last executing test programs: 7m29.160446486s ago: executing program 2 (id=2032): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) write(r0, 0x0, 0x0) 7m29.040724834s ago: executing program 2 (id=2033): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x3) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000001c0)={0x0, 0x54a5, 0x400, 0x1, 0x37a}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 7m28.588284775s ago: executing program 2 (id=2039): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x15, 0x3, 'fo\x00', 0x1, 0x0, 0x69}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33fe0}, 0x1, 0x0, 0x0, 0x40002}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a0", 0x5e}, {&(0x7f0000000b00)}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd9f", 0x21}, {&(0x7f0000000c00)}], 0x2, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000fc0)}], 0x2, 0x0, 0x0, 0x84090}], 0x3, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 7m28.009808847s ago: executing program 2 (id=2041): r0 = getpgrp(0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1a2) r5 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001600)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000400]}}) 7m26.596324946s ago: executing program 2 (id=2044): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 7m22.944228195s ago: executing program 2 (id=2062): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r4, 0x2285, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, 0x0, 0x0) write$sndseq(r5, &(0x7f00000005c0), 0x0) read$snapshot(r5, 0x0, 0xffffffbf) read$FUSE(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x3, 0x6, 0x6, @loopback, @local, 0x8, 0x7827, 0x3, 0x3}}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) r8 = openat$random(0xffffffffffffff9c, 0x0, 0x40202, 0x0) sendfile(r8, r8, 0x0, 0x4800000009) listen(r7, 0x2) close_range(r3, 0xffffffffffffffff, 0x0) 7m7.611652075s ago: executing program 32 (id=2062): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r4, 0x2285, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, 0x0, 0x0) write$sndseq(r5, &(0x7f00000005c0), 0x0) read$snapshot(r5, 0x0, 0xffffffbf) read$FUSE(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x3, 0x6, 0x6, @loopback, @local, 0x8, 0x7827, 0x3, 0x3}}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) r8 = openat$random(0xffffffffffffff9c, 0x0, 0x40202, 0x0) sendfile(r8, r8, 0x0, 0x4800000009) listen(r7, 0x2) close_range(r3, 0xffffffffffffffff, 0x0) 5m57.784985847s ago: executing program 1 (id=2496): r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x50, &(0x7f0000000100), 0x48) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) prlimit64(r1, 0x2, &(0x7f0000000040)={0xaa, 0x7}, &(0x7f00000000c0)) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 5m56.443739345s ago: executing program 1 (id=2498): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="74000000020802030000000000000000050000000900fb0073797a3100000000040004801c0004800800024000d3746286ad77fb44ec9664f3da0000000800024000010001080002400000000c0500030021"], 0x74}, 0x1, 0x0, 0x0, 0x20004844}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5m55.620140947s ago: executing program 1 (id=2503): syz_extract_tcp_res(0x0, 0x96, 0x1) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) syz_emit_ethernet(0xa8, &(0x7f0000000300)={@random="17da770882ea", @remote, @void, {@ipv4={0x800, @tcp={{0x20, 0x4, 0x3, 0x2c, 0x9a, 0x66, 0x0, 0x4, 0x6, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp_prespec={0x44, 0xc, 0x15, 0x3, 0x5, [{@private=0xa010100, 0x3}]}, @generic={0x89, 0x5, "d6560c"}, @lsrr={0x83, 0x7, 0x2e, [@dev={0xac, 0x14, 0x14, 0x15}]}, @timestamp_addr={0x44, 0xc, 0x5, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x18}, 0x2}]}, @generic={0x44, 0x7, "0379ba9852"}, @rr={0x7, 0x1f, 0xa7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote, @dev={0xac, 0x14, 0x14, 0x37}, @remote]}, @lsrr={0x83, 0x1b, 0x4d, [@remote, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @multicast2, @private=0xa010102]}, @rr={0x7, 0x3, 0xbd}]}}, {{0x4e23, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x8, 0x100}, {"688d88d0b57b"}}}}}}, 0x0) 5m55.555350474s ago: executing program 1 (id=2504): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x40, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 5m55.293580462s ago: executing program 1 (id=2505): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x1d}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2eb5, 0x5b}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x44) 5m54.832015204s ago: executing program 1 (id=2508): r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x50, &(0x7f0000000100), 0x48) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) prlimit64(r1, 0x2, &(0x7f0000000040)={0xaa, 0x7}, &(0x7f00000000c0)) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 5m54.68131889s ago: executing program 33 (id=2508): r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x50, &(0x7f0000000100), 0x48) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) prlimit64(r1, 0x2, &(0x7f0000000040)={0xaa, 0x7}, &(0x7f00000000c0)) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2m30.04947939s ago: executing program 3 (id=3455): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x94) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e2b, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0x77f}, 0x1c) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000400)={r2}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000280)={r2, r0}) writev(r1, &(0x7f0000000240)=[{&(0x7f00000002c0)="ee4f75", 0x3}], 0x1) 2m29.997382703s ago: executing program 3 (id=3456): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 2m29.891946643s ago: executing program 3 (id=3457): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a3, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r2}) syz_emit_ethernet(0x7a, &(0x7f0000000640)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f50504", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x40, 0x0, 0xff, @private1, @private2, [@hopopts={0x3a}], "f4c638bed6f068cc"}}}}}}}, 0x0) 2m29.685012119s ago: executing program 3 (id=3459): close(0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000680)={r2, 0x1ff, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r3, 0x0, 0x0, r4], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 2m29.514445615s ago: executing program 3 (id=3460): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000012", @ANYRES32=0x0, @ANYBLOB="0000000006"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2m29.365154302s ago: executing program 3 (id=3461): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) unshare(0x24020400) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000680)={r4, 0x1ff, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r5, 0x0, 0x0, r6], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000480)=r7) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0x0) sync() r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x69, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0x5, 0x28e3, 0x5, 0x200}}}}]}, 0x48}}, 0x40) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r11, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000954c53400d051b0105000000000109022d00010000000009040100000202ff"], 0x0) 2m14.320423633s ago: executing program 34 (id=3461): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) unshare(0x24020400) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000680)={r4, 0x1ff, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r5, 0x0, 0x0, r6], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000480)=r7) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0x0) sync() r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x69, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0x5, 0x28e3, 0x5, 0x200}}}}]}, 0x48}}, 0x40) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r11, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000954c53400d051b0105000000000109022d00010000000009040100000202ff"], 0x0) 7.308081362s ago: executing program 0 (id=4084): setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x3b, @rand_addr=0x64010104, 0x4e22, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r4, @ANYBLOB="0800c300741300000800c40001"], 0x33fe0}, 0x1, 0x0, 0x0, 0x40002}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5282e4e0bf3eaf55a", 0xbc}, {&(0x7f0000000b00)}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd9f", 0x21}, {&(0x7f0000000c00)}], 0x2, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000fc0)}], 0x1, 0x0, 0x0, 0x84090}], 0x3, 0x4004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bc26, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0x0, 0xfff0}, {0xffff, 0xffff}, {0x14, 0xc}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xffffffc0, 0xb, 0x1}}}}]}, 0x40}}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x20040810}, 0x0) 7.234411333s ago: executing program 0 (id=4085): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)='\x00', 0x1, 0x24000010, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x3ab, 0xbcff, 0x0, 0x0) shutdown(r0, 0x1) shutdown(r0, 0x1) 7.047350164s ago: executing program 0 (id=4087): r0 = socket$alg(0x26, 0x5, 0x0) socket$kcm(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x7, 0x0, &(0x7f0000000000)="259a53f271a76d", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000002c0)={0x0, 0xffffffff}, &(0x7f0000000300)=0x8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 6.430547896s ago: executing program 5 (id=4091): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = accept4(r0, 0x0, 0x0, 0x80800) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000050000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872061ce618117c56f0979bd10b97163c953ab1abda4589e9cbe8d0d26b5069f8a98f7dc8f76b74635fc9f9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346d2014006000000e1ffff8816326d7d35c32aac1c7d5b5be399f6609876b5887437a172751151b633fbc02a74067529194e533583412dff048f0000000000000000b2728a04816cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13ceec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad30000000000170022626165866c156a25148972700000b515a1000000000000000eb2e9c15b6c8f6198282d0000000000c2ccf3f69cfcf1e15ea7a9e57aee78e12a2caebaada42811754e19a7e9b531636794a718b4766d2c7c61c3dba128c7fcd1f97989ccf1d55de496eae46c590c2d0225f9cd07005ac7f76d9d560a08c9fd0caafd9d095cb9db0099014cd0d4df62af52b088b01adeadc4c5225a6cd8486b03f83805dffe90dbf7ad042012b7213a2b03e3b1634ddfc9d6f570c4990fbbc7306871d9a52a157fb1a10fa2868df06faf83a8420e9ce62567043ce7e56d1ebe81"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xffff0000, 0x40f, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) connect$unix(r2, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mlock(&(0x7f0000287000/0x4000)=nil, 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x402000, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 5.13015132s ago: executing program 5 (id=4096): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 3.971346806s ago: executing program 5 (id=4098): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f0000000180)={0x1, 0x0, [{0xa80, 0x0, 0x33}]}) r3 = socket(0x27, 0x80000, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x60, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7fffffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x6}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000004) setsockopt$ALG_SET_KEY(r3, 0x6a, 0x1, 0x0, 0xc) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0x2b, 0x1, 0x0) r7 = syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) io_uring_enter(r7, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r7, 0x18, &(0x7f0000000000)={0xfeffffff, r6, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) 3.942696155s ago: executing program 7 (id=4099): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000040)={0x3b, &(0x7f0000000200)=[{0x20, '\x00', @buffer={"785f629b000bc36e4c47ceeef4e988279ccb9ce37f092b150598374457bf103b", 0x20}, 0x9}]}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="40000000180015"], 0x40}], 0x1, 0x0, 0x0, 0x40065}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="140000000000000029000000340000000400000000000000680000000000000029000000040000000409000000000000fe2bf4e12b9826287997a6b33d89f3d60da1641d9fe3896c421b6c130ef4f01be8f5836d41787454800809e12e5f0b6bdcf705020bf4c910fc020000000000000000000000000000000000140000000000000029000000340000000000000000000000300000000000000029000000360000005e02000000007ffd558ffb0394c465b7f8"], 0xc8}}], 0x1, 0x810) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000280)={0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000600)="6a9ee35872dedd3fa3577ce3d64d437abb6e906ee0d0354bcc7edf38e105d37f635fbb3b9c00a3d3bc61866fb3389eff2a0443cf6c38450ce2732419a8329bbe26f4eb1c9edcbf53fb1b0df9c77d6864e90753e3800dff58b9950616473ea1e55b947db3de3ebb8f63edf11ebec9eef2da6b9f545e28273d239534a4682dc23c44a85f64d17bbf41e291f3e3092626f045d8b2b5df6e478729cc88a79aa5f7fe99e374f09c34fe5b63b6dffd256f4ab6ec553520f191b386b290ce1e7fe4c59288afbc", 0xc3}, {&(0x7f0000002840)="33db2a1949865d5bb1c5bfb13ffb96a1cdad02489f447c9f6e61ae185cf1962c0bee82f04dfd646365d75c057a118bea734fb3f7e5bd047d4c32bf72ead3fa9aca6aeb1cc044533c24edc3e8ec198203ec244cb6b2b79bedc3a8a74e17e85b4c32c0819c4c77dcc823cb4fa659cffc6e8348b875e177f03f4378da4b36ac7df34de2f67398e62f3708bb83c1b0f505aaa85a3422cf0a710a03415896a50197b4a0624542e33fdad43547a88b0fc5d26804a2c8f54e65fbeaae715fbba862f15688e80655f3890ac49ca3ccb40cb2dd711b88d4480d20c760f12c23568c8b5fe181abc11d1f2ab914f875ba85f8355c9d248deef68e71555867160c0161a078f42d6778ee2bcc3015ccb433ff9022b312b620c18e4f4b3824d186e3051adf3a6e0332222108e63f6eda5a1517ee3765ae0677f165fde798d1917a2583aa4b52e67438cf61f0cadd336edf8b5f132d54f4ca42b3d8d39ccba6293913d4f233f29af17bcf049306e43f99ad7c321bacbfa17c2e8d8269e42c5390e279a1a1370c15bec875beb8542823f5ab28abb5d48fd5662bbf3516ef63120e56fffe7d1e86748b788f80ef4deaaaeb0815d8fa04bdd351a00618ff45c64a886de5a7b51408a1d53ce8d4d7c2891492e10d1de29d4e0ef564a859500f97048c1a0b319e1305c1f228882d02a227dea730ce09b1200813bfbf6750800d1bd8d2c264ac6063d4b0fb4cb42c1924a6fac095d848450a00dcc6a827b9d0bcc0131ff3da234568d469f1246848b71bd3dfbe767de19ffe542a0a37317d84bfc63c9449a4cc04446c859f972b77188eb5b7517540b70c5a0701c78ca108c09aadd28a91278cb6633d88cff45cfd5e30f87d6be9eb53cf89d5c047f3c36f490fa652a148c5d824b2d9cb8ffe1edb80cd48922aede8f3b22d21806572bf5b7bbcd27555b41e137eb06e5a3f514780796a2c8700d13eeb1800227298d82e42388a3aad5293562cc05650ef93d23d5290dc0de915d8143f76b2838cea8db2ca4cc802cd8d6d2c43c95f919bf0ebd7403f8047a0c010dcbc26a4bead1b274b573773ad2a2000c7730b49d5a97505024b905be151207a4d737233ccd853c4420391150e546b205181aa376088c5ccfe1b42da805cb6eca7e7d622daeff2c66d75697f7cc50ce2cc096cfedfd5d6cc5551a83dd3beb24ecf9c0160e190138e8eb9e86de71ccd5d76a258844e34683f7accd5f0b07a87be90b7ae6976f4a89183ab489754c9034eee063309f8d8f36914cc56887e80acb660b40f8960df4280641cc2199fd90d4f71923f041396b834d3af2558f04055e1133140d3a4399cf32a1a1d441056c114a5311f0a9a13ee68ddc1481ccad45bcec671d980f8cc1e2155a637bd2f9dcc8f7ab57683c841545f4c6a1e75ebf778b518e2185935f7c6b020ee30a29355f6bf0e5adaac184a25aba83aa5221d983235d8c277c81c26497c1d019056a56abf062203887bd4a1143b991ac51b2aa136793e331ef84556ec6d254e2adadf0d77c21d46fadbe3cd187bf36f18905e24f6dbeb7e2a75119f943d1cd55ec316a58116fb2f00d511ddddc7baa8dd8e67a7b2a6a5bcac586115dd8ff84a899503d06d62e1d51f82d2681811da3ac71c76133f81308e048734030f24e6988b1cc512c9518365f87c0f00776ef77cab78d0f04f4d077dec4705da22593d934ad32b7bd17c6dc9957d5b742ef8f0894b15c27c3fac6775bbf4cbe107b1d726d1ef6f6b1d20a7ea23b34b87cb3dfcd5747f4f598bb4832de298032db313bbc727f1ea41ac96c8979387b375490e3199585d2a932734ab265afc1fb12253ede0c5dfcf702c88619919c8b8aff987ceaddd9e40bb43d34599b50b07bf2fc605e5e2c8e8b70e63bc0893af943641c3ae65cf717aa01d537e44eab989fff563d22be3c6ba7e25bd4ef6c8001e87a59788ac3140143620cf8a6e62cdad64a11fca4bbdece3d3c8032850f40de027e2dbaa3b250af2babc1549b8f8fa72c52e868743ba43e183f50c8b9d8ce45d0acf64758fd65edb776199ee84c6da0d228e0627e0ea92949e4dc6ef5f023b7c6e1a9d261384fa4db33962341c330b710405b1a339209fdfc6cb2eb29a7fb3ccbe4a1c7e2daf4f6f1c227ed4b77384938d082f59bfee13585ca9fc46c232f62ebb6287c3e02018313f22c0c8096a37c1506873294ede68b3eba8cc66ca31f40f0d19ff1536fd8fb42b3ff2fa3b191194d6d04e2d056b0c3c0c4abd88bc1c7e4c5b1e7b31245acebf616d2746d461c8a75ae762b2df0862c7705f2cad59f00303afaa9d9e774d005eecb3fe80c5bee4266703c2981803d7aad43c42d312e9376fc2a03b3a9067e88e1a4c063646493a63cc95082ad51505176a7dda5b4493dbc78a4021f6a0d31868d75ee08bb6129e84f247eb3ad352ec045c8d5dc8ee5ad7b7eae948ae056f523a4745f3839cb763505afe12e8b0a988caba151b38549e06738a15dfec6a5597b31f47fbbcb622b4b6dce331b50a4a7561396da5e3cd3383840afc00ac0537bf03a8aab179330a38d15115a01b0db44c9302bc908a5d86c5acef4859fc7464a0e4f2970f4221bffdd617bff126e6256cfbd24be7dc1eee65996013cd23a184ba66c7c0cdeb6b551fab006fda43591645106cf836bed95c143df06918fc0a3c32f6eea50a5208550fb42503987e64571d718b751597998d76941feed27076b64492eea782db891df0f69e89a6211d584f9f9c7d090ec9f6dd70a590436dfa4790a534bdfc1f46fd1ddbbcee124cd9668d968d95add753b630262989cf986b146722242b17cb2bbb083b590ab4946cf25326024a6d4377a9988a3335a84e0eba9c4287cf5fd3304e11cba1119c22a6ae371aa82cd398499a80be864159c08b6925ecc3d25b2aa9a841a5131123e09697cc5e516e9a117b6e86a6ebee3bb39f0801ffcc65f1acbd69f8cab1a1ec921d144366af2049aac2d58cbc20333d1fd63695891d50209e50a281f3a1906d8d12b5dd1610c307901d6283db0e8833bb63714785332cc03f28111d64a6649267da73ef1d9ebb0bd584fd651cce2518ce7bf40c48b07d6f50b1aa224d656d1cd8db83f250ddac303ff8076a4c151abacb7ceb18b10cc3c3de6f929d3858074223765d0e0005606b550f4a00cc855a8d8a99dac57a4a8b15729638dd982aec22e79c42bf3b5f67fe2ab4632acadc954444fb54806d730880b48cb10d641f3b607e6413d106c0622ba4670c169c0bc3073cf6bf160e7989b78aaae81e7306727c2d13776d827a209a4a84805f2b8f5bbf2950e9d213a344f236c9dfbfe0a4fed7eb5d27d3bb15e89d454bc3dc83df918e57e8b4c763aeabdd00cd768b69a052e848694b97cef6c333eed2d3278cefa13c73c4d1b886c1c23c3a9a5533d4f0aea3416fb0054a42c3b61ec6eebd0cadff6106cc7b58e2b5aefd2d9482d37cdbc04cfff4e8efde9397598d3f164483613391be5d96eab911ab979c9418b26abcf05d14e1c1fc84a943829d3a84d08ea171034c60a953fca50fb373aa1ffe26cf1ed8f1e2b64b50f05f22af000ccdfc87fc5d999ee0d5ade3e1438747a55ac95482b6619c4bf41dea7d164aaa6922b2f563a95ac5f4b906c3bc8172a184e7d28a1e10e0a38455a4a326610b41da0e48fcd60be7417b9a92ad92ecc6068dbcb93543f02c1ca310d45d118869e06169f2164d4ce5a6f96a5b8b75bbcd945c8f7e947cb435051fcf6f8f8244269b4d3412aaf91374b18f385ba052eedd9613793a9d1382d30b912f0af55bd3b7a821fb1fc32c62434970afd2af33707487beb86fae9a927e1a10e20803ff58bf02213ff4b019df223589710d2fb436a930c009e513cec0a3733badfb7c183bb4fe18f3c1f3efabc18629462fb16a82aaae57e976f233d8debf50c6f2b7b1e53870103bcd4ce8ed53e5effffccd5fb0d45a235a326aa3d4381d9031b25913203b8eb2f170e30f4e324db5fd01e0ae5b86dd48a27aba37871fb7d3f4be672f1191bca2516d2c17a9aaba68ffa02fb999f7441e7238341fbea72a00b7f9f9acbca02a3157984f7a88ec809c1083dddec5151bedc6892d77cbb0f878ff2bbdb61922daaaf99a419bb9aaf41c2e49f9470dee0fbac03b84272626eb1e11b37b3b9d735df63f08965d3cd2bcdda5d34fe7919c976702a01d9a18bf6b1d2cc5ba4d78bb38634198003cf17a33e17391b3e0ff25368e8adf469861496dcd5868d163a2087c584df9874f4185752cc16ebdb852d60932ece37096301a718b7489f3688848996b649775533aa55918327ca1b5de7abb448c178d98e7e13cd4ce939326edefeb9ea6bb65fb6131cf0749425df1afb553411dad6041232ff4493aa644624b960badd643ebbd84e7c80bcf9acd1aa3bcb0bac9208b05098c6005b8efff52699a04111bf93591b95c8800ad9adb3c33044684fbac1b05db253874b9fb00f428707e3da0bbedd7d290a4b17ec3e73f28bba6c27d83b8517b5c2e4ac0d26f5a524ec91d02bd118f0e68a286b1bf456702a3001ab0754c87895976ccb202e4d75171fe005a18ed6a7fbeb9d678b73a751a0d18c7e2d615b572f79902510213f7079a736ba035d9590c12d9a628f8babf40391cf592eb0c0a224d16a436b6c99170faf80551b010d2da7a8a215d23bc63dd100752da133107d255b53c20357bf975e19bfa383d316cbb1c6bade2fd47cacf1eb0f484b98a269ed56c7c03c65a99a5adcd4602109d0b02a9593b79eb11c60df9edf423c977c49c44378ffe874cb35314ccec8816097959ee7b6001854fb026c3be5e44859d09cad6ecb9b207adfc77c2b638f4debb693829da35769aaa5c7b06b920b75af374f68a649970e5f3f9d0e55ef72faa9b62fb36c42eeaf08b0951966d3c5636ddcf3639685980aa6b02082cd458b2ffefd57309f5865090e1aaec6c5fc48a8890b91a7836b901366e5397f5b711622371cf5f6614c74b4a4920e6165534a6245cff80f831ea59a43457329d2f5bfe294849dddf2abb78869e5b2d0762faa56f4b28924597", 