last executing test programs: 2m52.431611192s ago: executing program 1 (id=2154): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100030010651fbe347b2c2b00000c00018008000100", @ANYRES16=r1], 0x20}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000003080)=@deltaction={0x9c, 0x31, 0x4, 0x70bd27, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) socket(0x10, 0x803, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r2) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r3) sendmmsg(0xffffffffffffffff, &(0x7f000000bd00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x48844) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000540)=0x8) ioctl$KVM_CAP_HYPERV_SYNIC2(r6, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000b0, 0x0, 0x8003}]}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000005c0)={0x1, 0x0, [{0x40000084, 0x0, 0x39}]}) 2m52.117050534s ago: executing program 1 (id=2156): clock_gettime(0xc, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000000480), 0x21, 0x0) 2m51.458845685s ago: executing program 1 (id=2157): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008", @ANYRES32=r0], 0x54}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m51.410160657s ago: executing program 1 (id=2158): socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) personality(0xb) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000005480)=ANY=[@ANYBLOB]) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4c001}, 0xc000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)='`M', 0x2}], 0x1) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045515, &(0x7f00000000c0)={0x1, 0x1}) 2m49.236773351s ago: executing program 1 (id=2165): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0x0, 0x1a, 0x0, 0x1, 0x7}, 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x2, 0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b8db3008720541005470012207010902740001000040000904"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x80000, 0x60) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x9, 0xffffffff, 0x6, 0xffffffff, 0x1}, &(0x7f0000000340)=0x98) r2 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000080)={0x0, 0x5, 0x9}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[r4], 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r4, r5], 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000200)={&(0x7f0000000080)=[0x0], &(0x7f0000000180)=[0x0, 0x0], 0x1, r5, 0xcccccccc}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/198, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) 2m47.142009992s ago: executing program 1 (id=2173): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x38) r1 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) syz_emit_vhci(0x0, 0x7) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000100)='system.posix_acl_access\x00', 0x0, 0x24, 0x3) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$NBD_DO_IT(r1, 0xab03) 2m44.177028625s ago: executing program 3 (id=2186): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = openat$vimc1(0xffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0cc5640, &(0x7f00000000c0)={0x2, @sdr={0x32314d54, 0x400ffff}}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4040}, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b15, &(0x7f0000000000)={'wlan0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff, 0x18, 0x0, @void}, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000280)={0x3, r8, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) 2m43.036568585s ago: executing program 3 (id=2191): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) io_uring_setup(0x68f4, &(0x7f00000002c0)={0x0, 0x48c7, 0x8, 0x0, 0x1000168}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000006040), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000280)='./file0\x00', 0x1e5242, 0x1df2a23c5997fa0b) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0xfb0, 0x3, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0xee00, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) read$dsp(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb", 0x1b) pselect6(0x40, &(0x7f0000000240)={0x4bf, 0x0, 0x1ff, 0x7d, 0x9979, 0x8000, 0x1000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x3, 0x0, 0x2400000000000000, 0x80000006}, 0x0, 0x0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) 2m42.498885443s ago: executing program 4 (id=2192): getpgid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(0x0, 0x0, &(0x7f0000004540)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x404, 0x0, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0), 0x404002, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x56595559, 0x0, 0x9}}) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000240)=0x1) close_range(r3, 0xffffffffffffffff, 0x0) 2m41.929560583s ago: executing program 3 (id=2193): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x1, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}}, 0xc000) sendmsg(r1, &(0x7f0000000740)={&(0x7f0000000540)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256-generic\x00'}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000640)="3013f93f6a23826aeaa571d88a1fc628ec108a5ce411744d4e3ae79c5374eb3bdc7564d840b7d870c0da80f54b31a033a88be722054380d9761cc0747fa37440a0db5046bfc7d2b9681dce89b5", 0x4d}, {&(0x7f00000006c0)="ac5bf07dfbe37df362733fa6e33fcfe007a76905029bf5f167a7418ebe47895ee8a38f7c4ae25d6ae91633bc0b5bcd5572d067fa7af73dfb4605ec2b21cbe0ca844c8033fe927cd5f154695e5c65c966e80d4a08ff27a975d2ae54226a99d873d2ad6297b9e8c1365a36ae03de91", 0x6e}, {&(0x7f0000001400)="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", 0x1000}], 0x3, &(0x7f0000002400)=[{0x1010, 0x1, 0x8, "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"}, {0x38, 0x108, 0x2, "d1cb48e1ba3f7b288450fd50ef072eb1dd2d3d71fdbd35d588ac369a778a8af9ac1eedbcad"}, {0xf0, 0x114, 0x3, "14de4e11cc1b7b9c87cb283c35ed2161798d1ff02f43f9040dbd96a4a31979463a557b963633819542a4dbff22946796f56173f2dcfa3a07ab17cf12afccbad562e51b8730a884d42aec71e6a411d62fd76b05b7baf008f6b781fa2c381c42907a2298b01b9341a64fcba61b45edd16e32a049db6f7531740ee2cc5bdd533d3aae7f3c911dba00a82d4dc36159c1ea023056cb6ec7379e6c33461a2422a3e1639c833116b5480f74d4cf5b59450ec4f14c278f029e60700638a59e224a42760a4deac19e6f5ed15c79802ab0c7202996abfa04d7f13e7160dfea"}], 0x1138}, 0x40000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m41.447172795s ago: executing program 3 (id=2194): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) stat(0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) 2m41.12208788s ago: executing program 4 (id=2195): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000100)) 2m40.515599189s ago: executing program 3 (id=2197): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @null, 0xa}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) 2m40.198818444s ago: executing program 3 (id=2198): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r3 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r3, 0x81044804, &(0x7f0000000400)={0x1}) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m40.119785536s ago: executing program 32 (id=2198): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r3 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r3, 0x81044804, &(0x7f0000000400)={0x1}) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m40.051882121s ago: executing program 4 (id=2200): io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000200)=[@ioring_restriction_register_op={0x0, 0x1e}], 0x1) io_uring_enter(0xffffffffffffffff, 0x6eb1, 0x30a, 0x45, &(0x7f0000000100)={[0x14]}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x1c, 0x0, 0x639fe759bb2d0663, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20008000) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000080)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="20010000", @ANYRES8=r0, @ANYBLOB="04002bbd7000fedbdf252d0000000800030088284086ac45b45f62babd1daec279e5f9014dd342e3ec2eeb2d0c136be9108bc4fda44df98adecceba29ef48075d61b80735fc897c62a9ac24d93080dfef3ac0cef4f4cde10a4e4d458877f163de8a64b2bece7df1aaee36ac9ed7bc729f488c4e5f57a6604496ad6020daba7380f75d7d9ff5c4e27687a009b4b555213379502d16b0cec4587d9d369818bfb588f129e69af7339722117cea1e0c41316d3d81fa94a1754bcbc2414795be0d13f3f5c676fd7eeafc79042c3c9120b2b35df53c9dba6c041090bcaa589", @ANYRES32=r2, @ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x3bebd9462d7aa7f0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x8000) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x14, 0x11, 0xa01, 0x0, 0x0, {0xe0}}, 0x14}}, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x3, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000004102, 0x0) r6 = syz_io_uring_setup(0x43, &(0x7f0000000440)={0x0, 0x74c2, 0x1, 0x1, 0x1a4, 0x0, r5}, &(0x7f00000004c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2m39.074207293s ago: executing program 4 (id=2203): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) stat(0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) 2m37.998959026s ago: executing program 4 (id=2206): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x4c004) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x8000) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) mkdir(0x0, 0x0) lchown(0x0, 0xee01, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000200)=0xdd) connect$netrom(r2, &(0x7f0000000300)={{0x6, @null, 0xa}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) 2m37.447370141s ago: executing program 4 (id=2207): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0x0, 0x7, 0x0, 0x80000000e, 0x77, 0x100000001, 0x10000004000, 0x3, 0x3, 0x248a, 0x0, 0x8000000000, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x7ff, 0x6, 0xa, 0x0, 0xf439}) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000200)={0x2a, 0x4}, 0xffffffffffffff71) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x20004, r5, 0x2}) r8 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m37.186077205s ago: executing program 33 (id=2207): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0x0, 0x7, 0x0, 0x80000000e, 0x77, 0x100000001, 0x10000004000, 0x3, 0x3, 0x248a, 0x0, 0x8000000000, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x7ff, 0x6, 0xa, 0x0, 0xf439}) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000200)={0x2a, 0x4}, 0xffffffffffffff71) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x20004, r5, 0x2}) r8 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m30.797737841s ago: executing program 34 (id=2173): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x38) r1 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) syz_emit_vhci(0x0, 0x7) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000100)='system.posix_acl_access\x00', 0x0, 0x24, 0x3) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$NBD_DO_IT(r1, 0xab03) 20.344968992s ago: executing program 6 (id=2531): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540), 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r4 = socket$inet(0x2b, 0x801, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x14, 0x0, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}}, 0x14}, 0x1, 0xffff000000000000}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r7, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0xa0000, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x11) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4000009c}]}) preadv2(r6, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) readv(r5, &(0x7f0000000340)=[{&(0x7f0000000140)=""/144, 0x8c}], 0x1000000000000360) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000000)) syz_usb_connect(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2a, 0xaf, 0xee, 0x8, 0xaf0, 0x6751, 0x758b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1}}]}}, 0x0) 18.667967484s ago: executing program 5 (id=2534): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001030000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000600)={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14.748059424s ago: executing program 0 (id=2539): socket$inet(0x2, 0x4000000000000001, 0xfffffffe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)) setgroups(0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r7, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 14.592783805s ago: executing program 5 (id=2540): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="2a000000400007012bbd700000000000017c0000040001800c00028005001780b0000000d31a8554928225ac036f2e22ba12b2dd4ed786ce0a9f977a3c90823f9d96bd4fd67c64e58aede0ac6a1819fb7ac1a1cfab413c1766972c2cddd27352bb1c6846839bd10fed0551f7c65feb2eb85cb2763b428bb315ba515895b1"], 0x24}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)={0xc0, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}, @WGDEVICE_A_PEERS={0x90, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9959076f17a3df260c32673333152e018f4fbe8eca2b76a7ccc30541f025a77c"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x40, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) socket$pptp(0x18, 0x1, 0x2) socket$kcm(0x29, 0x2, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080), 0x18) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe681}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x17}, 0x2000400c) 14.467927811s ago: executing program 6 (id=2541): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0xbdc, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000b40)=ANY=[], 0x0) 12.79130748s ago: executing program 0 (id=2542): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r1], &(0x7f0000000200), &(0x7f0000000580)=[0x0], &(0x7f0000000280)}) 12.631327854s ago: executing program 0 (id=2543): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) getpgid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(0x0, 0x0, &(0x7f0000004540)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x404, 0x0, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0), 0x404002, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) close_range(r3, 0xffffffffffffffff, 0x0) 12.413318168s ago: executing program 2 (id=2544): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000002fc0)={0x0, 0x0}) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003080), 0xffffffffffffffff) r7 = syz_open_dev$sndpcmc(&(0x7f0000001bc0), 0x0, 0x48000) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r7, 0x40184150, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000030c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000003200)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000031c0)={&(0x7f0000003100)=ANY=[@ANYBLOB="880000", @ANYRES16=r6, @ANYBLOB="000828bd7000fedbdf256b00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900080000006b0000000a001a08021100000000000a000600ffffffffffff00000a001a00ffffffffffff00000a000600ffffffffffff00000a00060008021100000000000a000600ffffffffff1100000100000a"], 0x88}, 0x1, 0x0, 0x0, 0x40040080}, 0x0) recvmmsg$unix(r1, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/118, 0x76}, {&(0x7f0000000100)=""/7, 0x7}, {&(0x7f0000000240)=""/253, 0xfd}], 0x3}}, {{&(0x7f0000000700)=@abs, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/49, 0x31}, {&(0x7f0000000780)=""/244, 0xf4}, {&(0x7f0000000880)=""/50, 0x32}], 0x3, &(0x7f0000000900)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000000980)=@abs, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000a00)=""/75, 0x4b}, {&(0x7f0000000a80)=""/102, 0x66}], 0x2, &(0x7f0000000b40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}}, {{&(0x7f0000000c80), 0x6e, &(0x7f0000001e00)=[{&(0x7f0000000d00)=""/135, 0x87}, {&(0x7f0000000dc0)=""/49, 0x31}, {&(0x7f0000000e00)=""/4096, 0x1000}], 0x3, &(0x7f0000001e40)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x140}}, {{&(0x7f0000001f80), 0x6e, &(0x7f00000021c0)=[{&(0x7f0000002000)=""/5, 0x5}, {&(0x7f0000002040)=""/83, 0x53}, {&(0x7f00000020c0)=""/147, 0x93}, {&(0x7f0000002180)=""/42, 0x2a}], 0x4}}, {{&(0x7f0000002200)=@abs, 0x6e, &(0x7f00000022c0)=[{&(0x7f0000002280)=""/56, 0x38}], 0x1}}, {{&(0x7f0000002300), 0x6e, &(0x7f0000002400)=[{&(0x7f0000002380)=""/91, 0x5b}], 0x1, &(0x7f0000002440)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f00000024c0), 0x6e, &(0x7f0000002bc0)=[{&(0x7f0000002540)=""/174, 0xae}, {&(0x7f0000002600)=""/97, 0x61}, {&(0x7f0000002680)=""/250, 0xfa}, {&(0x7f0000002780)=""/133, 0x85}, {&(0x7f0000002840)=""/74, 0x4a}, {&(0x7f00000028c0)=""/219, 0xdb}, {&(0x7f00000029c0)=""/97, 0x61}, {&(0x7f0000002a40)=""/123, 0x7b}, {&(0x7f0000002ac0)=""/195, 0xc3}], 0x9, &(0x7f0000002c80)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x140}}], 0x8, 0x40014162, &(0x7f0000003000)={r3, r4+60000000}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="8001000010000100feffffbf00010000fe880000000000000000000000000001fe800000000000000000000000000026000100044e230005020000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d36c000000ff01f200000000000000000000000001000000000000000009000000000000000600000000000000ffff0000000000001c25080000000000050000000000000000000000006d66ee7c00000000000000020000000000000000000000000000001f00000000000000000200000000000002000100fcffffff000000002abd700000000000020001fd2000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480002006f666228"], 0x180}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) 11.614953762s ago: executing program 0 (id=2545): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0x0, 0x1a, 0x0, 0x1, 0x7}, 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x2, 0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b8db3008720541005470012207010902740001000040000904"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x80000, 0x60) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x9, 0xffffffff, 0x6, 0xffffffff, 0x1}, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000080)={0x0, 0x5, 0x9}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[r5, r4], 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r4, r5], 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000200)={&(0x7f0000000080)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x2, r5, 0xcccccccc}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/198, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) 10.835458088s ago: executing program 2 (id=2546): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3}) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000280)="d7", 0x1}], 0x2) syz_usb_disconnect(r0) 10.567570419s ago: executing program 5 (id=2547): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x200, 0x395, 0x5, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x3) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000400)=0x55f) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000040)={0x8, 0x9, 0x4, {0x2, @vbi={0x9, 0x1, 0x7, 0x34565559, [0x34565348, 0xb22], [0x7], 0x1}}, 0x8}) r4 = io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0x21e, 