last executing test programs: 8m33.763602332s ago: executing program 2 (id=3): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df012000040000000000000003003800010007000200010003000000000000000300000000010100ff"], 0x509) close(r2) r3 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46092101010700000000ffeb000100060006000000bc0300000000000040e0ff00000000009402000000000000fcffffff2ccc67651a530300070006000700000007000000fdffffffffffffff018000000000000000000000000c0000ff0100000000000001000000000000800104000000000000"], 0x78) close(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2000405, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 8m33.583746897s ago: executing program 2 (id=5): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1a) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000012000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) 8m33.493548163s ago: executing program 2 (id=6): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000002e00090027bd7000000000000400000024001180317f69d21d14fb146df75d37e42812e4618ae01ff30948985d0cb3b9bfc3c70f1998ad236a8c3fcfaf17f36df6ec698a09e58f069b1c7269e16195bf64f206f1b30a853f6d70c217eefc458f5bf3b8b2bad7508c396ed930a934b38316c54dbe6690d7ec0e5915a637af0dfa03a7808628936a5aeef87b6c9a170e3fd07843f656f8cf6d1e46ccb4f7bfe80a25ec9ff9"], 0x38}, 0x1, 0x0, 0x0, 0x42890}, 0x4004004) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x4, 0xf, 0x5392, 0xfb9d, 0x9, {0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x81, 0xb57, 0xc, 0x4b, 0x9}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x40}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003a80)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x60fb, @local, 0x9}, 0x1c, 0x0}}], 0x1, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/62, 0x3e, 0x1, &(0x7f0000000080)=""/72, 0x48}, &(0x7f00000001c0)=0x40) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 8m33.142709879s ago: executing program 3 (id=12): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1a) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00000080190000007f000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) 8m33.013614391s ago: executing program 3 (id=13): r0 = socket(0x10, 0x3, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000000180)=0x6) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) socket(0x2, 0x3, 0xff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcefffff0000000004"], 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x32, &(0x7f0000000080)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x7}}}}}}}, 0x0) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000100)=0x7, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r2}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x6, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xfffffffe}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20004000) 8m32.835876158s ago: executing program 3 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x270c40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x804) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x10000000000002, 0x9, 0xffbffffffffffffd, 0x77, 0x2, 0x2, 0x4002004c4, 0x1003, 0x8000000000000000, 0xc595, 0x0, 0x1, 0x9, 0x2000000000000000, 0x5, 0x8000000008d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m32.742351436s ago: executing program 3 (id=22): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1a) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000004000000000000000000000000000000100", [0x0, 0x2000000000001]}}) 8m32.571235873s ago: executing program 3 (id=24): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0xbc, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xff}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0xffff29a8}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0x547}, {0x8, 0x0, 0x7f}, {0x8}, {0x8, 0x0, 0x6}, {0x8, 0x0, 0x2}, {0x8, 0x0, 0x3ff}, {0x8, 0x0, 0xef6}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x2c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3}, {0x8, 0x0, 0x7ff}, {0x8}, {0x8}, {0x8, 0x0, 0x7}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2020}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7d}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xbc}, 0x1, 0x0, 0x0, 0x1}, 0x4) 8m31.573655518s ago: executing program 2 (id=33): syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 8m31.504757481s ago: executing program 32 (id=33): syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 8m30.703197094s ago: executing program 3 (id=38): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x4, 0x4, 0x2, {0xa, 0x4e22, 0x7, @local, 0x4}}}, 0x32) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00a80a00000500140004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r5, &(0x7f0000000100)={&(0x7f0000000880)=@l2tp6={0xa, 0x1100, 0x48, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x0, 0x1}, 0x80, 0x0}, 0x4) r6 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r6, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r6, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff, 0x100000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000080)={0xd7, 0x1000, 0x2000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="0413"], 0x2c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x8890}, 0x840) r8 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r8, &(0x7f0000000300)={0x2a, 0x1, 0xfffffffe}, 0xc) 8m30.597601804s ago: executing program 33 (id=38): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x4, 0x4, 0x2, {0xa, 0x4e22, 0x7, @local, 0x4}}}, 0x32) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00a80a00000500140004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r5, &(0x7f0000000100)={&(0x7f0000000880)=@l2tp6={0xa, 0x1100, 0x48, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x0, 0x1}, 0x80, 0x0}, 0x4) r6 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r6, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r6, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff, 0x100000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000080)={0xd7, 0x1000, 0x2000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="0413"], 0x2c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x8890}, 0x840) r8 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r8, &(0x7f0000000300)={0x2a, 0x1, 0xfffffffe}, 0xc) 2.768799111s ago: executing program 5 (id=3885): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2.701063228s ago: executing program 5 (id=3886): sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$video4linux(0x0, 0xeb74, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000002b00)={0x1, 0x0, {0xa, 0x4, 0x1011, 0x4, 0x2, 0x8, 0x0, 0x5}}) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000140)='hfsplus\x00', 0x204001, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000002dc0)={&(0x7f0000000680)=@l2tp6={0xa, 0x0, 0x7fff, @mcast2, 0x8}, 0x80, 0x0}, 0x41) connect$can_bcm(0xffffffffffffffff, &(0x7f00000004c0), 0x10) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a8004000f8ff070006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x4000040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x44080) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0xc800}, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc010) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{0x0}], 0x1}, 0x0) 2.640002484s ago: executing program 5 (id=3887): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0x14, &(0x7f0000000140)={0x20, 0x11, 0x4b, {0x4b, 0x22, "b44053da89b7f0b2feca22b09f62323744a2d45aaa92ccaa067c951e5e0f56debfafae8070930d2382d0ee1c25239070156712656c9aa52d91aacb67e3947546b03f2384790e740db1"}}, 0x0}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 2.510848407s ago: executing program 4 (id=3889): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x8000) fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) socket(0x10, 0x803, 0x0) socket(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000190c0)='syscall\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x9e}}, {0x2, 0x4e24, @local}, 0x221, 0x0, 0x0, 0x0, 0x7, 0x0, 0xd1, 0xbc, 0xfffc}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20004044}, 0x24040804) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 2.510281639s ago: executing program 4 (id=3890): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x270c40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x804) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x10000000000002, 0x9, 0xffbffffffffffffd, 0x77, 0x2, 0x2, 0x4002004c4, 0x1003, 0x8000000000000000, 0xc595, 0x0, 0x1, 0x9, 0x2000000000000000, 0x5, 0x8000000008d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.270632055s ago: executing program 4 (id=3891): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xd2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000440)='X', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r0, 0x1) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_rdma(0x10, 0x3, 0x14) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/address_bits', 0x202, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) 1.835820121s ago: executing program 4 (id=3893): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socket$netlink(0x10, 