0xdf4}], 0x2, &(0x7f0000000b40)}}], 0x1, 0x4000081) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.426001454s ago: executing program 0 (id=4101): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49) sendfile(r4, r5, 0x0, 0x20000023896) connect$pppoe(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000008c0), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd4", 0x2b}], 0x1) 3.326383776s ago: executing program 6 (id=4102): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) unlink(&(0x7f0000000140)='./cgroup\x00') timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, 0x0, 0x0) 2.993629768s ago: executing program 5 (id=4103): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x103902, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x102, 0x0) writev(r1, 0x0, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x2a11, 0x400, 0x1, 0x40000335}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2.97682749s ago: executing program 4 (id=4104): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000140)={0xe, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) connect$unix(r3, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) 2.713086192s ago: executing program 7 (id=4105): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000380)={r3}, &(0x7f0000000480)=""/82, 0x52, 0x0) socket(0x1d, 0x2, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x94, r7, 0x1, 0xfffffffe, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x68}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4a9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER={0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="011d000000000000000401000000000000000141000000140017000000000000040169623a7767310000"], 0x30}, 0x1, 0x0, 0x0, 0x24008044}, 0x0) 2.647331336s ago: executing program 4 (id=4106): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, 0x0) 2.350034657s ago: executing program 5 (id=4107): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000140)={0xe, 0x88}, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) connect$unix(r3, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) 2.134616162s ago: executing program 0 (id=4108): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000280)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.112134303s ago: executing program 6 (id=4109): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xf}, {0xffff, 0xe}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000dac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.002305342s ago: executing program 6 (id=4110): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0xd2a727af3cb3995f, &(0x7f0000000900)}, 0x10) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000300)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c561e117436c379000000000000000058000b4824ca945f6400d40f6a0325010ebc0000", 0x32}], 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r7 = fsopen(&(0x7f0000000200)='adfs\x00', 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20008051) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000ac0)='oid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r6, 0xc010f508, &(0x7f0000000080)={0x7fff, 0x13}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) r9 = openat$ptp0(0xffffff9c, &(0x7f0000000300), 0x20401, 0x0) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) ioctl$SNDCTL_TMR_START(r10, 0x5402) ioctl$SNDCTL_SEQ_RESET(r10, 0x5100) ioctl$SNDCTL_TMR_CONTINUE(r10, 0x5404) ioctl$PTP_EXTTS_REQUEST2(r9, 0x40103d0b, 0x0) 1.482695429s ago: executing program 5 (id=4111): r0 = socket$alg(0x26, 0x5, 0x0) socket$kcm(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x7, 0x0, &(0x7f0000000000)="259a53f271a76d", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000002c0)={0x0, 0xffffffff}, &(0x7f0000000300)=0x8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 1.471065904s ago: executing program 4 (id=4112): inotify_init1(0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r2}) socket$nl_route(0x10, 0x3, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x10c) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x4236}], 0x7, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r5, 0x8001}}, 0x48) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.347076477s ago: executing program 4 (id=4113): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f0000000180)={0x1, 0x0, [{0xa80, 0x0, 0x33}]}) r3 = socket(0x27, 0x80000, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x60, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7fffffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x6}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000004) setsockopt$ALG_SET_KEY(r3, 0x6a, 0x1, 0x0, 0xc) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0x2b, 0x1, 0x0) r7 = syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) io_uring_enter(r7, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r7, 0x18, &(0x7f0000000000)={0xfeffffff, r6, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) 1.330908873s ago: executing program 7 (id=4114): r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb0000008000008276", 0x1f}], 0x1}, 0x5) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x6, 0x4) r2 = socket$inet(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25a60200475400f6a13bb1000000080008004803", 0x10000, 0x0, &(0x7f0000000140), 0x14) 1.254037257s ago: executing program 7 (id=4115): socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=@base={0xa, 0x5, 0x102, 0x7, 0x0, 0x1}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) socket$inet(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7fffffff}, 0x0, 0x0) 1.19604514s ago: executing program 4 (id=4116): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)='\x00', 0x1, 0x24000010, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="7cffa9061b2f8b082b6f69ae50430c8a8b6aa3162ba083c4a52e1ab0ac50ed4a19b1a69988000d5bed4433daaa4932dbb1cb3550dee8b23579d76ce37d574b43fca1eed8ebd38d1303240ed0d84517692128dd5aef5c4d60a6659952a1437c6f0ac3ed75806011ccbaa504f41a7e0abcf8823bc4a71ef8c52c2b297b539eaf752c56ebfe9b0542543069257dafcbf76c958d4cbf4eaaa67c5c2bd9e6518be34b56add7613ab83d389724b664e62c154e1a5aac073a53a0e8cadcf51ef495ebbcc77d5e36ff24c3f282289cc077374b714e08fbfecbdc8f14ef3fd409af4caf6fcb7d663beab335f239a1e93b399c93d7c036e1b39a7c477945f82b6dde53b1c21b590a58ba688ac4fb530d2c5b1195a127d2eaec840ab59f090d7047c278611e080cebe7b28588c11a44be99fe6f88c73441bf625b70565669997f4c3cda5afe1d6429908a69a459d35ba8c2f28076d8711f2667de749a783fac94ebd02680f20fb723c35c287a1f45064846385750665ffa74579083fbb1b1d6b7c90168252b1c5313544569203e7adb8e271a94f7413e5cfd6aa3157c4fc29bddba3683fcd032aecb513b2f27530fbefa0000000000000003c058e812d8db87de5e3eceae268b91f7d59daf77646fa4df99877dd5a9540934c7af91b96486eea62897be6acbe1bae8e46b112f1385e7cea9e4daccc6f1b98ce3b4322af8299a45ddcb5be8d3e469fdde9896ca324a2f3c88c616a7dccde331698ce2d39f96220251011b4dfbec953b5c30e94adb5586cec0af234859805bb7df1101ae80318ff127e913178d79cfa918d54585b6184255e872e2dc33a5c7c30a756bbd63c32a3e6a22863781747d185acb64583976c4289394d642b07d18e2932d0a78bd2ccf92b3e94e82f1e9239fa272402f4c9efcf068709a44d6f652a4f23df89f9a15e6bf0c7e65d8f3e32c35e83d30298074d16cb5ff4ded1df81009bbae888fceb9a8109ba319605e1776e52d2069b5cd7de07cf8dc488ba6a9c7559ff49674a490991f323736f302004007d0ccf2e5eaceac6b56f48f2b00592d7a378f118d8b3e5ecd2035c8252374c91bc79cf26ac11ddffe2c09e1aa032da0713732387f950e3f4e301eb1d26e5a2b19318e50d555c832e279894d8c9b03e8940738c0fe391b29907d0d5f9214d6e697a19247f4e8221aca2ac47debd7c45b8344941cbecbaf44af343b24a4f88caf207d72002fb8b7d156997cb7275f535e6a9d6480046246e60bea0cf6f54abc69ff9418b6cb9301eb6890227215b633a886fb13c89698e51e482c42ca99613b20e22e5ce15272f5bda8b18cf53d49130a", 0x3b2, 0xbcff, 0x0, 0x0) shutdown(r0, 0x1) shutdown(r0, 0x1) 1.087396517s ago: executing program 6 (id=4117): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x102, 0x0) writev(r2, 0x0, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x2a11, 0x400, 0x1, 0x40000335}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 794.777286ms ago: executing program 4 (id=4118): socket$netlink(0x10, 0x3, 0x0) r0 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000674000/0x3000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x0) 382.053056ms ago: executing program 7 (id=4119): syz_emit_ethernet(0x76, &(0x7f0000000140)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0xfe, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x23, 0x0, [{0x0, 0x8, "5e000000ff00"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x10, "9606053d0006ff003a0000b61af9"}]}, @lsrr={0x83, 0xb, 0x0, [@loopback, @loopback]}, @cipso={0x86, 0x6}, @timestamp={0x44, 0x4}]}}}}}}}, 0x0) 344.264435ms ago: executing program 7 (id=4120): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) unlink(&(0x7f0000000140)='./cgroup\x00') timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, 0x0, 0x0) 254.408283ms ago: executing program 0 (id=4121): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) writev(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r4, &(0x7f0000000980)={0x2020}, 0x2020) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'veth1_to_hsr\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000100003050000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r7, @ANYBLOB], 0x84}}, 0x20008040) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x3]}]}, 0x6c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_LABELS={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) 164.256926ms ago: executing program 6 (id=4122): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="42003300d0000400ffffffffffff080211000000505050505050"], 0x60}}, 0x0) 0s ago: executing program 6 (id=4123): bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) memfd_secret(0x80000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000564404204e080110f9330102030109021b00010000000009040000014a90c200090588df"], 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, 0x0, &(0x7f0000000300)='GPL\x00', 0x2, 0xa6, &(0x7f0000000140)=""/166, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x60, 0x1403, 0x1, 0x70bd2b, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gre0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c059}, 0x20048800) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x41, &(0x7f0000000340)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80785659, &(0x7f00000003c0)={0x0, @frame_sync, 0x0, 0x0, {0x0}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYRESDEC=r2, @ANYRESHEX=r8, @ANYRES64=r2, @ANYRES8=r5], 0x28}, 0x1, 0x0, 0x0, 0x24040051}, 0x20004800) kernel console output (not intermixed with test programs): 1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.650608][ T5901] usb 6-1: Product: syz [ 789.658109][ T5901] usb 6-1: Manufacturer: syz [ 789.664058][ T5901] usb 6-1: SerialNumber: syz [ 789.686065][ T5901] usb 6-1: config 0 descriptor?? [ 789.692691][T16929] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 789.701349][T16929] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 789.929417][T16929] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 789.938862][T16929] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 790.102345][T12686] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 790.282462][T12686] usb 7-1: Using ep0 maxpacket: 8 [ 790.295752][T12686] usb 7-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5 [ 790.314544][T12686] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.330030][T12686] usb 7-1: Product: syz [ 790.336751][T12686] usb 7-1: Manufacturer: syz [ 790.343718][T12686] usb 7-1: SerialNumber: syz [ 790.354865][T12686] usb 7-1: config 0 descriptor?? [ 790.361101][ T5901] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 790.364022][T12686] pwc: Philips PCVC720K/40 (ToUCam XS) USB webcam detected. [ 790.565377][ T5901] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 790.577840][T12686] pwc: send_video_command error -71 [ 790.592319][T12686] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 790.607322][T12686] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 790.628716][ T5901] usb 6-1: USB disconnect, device number 49 [ 790.632651][T12686] usb 7-1: USB disconnect, device number 42 [ 790.838497][ T5938] usb 5-1: USB disconnect, device number 46 [ 790.972377][ T5901] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 791.102373][ T5901] usb 1-1: device descriptor read/64, error -71 [ 791.378820][ T5901] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 791.495098][T16946] loop4: detected capacity change from 0 to 7 [ 791.503653][T16946] buffer_io_error: 22 callbacks suppressed [ 791.503684][T16946] Buffer I/O error on dev loop4, logical block 0, async page read [ 791.512413][ T5901] usb 1-1: device descriptor read/64, error -71 [ 791.525622][T16946] Buffer I/O error on dev loop4, logical block 0, async page read [ 791.552561][T16946] Buffer I/O error on dev loop4, logical block 0, async page read [ 791.560478][T16946] Buffer I/O error on dev loop4, logical block 0, async page read [ 791.568425][T16946] Buffer I/O error on dev loop4, logical block 0, async page read [ 791.576363][T16946] Buffer I/O error on dev loop4, logical block 0, async page read [ 791.584302][T16946] Buffer I/O error on dev loop4, logical block 0, async page read [ 791.592106][T16946] ldm_validate_partition_table(): Disk read failed. [ 791.598767][T16946] Buffer I/O error on dev loop4, logical block 0, async page read [ 791.606641][T16946] Buffer I/O error on dev loop4, logical block 0, async page read [ 791.614505][T16946] Buffer I/O error on dev loop4, logical block 0, async page read [ 791.622424][T16946] Dev loop4: unable to read RDB block 0 [ 791.628046][T16946] loop4: unable to read partition table [ 791.634028][T16946] loop4: partition table beyond EOD, truncated [ 791.640220][T16946] loop_reread_partitions: partition scan of loop4 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 791.673589][ T5901] usb usb1-port1: attempt power cycle [ 791.714946][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 791.714995][ T30] audit: type=1326 audit(1770740800.467:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16953 comm="syz.6.3472" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f749759bf79 code=0x0 [ 791.721889][ T5874] usb 4-1: USB disconnect, device number 62 [ 791.822623][ T5174] ldm_validate_partition_table(): Disk read failed. [ 791.829393][ T5174] Dev loop4: unable to read RDB block 0 [ 791.835659][ T5174] loop4: unable to read partition table [ 791.844870][ T5174] loop4: partition table beyond EOD, truncated [ 791.940557][T16958] trusted_key: encrypted_key: key user:syz not found [ 792.027888][ T5901] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 792.168576][ T5901] usb 1-1: device descriptor read/8, error -71 [ 792.281403][T16962] netlink: 'syz.5.3475': attribute type 1 has an invalid length. [ 792.313643][T16962] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3475'. [ 792.340391][T16962] 8021q: adding VLAN 0 to HW filter on device bond2 [ 792.363588][T16962] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 792.452332][ T5901] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 792.494846][ T5901] usb 1-1: device descriptor read/8, error -71 [ 792.583781][T16977] libceph: resolve 'c' (ret=-3): failed [ 792.604878][ T5901] usb usb1-port1: unable to enumerate USB device [ 792.732357][ T5806] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 792.882407][ T5806] usb 6-1: Using ep0 maxpacket: 32 [ 792.893772][ T5806] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 792.950034][ T5806] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 793.088787][ T5806] usb 6-1: config 0 has no interface number 0 [ 793.097184][ T5806] usb 6-1: config 0 interface 1 has no altsetting 0 [ 793.157635][ T5806] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 793.169102][ T5806] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.208667][ T5806] usb 6-1: Product: syz [ 793.217458][ T5806] usb 6-1: Manufacturer: syz [ 793.225195][ T5806] usb 6-1: SerialNumber: syz [ 793.236711][ T5806] usb 6-1: config 0 descriptor?? [ 793.263579][ T5806] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 793.282324][ T5806] cx231xx 6-1:0.1: Not found matching IAD interface [ 793.461886][ T5901] usb 6-1: USB disconnect, device number 50 [ 793.843445][T16987] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3482'. [ 794.279276][T16994] bond3: entered promiscuous mode [ 794.328078][T16994] 8021q: adding VLAN 0 to HW filter on device bond3 [ 794.328325][T16996] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3485'. [ 794.350171][T16999] input: syz1 as /devices/virtual/input/input44 [ 794.426303][T16996] bond3: entered allmulticast mode [ 794.485204][T16994] bridge1: entered promiscuous mode [ 794.500722][T16994] bridge1: entered allmulticast mode [ 794.513105][T16994] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 794.564890][T17004] netlink: 'syz.4.3488': attribute type 1 has an invalid length. [ 794.643147][T17009] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3488'. [ 794.685961][T17009] 8021q: adding VLAN 0 to HW filter on device bond1 [ 794.705918][T17004] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 794.843403][T12686] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 794.982386][T12686] usb 6-1: device descriptor read/64, error -71 [ 795.124870][T17020] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 795.134014][T17020] batadv1: entered promiscuous mode [ 795.143580][T17020] team0: Port device batadv1 added [ 795.203377][ T30] audit: type=1400 audit(1770740803.857:838): avc: denied { setopt } for pid=17016 