0x10}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) statx(0xffffffffffffffff, &(0x7f0000000180)='\x00', 0x1000, 0x310, &(0x7f0000000300)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x8, 0xfff3}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010102}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="6c000000160000012dbd7000fcdbdf250aff00fd", @ANYRES32=r6, @ANYBLOB="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"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x40000000) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28c81, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r7, 0x3304) 10.385066257s ago: executing program 7 (id=2548): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000011c0), 0x402, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000001200)=0x4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb", 0x3f}], 0x1) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, 0x0) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, &(0x7f00000001c0)={0x980900, 0xfffffff2, @value=0x9}) r7 = msgget$private(0x0, 0x3ac) msgsnd(r7, &(0x7f0000000000)={0x2}, 0x8, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x6}}, 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000003c0)) sendmsg$nl_generic(r4, &(0x7f00000028c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000002900)=ANY=[], 0x12c4}, 0x1, 0x0, 0x0, 0x4810}, 0x4) 10.007552259s ago: executing program 6 (id=2549): socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x8000) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) mkdir(0x0, 0x0) lchown(0x0, 0xee01, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000200)=0xdd) connect$netrom(r1, &(0x7f0000000300)={{0x6, @null, 0xa}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) 9.322758476s ago: executing program 6 (id=2550): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="2a000000400007012bbd700000000000017c0000040001800c00028005001780b0000000d31a8554928225ac036f2e22ba12b2dd4ed786ce0a9f977a3c90823f9d96bd4fd67c64e58aede0ac6a1819fb7ac1a1cfab413c1766972c2cddd27352bb1c6846839bd10fed0551f7c65feb2eb85cb2763b428bb315ba515895b1a85c612d6960364d5257dc816fa8a6dcdf5901cef48158753112a0a70290797ee340c015d50e6f3a98d9"], 0x24}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)={0xc0, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}, @WGDEVICE_A_PEERS={0x90, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9959076f17a3df260c32673333152e018f4fbe8eca2b76a7ccc30541f025a77c"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x40, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) r5 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r5, &(0x7f0000000200)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) socket$kcm(0x29, 0x2, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080), 0x18) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) sendmmsg$inet(r0, &(0x7f0000000280), 0x0, 0x20000000) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe681}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x17}, 0x2000400c) 8.018510546s ago: executing program 0 (id=2551): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540), 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r4 = socket$inet(0x2b, 0x801, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x14, 0x0, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}}, 0x14}, 0x1, 0xffff000000000000}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r7, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0xa0000, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x11) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4000009c}]}) preadv2(r6, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) readv(r5, &(0x7f0000000340)=[{&(0x7f0000000140)=""/144, 0x8c}], 0x1000000000000360) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000000)) syz_usb_connect(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2a, 0xaf, 0xee, 0x8, 0xaf0, 0x6751, 0x758b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1}}]}}, 0x0) 7.775655277s ago: executing program 2 (id=2552): syz_usb_connect(0x0, 0x3b, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000085826d20ffd56600b0d800000001090229000100000000"], 0x0) 7.587331846s ago: executing program 7 (id=2553): r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x200, 0x395, 0x5, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x3) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000400)=0x55f) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000040)={0x8, 0x9, 0x4, {0x2, @vbi={0x9, 0x1, 0x7, 0x34565559, [0x34565348, 0xb22], [0x7], 0x1}}, 0x8}) r5 = io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0x21e, 0x10}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) statx(r0, &(0x7f0000000180)='\x00', 0x1000, 0x310, &(0x7f0000000300)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x8, 0xfff3}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010102}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="6c000000160000012dbd7000fcdbdf250aff00fd", @ANYRES32=r8, @ANYBLOB="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"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x40000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28c81, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r9, 0x3304) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000100)={'wlan1\x00', @random='\n\x00'}) 7.48489008s ago: executing program 6 (id=2554): syz_usb_connect(0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)}], 0x1, 0x0) 6.328064595s ago: executing program 5 (id=2555): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0xfffffdff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) 6.095869515s ago: executing program 2 (id=2556): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = openat$vimc1(0xffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0cc5640, &(0x7f00000000c0)={0x2, @sdr={0x32314d54, 0x400ffff}}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@gettaction={0x50, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x478000}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x25, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}]}, 0x50}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r6, 0x0, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b15, &(0x7f0000000000)={'wlan0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff, 0x18, 0x0, @void}, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000280)={0x3, r8, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) 6.077277835s ago: executing program 5 (id=2557): r0 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0106434, &(0x7f0000000100)={0x101, 0x0, 0x10001}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 5.47992155s ago: executing program 7 (id=2558): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x4, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40400) 5.153229314s ago: executing program 7 (id=2559): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) getpgid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(0x0, 0x0, &(0x7f0000004540)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x404, 0x0, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x56595559, 0x0, 0x9}}) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) close_range(r3, 0xffffffffffffffff, 0x0) 4.209617323s ago: executing program 6 (id=2560): socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x8000) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) mkdir(0x0, 0x0) lchown(0x0, 0xee01, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000200)=0xdd) connect$netrom(r1, &(0x7f0000000300)={{0x6, @null, 0xa}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) 3.983889559s ago: executing program 7 (id=2561): socket$inet(0x2, 0x4000000000000001, 0xfffffffe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)) setgroups(0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r6, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r7, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x8800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 1.702008748s ago: executing program 2 (id=2562): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) getpgid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(0x0, 0x0, &(0x7f0000004540)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x404, 0x0, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0), 0x404002, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x56595559, 0x0, 0x9}}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000240)=0x1) close_range(r3, 0xffffffffffffffff, 0x0) 1.605350119s ago: executing program 7 (id=2563): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000011c0), 0x402, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000001200)=0x4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb", 0x3f}], 0x1) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, 0x0) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, &(0x7f00000001c0)={0x980900, 0xfffffff2, @value=0x9}) r7 = msgget$private(0x0, 0x3ac) msgsnd(r7, &(0x7f0000000000)={0x2}, 0x8, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x6}}, 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000003c0)) sendmsg$nl_generic(r4, &(0x7f00000028c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000002900)=ANY=[], 0x12c4}, 0x1, 0x0, 0x0, 0x4810}, 0x4) 523.35088ms ago: executing program 5 (id=2564): syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000780)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x80, 0x7f}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0xfffffffb, 0x7ff, 0x200, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1, 0x8}, 0x50) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000280), &(0x7f0000000100)=@tcp6=r2, 0x2}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) renameat(r6, &(0x7f0000000180)='./file0\x00', r5, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x2710}, 0x10) listen(r7, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r9 = accept4(r7, 0x0, 0x0, 0x0) sendto(r9, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) recvmmsg(r8, 0x0, 0x0, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700}) ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) ioctl$SIOCSIFHWADDR(r5, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) unshare(0x62000280) 511.06566ms ago: executing program 2 (id=2565): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$sg(&(0x7f0000000480), 0xfffffffffffffffa, 0x1841) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x101) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x70bd2d, 0x0, {0x1c}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc040}, 0x4000000) r4 = socket(0x11, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmmsg(r4, &(0x7f0000001240)=[{{&(0x7f0000000040)=@can={0x1d, r6}, 0x80, 0x0}}], 0x1, 0x8010) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x8885) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x8000, 0x1000}, 0x20) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 0s ago: executing program 0 (id=2566): r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x3) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000400)=0x55f) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000040)={0x8, 0x9, 0x4, {0x2, @vbi={0x9, 0x1, 0x7, 0x34565559, [0x34565348, 0xb22], [0x7], 0x1}}, 0x8}) r5 = io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0x21e, 0x10}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) statx(r0, &(0x7f0000000180)='\x00', 0x1000, 0x310, &(0x7f0000000300)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x8, 0xfff3}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010102}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="6c000000160000012dbd7000fcdbdf250aff00fd", @ANYRES32=r8, @ANYBLOB="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"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x40000000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28c81, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r9, 0x3304) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000100)={'wlan1\x00', @random='\n\x00'}) kernel console output (not intermixed with test programs): _read_register: readreg error (reg=127, ret==0) [ 930.346465][ T5848] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 930.376900][ T5848] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 930.395487][ T5848] usb 1-1: USB disconnect, device number 63 [ 930.454711][ T5848] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 931.143174][ T5848] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 931.405173][ T5963] usb 3-1: USB disconnect, device number 68 [ 932.177398][ T5848] usb 2-1: Using ep0 maxpacket: 16 [ 932.191067][ T5848] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 932.210720][T13219] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 932.224180][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 932.252023][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 932.267661][T13219] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 932.281904][ T5848] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 932.306383][ T5848] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 932.421418][ T5848] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 932.498333][T13222] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2078'. [ 932.650788][ T5848] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 932.660342][ T5848] usb 2-1: Manufacturer: syz [ 932.688773][ T5848] usb 2-1: config 0 descriptor?? [ 933.085946][ T5963] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 933.235568][ T5848] rc_core: IR keymap rc-hauppauge not found [ 933.243174][ T5848] Registered IR keymap rc-empty [ 933.252451][ T5848] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 933.375111][T13236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2082'. [ 933.544284][ T5963] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 933.557930][ T5963] usb 3-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 933.567725][ T5848] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 933.577047][ T5963] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 933.596619][ T5848] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 933.608716][ T5963] usb 3-1: Product: syz [ 933.661772][ T5963] usb 3-1: Manufacturer: syz [ 933.688661][ T5963] usb 3-1: SerialNumber: syz [ 933.697951][ T5848] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input79 [ 933.716830][ T5963] usb 3-1: config 0 descriptor?? [ 933.732475][ T5963] gspca_main: conex-2.14.0 probing 0572:0041 [ 933.742976][ T5848] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 933.763771][T13243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2083'. [ 933.773763][T13243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2083'. [ 933.799953][ T5848] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 933.830891][ T5848] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 933.878986][ T5848] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 933.898466][ T5848] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 933.931777][ T5848] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 934.257053][ T5848] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 934.294369][ T5848] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 934.315753][T13213] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 934.325934][ T5848] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 934.358316][ T5848] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 934.389182][ T5963] usb 3-1: USB disconnect, device number 69 [ 934.401708][ T5848] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 934.436900][ T5848] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 934.467084][ T5848] usb 2-1: USB disconnect, device number 85 [ 934.499911][T13213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 934.531168][T13213] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 934.572975][T13213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 934.585545][T13213] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 934.598814][T13213] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 934.608457][T13213] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.640424][T13213] usb 1-1: config 0 descriptor?? [ 934.938542][T13213] hdpvr 1-1:0.0: unexpected answer of status request, len 2 [ 934.959847][T13213] hdpvr 1-1:0.0: device init failed [ 934.966139][T13213] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 935.256133][T13213] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 935.438010][T13213] usb 2-1: Using ep0 maxpacket: 16 [ 935.447030][T13213] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 935.456925][T13213] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.465513][T13213] usb 2-1: Product: syz [ 935.470513][T13213] usb 2-1: Manufacturer: syz [ 935.475185][T13213] usb 2-1: SerialNumber: syz [ 935.483161][T13213] usb 2-1: config 0 descriptor?? [ 936.026551][T13213] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 936.038849][T13213] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 936.067243][T13213] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 936.080649][T13213] usb 2-1: media controller created [ 936.135575][T13213] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 936.564107][T13279] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2094'. [ 936.731684][T13213] zl10353_read_register: readreg error (reg=127, ret==0) [ 936.746498][T13213] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 936.763518][T13213] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 936.934711][ T6429] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 936.943503][T13213] usb 2-1: USB disconnect, device number 86 [ 937.133553][ T6429] usb 5-1: Using ep0 maxpacket: 8 [ 937.199094][T13213] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 937.220512][ T5848] usb 1-1: USB disconnect, device number 64 [ 937.246477][ T6429] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 937.288777][ T6429] usb 5-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 937.346130][ T6429] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 937.391837][ T6429] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.448871][ T6429] usb 5-1: Product: syz [ 937.462951][ T6429] usb 5-1: Manufacturer: syz [ 937.476283][ T6429] usb 5-1: SerialNumber: syz [ 937.790598][ T6429] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 937.950970][T13213] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 938.091473][ T6429] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 938.105824][ T6429] usb 2-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 938.116971][ T6429] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 938.128141][ T6429] usb 2-1: Product: syz [ 938.140489][ T6429] usb 2-1: Manufacturer: syz [ 938.148118][ T6429] usb 2-1: SerialNumber: syz [ 938.153605][T13213] usb 3-1: Using ep0 maxpacket: 32 [ 