T15946] tomoyo_realpath_from_path+0xb6/0x690 [ 924.286029][T15946] tomoyo_path_number_perm+0x23c/0x580 [ 924.286047][T15946] ? tomoyo_path_number_perm+0x22e/0x580 [ 924.286069][T15946] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 924.286115][T15946] ? find_held_lock+0x2b/0x80 [ 924.286132][T15946] ? __fget_files+0x215/0x3d0 [ 924.286152][T15946] ? hook_file_ioctl_common+0x149/0x410 [ 924.286177][T15946] ? __fget_files+0x215/0x3d0 [ 924.286202][T15946] ? __fget_files+0x21f/0x3d0 [ 924.286227][T15946] security_file_ioctl+0xd3/0x230 [ 924.286251][T15946] __x64_sys_ioctl+0xb7/0x210 [ 924.286271][T15946] do_syscall_64+0x10b/0xf80 [ 924.286290][T15946] ? clear_bhb_loop+0x40/0x90 [ 924.286311][T15946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.286329][T15946] RIP: 0033:0x7f502279cdd9 [ 924.286344][T15946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 924.286360][T15946] RSP: 002b:00007f502366b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 924.286377][T15946] RAX: ffffffffffffffda RBX: 00007f5022a15fa0 RCX: 00007f502279cdd9 [ 924.286389][T15946] RDX: 0000200000000080 RSI: 00000000c0405665 RDI: 0000000000000003 [ 924.286400][T15946] RBP: 00007f502366b090 R08: 0000000000000000 R09: 0000000000000000 [ 924.286411][T15946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 924.286421][T15946] R13: 00007f5022a16038 R14: 00007f5022a15fa0 R15: 00007ffccef6b778 [ 924.286446][T15946] [ 924.286790][T15946] ERROR: Out of memory at tomoyo_realpath_from_path. [ 924.504379][ T9] usb 2-1: config 4 has an invalid interface number: 44 but max is 0 [ 924.512639][ T9] usb 2-1: config 4 has no interface number 0 [ 924.518779][ T9] usb 2-1: config 4 interface 44 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 924.550810][ T9] usb 2-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 924.562996][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.586475][ T9] usb 2-1: Product: syz [ 924.593952][ T9] usb 2-1: Manufacturer: syz [ 924.611772][ T9] usb 2-1: SerialNumber: syz [ 924.655034][ T30] audit: type=1400 audit(1777310814.041:904): avc: denied { mounton } for pid=15950 comm="syz.6.2500" path="/373/file0" dev="tmpfs" ino=1963 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 924.815534][ T24] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 924.918563][T15942] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 924.925996][T15942] ALSA: mixer_oss: invalid index 1374389 [ 925.015742][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 925.029497][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 925.047466][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 925.057709][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 925.066927][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.116559][ T24] usb 1-1: config 0 descriptor?? [ 925.133760][ T24] hub 1-1:0.0: USB hub found [ 925.220737][ T9] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 925.308411][ T9] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 925.325901][ T9] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 925.334208][ T9] usb 2-1: media controller created [ 925.350232][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 925.359491][ T24] hub 1-1:0.0: 1 port detected [ 925.380978][T14368] Bluetooth: hci5: command 0x0406 tx timeout [ 925.453161][ T9] DVB: Unable to find symbol dib7000p_attach() [ 925.494549][T15969] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2505'. [ 925.602473][ T9] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 925.695290][ T9] rc_core: IR keymap rc-dib0700-rc5 not found [ 925.776221][ T9] Registered IR keymap rc-empty [ 925.820723][ T9] dvb-usb: could not initialize remote control. [ 925.850068][ T9] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 925.949653][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 926.054181][ T9] usb 2-1: USB disconnect, device number 116 [ 926.165662][ T9] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 926.226409][ T9663] hub 1-1:0.0: activate --> -90 [ 926.379029][ T24] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 926.576190][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 926.587513][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 926.598709][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 926.608975][T15981] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 926.614955][ T24] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 