comm="syz.4.3491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 795.362727][T12686] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 795.552381][T12686] usb 6-1: device descriptor read/64, error -71 [ 795.682792][T12686] usb usb6-port1: attempt power cycle [ 795.927032][T17033] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3494'. [ 796.119940][T12686] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 796.154549][T12686] usb 6-1: device descriptor read/8, error -71 [ 796.262994][ T5806] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 796.402494][T12686] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 796.421546][ T5806] usb 5-1: config 0 has no interfaces? [ 796.432520][ T5806] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 796.432766][T12686] usb 6-1: device descriptor read/8, error -71 [ 796.468040][ T5806] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.634604][ T5806] usb 5-1: Product: syz [ 796.638792][ T5806] usb 5-1: Manufacturer: syz [ 796.644821][T12686] usb usb6-port1: unable to enumerate USB device [ 796.663854][ T5806] usb 5-1: SerialNumber: syz [ 796.679430][ T5806] usb 5-1: config 0 descriptor?? [ 796.901890][T17032] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12397 sclass=netlink_route_socket pid=17032 comm=syz.4.3495 [ 796.924412][T12686] usb 5-1: USB disconnect, device number 47 [ 797.252353][T12686] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 797.402341][T12686] usb 7-1: Using ep0 maxpacket: 16 [ 797.409164][T12686] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 797.419456][T12686] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 797.430531][T12686] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 797.449821][T12686] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 797.470003][T12686] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 797.520505][T12686] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 797.530899][T12686] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 797.612136][T12686] usb 7-1: Manufacturer: syz [ 797.617569][T17050] tipc: Enabled bearer , priority 10 [ 797.630403][T17050] tipc: Enabled bearer , priority 0 [ 797.754609][T12686] usb 7-1: config 0 descriptor?? [ 797.884500][ T5813] Bluetooth: hci3: unexpected event for opcode 0x0405 [ 797.901725][T17058] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 797.908242][T17058] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 797.964426][T17058] vhci_hcd vhci_hcd.0: Device attached [ 797.995127][T17059] vhci_hcd: connection closed [ 797.998081][ T8512] vhci_hcd vhci_hcd.4: stop threads [ 798.030846][ T8512] vhci_hcd vhci_hcd.4: release socket [ 798.062491][T12686] rc_core: IR keymap rc-hauppauge not found [ 798.068649][T12686] Registered IR keymap rc-empty [ 798.086648][T12686] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 798.106588][T17065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 798.116184][T17065] team0: Port device batadv0 added [ 798.143684][ T8512] vhci_hcd vhci_hcd.4: disconnect device [ 798.163193][T12686] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 798.184773][T12686] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 798.197309][T12686] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input45 [ 798.214450][T12686] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 798.243711][T12686] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 798.262372][T12686] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 798.292520][T12686] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 798.342647][T12686] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 798.373204][T12686] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 798.403107][T12686] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 798.422453][T12686] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 798.452682][T12686] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 798.476329][T17069] binder: 17068:17069 ioctl c0306201 0 returned -14 [ 798.492512][T12686] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 798.515249][T12686] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 798.547238][T12686] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 798.616248][T12686] usb 7-1: USB disconnect, device number 43 [ 798.752421][ T5938] tipc: Node number set to 2785837120 [ 798.820922][T17073] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 798.865110][T17069] binder: 17068:17069 ioctl c0306201 0 returned -14 [ 799.505711][T17081] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3507'. [ 799.614491][T17082] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3507'. [ 799.658985][ T30] audit: type=1326 audit(1770740808.407:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17083 comm="syz.0.3508" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a71b9bf79 code=0x0 [ 800.412438][ T5938] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 800.492359][ T5806] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 800.585040][ T5938] usb 5-1: config 0 has no interfaces? [ 800.592497][ T5938] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 800.601593][ T5938] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 800.628292][ T5938] usb 5-1: Manufacturer: syz [ 800.632574][ T5806] usb 6-1: device descriptor read/64, error -71 [ 800.650816][ T5938] usb 5-1: config 0 descriptor?? [ 800.882952][ T5806] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 800.892369][ T5901] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 801.052412][ T5806] usb 6-1: device descriptor read/64, error -71 [ 801.058714][ T5901] usb 1-1: device descriptor read/64, error -71 [ 801.162575][ T5806] usb usb6-port1: attempt power cycle [ 801.312344][ T5901] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 801.352457][ T5938] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 801.442404][ T5901] usb 1-1: device descriptor read/64, error -71 [ 801.492325][ T5938] usb 7-1: device descriptor read/64, error -71 [ 801.502398][ T5806] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 801.522772][ T5806] usb 6-1: device descriptor read/8, error -71 [ 801.552469][ T5901] usb usb1-port1: attempt power cycle [ 801.742343][ T5938] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 801.762649][ T5806] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 801.782732][ T5806] usb 6-1: device descriptor read/8, error -71 [ 801.882331][ T5938] usb 7-1: device descriptor read/64, error -71 [ 801.892433][ T5901] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 801.900495][ T5806] usb usb6-port1: unable to enumerate USB device [ 801.922396][ T5813] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 801.923222][ T5901] usb 1-1: device descriptor read/8, error -71 [ 801.932377][ T5813] Bluetooth: hci3: Injecting HCI hardware error event [ 801.945135][ T5813] Bluetooth: hci3: hardware error 0x00 [ 801.992705][ T5938] usb usb7-port1: attempt power cycle [ 802.172367][ T5901] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 802.202754][ T5901] usb 1-1: device descriptor read/8, error -71 [ 802.322721][ T5901] usb usb1-port1: unable to enumerate USB device [ 802.332363][ T5938] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 802.353070][ T5938] usb 7-1: device descriptor read/8, error -71 [ 802.402633][ T11] block nbd3: Possible stuck request ffff888026938000: control (read@0,1024B). Runtime 570 seconds [ 802.413407][ T11] block nbd3: Possible stuck request ffff888026938200: control (read@1024,1024B). Runtime 570 seconds [ 802.424642][ T11] block nbd3: Possible stuck request ffff888026938400: control (read@2048,1024B). Runtime 570 seconds [ 802.435688][ T11] block nbd3: Possible stuck request ffff888026938600: control (read@3072,1024B). Runtime 570 seconds [ 802.592734][ T5938] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 802.612914][ T5938] usb 7-1: device descriptor read/8, error -71 [ 802.722951][ T5938] usb usb7-port1: unable to enumerate USB device [ 802.763100][ T5938] usb 5-1: USB disconnect, device number 48 [ 803.573151][ T5938] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 803.724445][ T5938] usb 6-1: not running at top speed; connect to a high speed hub [ 803.735105][ T5938] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 803.744384][ T5938] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 803.757027][ T5938] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 803.768894][ T5938] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 803.778484][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.787137][ T5938] usb 6-1: Product: syz [ 803.791407][ T5938] usb 6-1: Manufacturer: syz [ 803.797717][ T5938] usb 6-1: SerialNumber: syz [ 803.888888][T15578] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 803.899446][T15578] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 803.908677][T15578] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 803.916562][T15578] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 803.924240][T15578] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 803.937987][T17121] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 804.033221][ T5813] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 804.068370][ T5938] usb 6-1: 0:2 : does not exist [ 804.095451][ T5938] usb 6-1: USB disconnect, device number 59 [ 804.102350][ T5806] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 804.181876][T10340] udevd[10340]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 804.252367][ T5806] usb 1-1: Using ep0 maxpacket: 16 [ 804.258875][ T5806] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.274937][ T5806] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 804.408176][ T5806] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 804.425561][ T5806] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.461206][ T5806] usb 1-1: config 0 descriptor?? [ 804.867190][T17122] chnl_net:caif_netlink_parms(): no params data found [ 805.091500][T17122] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.235229][T17122] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.257921][T17122] bridge_slave_0: entered allmulticast mode [ 805.291705][ T5806] usb 1-1: language id specifier not provided by device, defaulting to English [ 805.350015][T17122] bridge_slave_0: entered promiscuous mode [ 805.382952][T17122] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.430390][T17122] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.477083][T17146] input: syz1 as /devices/virtual/input/input46 [ 805.504205][T17122] bridge_slave_1: entered allmulticast mode [ 805.550750][ T5806] usb 1-1: Max retries (5) exceeded reading string descriptor 200 [ 805.559524][ T5806] letsketch 0003:6161:4D15.0022: probe with driver letsketch failed with error -71 [ 805.565943][T17122] bridge_slave_1: entered promiscuous mode [ 805.586489][ T5806] usb 1-1: USB disconnect, device number 59 [ 805.786412][ T30] audit: type=1400 audit(1770740814.537:840): avc: denied { map } for pid=17148 comm="syz.4.3527" path="socket:[53122]" dev="sockfs" ino=53122 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 805.830441][T17122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 805.956529][T17122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 805.991643][ T30] audit: type=1400 audit(1770740814.537:841): avc: denied { accept } for pid=17148 comm="syz.4.3527" path="socket:[53122]" dev="sockfs" ino=53122 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 806.027699][ T5813] Bluetooth: hci0: command tx timeout [ 806.097681][ T30] audit: type=1400 audit(1770740814.727:842): avc: denied { write } for pid=17148 comm="syz.4.3527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 806.132251][T17122] team0: Port device team_slave_0 added [ 806.158877][T17122] team0: Port device team_slave_1 added [ 806.253183][T17122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 806.260344][T17122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 806.289474][T17122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 806.412451][T12686] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 806.787029][T17122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 806.794810][T17122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 806.824741][T17122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 806.880499][T17122] hsr_slave_0: entered promiscuous mode [ 806.893299][T17122] hsr_slave_1: entered promiscuous mode [ 806.900315][T17122] debugfs: 'hsr0' already exists in 'hsr' [ 806.907560][T17122] Cannot create hsr debugfs directory [ 806.922360][T12686] usb 1-1: device descriptor read/64, error -71 [ 807.100650][T17170] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3533'. [ 807.183843][T12686] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 807.420456][T17122] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 807.442454][T12686] usb 1-1: device descriptor read/64, error -71 [ 807.552572][T12686] usb usb1-port1: attempt power cycle [ 807.574686][T17122] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 807.713859][T17185] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 807.834114][T17122] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 807.864857][T17122] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 807.963190][T17192] libceph: resolve 'c' (ret=-3): failed [ 808.097450][T12686] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 808.132352][ T5813] Bluetooth: hci0: command tx timeout [ 808.164342][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.170643][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.186826][T12686] usb 1-1: device descriptor read/8, error -71 [ 808.219720][T17122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 808.298186][T17122] 8021q: adding VLAN 0 to HW filter on device team0 [ 808.320125][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.327269][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 808.465848][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.472987][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 808.502468][T12686] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 808.524178][T12686] usb 1-1: device descriptor read/8, error -71 [ 808.878189][T12686] usb usb1-port1: unable to enumerate USB device [ 809.032922][T17122] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 809.094236][T17205] input: syz1 as /devices/virtual/input/input47 [ 809.938961][ T5874] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 809.972851][T17122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 810.093865][ T5874] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 810.112439][ T5874] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 810.135014][ T5874] usb 5-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 810.144912][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.158797][ T5874] usb 5-1: config 0 descriptor?? [ 810.163829][ T5813] Bluetooth: hci0: command tx timeout [ 810.204613][T17225] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 810.213031][ T5874] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 810.323733][T17225] team0: Port device batadv1 added [ 810.590232][T17122] veth0_vlan: entered promiscuous mode [ 810.619082][T17122] veth1_vlan: entered promiscuous mode [ 810.658077][T17122] veth0_macvtap: entered promiscuous mode [ 810.670278][T17122] veth1_macvtap: entered promiscuous mode [ 810.733832][T17241] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 810.911646][T17122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 810.943416][T17122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 810.960450][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.970126][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.021936][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.036564][ T8520] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.093278][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.107131][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.257068][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.274139][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.473738][ T5901] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 811.665912][ T5901] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 811.676308][ T5901] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 811.688615][ T5901] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 811.698257][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.708231][ T5901] usb 1-1: Product: syz [ 811.714613][ T5901] usb 1-1: Manufacturer: syz [ 811.720123][ T5901] usb 1-1: SerialNumber: syz [ 811.730240][ T5901] usb 1-1: config 0 descriptor?? [ 811.737484][T17245] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 811.745088][T17245] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 811.792397][T12686] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 811.956595][T17245] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 811.964162][T12686] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 811.975364][T17245] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 811.982310][T12686] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 811.992085][T12686] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 812.024480][T12686] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 812.042911][T12686] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 812.050999][T12686] usb 6-1: Product: syz [ 812.055288][T12686] usb 6-1: Manufacturer: syz [ 812.059887][T12686] usb 6-1: SerialNumber: syz [ 812.243638][ T5813] Bluetooth: hci0: command tx timeout [ 812.282012][T12686] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 60 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 812.380458][ T5806] usb 5-1: USB disconnect, device number 49 [ 812.413267][ T5901] Error reading MAC address [ 812.447957][ T5901] usb 1-1: USB disconnect, device number 64 [ 812.519169][T12686] usb 6-1: USB disconnect, device number 60 [ 812.534218][ T30] audit: type=1800 audit(1770740821.267:843): pid=17249 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.3550" name="file1" dev="tmpfs" ino=1264 res=0 errno=0 [ 812.563120][T12686] usblp0: removed [ 813.002936][T17265] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 813.010401][T17265] batadv2: entered promiscuous mode [ 813.018762][T17265] team0: Port device batadv2 added [ 814.668420][T17293] netlink: 'syz.5.3564': attribute type 1 has an invalid length. [ 814.741764][T17295] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3564'. [ 814.772701][T17293] bond4: entered promiscuous mode [ 814.804444][T17293] 8021q: adding VLAN 0 to HW filter on device bond4 [ 814.842581][T17295] bond4: entered allmulticast mode [ 814.907402][T17293] bridge2: entered promiscuous mode [ 814.979063][T17293] bridge2: entered allmulticast mode [ 815.001102][T17293] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 815.212359][T12686] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 815.219981][ T5864] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 815.374152][ T5864] usb 5-1: Using ep0 maxpacket: 8 [ 815.380885][T12686] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 815.396314][T12686] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 815.417005][ T5864] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 815.430285][T12686] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 815.444732][ T5864] usb 5-1: can't read configurations, error -61 [ 815.468532][T12686] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 815.477829][T12686] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 815.494035][T12686] usb 1-1: Product: syz [ 815.498714][T12686] usb 1-1: Manufacturer: syz [ 815.512711][T12686] usb 1-1: SerialNumber: syz [ 815.602709][ T5864] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 815.750875][T12686] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 65 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 815.792344][ T5864] usb 5-1: Using ep0 maxpacket: 8 [ 815.819918][ T5864] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 815.842535][ T5864] usb 5-1: can't read configurations, error -61 [ 815.869183][ T5864] usb usb5-port1: attempt power cycle [ 815.971177][ T30] audit: type=1800 audit(1770740824.717:844): pid=17304 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.3567" name="file1" dev="tmpfs" ino=824 res=0 errno=0 [ 816.000541][T12686] usb 1-1: USB disconnect, device number 65 [ 816.032793][T12686] usblp0: removed [ 816.212338][ T5864] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 816.233562][ T5864] usb 5-1: Using ep0 maxpacket: 8 [ 816.240430][ T5864] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 816.249647][ T5864] usb 5-1: can't read configurations, error -61 [ 816.382354][ T5864] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 816.404634][ T5864] usb 5-1: Using ep0 maxpacket: 8 [ 816.406349][ T5901] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 816.413478][ T5864] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 816.425027][ T5864] usb 5-1: can't read configurations, error -61 [ 816.433948][ T5864] usb usb5-port1: unable to enumerate USB device [ 816.582330][ T5901] usb 6-1: Using ep0 maxpacket: 16 [ 816.589055][ T5901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 816.612576][ T5901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 816.626910][ T5901] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 816.643116][ T5901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.688176][ T5901] usb 6-1: config 0 descriptor?? [ 817.386293][ T5901] usb 6-1: language id specifier not provided by device, defaulting to English [ 817.527830][ T5813] Bluetooth: hci4: unexpected event for opcode 0x0405 [ 817.612361][T17334] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 817.618900][T17334] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 817.626561][T17334] vhci_hcd vhci_hcd.0: Device attached [ 817.636618][ T5901] usb 6-1: Max retries (5) exceeded reading string descriptor 200 [ 817.647924][T17335] vhci_hcd: cannot find a urb of seqnum 8 max seqnum 1 [ 817.649202][ T5901] letsketch 0003:6161:4D15.0023: probe with driver letsketch failed with error -71 [ 817.656387][ T8512] vhci_hcd vhci_hcd.0: stop threads [ 817.673383][ T5901] usb 6-1: USB disconnect, device number 61 [ 817.680474][ T8512] vhci_hcd vhci_hcd.0: release socket [ 817.694501][ T8512] vhci_hcd vhci_hcd.0: disconnect device [ 817.737261][T17339] trusted_key: encrypted_key: key user:syz not found [ 818.612408][ T5864] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 818.746919][ T30] audit: type=1400 audit(1770740827.497:845): avc: denied { setopt } for pid=17358 comm="syz.6.3587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 819.141346][T17363] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3586'. [ 819.182706][ T5864] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 819.377905][ T5864] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 819.640020][ T5864] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 819.668391][ T5864] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 819.678617][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 819.687482][ T5864] usb 1-1: Product: syz [ 819.691776][ T5864] usb 1-1: Manufacturer: syz [ 819.697517][ T5864] usb 1-1: SerialNumber: syz [ 820.315333][T17376] trusted_key: encrypted_key: key user:syz not found [ 820.611260][ T5864] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 66 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 820.632465][T17373] loop6: detected capacity change from 0 to 524287999 [ 820.659700][T17373] buffer_io_error: 38 callbacks suppressed [ 820.659739][T17373] Buffer I/O error on dev loop6, logical block 0, async page read [ 820.699989][T17373] Buffer I/O error on dev loop6, logical block 0, async page read [ 820.729009][T17373] Buffer I/O error on dev loop6, logical block 0, async page read [ 820.755825][T17373] Buffer I/O error on dev loop6, logical block 0, async page read [ 820.766930][T17373] Buffer I/O error on dev loop6, logical block 0, async page read [ 820.795092][ T30] audit: type=1800 audit(1770740829.547:846): pid=17351 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.3585" name="file1" dev="tmpfs" ino=845 res=0 errno=0 [ 820.807298][ T5864] usb 1-1: USB disconnect, device number 66 [ 820.828714][ T5864] usblp0: removed [ 820.840595][T17373] Buffer I/O error on dev loop6, logical block 0, async page read [ 820.961606][T17373] Buffer I/O error on dev loop6, logical block 0, async page read [ 821.001497][T17373] Buffer I/O error on dev loop6, logical block 0, async page read [ 821.019819][T17373] ldm_validate_partition_table(): Disk read failed. [ 821.101339][T17373] Buffer I/O error on dev loop6, logical block 0, async page read [ 821.133934][T17373] Buffer I/O error on dev loop6, logical block 0, async page read [ 821.506406][ T30] audit: type=1326 audit(1770740829.897:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17378 comm="syz.7.3592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86eb9bf79 code=0x7fc00000 [ 821.535616][T17373] Dev loop6: unable to read RDB block 0 [ 821.557002][T17373] loop6: unable to read partition table [ 821.570066][T17373] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 821.603941][ T5813] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 821.613945][ T5813] Bluetooth: hci4: Injecting HCI hardware error event [ 821.623635][ T5813] Bluetooth: hci4: hardware error 0x00 [ 821.738875][ T30] audit: type=1326 audit(1770740830.487:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17378 comm="syz.7.3592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc86eb9bf79 code=0x7fc00000 [ 822.383816][ T30] audit: type=1326 audit(1770740831.137:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17401 comm="syz.7.3598" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc86eb9bf79 code=0x0 [ 822.642532][ T5938] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 822.708570][T17410] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3600'. [ 823.142334][ T5938] usb 1-1: device descriptor read/64, error -71 [ 823.764532][ T5813] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 823.892348][ T5938] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 824.067852][T17419] trusted_key: encrypted_key: key user:syz not found [ 824.143386][ T5938] usb 1-1: device descriptor read/64, error -71 [ 824.272720][ T5938] usb usb1-port1: attempt power cycle [ 824.971763][T17434] loop6: detected capacity change from 0 to 524287999 [ 824.985062][ T5938] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 825.002815][T17434] ldm_validate_partition_table(): Disk read failed. [ 825.010545][T17434] Dev loop6: unable to read RDB block 0 [ 825.052740][ T5938] usb 1-1: device descriptor read/8, error -71 [ 825.083792][T17434] loop6: unable to read partition table [ 825.107059][T17434] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 825.327931][ T5938] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 825.574104][T17445] tipc: Enabled bearer , priority 0 [ 825.683795][ T5938] usb 1-1: device not accepting address 70, error -71 [ 825.704760][ T5938] usb usb1-port1: unable to enumerate USB device [ 825.922336][ T5806] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 826.082457][ T5938] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 826.087837][ T5806] usb 6-1: Using ep0 maxpacket: 8 [ 826.116994][ T5806] usb 6-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5 [ 826.126514][ T5806] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.135884][ T5806] usb 6-1: Product: syz [ 826.141327][ T5806] usb 6-1: Manufacturer: syz [ 826.151993][ T5806] usb 6-1: SerialNumber: syz [ 826.163291][ T5806] usb 6-1: config 0 descriptor?? [ 826.179466][ T5806] pwc: Philips PCVC720K/40 (ToUCam XS) USB webcam detected. [ 826.274193][ T5938] usb 1-1: Using ep0 maxpacket: 16 [ 826.298435][ T5938] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 826.316611][ T5938] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 826.329084][ T5938] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 826.343197][ T5938] usb 1-1: config 0 interface 0 has no altsetting 0 [ 826.350043][ T5938] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 826.359518][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.371805][ T5938] usb 1-1: config 0 descriptor?? [ 826.469925][ T5806] pwc: send_video_command error -71 [ 826.482516][ T5806] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 826.515982][ T5806] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 826.550098][ T5806] usb 6-1: USB disconnect, device number 62 [ 826.712546][ T5851] tipc: Node number set to 1179236543 [ 826.826937][T17458] netlink: 100 bytes leftover after parsing attributes in process `syz.7.3616'. [ 827.497709][ T5938] usbhid 1-1:0.0: can't add hid device: -71 [ 827.509489][ T5938] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 827.519473][ T5938] usb 1-1: USB disconnect, device number 71 [ 828.062397][ T5864] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 828.213535][ T5864] usb 7-1: device descriptor read/64, error -71 [ 828.533123][ T5864] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 828.586464][T17488] xt_hashlimit: max too large, truncated to 1048576 [ 828.618229][T17488] No such timeout policy "syz1" [ 828.925332][ T30] audit: type=1400 audit(1770740837.407:850): avc: denied { getopt } for pid=17481 comm="syz.7.3625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 829.135687][ T5864] usb 7-1: device descriptor read/64, error -71 [ 829.201397][T17493] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 829.264161][ T5864] usb usb7-port1: attempt power cycle [ 829.290150][T17493] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 829.321327][T17493] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 829.336924][T17493] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 829.385374][T17493] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 829.396253][T17493] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 829.415748][T17493] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 829.431661][T17493] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 829.498318][T17500] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 829.511382][T17500] team0: Port device batadv1 added [ 829.558453][T17493] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 829.569773][T17493] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 829.622347][ T5864] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 829.779744][ T5864] usb 7-1: device descriptor read/8, error -71 [ 830.022342][ T5864] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 830.153255][ T5864] usb 7-1: device descriptor read/8, error -71 [ 830.280588][T17509] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3632'. [ 830.302530][ T5864] usb usb7-port1: unable to enumerate USB device [ 831.530686][ T30] audit: type=1400 audit(1770740839.627:851): avc: denied { create } for pid=17517 comm="syz.7.3636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 831.681592][ T30] audit: type=1400 audit(1770740839.657:852): avc: denied { setopt } for pid=17517 comm="syz.7.3636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 831.802907][ T5806] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 831.985020][T17536] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3639'. [ 832.035214][ T5806] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 832.056350][ T5806] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 832.078942][ T5806] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 832.088584][ T5806] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 832.106578][ T5806] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 832.174576][T17536] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3639'. [ 832.223471][ T5806] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 832.236985][ T5806] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 832.254613][ T5806] usb 7-1: Product: syz [ 832.265301][ T5806] usb 7-1: Manufacturer: syz [ 832.286155][ T5806] cdc_wdm 7-1:1.0: skipping garbage [ 832.296920][ T5806] cdc_wdm 7-1:1.0: skipping garbage [ 832.320779][ T5806] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 832.332380][ T5806] cdc_wdm 7-1:1.0: Unknown control protocol [ 832.442325][ T5864] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 832.482615][ T11] block nbd3: Possible stuck request ffff888026938000: control (read@0,1024B). Runtime 600 seconds [ 832.496032][ T11] block nbd3: Possible stuck request ffff888026938200: control (read@1024,1024B). Runtime 600 seconds [ 832.507775][ T11] block nbd3: Possible stuck request ffff888026938400: control (read@2048,1024B). Runtime 600 seconds [ 832.518874][ T11] block nbd3: Possible stuck request ffff888026938600: control (read@3072,1024B). Runtime 600 seconds [ 832.591086][ C1] wdm_int_callback: 77 callbacks suppressed [ 832.591108][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 832.603637][ C1] wdm_int_callback: 77 callbacks suppressed [ 832.603649][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 832.616391][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 832.622965][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 832.629665][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 832.636263][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 832.650084][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 832.656677][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 832.662959][T12686] usb 7-1: USB disconnect, device number 52 [ 832.682308][ T5864] usb 5-1: Using ep0 maxpacket: 8 [ 832.693879][ T5864] usb 5-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5 [ 832.703097][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.750474][ T5864] usb 5-1: Product: syz [ 832.836087][ T5864] usb 5-1: Manufacturer: syz [ 832.846865][ T5864] usb 5-1: SerialNumber: syz [ 832.866719][ T5864] usb 5-1: config 0 descriptor?? [ 832.892067][ T5864] pwc: Philips PCVC720K/40 (ToUCam XS) USB webcam detected. [ 833.197250][ T5864] pwc: send_video_command error -71 [ 833.202525][ T5864] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 833.223323][T12686] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 833.241232][ T5864] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 833.353988][ T5864] usb 5-1: USB disconnect, device number 54 [ 833.433631][T12686] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 833.443275][T12686] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 833.454384][T12686] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 833.463394][T12686] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 833.474683][T12686] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 833.487887][T12686] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 833.498222][T12686] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 833.506254][T12686] usb 7-1: Product: syz [ 833.510611][T12686] usb 7-1: Manufacturer: й [ 833.524306][T12686] cdc_wdm 7-1:1.0: skipping garbage [ 833.531377][T12686] cdc_wdm 7-1:1.0: skipping garbage [ 833.552238][T12686] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 833.560849][T12686] cdc_wdm 7-1:1.0: Unknown control protocol [ 833.652344][ T5901] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 833.736908][ T5851] usb 7-1: USB disconnect, device number 53 [ 833.841566][ T5901] usb 1-1: device descriptor read/64, error -71 [ 833.843183][ T30] audit: type=1326 audit(1770740842.587:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17563 comm="syz.4.3647" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0691d9bf79 code=0x0 [ 834.092496][ T5901] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 834.222330][ T5901] usb 1-1: device descriptor read/64, error -71 [ 834.318925][ T30] audit: type=1800 audit(1770740843.067:854): pid=17567 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.3648" name="SYSV00000000" dev="tmpfs" ino=8 res=0 errno=0 [ 834.340483][ T5901] usb usb1-port1: attempt power cycle [ 834.632363][ T5851] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 834.672386][ T5901] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 834.704288][ T5901] usb 1-1: device descriptor read/8, error -71 [ 834.783780][ T5851] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 834.798248][ T5851] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 834.824017][ T5851] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 834.849546][ T5851] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 834.862340][ T5851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 834.878602][ T5851] usb 6-1: Product: syz [ 834.886453][ T5851] usb 6-1: Manufacturer: syz [ 834.898537][ T5851] usb 6-1: SerialNumber: syz [ 834.951811][T17579] tipc: Started in network mode [ 834.957622][T17579] tipc: Node identity d25bc9b9055a, cluster identity 4711 [ 834.966704][T17579] tipc: Enabled bearer , priority 0 [ 834.978689][T17579] tipc: Resetting bearer [ 835.003960][ T5901] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 835.033202][ T5901] usb 1-1: device descriptor read/8, error -71 [ 835.142723][ T5901] usb usb1-port1: unable to enumerate USB device [ 835.169676][ T5851] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 63 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 835.196459][ T5851] usb 6-1: USB disconnect, device number 63 [ 835.221821][ T5851] usblp0: removed [ 835.597029][T17576] tipc: Disabling bearer [ 835.960528][T17595] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 835.979824][T17595] batadv3: entered promiscuous mode [ 835.992545][T17595] team0: Port device batadv3 added [ 836.733339][ T5851] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 836.752496][T17603] sctp_transport_update_pmtu: 49 callbacks suppressed [ 836.752514][T17603] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 836.769911][T17603] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 