0x3, 0x0) r3 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r3, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.834760202s ago: executing program 1 (id=3902): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x46, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124"}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000640)="ae0a21129ca78473c1d6c43728c917c9a9f1ebec27de85eabdd816c761f1a38ea8cf6d3f1e6c2542e227f378907099f0b70dc39c5d5fcf99e5f46128e03fe2062486de3814edcfe09402c6f10cd361da26bd4101e9317481599b4166021e0c6ecc91dc0ee442978ef5e097116957af5a34caf30040d2fc7d"}) 1.606204799s ago: executing program 0 (id=3895): sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$video4linux(0x0, 0xeb74, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000002b00)={0x1, 0x0, {0xa, 0x4, 0x1011, 0x4, 0x2, 0x8, 0x0, 0x5}}) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000140)='hfsplus\x00', 0x204001, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000002dc0)={&(0x7f0000000680)=@l2tp6={0xa, 0x0, 0x7fff, @mcast2, 0x8}, 0x80, 0x0}, 0x41) connect$can_bcm(0xffffffffffffffff, &(0x7f00000004c0), 0x10) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a8004000f8ff070006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x4000040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x44080) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0xc800}, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc010) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{0x0}], 0x1}, 0x0) 1.5292119s ago: executing program 0 (id=3896): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xd2, &(0x7f0000006680)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000440)='X', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r0, 0x1) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_rdma(0x10, 0x3, 0x14) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/address_bits', 0x202, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) 931.040282ms ago: executing program 1 (id=3897): syz_io_uring_setup(0x4504, &(0x7f0000000240)={0x0, 0x0, 0x13290, 0x100002, 0xef}, 0x0, 0x0, &(0x7f0000000000)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x6, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x7, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x9, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x80001000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0xd, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x4, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7f, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0x4, 0xa, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0xfffffffe, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1007, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x4, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x4006, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0xf, 0x0, 0x0, 0xa, 0x0, 0x1, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x40, @remote}}, @sadb_address={0x5, 0x6, 0x32, 0x60, 0x0, @in6={0xa, 0x4e24, 0x6c66, @mcast1, 0xfffffff8}}]}, 0x50}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)='\xb0\xfb\xd9\x9a\xbe\r\xcc:\x9b\xd0}\xe8\xff\xff\xff\xff\xff\xff\xff\x7f\xce\xf5\x1a\x01\xd6\a\xfe\xb8\x92~wS\x87\xd9\x9e0y\xc9\x8cw-zu(ht\xa1~\x9a\x8d^+\x9f\xee\x9a(&W\\\xbb\xd5W\xeb\x06\x9dva\x06\xe3\x97\xa1\x88\x83W{\x00\xff\xff\xff\xff\xff\xff\xff\xe9\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00)o\b~\xe3t`\xc9=;o\xe5\xb4T)\x04\xf9k\xfb%t\xa7\x80c\xbb\xeb\x10\xb8\x01', 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x8000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 674.833681ms ago: executing program 0 (id=3898): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) getsockopt$inet_int(r0, 0x0, 0x21, 0x0, &(0x7f0000000100)) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x94f34000) sendmsg$tipc(r1, &(0x7f0000000600)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x2, 0x4}, 0x2}}, 0x10, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000280)="450a99ccfff280de2953871ceb779635e02a2f4a1d0fcd5df05ee0cc616c02e7a987128cf11362c7d7b2bc479b402cd657e77f7c26edd6c8bcd2b3412d570ba8b547755fc31d98278d282abd5e32f3c3a9dcece75c0d73c485dabad175acb1ecfc4035a59c1481f0cdc54f073069dcfcf95f53c09b6dc0a5b3def91c388a673b3b9173242068d0cad31158a88a5412cdd2ffcd0f9794f245f93fb258a0a94e4ea669ce80a654e4f61b42b92c1b2b8770ee99007ec91080588ebe", 0xba}, {&(0x7f0000000380)="33f344add72ecfb0746eaa2589e0c525a83146888c9a8d7d3448b541c01a766feb4125cf2058bd737f9b9e97aaba45dcdf02cdb3e0", 0x35}, {0x0}], 0x4, &(0x7f0000000580), 0x0, 0x80}, 0x0) 585.070847ms ago: executing program 5 (id=3899): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x8000) fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) socket(0x10, 0x803, 0x0) socket(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000190c0)='syscall\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x9e}}, {0x2, 0x4e24, @local}, 0x221, 0x0, 0x0, 0x0, 0x7, 0x0, 0xd1, 0xbc, 0xfffc}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20004044}, 0x24040804) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 561.485568ms ago: executing program 4 (id=3901): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x270c40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x804) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x10000000000002, 0x9, 0xffbffffffffffffd, 0x77, 0x2, 0x2, 0x4002004c4, 0x1003, 0x8000000000000000, 0xc595, 0x0, 0x1, 0x9, 0x2000000000000000, 0x5, 0x8000000008d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 478.23898ms ago: executing program 5 (id=3903): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xd2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000440)='X', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r0, 0x1) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_rdma(0x10, 0x3, 0x14) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/address_bits', 0x202, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) 321.072522ms ago: executing program 4 (id=3904): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, 0x0) 230.902362ms ago: executing program 0 (id=3905): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0xf, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x10005}}, 0x30) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 230.485321ms ago: executing program 0 (id=3906): sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$video4linux(0x0, 0xeb74, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000002b00)={0x1, 0x0, {0xa, 0x4, 0x1011, 0x4, 0x2, 0x8, 0x0, 0x5}}) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000140)='hfsplus\x00', 0x204001, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000002dc0)={&(0x7f0000000680)=@l2tp6={0xa, 0x0, 0x7fff, @mcast2, 0x8}, 0x80, 0x0}, 0x41) connect$can_bcm(0xffffffffffffffff, &(0x7f00000004c0), 0x10) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a8004000f8ff070006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x4000040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x44080) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0xc800}, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc010) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{0x0}], 0x1}, 0x0) 150.823431ms ago: executing program 0 (id=3907): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4b, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df793"}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000640)="ae0a21129ca78473c1d6c43728c917c9a9f1ebec27de85eabdd816c761f1a38ea8cf6d3f1e6c2542e227f378907099f0b70dc39c5d5fcf99e5f46128e03fe2062486de3814edcfe09402c6f10cd361da26bd4101e9317481599b4166021e0c6ecc91dc0ee442978ef5e097116957af5a34caf30040d2fc7d"}) 70.793661ms ago: executing program 1 (id=3908): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x8000) fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) socket(0x10, 0x803, 0x0) socket(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000190c0)='syscall\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x9e}}, {0x2, 0x4e24, @local}, 0x221, 0x0, 0x0, 0x0, 0x7, 0x0, 0xd1, 0xbc, 0xfffc}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20004044}, 0x24040804) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 70.372098ms ago: executing program 5 (id=3909): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0x14, &(0x7f0000000140)={0x20, 0x11, 0x70, {0x70, 0x22, "b44053da89b7f0b2feca22b09f62323744a2d45aaa92ccaa067c951e5e0f56debfafae8070930d2382d0ee1c25239070156712656c9aa52d91aacb67e3947546b03f2384790e740db1b49acf76b065698d55075f8e54af988ff2ed16ce0c0f439321bbf26a8b2de2bf9d85781516"}}, 0x0}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 69.989768ms ago: executing program 1 (id=3910): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/85, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000300)={[0x5, 0x4000000001ff, 0x100, 0x800000084, 0x5, 0x200000401, 0x6, 0xfffffffffefffff7, 0xfffffdfffffffffd, 0x8, 0x102000081, 0x10000000000ba25, 0x4, 0x1000000003, 0xfffffffffffffffc, 0x62b1], 0xdddd1000, 0x51e2983306075f86}) 359.334µs ago: executing program 1 (id=3911): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 0s ago: executing program 1 (id=3912): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x270c40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x804) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x10000000000002, 0x9, 0xffbffffffffffffd, 0x77, 0x2, 0x2, 0x4002004c4, 0x1003, 0x8000000000000000, 0xc595, 0x0, 0x1, 0x9, 0x2000000000000000, 0x5, 0x8000000008d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 1 (id=3913): syz_open_procfs(0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) getsockopt$inet_int(r0, 0x0, 0x21, 0x0, &(0x7f0000000100)) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x94f34000) sendmsg$tipc(r1, &(0x7f0000000600)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x2, 0x4}, 0x2}}, 0x10, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000280)="450a99ccfff280de2953871ceb779635e02a2f4a1d0fcd5df05ee0cc616c02e7a987128cf11362c7d7b2bc479b402cd657e77f7c26edd6c8bcd2b3412d570ba8b547755fc31d98278d282abd5e32f3c3a9dcece75c0d73c485dabad175acb1ecfc4035a59c1481f0cdc54f073069dcfcf95f53c09b6dc0a5b3def91c388a673b3b9173242068d0cad31158a88a5412cdd2ffcd0f9794f245f93fb258a0a94e4ea669ce80a654e4f61b42b92c1b2b8770ee99007ec91080588ebe", 0xba}, {&(0x7f0000000380)="33f344add72ecfb0746eaa2589e0c525a83146888c9a8d7d3448b541c01a766feb4125cf2058bd737f9b9e97aaba45dcdf02cdb3e0", 0x35}, {0x0}], 0x4, &(0x7f0000000580), 0x0, 0x80}, 0x0) kernel console output (not intermixed with test programs): ntrol_msg returned -32 [ 352.554986][ T1905] usbtmc 5-1:16.0: can't read capabilities [ 352.601400][T12928] syzkaller0: entered promiscuous mode [ 352.603203][T12928] syzkaller0: entered allmulticast mode [ 352.736882][T12934] binder: BINDER_SET_CONTEXT_MGR already set [ 352.738873][T12934] binder: 12933:12934 ioctl 4018620d 200000000100 returned -16 [ 352.743978][T12934] binder: BINDER_SET_CONTEXT_MGR already set [ 352.746124][T12934] binder: 12933:12934 ioctl 4018620d 200000004a80 returned -16 [ 353.252109][T12940] usbtmc 5-1:16.0: INITIATE_CLEAR returned 0 [ 353.470743][T12943] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 353.474498][ T53] usb 5-1: USB disconnect, device number 31 [ 353.683721][T12952] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2447'. [ 353.816673][ T5936] Bluetooth: hci1: command tx timeout [ 354.286685][ T5936] Bluetooth: hci0: command tx timeout [ 354.461691][T12964] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2450'. [ 354.478757][T12964] nbd: must specify at least one socket [ 354.622794][T12968] fuse: Bad value for 'group_id' [ 354.625215][T12968] fuse: Bad value for 'group_id' [ 354.669630][T12970] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2452'. [ 354.704927][T12973] binder: BINDER_SET_CONTEXT_MGR already set [ 354.707896][T12973] binder: 12972:12973 ioctl 4018620d 200000000100 returned -16 [ 354.713253][T12973] binder: BINDER_SET_CONTEXT_MGR already set [ 354.715388][T12973] binder: 12972:12973 ioctl 4018620d 200000004a80 returned -16 [ 354.969019][T12984] fuse: Unknown parameter 'grou00000000000000000000' [ 355.006411][T12987] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2459'. [ 355.010407][T12987] nbd: must specify at least one socket [ 355.057259][ T1905] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 355.226647][ T1905] usb 10-1: Using ep0 maxpacket: 8 [ 355.231440][ T1905] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 355.234955][ T1905] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 355.238522][ T1905] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 355.242483][ T1905] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 355.246792][ T1905] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 355.252719][ T1905] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 355.256281][ T1905] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.465718][ T1905] usb 10-1: usb_control_msg returned -32 [ 355.467787][ T1905] usbtmc 10-1:16.0: can't read capabilities [ 355.593206][T12997] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2463'. [ 355.674321][T12999] syzkaller0: entered promiscuous mode [ 355.676691][T12999] syzkaller0: entered allmulticast mode [ 355.891876][ T5936] Bluetooth: hci1: command tx timeout [ 356.173398][T13017] usbtmc 10-1:16.0: INITIATE_CLEAR returned 0 [ 357.198238][T13026] fuse: Unknown parameter 'grou00000000000000000000' [ 357.273103][T13030] fuse: Bad value for 'fd' [ 357.424264][T13037] binder: BINDER_SET_CONTEXT_MGR already set [ 357.426254][T13037] binder: 13036:13037 ioctl 4018620d 200000000100 returned -16 [ 357.438549][T13037] binder: BINDER_SET_CONTEXT_MGR already set [ 357.441247][T13037] binder: 13036:13037 ioctl 4018620d 200000004a80 returned -16 [ 357.822892][ T5930] usb 10-1: USB disconnect, device number 19 [ 357.857285][T13044] fuse: Bad value for 'user_id' [ 357.859338][T13044] fuse: Bad value for 'user_id' [ 357.967107][ T5289] Bluetooth: hci1: command tx timeout [ 358.247437][T13052] fuse: Unknown parameter 'grou00000000000000000000' [ 358.313368][T13056] fuse: Bad value for 'fd' [ 358.403311][T13061] nbd: socks must be embedded in a SOCK_ITEM attr [ 358.424522][T13059] syzkaller0: entered promiscuous mode [ 358.426313][T13059] syzkaller0: entered allmulticast mode [ 358.474781][ T5935] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 358.480479][ T5935] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 358.483896][ T5935] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 358.488739][ T5935] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 358.492558][ T5935] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 358.726740][ T830] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 358.886567][ T830] usb 5-1: Using ep0 maxpacket: 8 [ 358.890167][ T830] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 358.893344][ T830] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 358.894335][T13069] input: syz0 as /devices/virtual/input/input40 [ 358.897459][ T830] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 358.903938][ T830] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 358.910184][ T830] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 358.915815][ T830] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 358.920427][ T830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.924394][ T40] audit: type=1400 audit(1775516987.089:534): avc: denied { read } for pid=13067 comm="syz.5.2485" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 358.940692][ T40] audit: type=1400 audit(1775516987.099:535): avc: denied { ioctl } for pid=13067 comm="syz.5.2485" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 359.020825][T13069] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2485'. [ 359.031685][T13069] tmpfs: Bad value for 'mpol' [ 359.136082][ T830] usb 5-1: usb_control_msg returned -32 [ 359.139375][ T830] usbtmc 5-1:16.0: can't read capabilities [ 359.806721][ T5289] Bluetooth: hci2: command 0x0406 tx timeout [ 359.982336][T13079] fuse: Unknown parameter 'group_i00000000000000000000' [ 360.032370][T13068] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 360.242036][T13063] chnl_net:caif_netlink_parms(): no params data found [ 360.332174][ T79] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.348255][T13063] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.352813][T13063] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.356132][T13063] bridge_slave_0: entered allmulticast mode [ 360.363318][T13063] bridge_slave_0: entered promiscuous mode [ 360.369216][T13063] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.372536][T13063] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.375800][T13063] bridge_slave_1: entered allmulticast mode [ 360.380560][T13063] bridge_slave_1: entered promiscuous mode [ 360.409209][ T79] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.422069][T13063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.428822][T13063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.457291][T13063] team0: Port device team_slave_0 added [ 360.463349][T13063] team0: Port device team_slave_1 added [ 360.486998][T13063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.489933][T13063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.500253][T13063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.504813][T13063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.507243][T13063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.515831][T13063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.526672][ T5936] Bluetooth: hci3: command tx timeout [ 360.544939][T13063] hsr_slave_0: entered promiscuous mode [ 360.548989][T13063] hsr_slave_1: entered promiscuous mode [ 360.552128][T13063] debugfs: 'hsr0' already exists in 'hsr' [ 360.554711][T13063] Cannot create hsr debugfs directory [ 360.579704][ T79] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.650406][ T79] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.791284][ T79] bridge_slave_1: left allmulticast mode [ 360.793302][ T79] bridge_slave_1: left promiscuous mode [ 360.795623][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.812163][ T79] bridge_slave_0: left allmulticast mode [ 360.814956][ T79] bridge_slave_0: left promiscuous mode [ 360.817563][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.900246][T13123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2491'. [ 361.036853][ T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.043275][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.050456][ T79] bond0 (unregistering): Released all slaves [ 361.417269][ T79] hsr_slave_0: left promiscuous mode [ 361.420289][ T79] hsr_slave_1: left promiscuous mode [ 361.422814][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.423519][T13139] fuse: Unknown parameter 'group_i00000000000000000000' [ 361.425770][ T79] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.434105][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.436726][ T79] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.444972][ T79] veth1_macvtap: left promiscuous mode [ 361.453999][ T79] veth0_macvtap: left promiscuous mode [ 361.461024][ T79] veth1_vlan: left promiscuous mode [ 361.470289][ T79] veth0_vlan: left promiscuous mode [ 361.499596][ T5930] usb 5-1: USB disconnect, device number 32 [ 361.545459][T13143] fuse: Bad value for 'fd' [ 361.682633][ T79] team0 (unregistering): Port device team_slave_1 removed [ 361.700146][ T79] team0 (unregistering): Port device team_slave_0 removed [ 361.788952][ T79] lo (unregistering): left allmulticast mode [ 361.904381][T13165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2499'. [ 361.928500][T13147] syzkaller0: entered promiscuous mode [ 361.930791][T13147] syzkaller0: entered allmulticast mode [ 361.992194][T13152] syzkaller0: entered promiscuous mode [ 361.994150][T13152] syzkaller0: entered allmulticast mode [ 362.606696][ T5936] Bluetooth: hci3: command tx timeout [ 364.686863][ T5936] Bluetooth: hci3: command tx timeout [ 364.940316][T13188] fuse: Bad value for 'fd' [ 364.989994][T13063] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 364.996232][T13194] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2507'. [ 365.005387][T13063] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 365.036821][T13063] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 365.062305][T13063] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 365.173876][T13063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.196217][T13063] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.211401][ T1193] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.214040][ T1193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.224984][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.228127][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.233685][ T79] IPVS: stop unused estimator thread 0... [ 365.283029][T13216] fuse: Unknown parameter 'group_id00000000000000000000' [ 365.383459][T13223] syzkaller0: entered promiscuous mode [ 365.386162][T13223] syzkaller0: entered allmulticast mode [ 365.432462][T13063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.501301][T13228] fuse: Bad value for 'fd' [ 365.654052][T13063] veth0_vlan: entered promiscuous mode [ 365.662535][T13063] veth1_vlan: entered promiscuous mode [ 365.683690][T13063] veth0_macvtap: entered promiscuous mode [ 365.693773][T13063] veth1_macvtap: entered promiscuous mode [ 365.709442][T13063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.717913][T13063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.726041][ T1193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.730977][ T1193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.735452][ T1193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.740621][ T1193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.795211][ T1193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.803934][ T1193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.825968][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.830908][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.885892][T13244] syzkaller0: entered promiscuous mode [ 365.889371][T13244] syzkaller0: entered allmulticast mode [ 365.903005][T13246] fuse: Bad value for 'user_id' [ 365.904721][T13246] fuse: Bad value for 'user_id' [ 365.934292][T13250] fuse: Bad value for 'fd' [ 365.935075][T13248] syzkaller0: entered promiscuous mode [ 365.938644][T13248] syzkaller0: entered allmulticast mode [ 366.029388][T13254] syzkaller0: entered promiscuous mode [ 366.031353][T13254] syzkaller0: entered allmulticast mode [ 366.096703][ T5982] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 366.256807][ T5982] usb 10-1: Using ep0 maxpacket: 8 [ 366.260519][ T5982] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 366.263353][ T5982] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 366.266712][ T5982] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 366.269795][ T5982] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 366.273009][ T5982] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 366.277557][ T5982] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 366.282262][ T5982] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.494688][ T5982] usb 10-1: usb_control_msg returned -32 [ 366.497542][ T5982] usbtmc 10-1:16.0: can't read capabilities [ 366.776642][ T5936] Bluetooth: hci3: command tx timeout [ 367.483243][T13264] binder_alloc: 13263: binder_alloc_buf, no vma [ 367.483278][ T40] audit: type=1400 audit(1775516995.649:536): avc: denied { call } for pid=13263 comm="syz.0.2528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 367.922112][T13275] fuse: Invalid rootmode [ 367.973793][T13278] fuse: Bad value for 'user_id' [ 367.975900][T13278] fuse: Bad value for 'user_id' [ 368.028095][T13280] syzkaller0: entered promiscuous mode [ 368.030455][T13280] syzkaller0: entered allmulticast mode [ 368.449306][ T40] audit: type=1400 audit(1775516996.609:537): avc: denied { transfer } for pid=13283 comm="syz.0.2536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 368.453198][T13284] binder: 13283:13284 ioctl c0306201 200000000700 returned -14 [ 369.056118][T13301] fuse: Invalid rootmode [ 369.133216][T13303] fuse: Bad value for 'user_id' [ 369.135934][T13303] fuse: Bad value for 'user_id' [ 369.447303][T13311] syzkaller0: entered promiscuous mode [ 369.449243][T13311] syzkaller0: entered allmulticast mode [ 369.587968][T13316] fuse: Unknown parameter 'group_id00000000000000000000' [ 369.760827][T13324] fuse: Invalid rootmode [ 370.896651][ T5930] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 370.966684][ T34] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 371.056640][ T5930] usb 9-1: Using ep0 maxpacket: 8 [ 371.060194][ T5930] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 371.063592][ T5930] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 371.068074][ T5930] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 371.071861][ T5930] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 371.075380][ T5930] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 371.081542][ T5930] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 371.084602][ T5930] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.103549][T13357] binder: 13356:13357 ioctl c0306201 200000000700 returned -14 [ 371.138865][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.143506][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.148060][ T34] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 371.154425][ T34] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 371.158583][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.164272][ T34] usb 6-1: config 0 descriptor?? [ 371.166910][ T5936] Bluetooth: hci1: command 0x0406 tx timeout [ 371.295953][ T5930] usb 9-1: usb_control_msg returned -32 [ 371.300342][ T5930] usbtmc 9-1:16.0: can't read capabilities [ 371.310953][ T40] audit: type=1400 audit(1775516999.479:538): avc: denied { perfmon } for pid=13358 comm="syz.0.2559" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 371.620730][ T34] usbhid 6-1:0.0: can't add hid device: -71 [ 371.623504][ T34] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 371.637152][ T34] usb 6-1: USB disconnect, device number 21 [ 371.887121][T13257] usbtmc 10-1:16.0: usb_control_msg returned -110 [ 371.905748][ T1905] usb 10-1: USB disconnect, device number 20 [ 371.998590][T13369] syzkaller0: entered promiscuous mode [ 372.000679][T13369] syzkaller0: entered allmulticast mode [ 373.676825][ T34] usb 9-1: USB disconnect, device number 29 [ 373.748764][T13391] binder_alloc: 13390: binder_alloc_buf, no vma [ 373.793784][T13396] binder: BINDER_SET_CONTEXT_MGR already set [ 373.796573][T13396] binder: 13394:13396 ioctl 4018620d 2000000002c0 returned -16 [ 373.955580][T13409] fuse: Bad value for 'fd' [ 374.634994][T13415] syzkaller0: entered promiscuous mode [ 374.637986][T13415] syzkaller0: entered allmulticast mode [ 374.840722][T13423] fuse: Unknown parameter 'use00000000000000000000' [ 374.893728][T13428] fuse: Bad value for 'fd' [ 374.936415][T13432] fuse: Bad value for 'user_id' [ 374.942084][T13432] fuse: Bad value for 'user_id' [ 374.990464][T13435] fuse: Bad value for 'group_id' [ 374.992401][T13435] fuse: Bad value for 'group_id' [ 375.190688][T13454] fuse: Invalid rootmode [ 375.234218][T13458] fuse: Bad value for 'fd' [ 375.638236][T13474] fuse: Bad value for 'group_id' [ 375.640915][T13474] fuse: Bad value for 'group_id' [ 375.839530][T13482] fuse: Invalid rootmode [ 375.880906][T13484] fuse: Bad value for 'fd' [ 377.140544][T13509] fuse: Invalid rootmode [ 