938.160124][T13213] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 938.193445][T13213] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 938.206890][ T6429] usb 2-1: config 0 descriptor?? [ 938.224223][ T6429] gspca_main: conex-2.14.0 probing 0572:0041 [ 938.254827][T13213] usb 3-1: config 0 interface 0 has no altsetting 0 [ 938.271152][T13213] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 938.293903][T13213] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.320780][T13213] usb 3-1: config 0 descriptor?? [ 938.843098][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 938.851251][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 938.906501][ T6429] usb 2-1: USB disconnect, device number 87 [ 939.020771][T13213] corsair-psu 0003:1B1C:1C09.000B: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.2-1/input0 [ 939.116927][T13213] corsair-psu 0003:1B1C:1C09.000B: unable to initialize device (-38) [ 939.132162][T13213] corsair-psu 0003:1B1C:1C09.000B: probe with driver corsair-psu failed with error -38 [ 939.587772][T13213] usb 3-1: USB disconnect, device number 70 [ 940.168403][ T6429] usb 5-1: USB disconnect, device number 97 [ 940.600532][T13318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2101'. [ 940.612185][T13318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2101'. [ 940.660315][T13316] netlink: 'syz.0.2101': attribute type 4 has an invalid length. [ 940.986518][T13322] nbd2: detected capacity change from 0 to 112 [ 941.005869][T13326] block nbd2: shutting down sockets [ 941.050670][ C0] blk_print_req_error: 27 callbacks suppressed [ 941.050689][ C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 941.066419][ C0] buffer_io_error: 27 callbacks suppressed [ 941.066437][ C0] Buffer I/O error on dev nbd2, logical block 0, async page read [ 941.094854][T10621] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 941.145136][T10621] Buffer I/O error on dev nbd2, logical block 0, async page read [ 941.173109][T10621] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 941.215195][T10621] Buffer I/O error on dev nbd2, logical block 0, async page read [ 941.258302][T10621] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 941.279759][T10621] Buffer I/O error on dev nbd2, logical block 0, async page read [ 941.299837][T10621] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 941.361226][T10621] Buffer I/O error on dev nbd2, logical block 0, async page read [ 941.373254][T13329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2106'. [ 941.427076][T10621] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 941.552004][T10621] Buffer I/O error on dev nbd2, logical block 0, async page read [ 941.581095][T10621] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 941.877603][T10621] Buffer I/O error on dev nbd2, logical block 0, async page read [ 941.925295][T10621] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 941.940608][T10621] Buffer I/O error on dev nbd2, logical block 0, async page read [ 941.957582][T10621] ldm_validate_partition_table(): Disk read failed. [ 942.007467][T10621] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 942.035492][T10621] Buffer I/O error on dev nbd2, logical block 0, async page read [ 942.181605][T10621] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 942.330904][T10621] Buffer I/O error on dev nbd2, logical block 0, async page read [ 942.368400][T10621] Dev nbd2: unable to read RDB block 0 [ 942.396366][T10621] nbd2: unable to read partition table [ 942.430765][T10621] ldm_validate_partition_table(): Disk read failed. [ 942.462919][T10621] Dev nbd2: unable to read RDB block 0 [ 942.496157][T10621] nbd2: unable to read partition table [ 943.616870][ T6429] usb 5-1: new full-speed USB device number 98 using dummy_hcd [ 944.707639][ T6429] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 944.868250][ T6429] usb 5-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 944.924669][ T6429] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 944.943434][ T6429] usb 5-1: Product: syz [ 944.964482][ T6429] usb 5-1: Manufacturer: syz [ 944.986572][ T6429] usb 5-1: SerialNumber: syz [ 945.089730][ T6429] usb 5-1: config 0 descriptor?? [ 945.160927][ T6429] gspca_main: conex-2.14.0 probing 0572:0041 [ 945.869807][ T6429] usb 5-1: USB disconnect, device number 98 [ 949.579732][T13406] binder: 13405:13406 ioctl c0306201 0 returned -14 [ 950.030640][T13213] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 950.823015][ T6429] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 950.833579][T13213] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 950.863292][T13213] usb 3-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 950.883115][T13213] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 950.910380][T13213] usb 3-1: Product: syz [ 950.935863][T13213] usb 3-1: Manufacturer: syz [ 950.941646][T13213] usb 3-1: SerialNumber: syz [ 950.962409][T13213] usb 3-1: config 0 descriptor?? [ 950.969247][T13213] gspca_main: conex-2.14.0 probing 0572:0041 [ 951.016167][ T6429] usb 5-1: Using ep0 maxpacket: 16 [ 951.033896][ T6429] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 951.053133][ T6429] usb 5-1: config 0 interface 0 has no altsetting 0 [ 951.084787][ T6429] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 951.106844][ T6429] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.131955][ T6429] usb 5-1: Product: syz [ 951.138929][ T6429] usb 5-1: Manufacturer: syz [ 951.159439][ T6429] usb 5-1: SerialNumber: syz [ 951.187939][ T6429] usb 5-1: config 0 descriptor?? [ 951.545882][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 951.578744][ T6429] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input80 [ 951.620126][ T6429] imon:send_packet: packet tx failed (-71) [ 951.645749][ T6429] imon 5-1:0.0: panel buttons/knobs setup failed [ 951.648355][T13213] usb 3-1: USB disconnect, device number 71 [ 951.795426][ T6429] rc_core: IR keymap rc-imon-pad not found [ 951.807800][ T6429] Registered IR keymap rc-empty [ 951.814179][ T6429] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 951.853490][ T6429] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 951.872267][ T6429] imon:send_packet: packet tx failed (-71) [ 951.913432][ T6429] imon 5-1:0.0: remote input dev register failed [ 952.186267][ T6429] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 952.268016][ T6429] imon 5-1:0.0: unable to initialize intf0, err 0 [ 952.274582][ T6429] imon:imon_probe: failed to initialize context! [ 952.298274][ T6429] imon 5-1:0.0: unable to register, err -19 [ 952.343780][ T6429] usb 5-1: USB disconnect, device number 99 [ 952.767952][ T6429] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 952.939172][ T6429] usb 5-1: Using ep0 maxpacket: 16 [ 952.945581][ T6429] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 952.995168][ T6429] usb 5-1: config 0 interface 0 has no altsetting 0 [ 953.072260][ T6429] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 953.086769][ T6429] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.126339][ T6429] usb 5-1: Product: syz [ 953.134333][ T6429] usb 5-1: Manufacturer: syz [ 953.156684][ T6429] usb 5-1: SerialNumber: syz [ 953.542423][ T6429] usb 5-1: config 0 descriptor?? [ 953.639524][ T6429] usb 5-1: can't set config #0, error -71 [ 953.656512][ T6429] usb 5-1: USB disconnect, device number 100 [ 954.151498][T13452] binder: 13451:13452 ioctl c0306201 0 returned -14 [ 955.124411][ T29] audit: type=1800 audit(2000000473.814:421): pid=13460 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2144" name="file0" dev="overlay" ino=2228 res=0 errno=0 [ 955.461318][ T6429] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 955.914260][ T6429] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 955.945660][ T6429] usb 3-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 955.959406][ T6429] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 955.972009][ T6429] usb 3-1: Product: syz [ 955.978055][ T6429] usb 3-1: Manufacturer: syz [ 956.033412][ T6429] usb 3-1: SerialNumber: syz [ 956.061655][ T6429] usb 3-1: config 0 descriptor?? [ 956.069875][ T6429] gspca_main: conex-2.14.0 probing 0572:0041 [ 956.145714][T13213] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 956.306012][T13213] usb 5-1: Using ep0 maxpacket: 16 [ 956.323472][T13213] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 956.338833][T13213] usb 5-1: config 0 interface 0 has no altsetting 0 [ 956.420100][T13213] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 956.455899][ T5930] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 956.456658][T13482] binder: 13481:13482 ioctl c0306201 0 returned -14 [ 956.648833][ T5930] usb 1-1: Using ep0 maxpacket: 16 [ 956.706834][T13213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.709874][ T5930] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 956.726715][T13213] usb 5-1: Product: syz [ 956.726736][T13213] usb 5-1: Manufacturer: syz [ 956.726751][T13213] usb 5-1: SerialNumber: syz [ 956.734451][T13213] usb 5-1: config 0 descriptor?? [ 956.746193][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 956.762373][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 956.774338][T13488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1027 sclass=netlink_route_socket pid=13488 comm=syz.1.2153 [ 956.899817][ T5930] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 956.932614][ T5930] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 956.994751][ T5930] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 957.050974][ T5930] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 957.234502][ T5930] usb 1-1: Manufacturer: syz [ 957.277069][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 957.279892][ T5930] usb 1-1: config 0 descriptor?? [ 957.287829][T13213] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input82 [ 957.318825][ T6429] usb 3-1: USB disconnect, device number 72 [ 957.348184][T13213] imon:send_packet: packet tx failed (-71) [ 957.375837][T13213] imon 5-1:0.0: panel buttons/knobs setup failed [ 957.483764][T13213] rc_core: IR keymap rc-imon-pad not found [ 957.489603][T13213] Registered IR keymap rc-empty [ 957.499187][T13213] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 957.512267][T13213] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 957.535565][T13213] imon:send_packet: packet tx failed (-71) [ 957.559310][T13213] imon 5-1:0.0: remote input dev register failed [ 957.565832][T13213] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 957.579678][ T5930] rc_core: IR keymap rc-hauppauge not found [ 957.586086][ T5930] Registered IR keymap rc-empty [ 957.588004][T13213] imon 5-1:0.0: unable to initialize intf0, err 0 [ 957.592812][ T5930] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 957.602274][T13213] imon:imon_probe: failed to initialize context! [ 957.612444][T13213] imon 5-1:0.0: unable to register, err -19 [ 957.622303][ T5930] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 957.625345][T13213] usb 5-1: USB disconnect, device number 101 [ 957.650611][ T5930] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 957.667606][ T5930] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input84 [ 957.686070][ T5930] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 957.707637][ T5930] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 957.758475][ T5930] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 957.794161][ T5930] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 957.825342][ T5930] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 957.857636][ T5930] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 957.878581][ T5930] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 957.891894][T13499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2155'. [ 957.902823][ T5930] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 957.932566][ T5930] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 957.954975][ T5930] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 957.986729][T13213] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 958.073072][ T5930] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 958.084461][ T5930] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 958.127591][ T5930] usb 1-1: USB disconnect, device number 65 [ 958.153725][T13499] hsr_slave_1 (unregistering): left promiscuous mode [ 958.284013][T13213] usb 5-1: Using ep0 maxpacket: 16 [ 958.314220][T13213] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 958.335935][T13213] usb 5-1: config 0 interface 0 has no altsetting 0 [ 958.353540][T13213] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 958.363394][T13213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.373176][T13213] usb 5-1: Product: syz [ 958.377678][T13213] usb 5-1: Manufacturer: syz [ 958.383301][T13213] usb 5-1: SerialNumber: syz [ 958.402681][T13213] usb 5-1: config 0 descriptor?? [ 958.452682][T13502] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2157'. [ 958.751665][T13506] usb usb8: usbfs: process 13506 (syz.1.2158) did not claim interface 0 before use [ 958.794616][T13213] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input85 [ 959.261529][T13473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 960.069898][T13213] rc_core: IR keymap rc-imon-pad not found [ 960.086600][T13213] Registered IR keymap rc-empty [ 960.092086][T13213] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 960.096043][T13473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 960.102245][T13213] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 960.497714][T13213] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 960.520134][T13213] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input86 [ 960.606003][T13213] imon 5-1:0.0: iMON device (15c2:0041, intf0) on usb<5:102> initialized [ 960.753258][ T5848] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 960.811258][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 960.811567][ T5930] usb 5-1: USB disconnect, device number 102 [ 961.000789][ T5848] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 961.016947][ T5848] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 961.042937][ T6429] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 961.054890][ T5848] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 961.065388][ T5848] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 961.093073][ T5848] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 961.130298][ T5848] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.274542][ T6429] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 961.327027][ T6429] usb 2-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 961.338813][ T6429] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 961.343980][ T5848] usb 1-1: config 0 descriptor?? [ 961.418753][ T6429] usb 2-1: Product: syz [ 961.432295][ T6429] usb 2-1: Manufacturer: syz [ 961.443558][ T6429] usb 2-1: SerialNumber: syz [ 961.487003][ T6429] usb 2-1: config 0 descriptor?? [ 961.503459][ T6429] gspca_main: conex-2.14.0 probing 0572:0041 [ 961.622288][ T5848] hdpvr 1-1:0.0: unexpected answer of status request, len 2 [ 961.631320][ T5848] hdpvr 1-1:0.0: device init failed [ 961.636719][ T5848] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 962.125827][ C1] raw-gadget.4 gadget.1: ignoring, device is not running [ 962.209373][ T6429] usb 2-1: USB disconnect, device number 88 [ 962.568592][T13547] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.683295][T13547] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.759489][T13547] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.833340][T13547] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.860687][T13555] nbd1: detected capacity change from 0 to 112 [ 962.896504][ T7342] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.911879][ T7342] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.929792][ T7342] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.943481][ T7342] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.148656][T13558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2174'. [ 963.629047][T13213] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 963.673356][ T51] block nbd1: Receive control failed (result -104) [ 963.740228][ T6429] usb 1-1: USB disconnect, device number 66 [ 963.900665][T13213] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 963.957588][T13213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.983833][T13213] usb 3-1: Product: syz [ 964.064176][T13576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2180'. [ 964.259341][T13213] usb 3-1: Manufacturer: syz [ 964.310380][T13213] usb 3-1: SerialNumber: syz [ 964.319721][T13213] usb 3-1: config 0 descriptor?? [ 964.915323][T13213] usb 3-1: Firmware: major: 236, minor: 109, hardware type: UNKNOWN (126) [ 965.130567][T13213] usb 3-1: failed to fetch extended address, random address set [ 965.140213][T13213] usb 3-1: atusb_probe: initialization failed, error = -524 [ 965.153763][T13587] qrtr: Invalid version 255 [ 965.261198][T13589] syzkaller1: entered promiscuous mode [ 965.268458][T13213] atusb 3-1:0.0: probe with driver atusb failed with error -524 [ 965.278107][T13589] syzkaller1: entered allmulticast mode [ 965.364351][T13213] usb 3-1: USB disconnect, device number 73 [ 966.259767][T13213] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 966.497165][T13213] usb 3-1: Using ep0 maxpacket: 16 [ 966.519001][T13213] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 966.530860][T13213] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 966.572049][T13213] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 966.582411][T13213] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 966.598036][T13213] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 966.619856][T13213] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 966.629625][T13213] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 966.641117][T13213] usb 3-1: Manufacturer: syz [ 966.650513][T13213] usb 3-1: config 0 descriptor?? [ 966.877953][T13597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 966.903204][T13597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 966.920464][ T29] audit: type=1800 audit(2000000484.842:422): pid=13608 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2191" name="file0" dev="overlay" ino=2273 res=0 errno=0 [ 967.007246][ T5963] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 967.360071][ T5963] usb 1-1: Using ep0 maxpacket: 16 [ 967.371064][ T5963] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 967.399618][ T5963] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.477892][ T5963] usb 1-1: config 0 descriptor?? [ 967.578333][ T5963] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 967.661029][T13213] rc_core: IR keymap rc-hauppauge not found [ 967.667372][T13213] Registered IR keymap rc-empty [ 