836.780430][T17603] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 836.791002][T17603] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 836.803080][T17603] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 836.814332][T17603] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 836.825034][T17603] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 836.835640][T17603] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 836.846155][T17603] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 836.856784][T17603] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 836.993197][ T5851] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 837.007939][ T5851] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 837.037662][T17610] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 837.046816][ T5851] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 837.153287][T17610] batadv4: entered promiscuous mode [ 837.158595][ T5851] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 837.169855][ T5851] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 837.182788][T17610] team0: Port device batadv4 added [ 837.677152][ T5851] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 837.717045][ T5851] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 837.728527][ T5851] usb 7-1: Product: syz [ 837.735247][ T5851] usb 7-1: Manufacturer: syz [ 837.781593][ T5851] cdc_wdm 7-1:1.0: skipping garbage [ 837.800727][ T5851] cdc_wdm 7-1:1.0: skipping garbage [ 837.824277][ T5851] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 837.847702][ T5851] cdc_wdm 7-1:1.0: Unknown control protocol [ 837.997651][ T5851] usb 7-1: USB disconnect, device number 54 [ 838.502366][ T5901] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 838.823974][ T5901] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 838.837412][ T5901] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 838.848381][ T5901] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 838.858092][ T5901] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 838.869272][ T5901] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 838.886701][ T5901] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 838.896191][ T5901] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 838.904798][ T5901] usb 7-1: Product: syz [ 838.909048][ T5901] usb 7-1: Manufacturer: й [ 838.918543][ T5901] cdc_wdm 7-1:1.0: skipping garbage [ 838.929865][ T5901] cdc_wdm 7-1:1.0: skipping garbage [ 838.937628][ T5901] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 838.957446][ T5901] cdc_wdm 7-1:1.0: Unknown control protocol [ 839.074491][ T5806] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 839.204614][ T5851] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 839.236418][T12686] usb 7-1: USB disconnect, device number 55 [ 839.352874][ T5806] usb 5-1: Using ep0 maxpacket: 8 [ 839.368314][ T5806] usb 5-1: unable to get BOS descriptor or descriptor too short [ 839.382584][ T5806] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 839.396066][ T5851] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 839.410618][ T5806] usb 5-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 839.422395][ T5851] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 839.438290][ T5851] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 839.463971][ T5851] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 839.473604][ T5806] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 839.484083][ T5806] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.492067][ T5806] usb 5-1: Product: syz [ 839.496669][ T5851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 839.505971][ T5806] usb 5-1: Manufacturer: syz [ 839.590196][ T5806] usb 5-1: SerialNumber: syz [ 839.595240][ T5851] usb 1-1: Product: syz [ 839.603957][ T5851] usb 1-1: Manufacturer: syz [ 839.620159][ T5851] usb 1-1: SerialNumber: syz [ 839.871272][T17647] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3672'. [ 839.893323][ T5851] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 76 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 839.912159][ T5806] usb 5-1: USB disconnect, device number 55 [ 839.976196][T17650] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3673'. [ 840.001103][T17650] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3673'. [ 840.022811][T17649] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3672'. [ 840.068149][ T5851] usb 1-1: USB disconnect, device number 76 [ 840.078091][ T5851] usblp0: removed [ 840.904231][ T6043] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 840.962508][ T5851] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 840.972744][ T5806] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 841.072490][ T6043] usb 5-1: Using ep0 maxpacket: 8 [ 841.081996][ T6043] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 841.108085][ T6043] usb 5-1: config 0 has no interfaces? [ 841.115373][ T6043] usb 5-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 841.122903][ T5851] usb 6-1: Using ep0 maxpacket: 16 [ 841.126789][ T6043] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.130820][ T5851] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 841.138020][ T6043] usb 5-1: Product: syz [ 841.147622][ T5806] usb 1-1: Using ep0 maxpacket: 32 [ 841.152066][ T6043] usb 5-1: Manufacturer: syz [ 841.167954][ T5806] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 841.168553][ T6043] usb 5-1: SerialNumber: syz [ 841.184256][ T5851] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 841.202481][ T5806] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.205407][ T6043] usb 5-1: config 0 descriptor?? [ 841.210994][ T5851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.211017][ T5851] usb 6-1: Product: syz [ 841.211031][ T5851] usb 6-1: Manufacturer: syz [ 841.211046][ T5851] usb 6-1: SerialNumber: syz [ 841.217305][ T5851] usb 6-1: config 0 descriptor?? [ 841.248791][ T5806] usb 1-1: config 0 descriptor?? [ 841.264017][ T5806] gspca_main: sq930x-2.14.0 probing 041e:403c [ 841.484365][ T5806] gspca_sq930x: reg_r 001f failed -32 [ 841.489780][ T5806] sq930x 1-1:0.0: probe with driver sq930x failed with error -32 [ 843.644837][ T5806] usb 5-1: USB disconnect, device number 56 [ 843.747956][T17687] netlink: 'syz.4.3685': attribute type 1 has an invalid length. [ 843.761106][T12686] usb 6-1: USB disconnect, device number 64 [ 843.857015][ T6043] usb 1-1: USB disconnect, device number 77 [ 844.702333][T12686] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 844.774377][ T5806] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 844.870131][T12686] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 844.883235][T12686] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 845.026810][T12686] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 845.081815][T12686] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 845.154603][ T5806] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 845.182628][ T5806] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 845.218126][ T5806] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.245015][T12686] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 845.253617][T12686] usb 6-1: Product: syz [ 845.257773][T12686] usb 6-1: Manufacturer: syz [ 845.263592][T12686] usb 6-1: SerialNumber: syz [ 845.520243][ T5806] usb 1-1: config 0 descriptor?? [ 845.552732][ T5851] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 845.651894][ T5806] pwc: Askey VC010 type 2 USB webcam detected. [ 845.679710][T12686] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 65 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 845.822542][ T5851] usb 7-1: Using ep0 maxpacket: 32 [ 845.841671][ T5851] usb 7-1: unable to get BOS descriptor or descriptor too short [ 845.863927][ T5851] usb 7-1: config 7 has an invalid interface number: 187 but max is 0 [ 845.881676][T12686] usb 6-1: USB disconnect, device number 65 [ 845.886769][ T5851] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 845.977315][ T5851] usb 7-1: config 7 has no interface number 0 [ 845.985132][ T5851] usb 7-1: config 7 interface 187 altsetting 6 endpoint 0x7 has invalid wMaxPacketSize 0 [ 845.995134][ T5851] usb 7-1: config 7 interface 187 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 846.010174][T12686] usblp0: removed [ 846.018782][ T5806] pwc: recv_control_msg error -32 req 02 val 2b00 [ 846.026348][ T5851] usb 7-1: config 7 interface 187 has no altsetting 0 [ 846.037127][ T5806] pwc: recv_control_msg error -32 req 02 val 2700 [ 846.048504][ T5806] pwc: recv_control_msg error -32 req 02 val 2c00 [ 846.055199][ T5851] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 846.074739][ T5851] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.126682][ T5806] pwc: recv_control_msg error -32 req 04 val 1000 [ 846.152374][T17725] netlink: 'syz.4.3697': attribute type 1 has an invalid length. [ 846.172592][ T5820] Bluetooth: hci2: command 0x0406 tx timeout [ 846.201827][ T5851] usb 7-1: Product: syz [ 846.383848][ T5806] pwc: recv_control_msg error -32 req 04 val 1300 [ 846.390333][ T5851] usb 7-1: Manufacturer: syz [ 846.409004][ T5851] usb 7-1: SerialNumber: syz [ 846.415339][ T5806] pwc: recv_control_msg error -32 req 04 val 1400 [ 846.433323][ T5806] pwc: recv_control_msg error -32 req 02 val 2000 [ 846.456806][ T5806] pwc: recv_control_msg error -32 req 02 val 2100 [ 846.482104][ T5806] pwc: recv_control_msg error -32 req 04 val 1500 [ 846.691032][ T5806] pwc: recv_control_msg error -71 req 02 val 2400 [ 846.697963][ T5806] pwc: recv_control_msg error -71 req 02 val 2600 [ 846.705689][ T5806] pwc: recv_control_msg error -71 req 02 val 2900 [ 846.791373][ T5806] pwc: recv_control_msg error -71 req 02 val 2800 [ 846.801978][ T5806] pwc: recv_control_msg error -71 req 04 val 1100 [ 846.816711][ T5806] pwc: recv_control_msg error -71 req 04 val 1200 [ 846.833260][T12686] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 846.835017][ T5806] pwc: Registered as video103. [ 846.892396][ T5938] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 846.913086][T17733] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 846.921837][T17733] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 846.933581][T17733] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 847.004978][ T5851] usb 7-1: Cannot retrieve CPort count: -110 [ 847.011026][ T5851] usb 7-1: Cannot retrieve CPort count: -110 [ 847.043018][ T5806] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input48 [ 847.053535][ T5851] es2_ap_driver 7-1:7.187: probe with driver es2_ap_driver failed with error -110 [ 847.064905][ T30] audit: type=1400 audit(1770740855.737:855): avc: denied { watch_sb watch_reads } for pid=17715 comm="syz.6.3695" path="/227/bus/file1" dev="tmpfs" ino=1180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 847.150755][ T5806] usb 1-1: USB disconnect, device number 78 [ 847.162750][T12686] usb 6-1: Using ep0 maxpacket: 8 [ 847.191362][T12686] usb 6-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5 [ 847.210753][T12686] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.219298][T12686] usb 6-1: Product: syz [ 847.223972][T12686] usb 6-1: Manufacturer: syz [ 847.228609][T12686] usb 6-1: SerialNumber: syz [ 847.238212][T12686] usb 6-1: config 0 descriptor?? [ 847.243778][ T5938] usb 5-1: Using ep0 maxpacket: 16 [ 847.255509][T12686] pwc: Philips PCVC720K/40 (ToUCam XS) USB webcam detected. [ 847.263518][ T5938] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 847.274681][ T5938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 847.286225][ T5938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 847.296350][ T5938] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 847.306396][ T5938] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 847.327135][ T5938] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 847.336702][ T5938] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 847.344942][ T5938] usb 5-1: Manufacturer: syz [ 847.352150][ T5938] usb 5-1: config 0 descriptor?? [ 847.455675][T12686] pwc: send_video_command error -71 [ 847.466692][T12686] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 847.477344][T12686] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 847.489301][T12686] usb 6-1: USB disconnect, device number 66 [ 848.033161][ T5938] rc_core: IR keymap rc-hauppauge not found [ 848.039141][ T5938] Registered IR keymap rc-empty [ 848.044180][ T5938] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 848.063356][ T5938] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 848.083724][ T5938] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 848.119474][ T5938] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input49 [ 848.136965][ T5938] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 848.221699][ T5938] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 848.283892][T12686] usb 7-1: USB disconnect, device number 56 [ 848.327478][ T5938] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 848.362487][ T5938] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 848.542493][ T5938] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 848.857637][ T5938] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 848.882731][ T5938] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 848.902366][ T5938] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 848.922343][ T5938] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 848.942357][ T5938] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 848.963696][ T5938] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 848.973897][ T5938] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 848.989677][ T5938] usb 5-1: USB disconnect, device number 57 [ 849.142752][T12686] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 849.303676][T12686] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 849.340269][T12686] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 849.354003][T12686] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 849.377500][T12686] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 849.476484][T12686] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 849.484948][T12686] usb 7-1: Product: syz [ 849.489115][T12686] usb 7-1: Manufacturer: syz [ 849.493798][T12686] usb 7-1: SerialNumber: syz [ 850.086421][T17784] sctp_transport_update_pmtu: 49 callbacks suppressed [ 850.086440][T17784] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 850.103727][T17784] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 850.114264][T17784] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 850.125458][T17784] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 850.154161][T17784] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 850.164768][T17784] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 850.178028][T17784] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 850.188623][T17784] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 850.199186][T17784] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 850.209771][T17784] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 850.318503][T12686] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 57 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 850.398227][T12686] usb 7-1: USB disconnect, device number 57 [ 850.408534][T12686] usblp0: removed [ 850.692415][ T5851] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 850.888111][ T5851] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 850.911626][ T5851] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 850.930909][ T5851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.965024][ T5851] usb 5-1: config 0 descriptor?? [ 850.990627][ T5851] pwc: Askey VC010 type 2 USB webcam detected. [ 851.222323][ T5938] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 851.660519][ T5851] pwc: recv_control_msg error -32 req 02 val 2b00 [ 851.668018][ T5851] pwc: recv_control_msg error -32 req 02 val 2700 [ 851.676677][ T5851] pwc: recv_control_msg error -32 req 02 val 2c00 [ 851.684218][ T5851] pwc: recv_control_msg error -32 req 04 val 1000 [ 851.691270][ T5851] pwc: recv_control_msg error -32 req 04 val 1300 [ 851.699417][ T5851] pwc: recv_control_msg error -32 req 04 val 1400 [ 851.707390][ T5851] pwc: recv_control_msg error -32 req 02 val 2000 [ 851.714476][ T5851] pwc: recv_control_msg error -32 req 02 val 2100 [ 851.721444][ T5851] pwc: recv_control_msg error -32 req 04 val 1500 [ 851.722313][ T5938] usb 7-1: Using ep0 maxpacket: 8 [ 851.744123][ T5938] usb 7-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5 [ 851.767454][ T5938] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.783982][ T5938] usb 7-1: Product: syz [ 851.793739][ T5938] usb 7-1: Manufacturer: syz [ 851.802014][ T5938] usb 7-1: SerialNumber: syz [ 851.828600][ T5938] usb 7-1: config 0 descriptor?? [ 851.840384][ T5938] pwc: Philips PCVC720K/40 (ToUCam XS) USB webcam detected. [ 851.930086][ T5851] pwc: recv_control_msg error -71 req 02 val 2400 [ 851.936987][ T5851] pwc: recv_control_msg error -71 req 02 val 2600 [ 851.943808][ T5851] pwc: recv_control_msg error -71 req 02 val 2900 [ 851.950632][ T5851] pwc: recv_control_msg error -71 req 02 val 2800 [ 852.022179][ T5851] pwc: recv_control_msg error -71 req 04 val 1100 [ 852.029112][ T5851] pwc: recv_control_msg error -71 req 04 val 1200 [ 852.036957][ T5851] pwc: Registered as video103. [ 852.045961][ T5851] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input50 [ 852.068231][ T5938] pwc: send_video_command error -71 [ 852.074528][ T5851] usb 5-1: USB disconnect, device number 58 [ 852.082999][ T5938] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 852.109026][ T5938] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 852.139052][ T5938] usb 7-1: USB disconnect, device number 58 [ 852.157485][T17835] vlan2: entered promiscuous mode [ 852.163054][T17835] bridge0: entered promiscuous mode [ 852.204482][ T30] audit: type=1400 audit(1770740860.957:856): avc: denied { create } for pid=17838 comm="syz.7.3720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 852.224208][ T30] audit: type=1400 audit(1770740860.967:857): avc: denied { write } for pid=17838 comm="syz.7.3720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 853.766495][T17863] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3728'. [ 853.806564][T17863] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3728'. [ 854.252466][T17874] netlink: 35 bytes leftover after parsing attributes in process `syz.6.3730'. [ 854.547527][ T30] audit: type=1800 audit(1770740863.297:858): pid=17882 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.3733" name="SYSV00000000" dev="tmpfs" ino=9 res=0 errno=0 [ 854.615497][ T5938] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 854.802734][ T5938] usb 5-1: Using ep0 maxpacket: 32 [ 854.813163][ T5938] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 