926.625732][T15981] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 926.625827][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.645633][ T24] usb 7-1: config 0 descriptor?? [ 926.657043][ T24] hub 7-1:0.0: USB hub found [ 926.666279][ T9] usb 1-1: USB disconnect, device number 123 [ 927.105469][T14268] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 927.235808][T15977] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 927.243226][T15977] ALSA: mixer_oss: invalid index 1374389 [ 927.276343][T14268] usb 2-1: Using ep0 maxpacket: 16 [ 927.291025][T14268] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 927.334072][T14268] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 927.352659][T14268] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 927.362794][T14268] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 927.444273][T14268] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 927.459721][T14268] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 927.469134][T14268] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 927.496105][T15994] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 927.504764][T14268] usb 2-1: Manufacturer: syz [ 927.523725][T14268] usb 2-1: config 0 descriptor?? [ 927.819461][ T9] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 927.875346][T14268] rc_core: IR keymap rc-hauppauge not found [ 927.888438][T14268] Registered IR keymap rc-empty [ 927.893660][T14268] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 927.926386][T14268] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 927.967051][T14268] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 927.986915][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 927.999304][ T9] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 928.004147][T14268] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input32 [ 928.034764][ T9] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 928.060496][T14268] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 928.063708][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.078536][ T9] usb 6-1: Product: syz [ 928.088876][ T9] usb 6-1: Manufacturer: syz [ 928.093587][ T9] usb 6-1: SerialNumber: syz [ 928.105677][T14268] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 928.109211][ T9] usb 6-1: config 0 descriptor?? [ 928.136404][T14268] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 928.165058][T14268] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 928.187784][T16006] netlink: 'syz.0.2514': attribute type 6 has an invalid length. [ 928.195364][T14268] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 928.219452][T16006] netlink: 'syz.0.2514': attribute type 6 has an invalid length. [ 928.225356][T14268] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 928.256370][T14268] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 928.288919][T14268] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 928.299578][ T24] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 928.352017][T14268] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 928.371626][ T24] usbhid 7-1:0.0: can't add hid device: -71 [ 928.398712][ T24] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 928.411692][T14268] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 928.414753][T16009] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2509'. [ 928.489977][T14268] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 928.503787][ T24] usb 7-1: USB disconnect, device number 107 [ 928.521514][T14268] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 928.531578][T15995] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 928.538988][T15995] ALSA: mixer_oss: invalid index 1374389 [ 928.591696][T14368] Bluetooth: hci1: command 0x0406 tx timeout [ 928.655306][T14368] Bluetooth: hci5: command 0x0406 tx timeout [ 929.728186][ T30] audit: type=1400 audit(1777310819.121:905): avc: denied { ioctl } for pid=16032 comm="syz.6.2521" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 930.450794][T14268] usb 6-1: USB disconnect, device number 121 [ 930.572687][ T24] usb 2-1: USB disconnect, device number 117 [ 930.592111][T16047] fuse: Bad value for 'fd' [ 930.689864][T16052] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2526'. [ 930.702122][T16041] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 930.708895][T16041] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 931.435305][ T9] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 931.587125][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 931.600097][ T9] usb 7-1: New USB device found, idVendor=04b3, idProduct=3108, bcdDevice= 0.00 [ 931.610000][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.620430][ T9] usb 7-1: config 0 descriptor?? [ 931.915085][T16090] fuse: Bad value for 'fd' [ 932.034557][ T9] lenovo 0003:04B3:3108.000D: unknown main item tag 0x0 [ 932.041641][ T9] lenovo 0003:04B3:3108.000D: unknown main item tag 0x0 [ 932.048771][ T9] lenovo 0003:04B3:3108.000D: unknown main item tag 0x0 [ 932.055887][ T9] lenovo 0003:04B3:3108.000D: unknown main item tag 0x0 [ 932.063544][ T9] lenovo 0003:04B3:3108.000D: unknown main item tag 0x0 [ 932.070595][ T9] lenovo 0003:04B3:3108.000D: unknown main item tag 0x0 [ 932.077664][ T9] lenovo 0003:04B3:3108.000D: unexpected long global item [ 932.085084][ T9] lenovo 0003:04B3:3108.000D: hid_parse failed [ 932.091323][ T9] lenovo 0003:04B3:3108.000D: probe with driver lenovo failed with error -22 [ 932.233692][T16082] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 932.237825][ T9] usb 7-1: USB disconnect, device number 108 [ 932.239920][T16082] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 932.350841][T16096] binder: 16095:16096 ioctl c0306201 200000000100 returned -14 [ 932.923841][T16129] loop3: detected capacity change from 0 to 7 [ 932.984919][T16129] [ 932.987273][T16129] ====================================================== [ 932.994278][T16129] WARNING: possible circular locking dependency detected [ 933.001279][T16129] syzkaller #0 Tainted: G L [ 933.007236][T16129] ------------------------------------------------------ [ 933.014230][T16129] syz.7.2558/16129 is trying to acquire lock: [ 933.020268][T16129] ffff88801c6a7a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9c/0xf0 [ 933.030427][T16129] [ 933.030427][T16129] but task is already holding lock: [ 933.037766][T16129] ffff888027919c50 (&q->q_usage_counter(io)#20){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 933.048973][T16129] [ 933.048973][T16129] which lock already depends on the new lock. [ 933.048973][T16129] [ 933.059360][T16129] [ 933.059360][T16129] the existing dependency chain (in reverse order) is: [ 933.068349][T16129] [ 933.068349][T16129] -> #2 (&q->q_usage_counter(io)#20){++++}-{0:0}: [ 933.076931][T16129] blk_alloc_queue+0x610/0x790 [ 933.082208][T16129] blk_mq_alloc_queue+0x174/0x290 [ 933.087731][T16129] __blk_mq_alloc_disk+0x29/0x120 [ 933.093260][T16129] loop_add+0x498/0xb60 [ 933.097919][T16129] loop_init+0x1d3/0x200 [ 933.102671][T16129] do_one_initcall+0x121/0x750 [ 933.107944][T16129] kernel_init_freeable+0x6ea/0x7b0 [ 933.113656][T16129] kernel_init+0x1f/0x1e0 [ 933.118495][T16129] ret_from_fork+0x72b/0xd50 [ 933.123590][T16129] ret_from_fork_asm+0x1a/0x30 [ 933.128860][T16129] [ 933.128860][T16129] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 933.136057][T16129] fs_reclaim_acquire+0xc4/0x100 [ 933.141500][T16129] kmem_cache_alloc_noprof+0x4c/0x6e0 [ 933.147384][T16129] __kernfs_iattrs+0x124/0x3e0 [ 933.152651][T16129] __kernfs_setattr+0x4d/0x3c0 [ 933.157924][T16129] kernfs_iop_setattr+0xda/0x130 [ 933.163364][T16129] notify_change+0xb25/0x1330 [ 933.168541][T16129] do_truncate+0x1df/0x240 [ 933.173468][T16129] path_openat+0x2a55/0x31a0 [ 933.178562][T16129] do_file_open+0x20e/0x430 [ 933.183578][T16129] do_sys_openat2+0x10d/0x1e0 [ 933.188760][T16129] __x64_sys_openat+0x12d/0x210 [ 933.194118][T16129] do_syscall_64+0x10b/0xf80 [ 933.199221][T16129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.205616][T16129] [ 933.205616][T16129] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 933.214107][T16129] __lock_acquire+0x14b8/0x2630 [ 933.219468][T16129] lock_acquire+0x1b1/0x370 [ 933.224740][T16129] down_read+0x99/0x450 [ 933.229405][T16129] kernfs_iop_getattr+0x9c/0xf0 [ 933.234758][T16129] vfs_getattr_nosec+0x2d4/0x430 [ 933.240216][T16129] vfs_getattr+0x4a/0x60 [ 933.244961][T16129] loop_query_min_dio_size.isra.0+0x117/0x250 [ 933.251533][T16129] lo_ioctl+0x13aa/0x1bc0 [ 933.256366][T16129] blkdev_ioctl+0x5ad/0x6f0 [ 933.261378][T16129] __x64_sys_ioctl+0x18e/0x210 [ 933.266642][T16129] do_syscall_64+0x10b/0xf80 [ 933.271735][T16129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.278130][T16129] [ 933.278130][T16129] other info that might help us debug this: [ 933.278130][T16129] [ 