967.677162][T13213] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 967.793107][T13213] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 967.932129][T13213] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 967.945447][T13213] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input87 [ 968.133579][T13213] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 968.226257][T13213] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 968.279683][T13213] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 968.354444][T13213] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 968.386677][T13213] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 968.431272][T13213] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 968.450665][T13213] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 968.471934][T13213] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 968.503990][T13213] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 968.527196][T13213] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 968.571181][T13213] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 968.580166][T13213] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 968.593123][T13213] usb 3-1: USB disconnect, device number 74 [ 969.212213][T13628] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2196'. [ 969.480865][ T6140] syz_tun (unregistering): left allmulticast mode [ 969.866155][T13633] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1027 sclass=netlink_route_socket pid=13633 comm=syz.4.2200 [ 969.985430][T13213] usb 1-1: USB disconnect, device number 67 [ 970.426122][ T5860] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 970.437738][ T5860] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 970.452178][ T5860] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 970.465662][ T5860] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 970.564216][ T5860] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 970.877284][T13213] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 971.509638][T13213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 971.527100][T13637] chnl_net:caif_netlink_parms(): no params data found [ 971.527195][T13213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 971.561605][T13213] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 971.607756][T13213] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 971.658254][T13213] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.686094][T13213] usb 1-1: config 0 descriptor?? [ 971.690559][T13637] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.698256][T13637] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.707040][T13637] bridge_slave_0: entered allmulticast mode [ 971.715690][T13637] bridge_slave_0: entered promiscuous mode [ 971.725982][T13637] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.734859][T13637] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.744021][T13637] bridge_slave_1: entered allmulticast mode [ 971.751507][T13637] bridge_slave_1: entered promiscuous mode [ 971.918568][T13637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 971.931971][T13637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 972.225527][T13213] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 972.420693][T13637] team0: Port device team_slave_0 added [ 972.440251][T13637] team0: Port device team_slave_1 added [ 972.506223][T13637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 972.516496][T13637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 972.544710][T13637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 972.558954][T13637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 972.566607][T13637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 972.595829][T13637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 972.687840][ T5930] usb 1-1: USB disconnect, device number 68 [ 972.690934][T13636] usb 1-1: string descriptor 0 read error: -19 [ 972.785036][T13637] hsr_slave_0: entered promiscuous mode [ 972.803572][T13637] hsr_slave_1: entered promiscuous mode [ 972.809567][T13637] debugfs: 'hsr0' already exists in 'hsr' [ 972.832971][T13637] Cannot create hsr debugfs directory [ 972.844520][T13665] nbd2: detected capacity change from 0 to 112 [ 972.864007][T13665] block nbd2: shutting down sockets [ 972.869900][T13668] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 972.881196][T13668] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 972.891453][T13668] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 972.902007][T13668] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 972.911423][T13668] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 972.943128][T11732] blk_print_req_error: 27 callbacks suppressed [ 972.943143][T11732] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 972.963236][T11732] buffer_io_error: 27 callbacks suppressed [ 972.963251][T11732] Buffer I/O error on dev nbd2, logical block 0, async page read [ 972.967190][ T51] Bluetooth: hci2: command tx timeout [ 972.985182][ T5995] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 973.011396][ T5995] Buffer I/O error on dev nbd2, logical block 0, async page read [ 973.026904][ T5995] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 973.054926][ T5995] Buffer I/O error on dev nbd2, logical block 0, async page read [ 973.065275][ T5995] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 973.075741][ T5995] Buffer I/O error on dev nbd2, logical block 0, async page read [ 973.083767][ T5995] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 973.093990][ T5995] Buffer I/O error on dev nbd2, logical block 0, async page read [ 973.102484][ T5995] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 973.112638][ T5995] Buffer I/O error on dev nbd2, logical block 0, async page read [ 973.123346][ T5995] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 973.124711][T13637] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 973.133818][ T5995] Buffer I/O error on dev nbd2, logical block 0, async page read [ 973.133897][ T5995] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 973.133917][ T5995] Buffer I/O error on dev nbd2, logical block 0, async page read [ 973.133932][ T5995] ldm_validate_partition_table(): Disk read failed. [ 973.133960][ T5995] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 973.133979][ T5995] Buffer I/O error on dev nbd2, logical block 0, async page read [ 973.134015][ T5995] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 973.134057][ T5995] Buffer I/O error on dev nbd2, logical block 0, async page read [ 973.134130][ T5995] Dev nbd2: unable to read RDB block 0 [ 973.161073][ T5995] nbd2: unable to read partition table [ 973.231734][ T5995] ldm_validate_partition_table(): Disk read failed. [ 973.238593][ T5995] Dev nbd2: unable to read RDB block 0 [ 973.245192][ T5995] nbd2: unable to read partition table [ 973.399029][T13637] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 974.111169][T13637] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 974.290577][T13637] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 974.454734][T13666] chnl_net:caif_netlink_parms(): no params data found [ 974.534805][T13666] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.542005][T13666] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.598585][T13666] bridge_slave_0: entered allmulticast mode [ 974.607077][T13666] bridge_slave_0: entered promiscuous mode [ 974.709106][T13666] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.785219][T13666] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.797426][T13666] bridge_slave_1: entered allmulticast mode [ 974.812472][T13666] bridge_slave_1: entered promiscuous mode [ 974.828550][T13637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 974.869205][T13666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 974.890829][T13666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 974.938230][T13637] 8021q: adding VLAN 0 to HW filter on device team0 [ 974.950511][ T5958] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.957634][ T5958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 974.969031][T13666] team0: Port device team_slave_0 added [ 974.994917][T13666] team0: Port device team_slave_1 added [ 975.015570][ T5958] bridge0: port 2(bridge_slave_1) entered blocking state [ 975.022637][ T5958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 975.065130][T13666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 975.073525][T13666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 975.105281][ T51] Bluetooth: hci3: command tx timeout [ 975.116347][T13666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 975.166174][T13666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 975.177352][T13666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 975.213715][T13666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 975.225041][ T51] Bluetooth: hci2: command tx timeout [ 975.265200][T13637] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 975.309162][T13666] hsr_slave_0: entered promiscuous mode [ 975.332907][T13666] hsr_slave_1: entered promiscuous mode [ 975.485050][T13666] debugfs: 'hsr0' already exists in 'hsr' [ 975.491403][T13666] Cannot create hsr debugfs directory [ 976.085946][T13637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 976.131797][T13666] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 976.172927][T13666] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 976.184481][T13666] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 976.287620][T13666] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 976.718798][T13666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 976.744187][T13666] 8021q: adding VLAN 0 to HW filter on device team0 [ 976.766184][ T7333] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.773448][ T7333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 976.829688][T13666] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 976.846048][T13666] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 976.893017][ T7333] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.900182][ T7333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 977.332884][ T51] Bluetooth: hci3: command tx timeout [ 977.410360][ T51] Bluetooth: hci2: command tx timeout [ 977.700372][T13637] veth0_vlan: entered promiscuous mode [ 977.974629][T13637] veth1_vlan: entered promiscuous mode [ 978.100532][T13637] veth0_macvtap: entered promiscuous mode [ 978.117707][T13637] veth1_macvtap: entered promiscuous mode [ 978.181730][T13637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 978.218770][T13637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 979.135936][T13666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 979.180329][ T7342] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.207118][ T7342] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.230198][ T7342] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.372911][ T7342] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.382283][T13668] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 979.392723][T13668] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 979.401371][T13668] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 979.410682][T13668] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 979.418309][T13668] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 979.657168][ T51] Bluetooth: hci3: command tx timeout [ 979.662952][ T51] Bluetooth: hci2: command tx timeout [ 979.766828][ T7345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 979.789386][ T7345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 979.908930][ T7345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 979.937216][ T7345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 979.979400][ T29] audit: type=1400 audit(2000000497.059:423): avc: denied { mounton } for pid=13637 comm="syz-executor" path="/root/syzkaller.k74OuL/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 980.008767][ T29] audit: type=1400 audit(2000000497.087:424): avc: denied { mounton } for pid=13637 comm="syz-executor" path="/root/syzkaller.k74OuL/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 980.033929][T13666] veth0_vlan: entered promiscuous mode [ 980.036894][ T29] audit: type=1400 audit(2000000497.087:425): avc: denied { mounton } for pid=13637 comm="syz-executor" path="/root/syzkaller.k74OuL/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=46128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 980.071209][ T29] audit: type=1400 audit(2000000497.124:426): avc: denied { mounton } for pid=13637 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 980.111407][T13666] veth1_vlan: entered promiscuous mode [ 980.196415][T13666] veth0_macvtap: entered promiscuous mode [ 980.246241][T13666] veth1_macvtap: entered promiscuous mode [ 980.372978][T13740] chnl_net:caif_netlink_parms(): no params data found [ 980.491551][T13666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 980.973543][T13666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 981.166795][ T7337] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.196613][ T7337] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.218492][ T7337] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.229273][T13764] syzkaller0: entered promiscuous mode [ 981.235417][T13764] syzkaller0: entered allmulticast mode [ 981.345989][ T7337] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.403017][T13740] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.412287][T13740] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.440151][T13740] bridge_slave_0: entered allmulticast mode [ 981.450406][T13740] bridge_slave_0: entered promiscuous mode [ 981.459850][T13740] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.468469][T13740] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.498444][T13740] bridge_slave_1: entered allmulticast mode [ 981.516284][T13740] bridge_slave_1: entered promiscuous mode [ 981.602647][T13668] Bluetooth: hci5: command tx timeout [ 981.858310][T13668] Bluetooth: hci3: command tx timeout [ 981.923419][T13740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 981.966627][ T7333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 981.987602][ T7333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 982.002378][T13740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 982.127811][T13740] team0: Port device team_slave_0 added [ 982.148471][T13740] team0: Port device team_slave_1 added [ 982.162448][ T7337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 982.181500][ T7337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 982.249304][T13740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 982.270898][T13740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 982.311208][T13740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 982.329873][T13740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 982.348243][T13740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 982.397761][T13740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 982.719654][T13785] overlayfs: missing 'workdir' [ 983.498855][ T5848] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 983.554481][T13740] hsr_slave_0: entered promiscuous mode [ 983.580116][T13740] hsr_slave_1: entered promiscuous mode [ 983.586146][T13740] debugfs: 'hsr0' already exists in 'hsr' [ 983.589157][ T5930] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 983.619813][T13740] Cannot create hsr debugfs directory [ 983.695332][ T5848] usb 1-1: Using ep0 maxpacket: 16 [ 983.702139][ T5848] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 983.737403][ T5848] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 983.760409][ T5848] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 983.760469][ T5930] usb 6-1: Using ep0 maxpacket: 16 [ 983.790968][ T5848] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 983.793159][ T5930] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 983.800632][ T5848] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 983.802221][ T5848] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 983.834813][T13668] Bluetooth: hci5: command tx timeout [ 983.843222][ T5930] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 983.876973][ T5848] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 983.885081][ T5848] usb 1-1: Manufacturer: syz [ 983.900175][ T5930] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 983.912805][ T5848] usb 1-1: config 0 descriptor?? [ 983.952981][ T5930] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 983.998120][ T5930] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 984.054967][ T5930] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 984.081154][ T5930] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 984.089170][ T5930] usb 6-1: Manufacturer: syz [ 984.106059][ T5930] usb 6-1: config 0 descriptor?? [ 984.169991][T13740] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 984.199143][T13740] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 984.231453][ T5848] rc_core: IR keymap rc-hauppauge not found [ 984.246080][T13740] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 984.262598][ T5848] Registered IR keymap rc-empty [ 984.302898][ T5848] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 984.342232][T13740] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 984.388852][ T5848] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 984.551255][ T5848] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 984.632414][ T5848] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input89 [ 985.609818][ T5930] rc_core: IR keymap rc-hauppauge not found [ 985.624128][ T5930] Registered IR keymap rc-empty [ 985.624217][ T5848] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 985.664751][ T5930] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 985.750576][ T5930] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 985.789657][ T5930] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1 [ 985.800330][ T5848] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 985.805775][ T5930] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1/input90 [ 985.897804][ T5848] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 985.936470][ T5848] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 986.050235][T13668] Bluetooth: hci5: command tx timeout [ 986.137777][ T5930] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 986.175516][ T5848] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 986.176558][ T5930] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 986.265279][ T5848] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 986.297662][ T5930] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 986.324743][ T5848] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 986.338378][T13740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 