854.822415][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.839736][ T5938] usb 5-1: Product: syz [ 854.854701][ T5938] usb 5-1: Manufacturer: syz [ 854.859395][ T5938] usb 5-1: SerialNumber: syz [ 855.249278][ T5938] usb 5-1: config 0 descriptor?? [ 855.410125][T17893] input: syz1 as /devices/virtual/input/input51 [ 855.474454][ T5938] airspy 5-1:0.0: usb_control_msg() failed -32 request 09 [ 855.481627][ T5938] airspy 5-1:0.0: Could not detect board [ 855.487438][ T5938] airspy 5-1:0.0: probe with driver airspy failed with error -32 [ 856.552919][ T30] audit: type=1400 audit(1770740864.977:859): avc: denied { connect } for pid=17898 comm="syz.0.3739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 856.573140][ T30] audit: type=1400 audit(1770740864.977:860): avc: denied { setopt } for pid=17898 comm="syz.0.3739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 856.902372][ T5813] Bluetooth: hci1: unexpected event for opcode 0x0c05 [ 857.279266][ T30] audit: type=1800 audit(1770740866.027:861): pid=17925 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3744" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0 [ 857.385391][ T5806] usb 5-1: USB disconnect, device number 59 [ 857.612007][T17938] libceph: resolve 'c' (ret=-3): failed [ 859.072944][T17949] input: syz1 as /devices/virtual/input/input52 [ 859.088786][T17950] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3749'. [ 860.549715][T17969] x_tables: duplicate underflow at hook 2 [ 860.812357][ T5938] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 860.962906][ T5938] usb 6-1: Using ep0 maxpacket: 32 [ 861.225252][ T5938] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 861.236646][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.259291][ T5938] usb 6-1: Product: syz [ 861.272962][ T5938] usb 6-1: Manufacturer: syz [ 861.283802][ T5938] usb 6-1: SerialNumber: syz [ 861.420634][ T5938] usb 6-1: config 0 descriptor?? [ 861.470821][T17978] netlink: 35 bytes leftover after parsing attributes in process `syz.7.3758'. [ 861.794922][ T5938] airspy 6-1:0.0: usb_control_msg() failed -32 request 09 [ 861.802060][ T5938] airspy 6-1:0.0: Could not detect board [ 861.896447][ T5938] airspy 6-1:0.0: probe with driver airspy failed with error -32 [ 862.550722][T17997] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3764'. [ 862.563926][ T11] block nbd3: Possible stuck request ffff888026938000: control (read@0,1024B). Runtime 630 seconds [ 862.575601][ T11] block nbd3: Possible stuck request ffff888026938200: control (read@1024,1024B). Runtime 630 seconds [ 862.583856][T17997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3764'. [ 862.586705][ T11] block nbd3: Possible stuck request ffff888026938400: control (read@2048,1024B). Runtime 630 seconds [ 862.606601][ T11] block nbd3: Possible stuck request ffff888026938600: control (read@3072,1024B). Runtime 630 seconds [ 862.811620][T18003] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3763'. [ 863.275076][T18008] input: syz1 as /devices/virtual/input/input53 [ 863.979093][ T5938] usb 6-1: USB disconnect, device number 67 [ 864.165355][T18023] x_tables: duplicate underflow at hook 2 [ 865.496953][ T30] audit: type=1800 audit(1770740874.247:862): pid=18040 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.3775" name="SYSV00000000" dev="tmpfs" ino=11 res=0 errno=0 [ 866.333625][T18049] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3776'. [ 866.425242][T18049] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3776'. [ 867.062861][ T5813] Bluetooth: hci1: unexpected event for opcode 0x0c05 [ 867.360594][T18069] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 867.371872][T18069] team0: Port device batadv2 added [ 867.811602][T18078] vlan2: entered promiscuous mode [ 867.817172][T18078] bridge0: entered promiscuous mode [ 869.765838][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.780136][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.788776][ T30] audit: type=1400 audit(1770740878.167:863): avc: denied { connect } for pid=18088 comm="syz.6.3787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 870.859614][T18119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3794'. [ 870.921786][T18119] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3794'. [ 871.738295][T18130] input: syz1 as /devices/virtual/input/input54 [ 872.082512][ T5806] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 872.115107][T15267] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 872.253700][ T5806] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 872.457405][ T5806] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 872.467660][ T5806] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 872.493073][T15267] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 872.493799][ T5806] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.511581][T18150] tipc: Started in network mode [ 872.516472][T18150] tipc: Node identity 066e99558327, cluster identity 4711 [ 872.523719][T15267] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 872.534068][T18150] tipc: Enabled bearer , priority 0 [ 872.547200][T18150] tipc: Resetting bearer [ 872.554137][T15267] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 872.562716][ T5806] usb 5-1: config 0 descriptor?? [ 872.684118][T15267] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 872.704415][T15267] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 872.732443][T15267] usb 7-1: Product: syz [ 872.739063][T15267] usb 7-1: Manufacturer: syz [ 872.755330][T15267] usb 7-1: SerialNumber: syz [ 872.978874][T15267] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 59 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 873.043149][T18147] tipc: Disabling bearer [ 873.829641][T18172] netlink: 35 bytes leftover after parsing attributes in process `syz.0.3808'. [ 873.983076][ T30] audit: type=1326 audit(1770740882.737:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18173 comm="syz.5.3809" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7de359bf79 code=0x0 [ 874.873940][ T5806] usb 7-1: USB disconnect, device number 59 [ 874.881442][ T5806] usblp0: removed [ 874.947194][ T5938] usb 5-1: USB disconnect, device number 60 [ 875.282329][ T5938] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 875.342420][ T5806] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 875.443221][ T5938] usb 6-1: Using ep0 maxpacket: 16 [ 875.453404][ T5938] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 875.513180][ T5938] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 875.527536][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.528792][ T5806] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 875.535755][ T5938] usb 6-1: Product: syz [ 875.535775][ T5938] usb 6-1: Manufacturer: syz [ 875.535791][ T5938] usb 6-1: SerialNumber: syz [ 875.543350][ T5938] usb 6-1: config 0 descriptor?? [ 875.564992][T12686] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 875.659331][ T5806] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 875.676135][ T5806] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 875.693005][ T5806] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.729388][ T5806] usb 7-1: config 0 descriptor?? [ 875.734811][T12686] usb 1-1: Using ep0 maxpacket: 32 [ 875.754853][T12686] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 875.869111][T12686] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 876.281198][T12686] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 876.291123][T12686] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 876.312367][T12686] usb 1-1: Product: syz [ 876.316715][T12686] usb 1-1: Manufacturer: syz [ 876.322222][T12686] usb 1-1: SerialNumber: syz [ 876.329476][T12686] usb 1-1: config 0 descriptor?? [ 876.341366][T12686] hub 1-1:0.0: bad descriptor, ignoring hub [ 876.349876][T12686] hub 1-1:0.0: probe with driver hub failed with error -5 [ 876.457447][ T5806] usbhid 7-1:0.0: can't add hid device: -71 [ 876.466814][ T5806] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 876.486065][ T5806] usb 7-1: USB disconnect, device number 60 [ 876.862332][T12686] usb 1-1: reset high-speed USB device number 79 using dummy_hcd [ 876.917224][ T30] audit: type=1400 audit(1770740885.657:865): avc: denied { setopt } for pid=18213 comm="syz.7.3821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 877.306085][ T30] audit: type=1400 audit(1770740885.657:866): avc: denied { ioctl } for pid=18213 comm="syz.7.3821" path="socket:[58119]" dev="sockfs" ino=58119 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 877.457910][T18222] netlink: 35 bytes leftover after parsing attributes in process `syz.6.3822'. [ 878.025717][T12686] usb 6-1: USB disconnect, device number 68 [ 878.138091][ T30] audit: type=1326 audit(1770740886.887:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18232 comm="syz.5.3825" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7de359bf79 code=0x0 [ 879.408894][ T5901] usb 1-1: USB disconnect, device number 79 [ 881.552455][T12686] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 881.783362][T12686] usb 6-1: Using ep0 maxpacket: 32 [ 881.795173][T12686] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 881.805122][T12686] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 881.822008][T12686] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 881.831903][T12686] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 881.840299][T12686] usb 6-1: Product: syz [ 881.845137][T12686] usb 6-1: Manufacturer: syz [ 881.849948][T12686] usb 6-1: SerialNumber: syz [ 881.860239][T12686] usb 6-1: config 0 descriptor?? [ 881.874013][T12686] hub 6-1:0.0: bad descriptor, ignoring hub [ 881.880345][T12686] hub 6-1:0.0: probe with driver hub failed with error -5 [ 882.045466][ T30] audit: type=1800 audit(1770740890.797:868): pid=18293 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.3843" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 882.382346][T12686] usb 6-1: reset high-speed USB device number 69 using dummy_hcd [ 883.333918][T18315] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3849'. [ 884.394826][ T5901] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 884.573782][ T5901] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 884.682717][ T5901] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 884.706844][ T5806] usb 6-1: USB disconnect, device number 69 [ 884.713662][ T5901] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 884.752959][ T5901] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 884.762015][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 884.804899][ T5901] usb 5-1: Product: syz [ 884.809072][ T5901] usb 5-1: Manufacturer: syz [ 884.822336][ T5901] usb 5-1: SerialNumber: syz [ 884.830294][T18325] sctp_transport_update_pmtu: 108 callbacks suppressed [ 884.830312][T18325] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 884.880293][T18325] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 884.997097][T18325] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 885.052061][T18325] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 885.113859][T18325] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 885.166363][ T5901] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 61 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 885.215446][T18325] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 885.442713][T18338] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 885.450647][T18338] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 885.458525][T18338] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 885.466396][T18338] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 885.474262][T18338] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 885.482091][T18338] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 885.489975][T18338] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 885.497816][T18338] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 885.505674][T18338] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 885.513511][T18338] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 885.528582][T18325] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 885.643596][T18325] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 885.677491][T18325] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 885.712933][T18325] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 886.594433][ T6043] usb 5-1: USB disconnect, device number 61 [ 886.601595][ T6043] usblp0: removed [ 886.737715][T18353] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3861'. [ 887.613507][ T5851] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 887.732990][ T5901] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 887.832780][ T5851] usb 6-1: Using ep0 maxpacket: 32 [ 887.849960][ T5851] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 887.870274][ T5851] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 887.885405][ T5851] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 887.898069][ T5851] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 887.912389][ T5851] usb 6-1: Product: syz [ 887.920409][ T5851] usb 6-1: Manufacturer: syz [ 887.925441][ T5901] usb 1-1: Using ep0 maxpacket: 16 [ 887.932830][ T5901] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 887.944375][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 887.960328][ T5851] usb 6-1: SerialNumber: syz [ 887.968007][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 887.980394][ T5901] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 887.990453][ T5901] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 888.329143][ T5901] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 888.339027][ T5851] usb 6-1: config 0 descriptor?? [ 888.352498][ T5901] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 888.360607][ T5901] usb 1-1: Manufacturer: syz [ 888.366536][ T5851] hub 6-1:0.0: bad descriptor, ignoring hub [ 888.373929][ T5851] hub 6-1:0.0: probe with driver hub failed with error -5 [ 888.381508][ T5901] usb 1-1: config 0 descriptor?? [ 888.922551][ T5901] rc_core: IR keymap rc-hauppauge not found [ 889.360069][ T5851] usb 6-1: reset high-speed USB device number 70 using dummy_hcd [ 889.368239][ T5901] Registered IR keymap rc-empty [ 889.380421][ T5901] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 889.402868][ T5901] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 889.423239][ T5901] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 889.447180][ T5901] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input55 [ 889.471451][ T5901] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 889.502815][ T5901] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 889.522645][ T5901] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 889.552437][ T5901] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 889.582379][ T5901] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 889.602372][ T5901] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 889.684046][ T5901] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 889.785157][ T5901] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 889.858279][ T5901] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 889.997558][T18394] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 890.005248][T18394] batadv5: entered promiscuous mode [ 890.011316][T18398] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3875'. [ 890.021543][T18394] team0: Port device batadv5 added [ 890.133945][ T5901] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 890.168044][ T5901] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 890.177466][ T5901] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 890.217786][ T5901] usb 1-1: USB disconnect, device number 80 [ 890.719504][T18410] net_ratelimit: 44 callbacks suppressed [ 890.719516][T18410] IPv4: Oversized IP packet from 172.20.20.24 [ 890.733992][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 890.740470][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 890.802523][ T5901] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 890.962314][ T5901] usb 1-1: Using ep0 maxpacket: 16 [ 891.118220][ T5901] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 891.133014][ T5901] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 891.142748][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.151083][ T5901] usb 1-1: Product: syz [ 891.155998][ T5901] usb 1-1: Manufacturer: syz [ 891.160840][ T5901] usb 1-1: SerialNumber: syz [ 891.187698][ T5901] usb 1-1: config 0 descriptor?? [ 891.480161][ T5851] usb 6-1: USB disconnect, device number 70 [ 891.833026][T18429] netlink: 'syz.4.3884': attribute type 1 has an invalid length. [ 892.644855][ T11] block nbd3: Possible stuck request ffff888026938000: control (read@0,1024B). Runtime 660 seconds [ 892.655773][ T11] block nbd3: Possible stuck request ffff888026938200: control (read@1024,1024B). Runtime 660 seconds [ 892.667144][ T11] block nbd3: Possible stuck request ffff888026938400: control (read@2048,1024B). Runtime 660 seconds [ 892.678444][ T11] block nbd3: Possible stuck request ffff888026938600: control (read@3072,1024B). Runtime 660 seconds [ 892.946510][ T30] audit: type=1326 audit(1770740901.697:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18445 comm="syz.6.3890" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f749759bf79 code=0x0 [ 893.549184][T12686] usb 1-1: USB disconnect, device number 81 [ 893.712570][ T6043] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 893.992382][ T6043] usb 5-1: Using ep0 maxpacket: 32 [ 894.014747][ T6043] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 894.043564][ T6043] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 894.060077][T12686] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 894.090035][ T6043] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 894.117434][ T6043] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 894.142339][ T6043] usb 5-1: Product: syz [ 894.146706][ T6043] usb 5-1: Manufacturer: syz [ 894.153366][ T6043] usb 5-1: SerialNumber: syz [ 894.162566][ T6043] usb 5-1: config 0 descriptor?? [ 894.176127][ T6043] hub 5-1:0.0: bad descriptor, ignoring hub [ 894.184194][ T6043] hub 5-1:0.0: probe with driver hub failed with error -5 [ 894.243412][T12686] usb 1-1: Using ep0 maxpacket: 16 [ 894.256984][T12686] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 894.280431][T12686] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 894.309399][T12686] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 894.338134][T12686] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 894.373369][T12686] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.405319][T12686] usb 1-1: Product: syz [ 894.420796][T12686] usb 1-1: Manufacturer: syz [ 894.435908][T12686] usb 1-1: SerialNumber: syz [ 894.652667][ T5851] usb 5-1: reset high-speed USB device number 62 using dummy_hcd [ 894.866736][T12686] usb 1-1: 