933.288335][T16129] Chain exists of: [ 933.288335][T16129] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#20 [ 933.288335][T16129] [ 933.302737][T16129] Possible unsafe locking scenario: [ 933.302737][T16129] [ 933.310162][T16129] CPU0 CPU1 [ 933.315505][T16129] ---- ---- [ 933.320848][T16129] lock(&q->q_usage_counter(io)#20); [ 933.326201][T16129] lock(fs_reclaim); [ 933.332682][T16129] lock(&q->q_usage_counter(io)#20); [ 933.340557][T16129] rlock(&root->kernfs_iattr_rwsem); [ 933.345906][T16129] [ 933.345906][T16129] *** DEADLOCK *** [ 933.345906][T16129] [ 933.354026][T16129] 3 locks held by syz.7.2558/16129: [ 933.359197][T16129] #0: ffff888027a61430 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x30/0xb0 [ 933.369355][T16129] #1: ffff888027919c50 (&q->q_usage_counter(io)#20){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 933.380997][T16129] #2: ffff888027919c88 (&q->q_usage_counter(queue)#4){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 933.392812][T16129] [ 933.392812][T16129] stack backtrace: [ 933.398680][T16129] CPU: 1 UID: 0 PID: 16129 Comm: syz.7.2558 Tainted: G L syzkaller #0 PREEMPT(full) [ 933.398700][T16129] Tainted: [L]=SOFTLOCKUP [ 933.398709][T16129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 933.398718][T16129] Call Trace: [ 933.398723][T16129] [ 933.398728][T16129] dump_stack_lvl+0x100/0x190 [ 933.398745][T16129] print_circular_bug.cold+0x178/0x1c7 [ 933.398768][T16129] check_noncircular+0x146/0x160 [ 933.398787][T16129] __lock_acquire+0x14b8/0x2630 [ 933.398807][T16129] lock_acquire+0x1b1/0x370 [ 933.398823][T16129] ? kernfs_iop_getattr+0x9c/0xf0 [ 933.398840][T16129] ? __pfx___might_resched+0x10/0x10 [ 933.398862][T16129] down_read+0x99/0x450 [ 933.398879][T16129] ? kernfs_iop_getattr+0x9c/0xf0 [ 933.398894][T16129] ? find_held_lock+0x2b/0x80 [ 933.398906][T16129] ? __pfx_down_read+0x10/0x10 [ 933.398922][T16129] ? kernfs_root+0xee/0x2a0 [ 933.398938][T16129] kernfs_iop_getattr+0x9c/0xf0 [ 933.398953][T16129] vfs_getattr_nosec+0x2d4/0x430 [ 933.398971][T16129] ? __pfx_kernfs_iop_getattr+0x10/0x10 [ 933.398987][T16129] vfs_getattr+0x4a/0x60 [ 933.399004][T16129] loop_query_min_dio_size.isra.0+0x117/0x250 [ 933.399023][T16129] ? __pfx_loop_query_min_dio_size.isra.0+0x10/0x10 [ 933.399047][T16129] lo_ioctl+0x13aa/0x1bc0 [ 933.399065][T16129] ? __pfx_lo_ioctl+0x10/0x10 [ 933.399082][T16129] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 933.399104][T16129] ? kasan_quarantine_put+0x104/0x240 [ 933.399125][T16129] ? blk_get_meta_cap+0xd4/0x6c0 [ 933.399146][T16129] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 933.399168][T16129] ? blkdev_common_ioctl+0x515/0x2b80 [ 933.399191][T16129] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 933.399214][T16129] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 933.399230][T16129] ? do_vfs_ioctl+0x226/0x13e0 [ 933.399244][T16129] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 933.399257][T16129] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 933.399279][T16129] ? __fget_files+0x215/0x3d0 [ 933.399295][T16129] ? __pfx_lo_ioctl+0x10/0x10 [ 933.399312][T16129] blkdev_ioctl+0x5ad/0x6f0 [ 933.399333][T16129] ? __pfx_blkdev_ioctl+0x10/0x10 [ 933.399353][T16129] ? selinux_file_ioctl+0x13b/0x290 [ 933.399370][T16129] ? selinux_file_ioctl+0xb6/0x290 [ 933.399388][T16129] ? __pfx_blkdev_ioctl+0x10/0x10 [ 933.399408][T16129] __x64_sys_ioctl+0x18e/0x210 [ 933.399422][T16129] do_syscall_64+0x10b/0xf80 [ 933.399436][T16129] ? clear_bhb_loop+0x40/0x90 [ 933.399452][T16129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.399466][T16129] RIP: 0033:0x7f7a55d9cdd9 [ 933.399478][T16129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 933.399493][T16129] RSP: 002b:00007f7a56c1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 933.399505][T16129] RAX: ffffffffffffffda RBX: 00007f7a56015fa0 RCX: 00007f7a55d9cdd9 [ 933.399514][T16129] RDX: 0000000000000004 RSI: 0000000000004c06 RDI: 0000000000000003 [ 933.399523][T16129] RBP: 00007f7a55e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 933.399531][T16129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 933.399540][T16129] R13: 00007f7a56016038 R14: 00007f7a56015fa0 R15: 00007ffd6ab39ce8 [ 933.399553][T16129] [ 933.713019][ T9] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 933.722270][T14368] Bluetooth: hci1: command 0x0406 tx timeout [ 933.733565][ C1] blk_print_req_error: 46 callbacks suppressed [ 933.733579][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 933.750695][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 933.759843][ C0] buffer_io_error: 45 callbacks suppressed [ 933.759857][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 933.774034][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 933.783168][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 933.802183][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 933.811326][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 933.819585][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 933.828712][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 933.851942][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 933.861092][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 933.865271][ T24] usb 1-1: new full-speed USB device number 124 using dummy_hcd [ 933.869129][ T5804] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 933.893372][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 933.902437][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 933.910801][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 933.919940][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 933.927812][ C0] I/O error, dev loop3, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 933.936927][ C0] Buffer I/O error on dev loop3, logical block 1, async page read [ 933.944721][ C0] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 933.953826][ C0] Buffer I/O error on dev loop3, logical block 2, async page read [ 933.961646][ C0] Buffer I/O error on dev loop3, logical block 3, async page read [ 933.969473][ C0] Buffer I/O error on dev loop3, logical block 4, async page read [ 933.995417][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 934.008144][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 934.017533][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.025954][ T9] usb 2-1: Product: syz [ 934.030131][ T9] usb 2-1: Manufacturer: syz [ 934.034930][ T9] usb 2-1: SerialNumber: syz [ 934.055391][ T5804] usb 7-1: Using ep0 maxpacket: 32 [ 934.057980][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 934.068963][ T24] usb 1-1: not running at top speed; connect to a high speed hub [ 934.077745][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 934.085042][ T5804] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 934.088080][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 934.109348][ T24] usb 1-1: string descriptor 0 read error: -22 [ 934.115657][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 934.118340][ T5804] usb 7-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 934.124705][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.149598][ T5804] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.150328][ T24] usb 1-1: 0:2 : does not exist [ 934.170455][ T5804] usb 7-1: Product: syz [ 934.174646][ T5804] usb 7-1: Manufacturer: syz [ 934.179341][ T5804] usb 7-1: SerialNumber: syz [ 934.187066][ T5804] usb 7-1: config 0 descriptor?? [ 934.194531][ T5804] cdc_ether 7-1:0.0: missing cdc header descriptor [ 934.201934][ T5804] usb 7-1: unsupported MDLM descriptors [ 934.255757][T14368] Bluetooth: hci5: command 0x0406 tx timeout [ 934.580805][ T5804] usb 7-1: USB disconnect, device number 109 [ 934.758580][ T24] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 934.768227][ T24] usb 1-1: Warning! Unlikely big volume step count (=31365), linear volume or wrong cval->res? [ 934.779041][ T24] usb 1-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/31365/1 [ 934.789140][ T24] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 934.799318][ T24] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 934.825094][ T24] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 934.850389][ T24] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 934.865613][ T9] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 934.870710][ T24] usb 1-1: USB disconnect, device number 124 [ 934.872928][ T9] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 934.903019][ T9] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 935.112589][ T9] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 935.131393][ T9] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 935.316066][ T9] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 935.361518][ T9] usb 2-1: USB disconnect, device number 118