986.348155][ T5930] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 986.368000][ T5848] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 986.383847][T13815] syzkaller0: entered promiscuous mode [ 986.388512][ T5930] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 986.409138][T13815] syzkaller0: entered allmulticast mode [ 986.432864][ T5848] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 986.443369][ T5930] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 986.485082][ T5848] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 986.519560][ T5930] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 986.777324][ T5848] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 986.818566][ T5848] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 986.882932][T13740] 8021q: adding VLAN 0 to HW filter on device team0 [ 986.889844][ T5848] usb 1-1: USB disconnect, device number 69 [ 986.914903][ T5930] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 986.915895][ T7339] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.929240][ T7339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 986.982969][ T5930] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 986.990026][ T7339] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.997215][ T7339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 987.063829][ T5930] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 987.106223][T13823] block nbd2: shutting down sockets [ 987.153010][ T5930] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 987.404993][T13827] overlayfs: missing 'workdir' [ 988.193659][ T5961] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 988.288036][T13668] Bluetooth: hci5: command tx timeout [ 988.303923][ T5930] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 988.322632][ T5961] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 988.323224][ T5930] usb 6-1: USB disconnect, device number 2 [ 988.839259][ T5961] usb 4-1: USB disconnect, device number 79 [ 989.142432][ T5930] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 989.218083][T13740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 989.714676][ T5930] usb 1-1: Using ep0 maxpacket: 16 [ 989.721218][ T5930] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 989.739974][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 989.759433][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 989.779380][ T5930] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 989.795896][ T5930] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 989.859750][ T5930] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 989.872735][ T5930] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 989.882467][ T5930] usb 1-1: Manufacturer: syz [ 989.889595][ T5930] usb 1-1: config 0 descriptor?? [ 990.356753][ T5930] rc_core: IR keymap rc-hauppauge not found [ 990.367563][ T5930] Registered IR keymap rc-empty [ 990.377486][ T5930] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 990.399297][ T5930] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 990.432306][ T5930] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 990.459047][ T5930] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input91 [ 990.788677][ T5961] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 990.812193][T13740] veth0_vlan: entered promiscuous mode [ 990.853497][ T5930] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 990.853808][T13740] veth1_vlan: entered promiscuous mode [ 990.880812][ T5930] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 990.913083][ T5930] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 990.934108][ T5930] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 990.945818][T13740] veth0_macvtap: entered promiscuous mode [ 990.960753][ T5930] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 990.972864][T13740] veth1_macvtap: entered promiscuous mode [ 990.979252][ T5961] usb 7-1: Using ep0 maxpacket: 16 [ 990.991869][ T5930] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 991.004753][ T5961] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 991.021429][ T5930] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 991.033904][T13740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 991.043750][ T5961] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 991.050857][ T5930] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 991.079344][ T5961] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 991.082863][ T5930] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 991.134943][ T5961] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 991.156020][T13740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 991.158323][ T5930] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 991.242239][ T5961] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 991.262381][ T7339] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.277541][ T5930] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 991.292444][ T5961] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 991.293265][ T7339] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.315404][ T5930] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 991.397558][ T5930] usb 1-1: USB disconnect, device number 70 [ 991.457527][ T5961] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 991.695315][ T7339] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.708735][ T5961] usb 7-1: Manufacturer: syz [ 991.718964][ T5961] usb 7-1: config 0 descriptor?? [ 991.738611][ T7339] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.945174][T13871] syzkaller0: entered promiscuous mode [ 991.972247][T13871] syzkaller0: entered allmulticast mode [ 992.151926][ T7345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 992.159773][ T7345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 992.410060][ T5961] rc_core: IR keymap rc-hauppauge not found [ 992.418083][ T5961] Registered IR keymap rc-empty [ 992.432155][ T5961] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 992.590066][ T5961] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 992.623148][ T5961] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 992.643095][ T5961] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input92 [ 992.661094][ T7339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 992.668314][ T5961] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 992.679119][ T7339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 992.696993][ T5961] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 992.719121][ T5930] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 992.741123][ T5961] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 992.782391][ T5961] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 992.814398][ T5961] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 992.838830][ T5961] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 992.937430][ T5930] usb 3-1: Using ep0 maxpacket: 8 [ 992.942533][ T5961] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 992.980723][ T5961] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 993.117070][ T5961] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 993.141638][ T5930] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 993.168599][ T5961] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 993.169069][ T5930] usb 3-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 993.588746][ T5961] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 993.620919][ T5961] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 993.656128][ T5961] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 993.693395][ T5961] usb 7-1: USB disconnect, device number 2 [ 993.772031][ T5930] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 993.824739][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.871579][ T5930] usb 3-1: Product: syz [ 993.962734][ T5930] usb 3-1: Manufacturer: syz [ 993.983897][ T5930] usb 3-1: SerialNumber: syz [ 994.084374][T13898] netlink: 212348 bytes leftover after parsing attributes in process `syz.7.2253'. [ 994.098898][T13898] netlink: Unknown conntrack attr (0) [ 994.156194][ T5961] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 994.531340][T13901] overlayfs: missing 'lowerdir' [ 994.640598][ T5961] usb 7-1: Using ep0 maxpacket: 32 [ 994.664959][ T5961] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 994.676399][ T5961] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 994.696329][ T5961] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 994.735978][ T5961] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.768312][ T5961] usb 7-1: config 0 descriptor?? [ 994.962456][T11732] block nbd1: Possible stuck request ffff888027640000: control (read@0,4096B). Runtime 30 seconds [ 996.064350][ T793] usb 3-1: USB disconnect, device number 75 [ 996.233305][ T5961] IPVS: starting estimator thread 0... [ 996.246171][T13918] IPVS: sh: FWM 3 0x00000003 - no destination available [ 996.255841][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 996.323753][T13918] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2259'. [ 996.374362][T13919] IPVS: using max 41 ests per chain, 98400 per kthread [ 996.575848][ T793] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 996.602004][T13921] syzkaller0: entered promiscuous mode [ 996.609689][T13921] syzkaller0: entered allmulticast mode [ 996.759224][ T793] usb 3-1: Using ep0 maxpacket: 16 [ 996.811471][ T793] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 996.844896][ T793] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 997.134760][ T793] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 997.148456][ T5930] usb 7-1: USB disconnect, device number 3 [ 997.171261][ T793] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 997.203433][ T793] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 997.338152][ T793] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 997.509806][ T793] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 997.518596][ T793] usb 3-1: Manufacturer: syz [ 997.705402][T13936] overlayfs: missing 'lowerdir' [ 997.923543][ T793] usb 3-1: config 0 descriptor?? [ 998.355427][ T793] rc_core: IR keymap rc-hauppauge not found [ 998.391781][ T793] Registered IR keymap rc-empty [ 998.535392][ T793] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 998.651336][ T793] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 998.673740][ T793] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 998.958884][ T793] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input93 [ 999.004997][ T793] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 999.036419][ T793] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 999.059000][ T793] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 999.088892][ T793] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 999.134800][ T793] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 999.175612][ T793] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 999.207426][ T793] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 999.271520][ T793] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 999.304752][ T793] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 999.624413][ T793] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 999.671694][ T793] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 999.702658][ T793] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 999.729607][ T793] usb 3-1: USB disconnect, device number 76 [ 999.851160][ T5931] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 999.983833][T13967] syzkaller0: entered promiscuous mode [ 1000.055546][T13967] syzkaller0: entered allmulticast mode [ 1000.067860][ T5931] usb 7-1: Using ep0 maxpacket: 8 [ 1000.271944][ T5931] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.299563][ T5931] usb 7-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 1000.563071][T13975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2274'. [ 1000.812053][ T5931] usb 7-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1000.844154][ T5931] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.904308][ T5931] usb 7-1: Product: syz [ 1000.927441][ T5931] usb 7-1: Manufacturer: syz [ 1001.170717][ T5931] usb 7-1: SerialNumber: syz [ 1001.763191][ T5897] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1001.967264][ T5897] usb 6-1: Using ep0 maxpacket: 8 [ 1001.993826][ T5897] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1002.006457][ T5897] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1002.094931][ T5897] usb 6-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1002.177206][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.258597][ T5897] usb 6-1: config 0 descriptor?? [ 1003.704661][ T793] usb 7-1: USB disconnect, device number 4 [ 1004.235375][ T793] usb 6-1: USB disconnect, device number 3 [ 1004.528715][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1004.538977][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1008.441637][T14038] netlink: 'syz.2.2288': attribute type 4 has an invalid length. [ 1008.967851][ T5848] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1009.185758][ T5848] usb 7-1: Using ep0 maxpacket: 8 [ 1009.203384][ T5848] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.214400][ T5848] usb 7-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 1009.229691][ T5848] usb 7-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1009.245824][ T5848] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.254756][ T5848] usb 7-1: Product: syz [ 1009.263826][ T5848] usb 7-1: Manufacturer: syz [ 1009.298170][ T5848] usb 7-1: SerialNumber: syz [ 1011.784700][ T6429] usb 7-1: USB disconnect, device number 5 [ 1012.959930][T14069] syzkaller0: entered promiscuous mode [ 1012.965409][T14069] syzkaller0: entered allmulticast mode [ 1015.896482][ T6429] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1016.163751][ T6429] usb 3-1: Using ep0 maxpacket: 16 [ 1016.175529][ T6429] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1016.218230][ T6429] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1016.262574][ T6429] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1016.305400][ T6429] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1016.352369][ T6429] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1016.509836][ T6429] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1016.538586][ T6429] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1016.546753][ T6429] usb 3-1: Manufacturer: syz [ 1016.564638][ T6429] usb 3-1: config 0 descriptor?? [ 1016.906216][ T6429] rc_core: IR keymap rc-hauppauge not found [ 1016.961571][ T6429] Registered IR keymap rc-empty [ 1016.968492][ T6429] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1016.997604][ T6429] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1017.030363][ T6429] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1017.072603][ T6429] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input94 [ 1017.149699][ T6429] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1017.234253][ T6429] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1017.307681][ T6429] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1017.361313][ T6429] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1017.382454][ T6429] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1017.403081][T13213] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1017.404950][ T6429] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1017.457084][T14123] block nbd6: shutting down sockets [ 1017.500177][ T6429] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1017.559172][ T6429] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1017.595616][T13213] usb 1-1: Using ep0 maxpacket: 8 [ 1017.595643][ T6429] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1017.640652][ T6429] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1017.679354][T13213] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1017.725471][ T6429] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1017.777796][T13213] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1017.798684][T13213] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1017.829267][T13213] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.869479][T13213] usb 1-1: config 0 descriptor?? [ 1017.873912][ T5930] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1017.913661][ T6429] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1018.004756][ T6429] usb 3-1: USB disconnect, device number 77 [ 1018.044999][ T5930] usb 6-1: Using ep0 maxpacket: 8 [ 1018.093377][ T5930] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1018.177767][ T5930] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1018.208463][ T5930] usb 6-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1018.219763][ T5930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.359473][ T5930] usb 6-1: config 0 descriptor?? [ 1019.564380][T13213] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1019.618901][ T5848] IPVS: starting estimator thread 0... [ 1019.634455][T14145] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1019.643313][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1019.656050][T14145] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2317'. [ 1019.747374][T13213] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1019.757686][T14146] IPVS: using max 80 ests per chain, 192000 per kthread [ 1019.766037][T13213] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1019.777000][T13213] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1019.787516][T13213] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1019.809878][T13213] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1019.819755][T13213] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.834160][T13213] usb 3-1: config 0 descriptor?? [ 1019.988552][ T793] usb 1-1: USB disconnect, device number 71 [ 1020.067749][T13213] hdpvr 3-1:0.0: unexpected answer of status request, len 2 [ 1020.079825][T13213] hdpvr 3-1:0.0: device init failed [ 1020.087412][T13213] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 1021.269603][T13213] usb 6-1: USB disconnect, device number 4 [ 1021.447002][ T793] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1021.662311][T14165] netlink: 'syz.7.2321': attribute type 4 has an invalid length. [ 1021.708277][ T793] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1021.729244][ T793] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1021.750589][ T793] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1021.755558][T14167] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2323'. [ 1021.764633][ T793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.790332][T14148] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1021.817226][ T793] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1022.431119][T14148] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2318'. [ 