0:2 : does not exist [ 894.937326][T18475] loop6: detected capacity change from 0 to 524287999 [ 894.957922][T13454] buffer_io_error: 24 callbacks suppressed [ 894.957937][T13454] Buffer I/O error on dev loop6, logical block 0, async page read [ 894.980896][T13454] Buffer I/O error on dev loop6, logical block 0, async page read [ 894.990221][T13454] Buffer I/O error on dev loop6, logical block 0, async page read [ 894.998120][T13454] Buffer I/O error on dev loop6, logical block 0, async page read [ 895.006033][T13454] Buffer I/O error on dev loop6, logical block 0, async page read [ 895.013908][T13454] Buffer I/O error on dev loop6, logical block 0, async page read [ 895.021735][T13454] Buffer I/O error on dev loop6, logical block 0, async page read [ 895.029619][T13454] Buffer I/O error on dev loop6, logical block 0, async page read [ 895.037453][T13454] ldm_validate_partition_table(): Disk read failed. [ 895.045408][T13454] Buffer I/O error on dev loop6, logical block 0, async page read [ 895.053305][T13454] Buffer I/O error on dev loop6, logical block 0, async page read [ 895.061119][T13454] Dev loop6: unable to read RDB block 0 [ 895.066865][T13454] loop6: unable to read partition table [ 895.074286][T18475] ldm_validate_partition_table(): Disk read failed. [ 895.080940][T18475] Dev loop6: unable to read RDB block 0 [ 895.090576][T18475] loop6: unable to read partition table [ 895.104869][T18475] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 895.135008][T18479] netlink: 'syz.6.3901': attribute type 1 has an invalid length. [ 895.217528][T18485] netlink: 'syz.5.3903': attribute type 1 has an invalid length. [ 895.218067][T18479] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3901'. [ 895.257464][T18485] bond5: entered promiscuous mode [ 895.271335][T18485] 8021q: adding VLAN 0 to HW filter on device bond5 [ 895.285025][T18485] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3903'. [ 895.286199][T18479] 8021q: adding VLAN 0 to HW filter on device bond2 [ 895.318673][T18485] bond5: (slave bridge3): making interface the new active one [ 895.326455][T18485] bridge3: entered promiscuous mode [ 895.332821][T18485] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 895.632364][ T6043] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 895.782291][ T6043] usb 7-1: Using ep0 maxpacket: 16 [ 895.790432][ T6043] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 895.803171][ T6043] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 895.812373][ T6043] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.821191][ T6043] usb 7-1: Product: syz [ 895.827278][ T6043] usb 7-1: Manufacturer: syz [ 895.834886][ T6043] usb 7-1: SerialNumber: syz [ 895.845957][ T6043] usb 7-1: config 0 descriptor?? [ 896.654456][ T5851] usb 1-1: USB disconnect, device number 82 [ 896.704158][ T5901] usb 5-1: USB disconnect, device number 62 [ 897.182443][ T5851] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 897.409444][ T5851] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 897.426143][T18517] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3910'. [ 897.475790][ T5851] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 897.508046][ T5851] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 897.528757][ T5851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.565207][ T5851] usb 1-1: config 0 descriptor?? [ 897.980418][ T5851] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 897.988345][ T5851] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 897.997716][ T5851] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 898.007864][ T5851] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 898.018209][ T5851] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 898.018224][T18525] netlink: 'syz.7.3915': attribute type 1 has an invalid length. [ 898.033112][ T5851] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 898.040062][ T5851] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 898.051283][ T5851] cp2112 0003:10C4:EA90.0024: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 898.079475][T18525] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3915'. [ 898.156627][T18533] bond1: (slave gretap1): making interface the new active one [ 898.165273][T18533] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 898.179364][ T5851] cp2112 0003:10C4:EA90.0024: error requesting version [ 898.192994][ T5851] cp2112 0003:10C4:EA90.0024: probe with driver cp2112 failed with error -32 [ 898.407188][T12686] usb 7-1: USB disconnect, device number 61 [ 898.929126][T18545] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 899.262386][T12686] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 899.273897][ T30] audit: type=1400 audit(1770740908.027:870): avc: denied { setopt } for pid=18551 comm="syz.5.3924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 899.417254][T12686] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 899.427720][T12686] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 899.439239][T12686] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 899.455853][T12686] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 899.468201][T12686] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 899.477288][T12686] usb 5-1: Product: syz [ 899.481569][T12686] usb 5-1: Manufacturer: syz [ 899.486194][T12686] usb 5-1: SerialNumber: syz [ 899.696413][T12686] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 63 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 899.911441][T12686] usb 1-1: USB disconnect, device number 83 [ 899.976965][T18562] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3925'. [ 900.188299][T18569] netlink: 'syz.5.3928': attribute type 1 has an invalid length. [ 900.317923][T18573] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3928'. [ 900.796053][ T30] audit: type=1400 audit(1770740909.547:871): avc: denied { append } for pid=18577 comm="syz.6.3930" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 900.875722][ T30] audit: type=1400 audit(1770740909.547:872): avc: denied { map } for pid=18577 comm="syz.6.3930" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 900.899677][ T30] audit: type=1400 audit(1770740909.557:873): avc: denied { execute } for pid=18577 comm="syz.6.3930" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 902.144273][ T10] usb 5-1: USB disconnect, device number 63 [ 902.193897][ T10] usblp0: removed [ 902.901840][T18615] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3940'. [ 903.923044][ T10] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 904.092378][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 904.099064][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 904.113592][ T10] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 904.123733][ T10] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 904.132117][ T10] usb 6-1: Product: syz [ 904.141429][ T10] usb 6-1: Manufacturer: syz [ 904.146937][ T10] usb 6-1: SerialNumber: syz [ 904.155088][T18638] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 904.155400][ T10] usb 6-1: config 0 descriptor?? [ 904.174712][T18632] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 904.184018][ T10] hub 6-1:0.0: bad descriptor, ignoring hub [ 904.191274][ T10] hub 6-1:0.0: probe with driver hub failed with error -5 [ 904.356474][T18642] netlink: 'syz.6.3949': attribute type 1 has an invalid length. [ 904.421080][T18642] bond3: entered promiscuous mode [ 904.432853][T18642] 8021q: adding VLAN 0 to HW filter on device bond3 [ 904.475932][T18642] bond3: (slave bridge2): making interface the new active one [ 904.483522][T18642] bridge2: entered promiscuous mode [ 904.489657][T18642] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 904.506574][T15267] usb 6-1: USB disconnect, device number 71 [ 904.709479][T18657] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3952'. [ 904.934045][ T10] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 905.247539][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 905.284855][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 905.314569][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 905.339379][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 905.370523][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 905.393835][ T10] usb 5-1: Product: syz [ 905.398063][ T10] usb 5-1: Manufacturer: syz [ 905.492397][ T10] usb 5-1: SerialNumber: syz [ 905.530751][T18676] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3956'. [ 905.640049][ T30] audit: type=1326 audit(1770740914.387:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18679 comm="syz.5.3959" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7de359bf79 code=0x0 [ 905.803294][ T10] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 64 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 905.821061][ T10] usb 5-1: USB disconnect, device number 64 [ 905.842823][ T10] usblp0: removed [ 905.848955][ T30] audit: type=1800 audit(1770740914.537:875): pid=18648 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.3950" name="file1" dev="tmpfs" ino=1364 res=0 errno=0 [ 906.763065][T18703] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3965'. [ 907.161723][T18707] netlink: 'syz.7.3963': attribute type 1 has an invalid length. [ 907.251354][T18707] bond2: entered promiscuous mode [ 907.303980][T18707] 8021q: adding VLAN 0 to HW filter on device bond2 [ 907.356678][T18712] bond2: (slave bridge1): making interface the new active one [ 907.457293][T18712] bridge1: entered promiscuous mode [ 907.483350][T18712] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 907.628164][ T5901] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 908.016346][T18728] sctp_transport_update_pmtu: 49 callbacks suppressed [ 908.016368][T18728] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 908.044015][ T5901] usb 5-1: Using ep0 maxpacket: 32 [ 908.066286][ T5901] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 908.080098][ T5901] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 908.092102][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 908.102171][ T5901] usb 5-1: Product: syz [ 908.107236][T18728] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 908.167244][ T5901] usb 5-1: Manufacturer: syz [ 908.181830][ T5901] usb 5-1: SerialNumber: syz [ 908.203943][ T5901] usb 5-1: config 0 descriptor?? [ 908.219303][T18714] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 908.229919][ T5901] hub 5-1:0.0: bad descriptor, ignoring hub [ 908.248362][ T5901] hub 5-1:0.0: probe with driver hub failed with error -5 [ 908.281198][T18728] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 908.296932][T18728] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 908.314970][T18728] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 908.327029][T18728] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 908.358317][T18728] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 908.370156][T18728] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 908.432548][T18728] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 908.447077][T18728] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 908.537342][ T10] usb 5-1: USB disconnect, device number 65 [ 909.022508][T15267] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 909.031565][ T30] audit: type=1400 audit(1770740917.767:876): avc: denied { connect } for pid=18746 comm="syz.0.3977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 909.310273][T15267] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 909.336154][T15267] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 909.365585][T15267] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 909.424390][T15267] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 909.435473][T15267] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 909.466060][T15267] usb 7-1: Product: syz [ 909.479608][T15267] usb 7-1: Manufacturer: syz [ 909.497432][T15267] usb 7-1: SerialNumber: syz [ 909.755433][ T30] audit: type=1800 audit(1770740918.497:877): pid=18740 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.3974" name="file1" dev="tmpfs" ino=1510 res=0 errno=0 [ 909.778268][T15267] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 62 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 909.793970][T15267] usb 7-1: USB disconnect, device number 62 [ 909.816358][T15267] usblp0: removed [ 911.602329][ T10] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 911.765342][T18798] tipc: Enabled bearer , priority 0 [ 911.784041][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 912.191066][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 912.197272][T18798] tipc: Resetting bearer [ 912.202874][ T10] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 912.249466][T18797] tipc: Disabling bearer [ 912.269519][ T10] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 912.282418][ T10] usb 6-1: Product: syz [ 912.286977][ T10] usb 6-1: Manufacturer: syz [ 912.295474][ T10] usb 6-1: SerialNumber: syz [ 912.307574][ T30] audit: type=1800 audit(1770740921.027:878): pid=18801 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.3993" name="file1" dev="tmpfs" ino=1407 res=0 errno=0 [ 912.343965][ T10] usb 6-1: config 0 descriptor?? [ 912.349601][T18786] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 912.366444][ T10] hub 6-1:0.0: bad descriptor, ignoring hub [ 912.374939][ T10] hub 6-1:0.0: probe with driver hub failed with error -5 [ 912.445822][T18805] netlink: 'syz.7.3994': attribute type 1 has an invalid length. [ 912.454970][ T30] audit: type=1400 audit(1770740921.207:879): avc: denied { getattr } for pid=18804 comm="syz.7.3994" path="socket:[63414]" dev="sockfs" ino=63414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 912.672644][T15267] usb 6-1: USB disconnect, device number 72 [ 914.538485][T18850] netlink: 'syz.6.4011': attribute type 1 has an invalid length. [ 914.599411][T18855] x_tables: duplicate underflow at hook 2 [ 914.995503][T18874] netlink: 'syz.6.4021': attribute type 1 has an invalid length. [ 915.017789][T18874] bond4: entered promiscuous mode [ 915.023822][T18874] 8021q: adding VLAN 0 to HW filter on device bond4 [ 915.052428][ T10] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 915.071207][T18874] bond4: (slave bridge3): making interface the new active one [ 915.078850][T18874] bridge3: entered promiscuous mode [ 915.085206][T18874] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 915.263692][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 915.274767][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 915.284963][ T10] usb 6-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 915.294037][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.330689][ T10] usb 6-1: config 0 descriptor?? [ 916.280716][ T5851] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 916.313745][ T10] usb 6-1: string descriptor 0 read error: -71 [ 916.330373][ T10] uclogic 0003:5543:0045.0025: failed retrieving string descriptor #200: -71 [ 916.341272][ T10] uclogic 0003:5543:0045.0025: failed retrieving pen parameters: -71 [ 916.349542][ T10] uclogic 0003:5543:0045.0025: failed probing pen v2 parameters: -71 [ 916.361993][ T10] uclogic 0003:5543:0045.0025: failed probing parameters: -71 [ 916.370757][ T10] uclogic 0003:5543:0045.0025: probe with driver uclogic failed with error -71 [ 916.394250][ T10] usb 6-1: USB disconnect, device number 73 [ 916.443327][ T5851] usb 7-1: Using ep0 maxpacket: 16 [ 916.451718][ T5851] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 916.464384][ T5851] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 916.474471][ T5851] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.485673][ T5851] usb 7-1: Product: syz [ 916.489860][ T5851] usb 7-1: Manufacturer: syz [ 916.494710][ T5851] usb 7-1: SerialNumber: syz [ 916.501307][ T5851] usb 7-1: config 0 descriptor?? [ 916.512447][ T5851] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 916.523753][ T5851] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 916.621738][T18904] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 916.685117][T18905] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 917.462844][T15267] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 917.496784][ T5851] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 917.632307][T15267] usb 6-1: Using ep0 maxpacket: 16 [ 917.639090][T15267] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 917.647913][T15267] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 917.658081][T15267] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 917.668713][T15267] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 917.677878][T15267] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.686008][T15267] usb 6-1: Product: syz [ 917.690206][T15267] usb 6-1: Manufacturer: syz [ 917.694873][T15267] usb 6-1: SerialNumber: syz [ 917.799193][ T5851] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 917.831305][ T5851] em28xx 7-1:0.0: board has no eeprom [ 917.949701][ T5851] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 918.010585][ T5851] em28xx 7-1:0.0: dvb set to bulk mode. [ 918.040054][ T10] em28xx 7-1:0.0: Binding DVB extension [ 918.059446][ T5851] usb 7-1: USB disconnect, device number 63 [ 918.085654][ T5851] em28xx 7-1:0.0: Disconnecting em28xx [ 918.110104][T15267] usb 6-1: 0:2 : does not exist [ 918.128891][ T10] em28xx 7-1:0.0: Registering input extension [ 918.150451][ T5851] em28xx 7-1:0.0: Closing input extension [ 918.166212][ T5851] em28xx 7-1:0.0: Freeing device [ 919.501849][T18946] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4041'. [ 920.001196][T18949] tipc: Enabling of bearer rejected, already enabled [ 920.463995][T15267] usb 6-1: USB disconnect, device number 74 [ 922.147110][T18976] vlan2: entered promiscuous mode [ 922.159124][T18976] bridge0: entered promiscuous mode [ 923.289935][ T11] block nbd3: Possible stuck request ffff888026938000: control (read@0,1024B). Runtime 690 seconds [ 923.300912][ T11] block nbd3: Possible stuck request ffff888026938200: control (read@1024,1024B). Runtime 690 seconds [ 923.311911][ T11] block nbd3: Possible stuck request ffff888026938400: control (read@2048,1024B). Runtime 690 seconds [ 923.323870][ T11] block nbd3: Possible stuck request ffff888026938600: control (read@3072,1024B). Runtime 690 seconds [ 925.300066][T19056] tipc: Enabling of bearer rejected, already enabled [ 925.522295][ T5901] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 925.534174][T19061] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4065'. [ 925.660272][T19065] vlan2: entered promiscuous mode [ 925.665545][T19065] bridge0: entered promiscuous mode [ 925.712733][ T5901] usb 7-1: Using ep0 maxpacket: 16 [ 925.727596][ T5901] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 925.759890][ T5901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 925.786168][ T5901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 