377.213182][T13513] syzkaller0: entered promiscuous mode [ 377.215752][T13513] syzkaller0: entered allmulticast mode [ 377.463208][T13538] fuse: Unknown parameter 'user_i00000000000000000000' [ 377.475309][T13540] fuse: Bad value for 'rootmode' [ 377.475391][T13542] syzkaller0: entered promiscuous mode [ 377.480062][T13542] syzkaller0: entered allmulticast mode [ 378.818980][T13577] fuse: Unknown parameter 'user_i00000000000000000000' [ 378.945342][T13584] syzkaller0: entered promiscuous mode [ 378.947412][T13584] syzkaller0: entered allmulticast mode [ 379.430332][T13611] ALSA: mixer_oss: invalid OSS volume '' [ 379.530521][T13618] fuse: Unknown parameter 'user_id00000000000000000000' [ 379.755339][T13626] syzkaller0: entered promiscuous mode [ 379.757386][T13626] syzkaller0: entered allmulticast mode [ 380.661429][T13655] syzkaller0: entered promiscuous mode [ 380.663369][T13655] syzkaller0: entered allmulticast mode [ 380.685769][T13657] fuse: Unknown parameter 'use00000000000000000000' [ 381.657259][ T34] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 381.808597][ T34] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.815671][ T34] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.822365][ T34] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 381.833848][ T34] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 381.842252][ T34] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.856772][ T34] usb 10-1: config 0 descriptor?? [ 382.268929][ T34] usbhid 10-1:0.0: can't add hid device: -71 [ 382.272570][ T34] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 382.286763][ T34] usb 10-1: USB disconnect, device number 21 [ 382.444951][T13694] binder: BINDER_SET_CONTEXT_MGR already set [ 382.447678][T13694] binder: 13693:13694 ioctl 4018620d 200000004a80 returned -16 [ 382.818946][T13706] syzkaller0: entered promiscuous mode [ 382.820885][T13706] syzkaller0: entered allmulticast mode [ 383.881589][T13729] syzkaller0: entered promiscuous mode [ 383.883484][T13729] syzkaller0: entered allmulticast mode [ 384.194927][T13736] binder: BINDER_SET_CONTEXT_MGR already set [ 384.198018][T13736] binder: 13735:13736 ioctl 4018620d 200000004a80 returned -16 [ 384.767441][T13746] binder: BINDER_SET_CONTEXT_MGR already set [ 384.769481][T13746] binder: 13745:13746 ioctl 4018620d 200000004a80 returned -16 [ 385.138004][T13742] binder: 13741:13742 ioctl c0306201 200000000700 returned -14 [ 385.823512][T13768] fuse: Unknown parameter 'grou00000000000000000000' [ 386.107733][T13791] fuse: Bad value for 'rootmode' [ 386.665620][T13799] fuse: Unknown parameter 'grou00000000000000000000' [ 387.868124][T13824] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2714'. [ 387.904574][T13826] syzkaller0: entered promiscuous mode [ 387.906455][T13826] syzkaller0: entered allmulticast mode [ 388.949709][T13845] syzkaller0: entered promiscuous mode [ 388.956541][T13845] syzkaller0: entered allmulticast mode [ 388.993164][T13847] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2723'. [ 389.057897][T13851] syzkaller0: entered promiscuous mode [ 389.060279][T13851] syzkaller0: entered allmulticast mode [ 389.985225][T13870] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.2732'. [ 390.030265][T13872] syzkaller0: entered promiscuous mode [ 390.032932][T13872] syzkaller0: entered allmulticast mode [ 390.127056][T13876] syzkaller0: entered promiscuous mode [ 390.129716][T13876] syzkaller0: entered allmulticast mode [ 391.008245][T13897] fuse: Unknown parameter 'group_id00000000000000000000' [ 391.041118][T13899] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.2742'. [ 391.925222][T13915] syzkaller0: entered promiscuous mode [ 391.927520][T13915] syzkaller0: entered allmulticast mode [ 392.358348][T13922] fuse: Unknown parameter 'group_id00000000000000000000' [ 392.729729][T13935] syzkaller0: entered promiscuous mode [ 392.732084][T13935] syzkaller0: entered allmulticast mode [ 394.496634][ T5982] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 394.525976][T13957] syzkaller0: entered promiscuous mode [ 394.528987][T13957] syzkaller0: entered allmulticast mode [ 394.666593][ T5982] usb 5-1: Using ep0 maxpacket: 8 [ 394.670488][ T5982] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 394.673406][ T5982] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 394.676993][ T5982] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 394.680255][ T5982] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 394.683548][ T5982] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 394.690275][ T5982] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 394.693389][ T5982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.733203][T13963] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2767'. [ 394.904408][ T5982] usb 5-1: usb_control_msg returned -32 [ 394.906268][ T5982] usbtmc 5-1:16.0: can't read capabilities [ 395.215844][T13973] syzkaller0: entered promiscuous mode [ 395.217841][T13973] syzkaller0: entered allmulticast mode [ 395.635313][T13976] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 395.838138][ T39] usb 5-1: USB disconnect, device number 33 [ 396.174334][T13980] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2772'. [ 397.420467][T13996] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 397.423478][T13996] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 397.427384][T13996] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 397.427519][ T40] audit: type=1400 audit(1775517025.599:539): avc: denied { firmware_load } for pid=13995 comm="syz.5.2778" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 397.803136][T14002] fuse: Unknown parameter '0x0000000000000003' [ 398.076731][ T34] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 398.226588][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 398.230147][ T34] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 398.233220][ T34] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 398.237244][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 398.240579][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 398.243998][ T34] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 398.248550][ T34] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 398.251573][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.380598][ T40] audit: type=1400 audit(1775517026.549:540): avc: denied { read } for pid=14015 comm="syz.0.2786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 398.429246][T14020] fuse: Unknown parameter '0x0000000000000005' [ 398.465727][ T34] usb 6-1: usb_control_msg returned -32 [ 398.469194][ T34] usbtmc 6-1:16.0: can't read capabilities [ 398.469632][ T40] audit: type=1400 audit(1775517026.639:541): avc: denied { ioctl } for pid=14021 comm="syz.0.2789" path="/dev/rtc0" dev="devtmpfs" ino=944 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 398.508556][T14024] fuse: Unknown parameter 'fd0x0000000000000003' [ 399.170710][T14037] usbtmc 6-1:16.0: usb_control_msg returned -71 [ 399.461421][ T5995] usb 6-1: USB disconnect, device number 22 [ 399.975491][T14044] fuse: Unknown parameter '0x0000000000000005' [ 399.998225][T14046] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2798'. [ 400.112910][T14053] binder: 14052:14053 ioctl c0306201 200000000700 returned -14 [ 401.356808][ T7382] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 401.516587][ T7382] usb 9-1: Using ep0 maxpacket: 8 [ 401.521217][ T7382] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 401.525003][ T7382] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 401.529171][ T7382] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 401.532964][ T7382] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 401.537570][ T7382] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 401.542680][ T7382] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 401.546732][ T7382] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.724816][T14076] fuse: Unknown parameter '0x0000000000000005' [ 401.769051][ T7382] usb 9-1: usb_control_msg returned -32 [ 401.771195][ T7382] usbtmc 9-1:16.0: can't read capabilities [ 401.884690][T14080] binder: 14077:14080 ioctl c0306201 200000000700 returned -14 [ 401.963523][ T40] audit: type=1326 audit(1775517030.129:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14078 comm="syz.1.2809" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2519b9c819 code=0x7ffc0000 [ 401.974467][ T40] audit: type=1326 audit(1775517030.129:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14078 comm="syz.1.2809" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2519b9c819 code=0x7ffc0000 [ 401.985345][ T40] audit: type=1326 audit(1775517030.129:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14078 comm="syz.1.2809" exe="/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f2519b9c819 code=0x7ffc0000 [ 401.996034][ T40] audit: type=1326 audit(1775517030.129:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14078 comm="syz.1.2809" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2519b9c819 code=0x7ffc0000 [ 402.010650][ T40] audit: type=1326 audit(1775517030.129:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14078 comm="syz.1.2809" exe="/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2519b9c819 