1022.482590][ T5848] usb 1-1: USB disconnect, device number 72 [ 1022.981646][T14176] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1022.991608][T14176] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 1023.002657][T14176] overlayfs: missing 'lowerdir' [ 1024.852778][ T793] usb 3-1: USB disconnect, device number 78 [ 1025.410912][ T6429] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1025.715006][ T6429] usb 1-1: Using ep0 maxpacket: 8 [ 1025.731392][ T793] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 1025.799950][T14204] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1025.814981][ T6429] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.868618][ T6429] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1025.883174][ T6429] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1025.896109][ T6429] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.038079][ T793] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.064706][ T793] usb 7-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 1026.112454][ T793] usb 7-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 1026.138896][ T793] usb 7-1: Product: syz [ 1026.148755][ T793] usb 7-1: Manufacturer: syz [ 1026.159424][ T793] usb 7-1: SerialNumber: syz [ 1026.170628][ T6429] usb 1-1: config 0 descriptor?? [ 1026.212995][ T5931] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1026.325896][ T793] usb 7-1: config 0 descriptor?? [ 1026.756990][ T793] gspca_main: conex-2.14.0 probing 0572:0041 [ 1026.949921][ T5931] usb 3-1: Using ep0 maxpacket: 8 [ 1027.175904][T11732] block nbd1: Possible stuck request ffff888027640000: control (read@0,4096B). Runtime 60 seconds [ 1027.261187][ T5931] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.282226][ T5931] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1027.335171][ T5931] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1027.350320][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.412554][ T5931] usb 3-1: config 0 descriptor?? [ 1027.565064][ T793] usb 7-1: USB disconnect, device number 6 [ 1028.391461][T14221] overlayfs: missing 'lowerdir' [ 1028.757396][ T5848] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1028.815454][ T793] usb 1-1: USB disconnect, device number 73 [ 1028.968641][ T5848] usb 6-1: Using ep0 maxpacket: 8 [ 1029.229577][ T5961] usb 3-1: USB disconnect, device number 79 [ 1029.259421][ T5848] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1029.294643][ T5848] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1029.318980][ T5848] usb 6-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1029.337675][ T5848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.358650][ T29] audit: type=1400 audit(2000000543.239:427): avc: denied { read } for pid=14228 comm="syz.7.2336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1029.385191][ T5848] usb 6-1: config 0 descriptor?? [ 1029.430595][ T5897] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1029.719311][ T5897] usb 1-1: Using ep0 maxpacket: 8 [ 1029.727447][ T5897] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1029.742058][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.754183][ T5897] usb 1-1: Product: syz [ 1029.762328][ T5897] usb 1-1: Manufacturer: syz [ 1029.770004][ T5897] usb 1-1: SerialNumber: syz [ 1029.785523][ T5897] usb 1-1: config 0 descriptor?? [ 1029.911810][ T5961] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1030.276791][ T5897] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1030.445524][ T5961] usb 3-1: Using ep0 maxpacket: 8 [ 1031.692031][ T5961] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1031.702755][ T5961] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1031.712731][ T5961] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1031.752481][ T5931] usb 6-1: USB disconnect, device number 5 [ 1031.761128][ T5961] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.785638][ T5961] usb 3-1: config 0 descriptor?? [ 1032.252426][ T5931] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1032.425734][ T5931] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1032.443530][ T5931] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1032.455911][ T5931] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1032.472132][ T5931] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1032.482580][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1032.492515][ T5931] usb 6-1: Product: syz [ 1033.499097][ T5931] usb 6-1: Manufacturer: syz [ 1033.506372][ T5931] usb 6-1: SerialNumber: syz [ 1033.551048][ T5897] usb write operation failed. (-71) [ 1034.699154][T13213] usb 3-1: USB disconnect, device number 80 [ 1034.703021][ T5897] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1034.717617][ T5897] dvbdev: DVB: registering new adapter (Terratec H7) [ 1034.726258][ T5897] usb 1-1: media controller created [ 1034.982054][ T5897] usb read operation failed. (-71) [ 1034.990756][ T5931] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1035.003950][ T5897] usb write operation failed. (-71) [ 1035.037275][ T5897] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1035.056445][ T5897] usb 1-1: USB disconnect, device number 74 [ 1035.210579][ T5848] usb 6-1: USB disconnect, device number 6 [ 1035.280593][ T5848] usblp0: removed [ 1037.545836][ T5848] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1037.736304][ T5848] usb 6-1: Using ep0 maxpacket: 8 [ 1037.756684][ T5848] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1037.829703][ T5848] usb 6-1: config 4 has too many interfaces: 231, using maximum allowed: 32 [ 1037.843811][ T5848] usb 6-1: config 4 has 1 interface, different from the descriptor's value: 231 [ 1037.853086][ T5848] usb 6-1: config 4 interface 0 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1037.929630][ T5848] usb 6-1: config 4 interface 0 has no altsetting 0 [ 1037.951140][ T5848] usb 6-1: string descriptor 0 read error: -22 [ 1037.965913][ T5848] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1037.985265][ T5848] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.028766][ T5848] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1038.108515][ T5848] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1038.128518][ T5848] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1038.138948][ T5848] usb 6-1: media controller created [ 1038.155576][ T5848] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1038.288704][T14289] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2352'. [ 1038.549598][ T5897] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1038.811260][ T5897] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1038.829960][ T5897] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1038.846038][ T5897] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1038.873569][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.938626][T14288] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1039.106222][ T5897] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1039.417698][T14297] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2351'. [ 1039.427081][ T5848] zl10353_read_register: readreg error (reg=127, ret==0) [ 1039.440960][T14273] usb 6-1: dvb_usb_au6610: wlen=0, aborting [ 1039.864445][ T5848] usb 6-1: USB disconnect, device number 7 [ 1040.275285][ T5897] usb 7-1: USB disconnect, device number 7 [ 1041.190024][ T5930] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 1041.197824][ T5897] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 1041.488687][ T5848] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1041.489654][ T5930] usb 6-1: config 0 has no interfaces? [ 1041.504173][ T5897] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1041.536866][ T5897] usb 3-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 1041.547642][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 1041.556767][ T5897] usb 3-1: Product: syz [ 1041.567559][ T5930] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1041.580643][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1041.591659][ T5930] usb 6-1: Product: syz [ 1041.613217][ T5897] usb 3-1: Manufacturer: syz [ 1041.623302][ T5930] usb 6-1: Manufacturer: syz [ 1041.633110][ T5897] usb 3-1: SerialNumber: syz [ 1041.643021][ T5930] usb 6-1: SerialNumber: syz [ 1041.653248][ T5897] usb 3-1: config 0 descriptor?? [ 1041.663052][ T5848] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1041.684038][ T5848] usb 7-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 1041.694846][ T5848] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.708124][ T5930] usb 6-1: config 0 descriptor?? [ 1041.822343][ T5848] usb 7-1: config 0 descriptor?? [ 1041.822694][ T5897] gspca_main: conex-2.14.0 probing 0572:0041 [ 1041.881879][ T5848] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1042.323809][ T5848] usb 6-1: USB disconnect, device number 8 [ 1042.366210][T14332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1042.432068][T14332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1042.456039][ T5930] usb 7-1: USB disconnect, device number 8 [ 1042.507178][ T5897] usb 3-1: USB disconnect, device number 81 [ 1042.974107][ T5848] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1043.182817][ T5848] usb 7-1: Using ep0 maxpacket: 8 [ 1043.204982][ T5848] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1043.213676][ T5848] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1043.225974][ T5848] usb 7-1: config 0 has no interface number 0 [ 1043.778991][ T5848] usb 7-1: config 0 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1043.809156][ T5848] usb 7-1: config 0 interface 1 has no altsetting 0 [ 1043.823987][ T5848] usb 7-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1043.885902][T13213] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1043.937520][T14358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2371'. [ 1044.102416][ T5848] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.115355][ T5848] usb 7-1: config 0 descriptor?? [ 1044.145814][ T5848] hso 7-1:0.1: Failed to find BULK IN ep [ 1044.186581][ T6429] usb 7-1: USB disconnect, device number 9 [ 1044.267878][T13213] usb 3-1: Using ep0 maxpacket: 16 [ 1044.284826][T13213] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1044.297413][T13213] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1044.340992][T13213] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1044.359244][T13213] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1044.369605][T13213] usb 3-1: Manufacturer: syz [ 1044.381375][T13213] usb 3-1: config 0 descriptor?? [ 1044.862742][T13213] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1045.114281][T14376] netlink: 'syz.7.2375': attribute type 4 has an invalid length. [ 1045.198254][ T5848] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1045.209639][T13213] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1045.242203][T13213] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1045.259517][T13213] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1045.287324][T13213] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.361583][T14362] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1045.375803][T13213] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1045.391073][ T5848] usb 7-1: Using ep0 maxpacket: 8 [ 1045.398442][ T5848] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1045.415598][ T5848] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1045.439638][ T5848] usb 7-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1045.499108][ T5848] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.555684][ T5848] usb 7-1: config 0 descriptor?? [ 1045.609661][T14362] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2373'. [ 1045.661388][ T5897] usb 1-1: USB disconnect, device number 75 [ 1046.601612][T13213] usb 3-1: USB disconnect, device number 82 [ 1046.834029][T14400] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1046.841490][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1046.875144][T14400] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2383'. [ 1047.792606][T13213] usb 7-1: USB disconnect, device number 10 [ 1047.938684][T14414] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2388'. [ 1047.950686][T14414] netlink: Unknown conntrack attr (0) [ 1048.042719][ T5897] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1048.267502][ T5897] usb 6-1: Using ep0 maxpacket: 16 [ 1048.290137][ T5897] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1048.321356][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1048.370562][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1048.409900][ T5897] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1048.628104][ T5897] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1048.652208][T13213] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1048.653978][ T5897] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1048.687203][ T5897] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1048.701622][ T5897] usb 6-1: Manufacturer: syz [ 1048.712610][ T5897] usb 6-1: config 0 descriptor?? [ 1048.829167][T13213] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1048.848179][T13213] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1048.865355][ T5848] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1048.874107][T13213] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1048.890625][T13213] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.914964][T14421] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1048.967333][T13213] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1049.036718][ T5848] usb 7-1: Using ep0 maxpacket: 16 [ 1049.049438][ T5848] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1049.080103][ T5848] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1049.117956][ T5848] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1049.127652][ T5848] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1049.138075][ T5848] usb 7-1: Manufacturer: syz [ 1049.159156][ T5848] usb 7-1: config 0 descriptor?? [ 1049.174693][T14421] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2390'. [ 1049.202054][ T5848] usb 3-1: USB disconnect, device number 83 [ 1049.785565][ T5931] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1049.956501][ T5931] usb 1-1: Using ep0 maxpacket: 16 [ 1049.964758][ T5931] usb 1-1: New USB device found, idVendor=0471, idProduct=030c, bcdDevice=ba.e9 [ 1049.975325][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.986303][ T5931] usb 1-1: Product: syz [ 1049.997088][ T5931] usb 1-1: Manufacturer: syz [ 1050.007843][ T5931] usb 1-1: SerialNumber: syz [ 1050.017670][ T5931] usb 1-1: config 0 descriptor?? [ 1050.029616][ T5931] pwc: Philips PCVC690K (Vesta Pro Scan) USB webcam detected. [ 1050.654732][T14434] syz_tun (unregistering): left allmulticast mode [ 1052.000195][ T5961] usb 7-1: USB disconnect, device number 11 [ 1052.212651][ T5897] rc_core: IR keymap rc-hauppauge not found [ 1052.308941][ T5897] Registered IR keymap rc-empty [ 1052.533688][ T5897] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1052.580268][ T5897] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1052.619637][ T5897] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1052.676395][ T5897] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input95 [ 1052.733937][ T5897] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1052.779236][ T5897] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1052.810970][ T5897] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1052.843461][ T5897] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1052.876065][ T5897] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1052.924876][T14460] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1052.951538][ T5897] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1053.311712][ T5931] pwc: send_video_command error -71 [ 1053.334984][ T5897] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1053.349134][ T5931] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1053.448032][ T5897] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1053.456093][ T5931] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 1053.514822][ T5897] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1053.532387][ T5931] usb 1-1: USB disconnect, device number 76 [ 1053.562384][ T5897] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1053.625717][ T5897] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 1053.668868][ T5897] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1053.776804][ T5897] usb 6-1: USB disconnect, device number 9 [ 1053.811381][T14474] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2404'. [ 1053.821988][T14474] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2404'. [ 1053.891003][T14474] netlink: 'syz.0.2404': attribute type 4 has an invalid length. [ 1055.333238][T14491] netlink: 212348 bytes leftover after parsing attributes in process `syz.7.2397'. [ 1055.343173][T14491] netlink: Unknown conntrack attr (0) [ 1055.890356][ T5855] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1056.199805][ T5855] usb 3-1: Using ep0 maxpacket: 16 [ 1056.211632][ T5855] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1056.334442][ T5855] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1056.347299][ T5855] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1058.096850][ T5855] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1058.166006][T14505] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14505 comm=syz.7.2413 [ 1058.245337][T14509] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1058.273832][ T5855] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1058.429227][ T5855] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1058.441114][ T5855] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1058.451652][ T5855] usb 3-1: Manufacturer: syz [ 1058.899311][ T5855] usb 3-1: config 0 descriptor?? [ 1058.918431][ T5855] usb 3-1: can't set config #0, error -71 [ 1059.079486][T14516] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2417'. [ 1059.912249][ T5855] usb 3-1: USB disconnect, device number 84 [ 1059.987640][T11732] block nbd1: Possible stuck request ffff888027640000: control (read@0,4096B). Runtime 90 seconds [ 1064.433882][ T5848] IPVS: starting estimator thread 0... [ 1064.464148][T14549] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2425'. [ 1064.902239][T14550] IPVS: using max 49 ests per chain, 117600 per kthread [ 1065.254116][ T5848] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 1065.275378][ T5961] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1065.333703][T14555] random: crng reseeded on system resumption [ 1065.436915][T14565] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2429'. [ 1065.448143][T14565] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2429'. [ 1065.573045][ T5961] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1065.584962][ T5961] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1065.594894][ T5961] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1065.611894][ T5961] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.634849][T14556] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1065.642679][T13213] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1065.680202][ T5961] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1066.195244][T14565] netlink: 'syz.7.2429': attribute type 4 has an invalid length. [ 1066.298478][T13213] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1066.311983][T14572] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2427'. [ 1066.356564][T13213] usb 1-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 1066.396513][T13213] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.559821][T13213] usb 1-1: config 0 descriptor?? [ 1066.591480][T13213] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1066.659733][ T5961] usb 7-1: USB disconnect, device number 12 [ 1066.824132][T14562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1066.839884][T14562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1066.855334][T13213] usb 1-1: USB disconnect, device number 77 [ 1067.169512][T14579] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1027 sclass=netlink_route_socket pid=14579 comm=syz.7.2432 [ 1067.613285][T13213] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1069.203876][T13213] usb 1-1: Using ep0 maxpacket: 8 [ 1069.210384][ T5848] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1069.231840][ T5848] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1069.239503][ T5848] usb 3-1: can't read configurations, error -71 [ 1069.270827][T13213] usb 1-1: device descriptor read/all, error -71 [ 1069.394442][T14588] syzkaller0: entered promiscuous mode [ 1069.399960][T14588] syzkaller0: entered allmulticast mode [ 1069.818269][T13213] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1070.089109][T13213] usb 1-1: Using ep0 maxpacket: 32 [ 1070.101436][T13213] usb 1-1: config 0 has an invalid interface number: 74 but max is 1 [ 1070.120773][T13213] usb 1-1: config 0 has no interface number 1 [ 1070.140884][T13213] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 1070.155916][T13213] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.176780][T13213] usb 1-1: Product: syz [ 1070.186022][T13213] usb 1-1: Manufacturer: syz [ 1070.210983][T13213] usb 1-1: SerialNumber: syz [ 1070.213515][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1070.223722][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1070.245185][T13213] usb 1-1: config 0 descriptor?? [ 1070.261477][T13213] snd-usb-audio 1-1:0.74: probe with driver snd-usb-audio failed with error -22 [ 1070.305852][T13213] usb 1-1: Waiting for MOTU Microbook II to boot up... [ 1070.335625][T13213] usb 1-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1070.381667][T13213] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1070.477360][T13213] usb 1-1: USB disconnect, device number 79 [ 1070.656092][T14604] random: crng reseeded on system resumption [ 1072.248462][T14622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2444'. [ 1072.258408][T14622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2444'. [ 1072.277085][T14622] netlink: 'syz.0.2444': attribute type 4 has an invalid length. [ 1073.305092][ T5897] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1073.660329][ T5897] usb 7-1: Using ep0 maxpacket: 16 [ 1073.818910][ T5897] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1073.866836][ T5897] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1073.973994][T14643] random: crng reseeded on system resumption [ 1073.989430][ T5897] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1074.026246][ T5897] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1074.091945][ T5897] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1074.776292][ T5897] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1075.464727][ T5897] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1075.476795][ T5897] usb 7-1: Manufacturer: syz [ 1075.625887][ T5897] usb 7-1: config 0 descriptor?? [ 1076.095460][ T5897] rc_core: IR keymap rc-hauppauge not found [ 1076.141494][ T5897] Registered IR keymap rc-empty [ 1076.202231][ T5897] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1076.298524][ T5897] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1076.392516][ T5897] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1076.551304][ T5897] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input96 [ 1076.672848][ T5897] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1076.807172][ T5897] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1076.865213][ T5897] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1076.969333][ T5897] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1077.038768][ T5897] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1077.154713][ T5897] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1077.216799][ T5897] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1077.348773][ T5897] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1077.431760][ T5897] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1077.592158][ T5897] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1077.675296][ T5897] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1077.775054][ T5897] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1077.863835][ T5897] usb 7-1: USB disconnect, device number 13 [ 1079.610225][T14695] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2466'. [ 1081.404894][ T5982] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.687498][ T5982] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.596195][ T5982] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.716905][ T5961] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1082.830740][ T5982] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.995572][ T5961] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1083.012231][ T5961] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1083.088206][ T5961] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1083.108399][ T5961] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1083.194033][ T5961] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1083.218159][ T5961] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1083.244149][ T5961] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1083.275215][ T5961] usb 7-1: Product: syz [ 1083.476789][ T5982] bridge_slave_1: left allmulticast mode [ 1084.525800][ T5961] usb 7-1: Manufacturer: syz [ 1084.567128][ T5961] cdc_wdm 7-1:1.0: skipping garbage [ 1084.574355][ T5961] cdc_wdm 7-1:1.0: skipping garbage [ 1084.637587][ T5982] bridge_slave_1: left promiscuous mode [ 1084.644504][ T5982] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.754517][ T5961] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1084.874722][ T5961] cdc_wdm 7-1:1.0: Unknown control protocol [ 1084.902525][ T5961] usb 7-1: USB disconnect, device number 14 [ 1084.940894][ T5982] bridge_slave_0: left allmulticast mode [ 1084.978345][ T5982] bridge_slave_0: left promiscuous mode [ 1084.984092][ T5982] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.171708][T13213] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1085.354794][T13213] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.376652][T13213] usb 3-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 1085.396426][T13213] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.456869][T13213] usb 3-1: config 0 descriptor?? [ 1085.537432][T13213] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1085.575227][T14751] netlink: 212348 bytes leftover after parsing attributes in process `syz.7.2477'. [ 1085.590696][T14751] netlink: Unknown conntrack attr (0) [ 1085.739410][T14741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1085.932071][T14755] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2478'. [ 1085.949274][T14755] Cannot find add_set index 0 as target [ 1086.306918][T14741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1086.509528][ T5961] usb 3-1: USB disconnect, device number 87 [ 1086.991778][ T5982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1087.063881][ T5961] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1087.085931][ T5982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1087.110709][ T5982] bond0 (unregistering): Released all slaves [ 1087.234844][ T5961] usb 3-1: Using ep0 maxpacket: 8 [ 1087.250649][ T5961] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1087.269594][ T5961] usb 3-1: config 0 has no interface number 0 [ 1087.867001][ T5961] usb 3-1: config 0 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1087.956295][ T5961] usb 3-1: config 0 interface 1 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1088.985324][ T5961] usb 3-1: config 0 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1089.000376][ T5961] usb 3-1: config 0 interface 1 has no altsetting 0 [ 1089.007036][ T5961] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1089.017754][ T5961] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.038948][ T5961] usb 3-1: config 0 descriptor?? [ 1089.161974][ T5961] usb 3-1: can't set config #0, error -71 [ 1089.197514][ T5961] usb 3-1: USB disconnect, device number 88 [ 1089.864363][ T6429] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1090.051214][ T6429] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1090.073122][ T6429] usb 1-1: config 1 has an invalid descriptor of length 252, skipping remainder of the config [ 1090.084771][ T6429] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1090.105584][ T6429] usb 1-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 1090.127440][ T6429] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.175963][ T5982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1090.192774][ T6429] usb 1-1: Product: syz [ 1090.219530][ T6429] usb 1-1: Manufacturer: syz [ 1090.227996][ T5982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1090.237465][ T6429] usb 1-1: SerialNumber: syz [ 1090.267641][T14810] overlayfs: missing 'lowerdir' [ 1090.276760][ T5982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1090.563369][ T5982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1090.715320][ T5982] veth1_macvtap: left promiscuous mode [ 1090.736511][ T5982] veth0_macvtap: left promiscuous mode [ 1090.752910][ T6429] usb 1-1: USB disconnect, device number 80 [ 1090.762606][ T5982] veth1_vlan: left promiscuous mode [ 1090.767996][ T5982] veth0_vlan: left promiscuous mode [ 1090.801741][ T6159] udevd[6159]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1091.310621][ T5982] team0 (unregistering): Port device team_slave_1 removed [ 1091.612643][ T5982] team0 (unregistering): Port device team_slave_0 removed [ 1091.657778][T14826] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1027 sclass=netlink_route_socket pid=14826 comm=syz.0.2492 [ 1091.758457][ T6429] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 1092.159310][T11732] block nbd1: Possible stuck request ffff888027640000: control (read@0,4096B). Runtime 120 seconds [ 1092.899040][T14845] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2494'. [ 1092.909085][T14845] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2494'. [ 1092.950529][T14845] netlink: 'syz.6.2494': attribute type 4 has an invalid length. [ 1094.281239][ T5982] IPVS: stop unused estimator thread 0... [ 1094.561861][ T6429] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1094.564341][T14867] netlink: 212348 bytes leftover after parsing attributes in process `syz.7.2499'. [ 1094.579842][ T6429] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1094.585652][T14867] netlink: Unknown conntrack attr (0) [ 1094.824891][ T6429] usb 6-1: can't read configurations, error -71 [ 1094.916070][T14869] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2498'. [ 1095.883138][ T5855] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1096.194479][ T5855] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1096.211925][ T5855] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1096.250783][ T5855] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1096.268609][ T5855] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1096.300319][ T5855] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1096.323096][ T5855] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1096.337071][ T5855] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1096.357305][ T5855] usb 7-1: Product: syz [ 1096.422868][ T5855] usb 7-1: Manufacturer: syz [ 1096.434353][ T5855] cdc_wdm 7-1:1.0: skipping garbage [ 1096.444554][ T5855] cdc_wdm 7-1:1.0: skipping garbage [ 1096.462758][ T5855] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1096.471582][ T5855] cdc_wdm 7-1:1.0: Unknown control protocol [ 1096.960409][T13213] usb 7-1: USB disconnect, device number 15 [ 1098.109431][ T7339] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.249129][ T7339] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.484119][T14934] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14934 comm=syz.5.2510 [ 1098.574139][ T7339] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.050539][ T7339] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.406097][T14953] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14953 comm=syz.6.2513 [ 1100.499980][T14955] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2516'. [ 1100.513173][T14955] netlink: Unknown conntrack attr (0) [ 1101.696530][ T7339] bridge_slave_1: left allmulticast mode [ 1101.709503][ T7339] bridge_slave_1: left promiscuous mode [ 1101.716007][ T7339] bridge0: port 2(bridge_slave_1) entered disabled state [ 1103.989304][ T7339] bridge_slave_0: left allmulticast mode [ 1104.050824][ T7339] bridge_slave_0: left promiscuous mode [ 1104.066389][ T7339] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.137160][T10794] Bluetooth: hci2: command 0x0406 tx timeout [ 1106.143413][T10794] Bluetooth: hci3: command 0x0406 tx timeout [ 1106.285971][T13213] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1106.399715][ T7339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1106.438644][ T7339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1106.496296][T13213] usb 7-1: device descriptor read/64, error -71 [ 1106.842817][T13213] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1107.155177][ T7339] bond0 (unregistering): Released all slaves [ 1107.306893][T13213] usb 7-1: device descriptor read/64, error -71 [ 1107.431774][T13213] usb usb7-port1: attempt power cycle [ 1108.567286][T13213] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1109.023118][T13213] usb 7-1: device descriptor read/8, error -71 [ 1109.322002][T13213] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1109.421774][ T5848] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1109.525934][T13213] usb 7-1: device descriptor read/8, error -71 [ 1109.653663][T13213] usb usb7-port1: unable to enumerate USB device [ 1109.666738][ T5848] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1109.679700][ T7339] hsr_slave_0: left promiscuous mode [ 1109.699735][ T5848] usb 1-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 1109.714552][ T7339] hsr_slave_1: left promiscuous mode [ 1109.737702][ T7339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1109.745363][ T7339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1109.859177][ T5848] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.880900][ T7339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1109.913433][ T7339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1109.925818][ T5848] usb 1-1: config 0 descriptor?? [ 1109.966778][ T7339] veth1_macvtap: left promiscuous mode [ 1109.976956][ T7339] veth0_macvtap: left promiscuous mode [ 1109.989027][ T5848] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1109.997818][ T793] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1110.019609][ T7339] veth1_vlan: left promiscuous mode [ 1110.035774][ T7339] veth0_vlan: left promiscuous mode [ 1110.191210][ T793] usb 3-1: Using ep0 maxpacket: 16 [ 1110.209024][T13213] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1110.254383][ T793] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1110.283918][ T793] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1110.406245][T15028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1110.484357][T15055] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2533'. [ 1110.503253][T15055] Cannot find add_set index 0 as target [ 1110.829988][ T793] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1110.841538][T13213] usb 7-1: Using ep0 maxpacket: 8 [ 1110.851338][ T793] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1110.860833][T15028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1110.862525][ T793] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1110.886646][T13213] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1110.897556][ T5897] usb 1-1: USB disconnect, device number 81 [ 1110.915053][T13213] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1110.925897][T13213] usb 7-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1110.937593][T13213] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.948265][ T793] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1110.959638][ T793] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1110.969786][ T793] usb 3-1: Manufacturer: syz [ 1110.987163][ T793] usb 3-1: config 0 descriptor?? [ 1111.012268][T13213] usb 7-1: config 0 descriptor?? [ 1111.280632][ T7339] team0 (unregistering): Port device team_slave_1 removed [ 1111.321630][ T793] rc_core: IR keymap rc-hauppauge not found [ 1111.327870][ T793] Registered IR keymap rc-empty [ 1111.328365][ T7339] team0 (unregistering): Port device team_slave_0 removed [ 1111.334664][ T793] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1111.373837][T13213] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1111.382299][ T793] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1111.414094][ T793] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1111.434723][ T793] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input97 [ 1111.526461][ T793] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1111.536174][T13213] usb 1-1: Using ep0 maxpacket: 8 [ 1111.547974][ T5897] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1111.569404][T13213] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1111.579004][T13213] usb 1-1: config 0 has no interface number 0 [ 1111.588597][T13213] usb 1-1: config 0 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1111.621997][T13213] usb 1-1: config 0 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 1111.652371][ T793] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1111.674113][T13213] usb 