925.846849][ T5901] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 925.887814][ T5901] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 925.930167][ T5901] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 925.943590][ T5901] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 925.955529][ T5901] usb 7-1: Manufacturer: syz [ 925.967634][ T5901] usb 7-1: config 0 descriptor?? [ 926.262284][ T5901] rc_core: IR keymap rc-hauppauge not found [ 926.268241][ T5901] Registered IR keymap rc-empty [ 926.274678][ T5901] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 926.292327][ T5901] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 926.313065][ T5901] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 926.335026][ T5901] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input57 [ 926.357959][ T5901] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 926.382406][ T5901] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 926.414656][ T5901] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 926.452350][ T5901] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 926.473024][ T5901] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 926.512394][ T5901] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 926.561559][ T5901] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 927.545329][ T5901] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 927.597668][ T5901] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 927.622312][ T5901] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 927.645820][ T5901] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 927.660823][ T5901] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 927.719590][ T5901] usb 7-1: USB disconnect, device number 64 [ 927.935179][T19105] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4074'. [ 928.004710][ T5820] Bluetooth: hci0: command 0x0406 tx timeout [ 928.362295][ T5901] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 928.456460][T19138] No such timeout policy "syz1" [ 929.322521][ T30] audit: type=1400 audit(1770740937.237:880): avc: denied { remount } for pid=19121 comm="syz.7.4079" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 929.361314][ T5901] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 929.511230][ T5901] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 929.602577][ T30] audit: type=1400 audit(1770740937.247:881): avc: denied { create } for pid=19121 comm="syz.7.4079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 929.623966][ T5901] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 929.668706][ T5901] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 929.685331][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 929.716537][ T30] audit: type=1400 audit(1770740937.287:882): avc: denied { sys_admin } for pid=19121 comm="syz.7.4079" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 929.738170][ T5901] usb 6-1: Product: syz [ 929.750086][ T5901] usb 6-1: Manufacturer: syz [ 929.788052][ T5901] usb 6-1: SerialNumber: syz [ 929.813384][T19148] libceph: resolve 'c' (ret=-3): failed [ 930.050655][ T5901] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 75 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 930.486582][T19153] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4082'. [ 930.997319][T19164] vlan2: entered promiscuous mode [ 931.009496][T19164] bridge0: entered promiscuous mode [ 931.052803][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.059172][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.444076][ T5851] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 931.504037][T19176] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 931.579983][T12686] usb 6-1: USB disconnect, device number 75 [ 931.610837][T12686] usblp0: removed [ 931.614412][ T5851] usb 1-1: Using ep0 maxpacket: 16 [ 931.621674][ T5851] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 931.636913][ T5851] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 931.663575][ T5851] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 931.686813][ T5851] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 931.724878][ T5851] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 931.785827][ T5851] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 931.799284][ T5851] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 931.813707][ T5851] usb 1-1: Manufacturer: syz [ 931.829948][ T5851] usb 1-1: config 0 descriptor?? [ 932.820643][ T5851] rc_core: IR keymap rc-hauppauge not found [ 932.882537][ T5851] Registered IR keymap rc-empty [ 932.913068][ T5851] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 932.952366][ T5851] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 932.973192][ T5851] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 933.010079][ T5851] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input58 [ 934.358094][ T5851] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 934.554046][ T5851] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 934.572887][ T5851] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 934.592722][ T5851] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 934.631736][T19213] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 934.652471][ T5851] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 934.666950][T19209] vlan2: entered promiscuous mode [ 934.692338][ T5851] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 934.892342][ T5851] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 934.932873][ T5851] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 935.022333][ T5851] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 935.062386][ T5851] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 935.098733][ T5851] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 935.187228][ T5851] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 935.221762][ T5851] usb 1-1: USB disconnect, device number 84 [ 935.597565][T19236] tipc: Enabled bearer , priority 0 [ 935.970511][T19246] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4109'. [ 936.182851][T19251] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 936.192893][ T6043] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 936.513705][ T6043] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 936.542033][ T6043] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.591102][ T6043] usb 1-1: config 0 descriptor?? [ 936.603863][ T10] tipc: Node number set to 2236193109 [ 936.616480][ T6043] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 936.882729][ T10] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 937.029279][ T6043] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 937.042914][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 937.049664][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 937.063095][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 937.074635][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 937.085215][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 937.094991][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 937.244576][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 937.247201][ T6043] gspca_cpia1: usb_control_msg 01, error -32 [ 937.280019][ T6043] gspca_cpia1: usb_control_msg 01, error -71 [ 937.288174][ T30] audit: type=1800 audit(1770740946.047:883): pid=19273 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.4118" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0 [ 937.292315][ T6043] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 937.320183][ T10] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 937.331029][ T10] usb 6-1: Manufacturer: syz [ 937.358638][ T6043] usb 1-1: USB disconnect, device number 85 [ 937.362698][ T10] usb 6-1: config 0 descriptor?? [ 937.622279][ T10] rc_core: IR keymap rc-hauppauge not found [ 937.635007][ T10] Registered IR keymap rc-empty [ 937.648141][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 937.683847][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 937.715373][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 937.735629][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input59 [ 937.791109][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 938.046387][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 938.072359][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 938.083739][ T31] INFO: task syz.3.3461:16924 blocked for more than 143 seconds. [ 938.091610][ T31] Tainted: G L syzkaller #0 [ 938.098255][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 938.106110][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 938.115761][ T31] task:syz.3.3461 state:D stack:27672 pid:16924 tgid:16923 ppid:15842 task_flags:0x400140 flags:0x00080002 [ 938.151226][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 938.177840][T19290] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4121'. [ 938.275866][ T31] Call Trace: [ 938.312863][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 938.341346][ T31] [ 938.380433][ T31] ? __schedule+0xf67/0x5fa0 [ 938.392395][ T5901] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 938.440502][ T31] __schedule+0xfe6/0x5fa0 [ 938.446914][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 938.482541][ T31] ? __lock_acquire+0x4a5/0x2630 [ 938.488810][ T31] ? __pfx___schedule+0x10/0x10 [ 938.495034][ T31] ? find_held_lock+0x2b/0x80 [ 938.502334][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 938.505636][ T31] ? schedule+0x2bf/0x390 [ 938.515278][ T31] schedule+0xdd/0x390 [ 938.519681][ T31] schedule_preempt_disabled+0x13/0x30 [ 938.525266][ T31] __mutex_lock+0xc9a/0x1b90 [ 938.530166][ T31] ? sync_bdevs+0x153/0x480 [ 938.535916][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 938.536224][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 938.541024][ T31] ? __mutex_unlock_slowpath+0x15c/0x790 [ 938.553871][ T31] ? iput.part.0+0x1a0/0xf50 [ 938.558450][ T31] ? sync_bdevs+0x153/0x480 [ 938.562678][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 938.563098][ T31] sync_bdevs+0x153/0x480 [ 938.576015][ T31] ksys_sync+0xb2/0x150 [ 938.580186][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 938.585958][ T31] ? syscall_user_dispatch+0x76/0x130 [ 938.589283][ T10] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 938.593265][ T31] ? syscall_trace_enter+0x64/0x230 [ 938.604334][ T10] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 938.605924][ T31] ? do_syscall_64+0x94/0xf80 [ 938.618766][ T31] __do_sys_sync+0xe/0x20 [ 938.622339][ T5901] usb 7-1: Using ep0 maxpacket: 32 [ 938.623157][ T31] do_syscall_64+0xc9/0xf80 [ 938.631671][ T5901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 938.632908][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.649949][ T31] RIP: 0033:0x7fa0f139bf79 [ 938.650145][ T10] usb 6-1: USB disconnect, device number 76 [ 938.654455][ T31] RSP: 002b:00007fa0f21d9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 938.664500][ T5901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 938.683501][ T5901] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 938.693377][ T5901] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.695637][ T31] RAX: ffffffffffffffda RBX: 00007fa0f1615fa0 RCX: 00007fa0f139bf79 [ 938.701867][ T5901] usb 7-1: Product: syz [ 938.737766][ T5901] usb 7-1: Manufacturer: syz [ 938.764523][ T5901] usb 7-1: SerialNumber: syz [ 938.801940][ T5901] usb 7-1: config 0 descriptor?? [ 938.806820][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 938.816702][ T31] RBP: 00007fa0f1615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 938.819608][ T5901] input: KB Gear Tablet as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input60 [ 938.824793][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 938.843665][ T31] R13: 00007fa0f1616038 R14: 00007fa0f1615fa0 R15: 00007fff0ad97d98 [ 938.851667][ T31] [ 938.854782][ T31] [ 938.854782][ T31] Showing all locks held in the system: [ 938.865009][ T31] 7 locks held by kworker/0:1/10: [ 938.870077][ T31] 1 lock held by khungtaskd/31: [ 938.905703][ T31] #0: ffffffff8e5e2fe0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 938.915902][ T31] 3 locks held by kworker/u8:5/1096: [ 938.921198][ T31] #0: ffff8880b853acd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 938.931234][ T31] #1: ffff8880b8524608 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2b71/0x5fa0 [ 938.940823][ T31] #2: ffff88806b933250 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd10 [ 938.951853][ T31] 1 lock held by acpid/5159: [ 938.956452][ T31] #0: ffffffff8e5eebf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 938.967455][ T31] 2 locks held by getty/5564: [ 938.972128][ T31] #0: ffff88814cb8e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 938.982102][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 938.992287][ T31] 6 locks held by kworker/0:6/5901: [ 938.997470][ T31] #0: ffff888020283548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 939.008783][ T31] #1: ffffc9000454fd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 939.020249][ T31] #2: ffff888029b92198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 939.029244][ T31] #3: ffff888070c47198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 939.038561][ T31] #4: ffff8880780d0160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 939.048177][ T31] #5: ffffffff8fc0b388 (input_mutex){+.+.}-{4:4}, at: input_register_device.cold+0x5b/0x375 [ 939.058500][ T31] 1 lock held by udevd/7008: [ 939.063124][ T31] #0: ffff888026835358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 939.072542][ T31] 4 locks held by udevd/10340: [ 939.077298][ T31] #0: ffff88802236f8b8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 939.086462][ T31] #1: ffff888032500088 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 939.096045][ T31] #2: ffff88805f480878 (kn->active#31){++++}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 939.106198][ T31] #3: ffff888078146198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 939.118820][ T31] 4 locks held by udevd/13454: [ 939.123720][ T31] #0: ffff888077952540 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 939.135495][ T31] #1: ffff88805acfac88 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 939.145615][ T31] #2: ffff88803af03698 (kn->active#31){++++}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 939.155276][ T31] #3: ffff888070c47198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 939.167951][ T31] 1 lock held by syz.3.3461/16924: [ 939.173198][ T31] #0: ffff888026835358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 939.186621][ T31] [ 939.189646][ T31] ============================================= [ 939.189646][ T31] [ 939.210445][ T31] NMI backtrace for cpu 0 [ 939.210464][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 939.210487][ T31] Tainted: [L]=SOFTLOCKUP [ 939.210493][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 939.210503][ T31] Call Trace: [ 939.210509][ T31] [ 939.210517][ T31] dump_stack_lvl+0x100/0x190 [ 939.210547][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 939.210590][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 939.210612][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 939.210637][ T31] sys_info+0x141/0x190 [ 939.210656][ T31] watchdog+0xcc3/0xfe0 [ 939.210689][ T31] ? __pfx_watchdog+0x10/0x10 [ 939.210715][ T31] ? __kthread_parkme+0x18c/0x230 [ 939.210735][ T31] ? kthread+0x13a/0x450 [ 939.210754][ T31] ? __pfx_watchdog+0x10/0x10 [ 939.210777][ T31] kthread+0x370/0x450 [ 939.210796][ T31] ? __pfx_kthread+0x10/0x10 [ 939.210815][ T31] ret_from_fork+0x754/0xaf0 [ 939.210839][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 939.210862][ T31] ? __switch_to+0x7b9/0x10c0 [ 939.210888][ T31] ? __pfx_kthread+0x10/0x10 [ 939.210910][ T31] ret_from_fork_asm+0x1a/0x30 [ 939.210939][ T31] [ 939.210946][ T31] Sending NMI from CPU 0 to CPUs 1: [ 939.339881][ C1] NMI backtrace for cpu 1 [ 939.339896][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 939.339915][ C1] Tainted: [L]=SOFTLOCKUP [ 939.339920][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 939.339928][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 939.339952][ C1] Code: 96 75 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 fa 10 00 fb f4 7c 34 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 939.339964][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000242 [ 939.339977][ C1] RAX: 0000000003bb9323 RBX: ffff88801e2c2480 RCX: ffffffff8b7a84b5 [ 939.339986][ C1] RDX: 0000000000000000 RSI: ffffffff8dc522a0 RDI: ffffffff8bfaa9a0 [ 939.339994][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed10170a6745 [ 939.340003][ C1] R10: ffff8880b8533a2b R11: 0000000000000000 R12: ffffed1003c58490 [ 939.340011][ C1] R13: 0000000000000001 R14: ffffffff90b827d0 R15: 0000000000000000 [ 939.340020][ C1] FS: 0000000000000000(0000) GS:ffff8881246b9000(0000) knlGS:0000000000000000 [ 939.340034][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 939.340044][ C1] CR2: 000055d9b1850140 CR3: 0000000034151000 CR4: 00000000003526f0 [ 939.340053][ C1] Call Trace: [ 939.340059][ C1] [ 939.340063][ C1] default_idle+0x9/0x10 [ 939.340078][ C1] default_idle_call+0x6c/0xb0 [ 939.340092][ C1] do_idle+0x35b/0x4b0 [ 939.340115][ C1] ? __pfx_do_idle+0x10/0x10 [ 939.340135][ C1] cpu_startup_entry+0x4f/0x60 [ 939.340152][ C1] start_secondary+0x21d/0x2d0 [ 939.340168][ C1] ? __pfx_start_secondary+0x10/0x10 [ 939.340185][ C1] common_startup_64+0x13e/0x148 [ 939.340207][ C1] [ 939.514649][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 939.521511][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 939.532190][ T31] Tainted: [L]=SOFTLOCKUP [ 939.536497][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 939.546524][ T31] Call Trace: [ 939.549788][ T31] [ 939.552699][ T31] dump_stack_lvl+0x100/0x190 [ 939.557375][ T31] vpanic+0x20d/0x630 [ 939.561329][ T31] panic+0xd1/0xd1 [ 939.565026][ T31] ? __pfx_panic+0x10/0x10 [ 939.569421][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 939.575554][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 939.581694][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 939.587830][ T31] ? watchdog.cold+0x198/0x1ca [ 939.592749][ T31] ? watchdog+0xcd3/0xfe0 [ 939.597064][ T31] watchdog.cold+0x1a9/0x1ca [ 939.601643][ T31] ? __pfx_watchdog+0x10/0x10 [ 939.606305][ T31] ? __kthread_parkme+0x18c/0x230 [ 939.611311][ T31] ? kthread+0x13a/0x450 [ 939.615539][ T31] ? __pfx_watchdog+0x10/0x10 [ 939.620204][ T31] kthread+0x370/0x450 [ 939.624263][ T31] ? __pfx_kthread+0x10/0x10 [ 939.628835][ T31] ret_from_fork+0x754/0xaf0 [ 939.633408][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 939.638510][ T31] ? __switch_to+0x7b9/0x10c0 [ 939.643176][ T31] ? __pfx_kthread+0x10/0x10 [ 939.647745][ T31] ret_from_fork_asm+0x1a/0x30 [ 939.652496][ T31] [ 939.655762][ T31] Kernel Offset: disabled [ 939.660071][ T31] Rebooting in 86400 seconds..