1-1: config 0 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1111.686898][ T793] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1111.713740][T13213] usb 1-1: config 0 interface 1 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1111.724959][ T793] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1111.737782][ T5897] usb 6-1: Using ep0 maxpacket: 32 [ 1111.744462][ T5897] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1111.750526][T13213] usb 1-1: config 0 interface 1 has no altsetting 0 [ 1111.761455][ T793] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1111.772097][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.781503][T13213] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1111.799454][ T793] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1111.827996][T13213] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.837819][ T793] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1111.866406][ T5897] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1111.867893][T13213] usb 1-1: config 0 descriptor?? [ 1111.881330][ T793] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1111.921013][ T793] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1111.942641][T13213] hso 1-1:0.1: Failed to find BULK IN ep [ 1111.965607][ T793] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1111.999568][ T7339] IPVS: stop unused estimator thread 0... [ 1112.020788][ T793] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1112.048496][ T793] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1112.103207][ T793] usb 3-1: USB disconnect, device number 89 [ 1112.242098][T13213] usb 1-1: USB disconnect, device number 82 [ 1114.169683][ T5897] gspca_nw80x: reg_w err -71 [ 1114.197934][ T5897] nw80x 6-1:3.0: probe with driver nw80x failed with error -71 [ 1114.332540][ T5897] usb 6-1: USB disconnect, device number 12 [ 1114.882049][ T5855] usb 7-1: USB disconnect, device number 20 [ 1116.836673][ T5897] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1117.146735][ T5897] usb 7-1: device descriptor read/64, error -71 [ 1117.500343][ T5897] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1118.098332][ T5897] usb 7-1: device descriptor read/64, error -71 [ 1118.347972][T15134] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2544'. [ 1118.657074][ T5897] usb usb7-port1: attempt power cycle [ 1119.103353][ T5897] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1119.130243][T15143] overlayfs: missing 'lowerdir' [ 1119.210134][ T5855] usb 1-1: new full-speed USB device number 83 using dummy_hcd [ 1119.291283][ T5897] usb 7-1: device descriptor read/8, error -71 [ 1119.510165][ T5855] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1119.546124][ T5855] usb 1-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 1119.566267][ T5855] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 1119.594957][T13213] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1119.598376][ T5855] usb 1-1: Product: syz [ 1119.608208][ T5897] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1119.661282][ T5855] usb 1-1: Manufacturer: syz [ 1119.665905][ T5855] usb 1-1: SerialNumber: syz [ 1119.768926][T13213] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1119.812690][T13213] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1119.838729][T15156] random: crng reseeded on system resumption [ 1119.852901][ T5897] usb 7-1: device descriptor read/8, error -71 [ 1119.865165][T13213] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1119.895162][T13213] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1119.950538][T13213] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1120.433117][T13213] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1120.444644][T13213] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1120.454192][T13213] usb 3-1: Product: syz [ 1120.462675][ T5855] usb 1-1: config 0 descriptor?? [ 1120.475726][T13213] usb 3-1: Manufacturer: syz [ 1120.508501][ T5897] usb usb7-port1: unable to enumerate USB device [ 1120.528950][ T5855] gspca_main: conex-2.14.0 probing 0572:0041 [ 1121.023541][T13213] cdc_wdm 3-1:1.0: skipping garbage [ 1121.054959][T13213] cdc_wdm 3-1:1.0: skipping garbage [ 1121.081913][T13213] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1121.109653][T13213] cdc_wdm 3-1:1.0: Unknown control protocol [ 1121.290259][ T5897] usb 3-1: USB disconnect, device number 90 [ 1121.770429][ T5855] usb 1-1: USB disconnect, device number 83 [ 1122.342813][ T793] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1122.588922][ T793] usb 3-1: Using ep0 maxpacket: 32 [ 1122.627416][ T793] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1122.693765][ T793] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1122.842096][ T793] usb 3-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 1122.876912][ T793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.903199][ T793] usb 3-1: config 0 descriptor?? [ 1122.995014][ T5964] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1123.107745][T15196] random: crng reseeded on system resumption [ 1123.157494][ T5897] usb 3-1: USB disconnect, device number 91 [ 1123.307190][ T5964] usb 1-1: Using ep0 maxpacket: 8 [ 1123.315788][ T5964] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1123.356416][ T5964] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1123.398903][ T5964] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1123.448176][ T5964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.491803][ T5964] usb 1-1: config 0 descriptor?? [ 1124.277761][ T5964] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1124.296190][T11732] block nbd1: Possible stuck request ffff888027640000: control (read@0,4096B). Runtime 150 seconds [ 1124.442036][ T5964] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1124.569191][ T5964] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1124.614331][ T5964] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1124.720791][ T5964] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.738347][ T5964] usb 6-1: Product: syz [ 1124.742756][ T5964] usb 6-1: Manufacturer: syz [ 1124.880352][ T5964] usb 6-1: SerialNumber: syz [ 1124.911840][ T5964] cdc_mbim 6-1:1.0: skipping garbage [ 1125.127116][T15210] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1126.111378][T15210] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1126.122964][ T5964] cdc_mbim 6-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1126.133391][ T5964] cdc_mbim 6-1:1.0: setting rx_max = 2048 [ 1127.760831][T13213] usb 1-1: USB disconnect, device number 84 [ 1127.817980][ T5964] cdc_mbim 6-1:1.0: setting tx_max = 184 [ 1127.863825][ T5964] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 1128.212871][ T5964] wwan wwan0: port wwan0mbim0 attached [ 1128.238850][ T5964] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 46:96:c9:7d:e5:b1 [ 1128.257900][ T5964] usb 6-1: USB disconnect, device number 13 [ 1128.266859][ T5964] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 1128.448930][ T5964] wwan wwan0: port wwan0mbim0 disconnected [ 1129.772835][ T793] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 1130.904231][ T30] INFO: task syz.1.2173:13554 blocked for more than 145 seconds. [ 1130.913313][ T30] Tainted: G L syzkaller #0 [ 1131.092011][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1131.164520][ T30] task:syz.1.2173 state:D stack:27560 pid:13554 tgid:13554 ppid:5857 task_flags:0x400040 flags:0x00080002 [ 1131.549590][ T30] Call Trace: [ 1131.562480][ T30] [ 1131.575505][ T30] __schedule+0xfee/0x60e0 [ 1131.603982][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1131.627032][ T30] ? stack_depot_save_flags+0x27/0x9d0 [ 1131.670904][ T30] ? __pfx___schedule+0x10/0x10 [ 1131.689465][ T30] ? find_held_lock+0x2b/0x80 [ 1131.704605][T15264] random: crng reseeded on system resumption [ 1131.714831][T15264] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 1131.724165][T15264] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 1131.733180][T15264] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 1131.742215][T15264] PM: hibernation: Basic memory bitmaps created [ 1131.756864][ T30] ? schedule+0x2bf/0x390 [ 1131.772132][ T30] schedule+0xdd/0x390 [ 1131.777857][ T30] schedule_preempt_disabled+0x13/0x30 [ 1131.794096][ T30] __mutex_lock+0xc9a/0x1b90 [ 1131.802257][ T30] ? bdev_release+0x15a/0x6d0 [ 1131.822397][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1131.832610][ T30] ? find_held_lock+0x2b/0x80 [ 1131.843095][ T30] ? do_raw_spin_unlock+0x145/0x1e0 [ 1131.854989][ T30] ? bdev_release+0x15a/0x6d0 [ 1131.866399][ T30] bdev_release+0x15a/0x6d0 [ 1131.890228][ T30] ? __pfx_blkdev_release+0x10/0x10 [ 1131.906436][T15263] PM: hibernation: Basic memory bitmaps freed [ 1131.917133][ T30] blkdev_release+0x15/0x20 [ 1131.925759][ T30] __fput+0x3ff/0xb40 [ 1131.939791][ T30] task_work_run+0x150/0x240 [ 1131.957639][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1131.973073][ T30] exit_to_user_mode_loop+0x100/0x4a0 [ 1131.992534][ T30] do_syscall_64+0x67c/0xf80 [ 1132.012664][ T30] ? clear_bhb_loop+0x40/0x90 [ 1132.025844][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1132.047421][ T30] RIP: 0033:0x7fe1cb39c799 [ 1132.067353][ T30] RSP: 002b:00007ffd10959008 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1132.092788][ T30] RAX: 0000000000000000 RBX: 00007fe1cb617da0 RCX: 00007fe1cb39c799 [ 1132.106902][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1132.117537][ T30] RBP: 00007fe1cb617da0 R08: 0000000000000006 R09: 0000000000000000 [ 1132.129581][ T30] R10: 00007fe1cb617cb0 R11: 0000000000000246 R12: 00000000000e7bc4 [ 1132.161735][ T30] R13: 00007fe1cb615fac R14: 00000000000e78dc R15: 00007ffd10959110 [ 1132.176036][ T30] [ 1132.181407][ T30] INFO: task syz.1.2173:13555 blocked for more than 146 seconds. [ 1132.193234][ T30] Tainted: G L syzkaller #0 [ 1132.201809][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1132.242983][ T30] task:syz.1.2173 state:D stack:26792 pid:13555 tgid:13554 ppid:5857 task_flags:0x400140 flags:0x00080002 [ 1132.256373][ T30] Call Trace: [ 1132.259681][ T30] [ 1132.264277][ T30] __schedule+0xfee/0x60e0 [ 1132.268766][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1132.275010][ T30] ? __pfx___schedule+0x10/0x10 [ 1132.279880][ T30] ? find_held_lock+0x2b/0x80 [ 1132.286312][ T30] ? schedule+0x2bf/0x390 [ 1132.290652][ T30] schedule+0xdd/0x390 [ 1132.299170][ T30] schedule_preempt_disabled+0x13/0x30 [ 1132.304647][ T30] __mutex_lock+0xc9a/0x1b90 [ 1132.310293][ T30] ? bdev_release+0x15a/0x6d0 [ 1132.314988][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1132.321004][ T30] ? find_held_lock+0x2b/0x80 [ 1132.325688][ T30] ? do_raw_spin_unlock+0x145/0x1e0 [ 1132.332005][ T30] ? bdev_release+0x15a/0x6d0 [ 1132.336717][ T30] bdev_release+0x15a/0x6d0 [ 1132.342460][ T30] ? __pfx_blkdev_release+0x10/0x10 [ 1132.348843][ T30] blkdev_release+0x15/0x20 [ 1132.353352][ T30] __fput+0x3ff/0xb40 [ 1132.357333][ T30] task_work_run+0x150/0x240 [ 1132.362886][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1132.367990][ T30] ? selinux_file_ioctl+0xb4/0x290 [ 1132.374158][ T30] exit_to_user_mode_loop+0x100/0x4a0 [ 1132.379550][ T30] do_syscall_64+0x67c/0xf80 [ 1132.385291][ T30] ? clear_bhb_loop+0x40/0x90 [ 1132.389997][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1132.396431][ T30] RIP: 0033:0x7fe1cb39c799 [ 1132.400855][ T30] RSP: 002b:00007fe1cc224028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1132.409924][ T30] RAX: 0000000000000000 RBX: 00007fe1cb615fa0 RCX: 00007fe1cb39c799 [ 1132.418899][ T30] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004 [ 1132.427459][ T30] RBP: 00007fe1cb432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1132.436127][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1132.445411][ T30] R13: 00007fe1cb616038 R14: 00007fe1cb615fa0 R15: 00007ffd10958ea8 [ 1132.453577][ T30] [ 1132.505160][ T30] [ 1132.505160][ T30] Showing all locks held in the system: [ 1132.514750][ T30] 1 lock held by khungtaskd/30: [ 1132.522152][ T30] #0: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1132.533329][ T30] 3 locks held by kworker/u9:0/51: [ 1132.538435][ T30] #0: ffff888057cc1148 ((wq_completion)hci5){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1132.550226][ T30] #1: ffffc90000bb7d08 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 1132.563636][ T30] #2: ffff88804c3b0ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x18a/0x470 [ 1132.574785][ T30] 5 locks held by kworker/0:2/793: [ 1132.579913][ T30] #0: ffff888022ed2148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1132.592416][ T30] #1: ffffc90003b57d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 1132.605861][ T30] #2: ffff88802ab8a198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 1132.644802][ T793] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1132.656061][ T793] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1132.666300][ T793] usb 6-1: can't read configurations, error -71 [ 1132.689052][ T30] #3: ffff88802abb3518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2bd2/0x4af0 [ 1132.699953][ T30] #4: ffff88802a803168 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2bfb/0x4af0 [ 1132.710748][ T30] 2 locks held by getty/5563: [ 1132.716301][ T30] #0: ffff888038a420a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1132.726968][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1132.737964][ T30] 4 locks held by kworker/u8:13/7342: [ 1132.744912][ T30] #0: ffff88801cac9148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1132.756611][ T30] #1: ffffc9000558fd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 1132.767862][ T30] #2: ffffffff905f82f0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 1132.779123][ T30] #3: ffffffff8e7f4ff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 1132.790457][ T30] 1 lock held by udevd/10621: [ 1132.795121][ T30] #0: ffff888027533358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1132.805771][ T30] 1 lock held by syz.1.2173/13554: [ 1132.814269][ T30] #0: ffff888027533358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 [ 1132.825369][ T30] 1 lock held by syz.1.2173/13555: [ 1132.831392][ T30] #0: ffff888027533358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 [ 1132.842295][ T30] [ 1132.844625][ T30] ============================================= [ 1132.844625][ T30] [ 1132.855663][ T30] NMI backtrace for cpu 0 [ 1132.855679][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1132.855702][ T30] Tainted: [L]=SOFTLOCKUP [ 1132.855706][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1132.855712][ T30] Call Trace: [ 1132.855717][ T30] [ 1132.855722][ T30] dump_stack_lvl+0x100/0x190 [ 1132.855743][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1132.855756][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1132.855775][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1132.855796][ T30] sys_info+0x141/0x190 [ 1132.855815][ T30] watchdog+0xd25/0x1050 [ 1132.855838][ T30] ? __pfx_watchdog+0x10/0x10 [ 1132.855853][ T30] ? __kthread_parkme+0x18c/0x230 [ 1132.855878][ T30] ? kthread+0x13a/0x450 [ 1132.855892][ T30] ? __pfx_watchdog+0x10/0x10 [ 1132.855913][ T30] kthread+0x370/0x450 [ 1132.855926][ T30] ? __pfx_kthread+0x10/0x10 [ 1132.855940][ T30] ret_from_fork+0x754/0xd80 [ 1132.855952][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1132.855964][ T30] ? __switch_to+0x7b4/0x1120 [ 1132.855978][ T30] ? __pfx_kthread+0x10/0x10 [ 1132.855988][ T30] ret_from_fork_asm+0x1a/0x30 [ 1132.856008][ T30] [ 1132.856015][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1132.997770][ C1] NMI backtrace for cpu 1 [ 1132.997788][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1132.997807][ C1] Tainted: [L]=SOFTLOCKUP [ 1132.997812][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1132.997820][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1132.997839][ C1] Code: 88 82 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 ac 1b 00 fb f4 bc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1132.997852][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000242 [ 1132.997864][ C1] RAX: 000000000415ef43 RBX: ffff88801e2e2480 RCX: ffffffff8b8fdc75 [ 1132.997873][ C1] RDX: 0000000000000000 RSI: ffffffff8de72f1c RDI: ffffffff8c1af5a0 [ 1132.997882][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed10170a6795 [ 1132.997890][ C1] R10: ffff8880b8533cab R11: 0000000000000000 R12: ffffed1003c5c490 [ 1132.997898][ C1] R13: 0000000000000001 R14: ffffffff90d98410 R15: 0000000000000000 [ 1132.997907][ C1] FS: 0000000000000000(0000) GS:ffff888124444000(0000) knlGS:0000000000000000 [ 1132.997924][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1132.997932][ C1] CR2: 00007fffdda8c150 CR3: 0000000073f99000 CR4: 00000000003526f0 [ 1132.997941][ C1] Call Trace: [ 1132.997945][ C1] [ 1132.997950][ C1] default_idle+0x9/0x10 [ 1132.997965][ C1] default_idle_call+0x6c/0xb0 [ 1132.997980][ C1] do_idle+0x35b/0x4b0 [ 1132.997997][ C1] ? __pfx_do_idle+0x10/0x10 [ 1132.998016][ C1] cpu_startup_entry+0x4f/0x60 [ 1132.998031][ C1] start_secondary+0x21d/0x2d0 [ 1132.998056][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1132.998076][ C1] common_startup_64+0x13e/0x148 [ 1132.998096][ C1] [ 1133.066008][T13668] Bluetooth: hci5: command 0x0406 tx timeout [ 1133.074244][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1133.074262][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1133.074284][ T30] Tainted: [L]=SOFTLOCKUP [ 1133.074290][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1133.074300][ T30] Call Trace: [ 1133.074306][ T30] [ 1133.074314][ T30] dump_stack_lvl+0x100/0x190 [ 1133.074343][ T30] vpanic+0x552/0x970 [ 1133.074360][ T30] ? __pfx_vpanic+0x10/0x10 [ 1133.074378][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1133.074404][ T30] panic+0xd1/0xe0 [ 1133.074418][ T30] ? __pfx_panic+0x10/0x10 [ 1133.074441][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1133.074462][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1133.074485][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1133.074506][ T30] ? watchdog.cold+0x198/0x1ca [ 1133.074523][ T30] ? watchdog+0xd35/0x1050 [ 1133.074545][ T30] watchdog.cold+0x1a9/0x1ca [ 1133.074568][ T30] ? __pfx_watchdog+0x10/0x10 [ 1133.074590][ T30] ? __kthread_parkme+0x18c/0x230 [ 1133.074614][ T30] ? kthread+0x13a/0x450 [ 1133.074628][ T30] ? __pfx_watchdog+0x10/0x10 [ 1133.074647][ T30] kthread+0x370/0x450 [ 1133.074661][ T30] ? __pfx_kthread+0x10/0x10 [ 1133.074677][ T30] ret_from_fork+0x754/0xd80 [ 1133.074694][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1133.074712][ T30] ? __switch_to+0x7b4/0x1120 [ 1133.074732][ T30] ? __pfx_kthread+0x10/0x10 [ 1133.074748][ T30] ret_from_fork_asm+0x1a/0x30 [ 1133.074782][ T30] [ 1133.082181][ T30] Kernel Offset: disabled