code=0x7ffc0000 [ 402.021519][ T40] audit: type=1326 audit(1775517030.129:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14078 comm="syz.1.2809" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2519b9c819 code=0x7ffc0000 [ 402.042729][ T40] audit: type=1326 audit(1775517030.129:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14078 comm="syz.1.2809" exe="/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f2519b9c819 code=0x7ffc0000 [ 402.089233][T14082] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 402.093001][T14082] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 402.098956][T14082] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 402.473835][T14090] usbtmc 9-1:16.0: usb_control_msg returned -71 [ 402.676331][ T5995] usb 9-1: USB disconnect, device number 30 [ 403.161751][T14103] fuse: Bad value for 'fd' [ 403.275861][T14107] binder: 14106:14107 ioctl c0306201 200000000700 returned -14 [ 404.251310][T14132] fuse: Bad value for 'fd' [ 404.292103][T14135] fuse: Bad value for 'fd' [ 405.145830][T14158] fuse: Unknown parameter '0x0000000000000005' [ 406.776607][ T7382] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 406.916615][ T7382] usb 10-1: device descriptor read/64, error -71 [ 407.176586][ T7382] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 407.306630][ T7382] usb 10-1: device descriptor read/64, error -71 [ 407.417060][ T7382] usb usb10-port1: attempt power cycle [ 407.450156][T14205] fuse: Invalid rootmode [ 407.489515][T14207] fuse: Unknown parameter '0x0000000000000003' [ 407.766634][ T7382] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 407.797114][ T7382] usb 10-1: device descriptor read/8, error -71 [ 408.046606][ T7382] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 408.068265][ T7382] usb 10-1: device descriptor read/8, error -71 [ 408.127103][ T5936] Bluetooth: hci4: command 0x0406 tx timeout [ 408.177406][ T7382] usb usb10-port1: unable to enumerate USB device [ 408.243188][T14221] ubi: mtd0 is already attached to ubi0 [ 408.329549][T14227] fuse: Bad value for 'rootmode' [ 408.356102][T14229] fuse: Unknown parameter '0x0000000000000003' [ 408.429613][T14232] syzkaller0: entered promiscuous mode [ 408.432010][T14232] syzkaller0: entered allmulticast mode [ 408.766918][ T5982] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 408.916658][ T5982] usb 9-1: Using ep0 maxpacket: 8 [ 408.931023][ T5982] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 408.934541][ T5982] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 408.939185][ T5982] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 408.943341][ T5982] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 408.947808][ T5982] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 408.951986][ T5982] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 408.957600][ T5982] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 408.961413][ T5982] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.970307][ T5982] usbtmc 9-1:16.0: probe with driver usbtmc failed with error -22 [ 409.986634][T14248] input: syz0 as /devices/virtual/input/input41 [ 409.998001][T14248] Device name cannot be null; rc = [-22] [ 410.271763][T14255] fuse: Bad value for 'rootmode' [ 410.877061][T14257] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 410.879723][T14257] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 410.883622][T14257] vhci_hcd vhci_hcd.0: Device attached [ 411.146663][ T7382] usb 38-1: SetAddress Request (10) to port 0 [ 411.149448][ T7382] usb 38-1: new SuperSpeed USB device number 10 using vhci_hcd [ 411.326908][T14257] random: crng reseeded on system resumption [ 411.348574][T14257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2875'. [ 411.430331][T14263] vhci_hcd: connection reset by peer [ 411.433275][ T397] vhci_hcd vhci_hcd.0: stop threads [ 411.435620][ T397] vhci_hcd vhci_hcd.0: release socket [ 411.439080][ T397] vhci_hcd vhci_hcd.0: disconnect device [ 411.551655][ T5982] usb 9-1: USB disconnect, device number 31 [ 411.584524][T14271] binder: BINDER_SET_CONTEXT_MGR already set [ 411.586915][T14271] binder: 14270:14271 ioctl 4018620d 200000004a80 returned -16 [ 411.806622][ T5930] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 411.936617][ T5930] usb 6-1: device descriptor read/64, error -71 [ 412.176834][ T5930] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 412.306604][ T5930] usb 6-1: device descriptor read/64, error -71 [ 412.327112][T14280] syzkaller0: entered promiscuous mode [ 412.329993][T14280] syzkaller0: entered allmulticast mode [ 412.417169][ T5930] usb usb6-port1: attempt power cycle [ 412.776675][ T5930] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 412.805225][ T5930] usb 6-1: device descriptor read/8, error -71 [ 413.066884][ T5930] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 413.098024][ T5930] usb 6-1: device descriptor read/8, error -71 [ 413.218661][ T5930] usb usb6-port1: unable to enumerate USB device [ 413.664681][T14287] fuse: Unknown parameter 'fd0x0000000000000003' [ 413.802962][T14298] binder: 14297:14298 ioctl c0306201 200000000700 returned -14 [ 413.839357][T14300] binder: BINDER_SET_CONTEXT_MGR already set [ 413.842404][T14300] binder: 14299:14300 ioctl 4018620d 200000004a80 returned -16 [ 414.591075][T14309] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.2894'. [ 414.625310][T14311] fuse: Unknown parameter 'fd0x0000000000000003' [ 415.632385][T14334] netlink: 1624 bytes leftover after parsing attributes in process `syz.5.2903'. [ 415.876623][ T5982] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 415.983099][T14351] binder: 14350:14351 ioctl c0306201 0 returned -14 [ 416.006830][ T5982] usb 9-1: device descriptor read/64, error -71 [ 416.216657][ T7382] usb 38-1: device descriptor read/8, error -110 [ 416.246749][ T5982] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 416.416607][ T5982] usb 9-1: device descriptor read/64, error -71 [ 416.526801][ T5982] usb usb9-port1: attempt power cycle [ 416.576082][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 416.576102][ T40] audit: type=1400 audit(1775517044.739:576): avc: denied { wake_alarm } for pid=14358 comm="syz.5.2911" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 416.610666][ T40] audit: type=1400 audit(1775517044.779:577): avc: denied { bind } for pid=14358 comm="syz.5.2911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 416.637152][ T7382] usb usb38-port1: attempt power cycle [ 416.851766][T14364] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.2913'. [ 416.876947][ T5982] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 416.921591][ T5982] usb 9-1: device descriptor read/8, error -71 [ 417.177684][ T5982] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 417.217531][ T7382] usb usb38-port1: unable to enumerate USB device [ 417.217875][ T5982] usb 9-1: device descriptor read/8, error -71 [ 417.362977][ T5982] usb usb9-port1: unable to enumerate USB device [ 418.341894][ T40] audit: type=1400 audit(1775517046.509:578): avc: denied { create } for pid=14384 comm="syz.0.2921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 420.676639][T14443] binder: 14442:14443 ioctl 4018620d 0 returned -22 [ 421.399163][T14455] syzkaller0: entered promiscuous mode [ 421.401081][T14455] syzkaller0: entered allmulticast mode [ 422.830870][T14485] binder: 14484:14485 ioctl 4018620d 0 returned -22 [ 423.719272][T14498] input: syz0 as /devices/virtual/input/input42 [ 424.127950][T14516] syzkaller0: entered promiscuous mode [ 424.130474][T14516] syzkaller0: entered allmulticast mode [ 424.175814][T14520] binder: BINDER_SET_CONTEXT_MGR already set [ 424.177956][T14520] binder: 14519:14520 ioctl 4018620d 200000004a80 returned -16 [ 424.744597][T14530] binder: BINDER_SET_CONTEXT_MGR already set [ 424.746648][T14530] binder: 14529:14530 ioctl 4018620d 200000004a80 returned -16 [ 425.059210][T14534] input: syz0 as /devices/virtual/input/input43 [ 425.944159][T14559] binder: BINDER_SET_CONTEXT_MGR already set [ 425.946622][T14559] binder: 14558:14559 ioctl 4018620d 200000004a80 returned -16 [ 426.208338][T14571] binder: 14570:14571 ioctl c0306201 0 returned -14 [ 426.540086][T14580] binder: BINDER_SET_CONTEXT_MGR already set [ 426.542201][T14580] binder: 14579:14580 ioctl 4018620d 200000004a80 returned -16 [ 426.680626][T14583] syzkaller0: entered promiscuous mode [ 426.682544][T14583] syzkaller0: entered allmulticast mode [ 427.406431][T14605] binder: BINDER_SET_CONTEXT_MGR already set [ 427.409381][T14605] binder: 14604:14605 ioctl 4018620d 200000004a80 returned -16 [ 428.459267][T14631] syzkaller0: entered promiscuous mode [ 428.461343][T14631] syzkaller0: entered allmulticast mode [ 429.011250][T14645] binder: 14644:14645 ioctl c0306201 0 returned -14 [ 429.138055][T14648] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.3012'. [ 429.956677][ T7382] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 430.776551][ T7382] usb 9-1: Using ep0 maxpacket: 8 [ 430.779492][ T7382] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 430.782136][ T7382] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 430.785168][ T7382] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 430.788320][ T7382] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 430.791390][ T7382] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 430.795673][ T7382] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 430.799556][ T7382] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.036376][T14678] syzkaller0: entered promiscuous mode [ 431.038818][T14678] syzkaller0: entered allmulticast mode [ 431.047544][ T7382] usb 9-1: usb_control_msg returned -32 [ 431.049369][ T7382] usbtmc 9-1:16.0: can't read capabilities [ 431.184304][T14683] binder: 14682:14683 ioctl c0306201 0 returned -14 [ 431.510994][T14687] fuse: Unknown parameter 'user_i00000000000000000000' [ 431.752886][T14697] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 432.273187][T14704] binder: 14703:14704 ioctl c0306201 0 returned -14 [ 432.473859][T14707] netlink: 1688 bytes leftover after parsing attributes in process `syz.5.3034'. [ 432.976360][ T831] usb 9-1: USB disconnect, device number 36 [ 434.007492][T14740] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.3045'. [ 434.286685][ T39] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 434.367677][T14746] binder: 14745:14746 ioctl c0306201 0 returned -14 [ 434.436679][ T39] usb 5-1: Using ep0 maxpacket: 8 [ 434.440206][ T39] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 434.442910][ T39] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 434.446009][ T39] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 434.449702][ T39] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 434.453203][ T39] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 434.457859][ T39] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 434.460883][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.669894][ T39] usb 5-1: usb_control_msg returned -32 [ 434.671800][ T39] usbtmc 5-1:16.0: can't read capabilities [ 435.379683][T14760] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 435.718532][T14767] fuse: Unknown parameter 'user_id00000000000000000000' [ 435.916584][ T5982] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 436.079278][ T5982] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.083568][ T5982] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 436.087653][ T5982] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 436.090740][ T5982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.095080][ T5982] usb 6-1: config 0 descriptor?? [ 436.506071][ T5982] usb 6-1: string descriptor 0 read error: -71 [ 436.512710][ T5982] usb 6-1: USB disconnect, device number 27 [ 437.065596][ T34] usb 5-1: USB disconnect, device number 34 [ 437.135823][T14788] netlink: 'syz.0.3062': attribute type 72 has an invalid length. [ 437.147872][T14792] fuse: Unknown parameter 'user_id00000000000000000000' [ 438.246700][ T831] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 438.280668][T14818] binder: 14815:14818 ioctl c0306201 0 returned -14 [ 438.386653][ T34] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 438.398607][ T831] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.402154][ T831] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 438.406033][ T831] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 438.409730][ T831] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.415007][ T831] usb 9-1: config 0 descriptor?? [ 438.536801][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 438.540459][ T34] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 438.543418][ T34] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 438.547809][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 438.551828][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 438.555802][ T34] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 438.561466][ T34] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 438.565375][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.774390][ T34] usb 6-1: usb_control_msg returned -32 [ 438.776649][ T34] usbtmc 6-1:16.0: can't read capabilities [ 438.826024][ T831] usb 9-1: string descriptor 0 read error: -71 [ 438.830199][ T831] usb 9-1: USB disconnect, device number 37 [ 439.084622][T14820] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.3073'. [ 439.533609][T14836] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 440.300982][T14846] fuse: Bad value for 'fd' [ 440.421475][T14851] binder: 14849:14851 ioctl c0306201 0 returned -14 [ 441.283927][ T5982] usb 6-1: USB disconnect, device number 28 [ 442.396615][ T5982] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 443.126634][ T5982] usb 10-1: device descriptor read/64, error -71 [ 443.366619][ T5982] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 443.496556][ T5982] usb 10-1: device descriptor read/64, error -71 [ 443.504888][T14911] fuse: Unknown parameter '0x0000000000000004' [ 443.606977][ T5982] usb usb10-port1: attempt power cycle [ 443.934992][T14936] fuse: Bad value for 'fd' [ 443.947373][ T5982] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 443.967655][ T5982] usb 10-1: device descriptor read/8, error -71 [ 444.406651][ T5982] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 444.817425][ T5982] usb 10-1: device descriptor read/8, error -71 [ 444.893180][T14961] fuse: Bad value for 'fd' [ 444.926862][ T5982] usb usb10-port1: unable to enumerate USB device [ 445.053018][T14972] hfsplus: unable to find HFS+ superblock [ 445.139519][T14981] binder: 14979:14981 ioctl 4018620d 0 returned -22 [ 445.925449][T14989] fuse: Unknown parameter '0x0000000000000004' [ 446.184119][T15011] hfsplus: unable to find HFS+ superblock [ 446.286849][ T5930] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 446.417141][ T5930] usb 10-1: device descriptor read/64, error -71 [ 446.676627][ T5930] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 446.806638][ T5930] usb 10-1: device descriptor read/64, error -71 [ 446.875010][T15015] fuse: Unknown parameter '0x0000000000000004' [ 446.916773][ T5930] usb usb10-port1: attempt power cycle [ 446.987764][T15021] binder: 15020:15021 ioctl 4018620d 0 returned -22 [ 447.256658][ T5930] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 447.277610][ T5930] usb 10-1: device descriptor read/8, error -71 [ 447.516768][ T5930] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 447.537751][ T5930] usb 10-1: device descriptor read/8, error -71 [ 447.647050][ T5930] usb usb10-port1: unable to enumerate USB device [ 447.926342][T15040] syzkaller0: entered promiscuous mode [ 447.929104][T15040] syzkaller0: entered allmulticast mode [ 448.191366][T15050] hfsplus: unable to find HFS+ superblock [ 448.802117][T15059] binder: 15058:15059 ioctl 4018620d 0 returned -22 [ 450.014141][T15089] fuse: Unknown parameter 'fd0x0000000000000004' [ 450.085625][T15091] syzkaller0: entered promiscuous mode [ 450.090021][T15091] syzkaller0: entered allmulticast mode [ 450.285776][T15097] binder: 15096:15097 ioctl c0306201 0 returned -14 [ 450.466568][ T29] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 450.618092][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 450.622164][ T29] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 450.624742][ T29] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 450.628642][ T29] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 450.631538][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.169481][T15119] syzkaller0: entered promiscuous mode [ 451.171329][T15119] syzkaller0: entered allmulticast mode [ 452.018764][T15142] binder: 15141:15142 ioctl 4018620d 0 returned -22 [ 452.074850][T15144] binder: 15143:15144 ioctl c0306201 0 returned -14 [ 452.230376][T15150] syzkaller0: entered promiscuous mode [ 452.232489][T15150] syzkaller0: entered allmulticast mode [ 453.233903][ T29] usb 5-1: USB disconnect, device number 35 [ 453.566651][ T29] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 453.738201][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.741668][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 453.746284][ T29] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 453.749618][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.757115][ T29] usb 5-1: config 0 descriptor?? [ 453.765523][ T29] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 453.825764][T15175] syzkaller0: entered promiscuous mode [ 453.827701][T15175] syzkaller0: entered allmulticast mode [ 453.921489][T15177] binder: 15176:15177 ioctl 4018620d 0 returned -22 [ 455.293057][T15207] syzkaller0: entered promiscuous mode [ 455.294933][T15207] syzkaller0: entered allmulticast mode [ 455.691503][T15213] fuse: Bad value for 'fd' [ 456.045967][T15221] binder: 15220:15221 ioctl 4018620d 0 returned -22 [ 456.280690][ T34] usb 5-1: USB disconnect, device number 36 [ 456.380553][T15231] syzkaller0: entered promiscuous mode [ 456.382466][T15231] syzkaller0: entered allmulticast mode [ 457.125297][T15243] fuse: Bad value for 'fd' [ 457.406934][ T5930] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 457.556653][ T5930] usb 5-1: Using ep0 maxpacket: 8 [ 457.565693][ T5930] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 457.571931][ T5930] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 457.576637][ T5930] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 457.580577][ T5930] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 457.584810][ T5930] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 457.592074][ T5930] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 457.597065][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.616980][ T5995] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 457.787956][ T5995] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 457.791186][ T5995] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 457.795269][ T5995] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 457.799021][ T5995] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.804311][ T5995] usb 6-1: config 0 descriptor?? [ 457.812047][ T5995] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 457.818375][ T5930] usb 5-1: usb_control_msg returned -32 [ 457.821243][ T5930] usbtmc 5-1:16.0: can't read capabilities [ 458.039630][T15258] syzkaller0: entered promiscuous mode [ 458.041967][T15258] syzkaller0: entered allmulticast mode [ 458.090967][T15262] hfsplus: unable to find HFS+ superblock [ 458.291292][T15269] binder: 15268:15269 ioctl c0306201 0 returned -14 [ 458.523314][T15272] usbtmc 5-1:16.0: INITIATE_CLEAR returned 0 [ 460.182201][ T29] usb 5-1: USB disconnect, device number 37 [ 460.386979][ T5930] usb 6-1: USB disconnect, device number 29 [ 460.433081][T15297] syzkaller0: entered promiscuous mode [ 460.435867][T15297] syzkaller0: entered allmulticast mode [ 460.457578][T15301] hfsplus: unable to find HFS+ superblock [ 460.614639][T15306] binder: 15305:15306 ioctl c0306201 0 returned -14 [ 461.376650][ T39] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 461.527208][ T39] usb 5-1: Using ep0 maxpacket: 8 [ 461.532337][ T39] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 461.538223][ T39] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 461.544603][ T39] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 461.560657][ T39] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 461.572804][ T39] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 461.587891][ T39] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 461.599017][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.653704][T15328] syzkaller0: entered promiscuous mode [ 461.656360][T15328] syzkaller0: entered allmulticast mode [ 461.818944][ T39] usb 5-1: usb_control_msg returned -32 [ 461.820998][ T39] usbtmc 5-1:16.0: can't read capabilities [ 461.846831][ T9] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 461.998296][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.002821][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 462.008827][ T9] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 462.012639][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.024555][ T9] usb 9-1: config 0 descriptor?? [ 462.035219][ T9] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 462.570559][T15341] usbtmc 5-1:16.0: INITIATE_CLEAR returned 0 [ 462.686609][ T5936] Bluetooth: hci4: command 0x0406 tx timeout [ 462.771727][T15348] binder: 15347:15348 ioctl c0306201 0 returned -14 [ 463.133926][T15352] hfsplus: unable to find HFS+ superblock [ 463.193730][T15353] netlink: 'syz.1.3267': attribute type 64 has an invalid length. [ 463.998946][T15362] syzkaller0: entered promiscuous mode [ 464.000836][T15362] syzkaller0: entered allmulticast mode [ 464.156588][ T29] usb 5-1: USB disconnect, device number 38 [ 464.626419][ T7382] usb 9-1: USB disconnect, device number 38 [ 465.084888][T15387] syzkaller0: entered promiscuous mode [ 465.094597][T15387] syzkaller0: entered allmulticast mode [ 465.316584][ T9] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 465.466652][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 465.470686][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 465.474156][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 465.478411][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 465.482458][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 465.486771][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 465.492265][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 465.496675][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.570915][T15395] hfsplus: unable to find HFS+ superblock [ 465.627531][T15398] netlink: 'syz.5.3282': attribute type 64 has an invalid length. [ 465.730857][ T9] usb 5-1: usb_control_msg returned -32 [ 465.732794][ T9] usbtmc 5-1:16.0: can't read capabilities [ 465.836651][ T29] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 466.008516][ T29] usb 9-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 466.012514][ T29] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 466.017747][ T29] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 466.021240][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.027475][ T29] usb 9-1: config 0 descriptor?? [ 466.032793][ T29] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 466.434570][T15406] usbtmc 5-1:16.0: INITIATE_CLEAR returned 0 [ 467.184606][T15419] syzkaller0: entered promiscuous mode [ 467.186551][T15419] syzkaller0: entered allmulticast mode [ 468.088671][ T7382] usb 5-1: USB disconnect, device number 39 [ 468.598294][ T7382] usb 9-1: USB disconnect, device number 39 [ 469.038139][T15452] binder: BINDER_SET_CONTEXT_MGR already set [ 469.040167][T15452] binder: 15451:15452 ioctl 4018620d 200000004a80 returned -16 [ 469.376785][ T7382] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 469.546892][ T7382] usb 10-1: Using ep0 maxpacket: 8 [ 469.553095][ T7382] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 469.556832][ T7382] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 469.567369][ T7382] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 469.575146][ T7382] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.156590][ T29] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 470.316695][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 470.322688][ T29] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 470.336887][ T29] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 470.340581][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 470.344603][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 470.352392][ T29] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 470.359566][ T29] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 470.364580][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.382910][T15476] syzkaller0: entered promiscuous mode [ 470.384688][T15476] syzkaller0: entered allmulticast mode [ 470.574895][ T29] usb 5-1: usb_control_msg returned -32 [ 470.577497][ T29] usbtmc 5-1:16.0: can't read capabilities [ 470.850426][T15484] usbtmc 5-1:16.0: INITIATE_CLEAR returned 0 [ 471.278016][T15470] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 471.284459][ T29] usb 5-1: USB disconnect, device number 40 [ 472.156367][ T29] usb 10-1: USB disconnect, device number 34 [ 472.282830][T15512] syzkaller0: entered promiscuous mode [ 472.285655][T15512] syzkaller0: entered allmulticast mode [ 472.667531][ T7382] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 472.817973][ T7382] usb 9-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 472.821521][ T7382] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 472.825895][ T7382] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 472.829113][ T7382] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.833223][ T7382] usb 9-1: config 0 descriptor?? [ 472.839064][ T7382] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 472.926655][T15485] Bluetooth: hci1: command 0x0406 tx timeout [ 472.936611][ T5289] Bluetooth: hci0: command 0x0406 tx timeout [ 473.186615][ T29] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 473.336598][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 473.340976][ T29] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 473.344525][ T29] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 473.348813][ T29] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 473.352964][ T29] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 473.357171][ T29] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 473.362420][ T29] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 473.366226][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.575882][ T29] usb 6-1: usb_control_msg returned -32 [ 473.577663][ T29] usbtmc 6-1:16.0: can't read capabilities [ 474.146589][ T5995] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 474.279249][T15537] usbtmc 6-1:16.0: INITIATE_CLEAR returned 0 [ 474.296606][ T5995] usb 10-1: Using ep0 maxpacket: 8 [ 474.299816][ T5995] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 474.302677][ T5995] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 474.306093][ T5995] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 474.309532][ T5995] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.261057][T15544] syzkaller0: entered promiscuous mode [ 475.263167][T15544] syzkaller0: entered allmulticast mode [ 475.435611][ T5930] usb 9-1: USB disconnect, device number 40 [ 475.581301][T15552] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 475.585835][ T34] usb 6-1: USB disconnect, device number 30 [ 476.114833][T15554] binder: BINDER_SET_CONTEXT_MGR already set [ 476.116917][T15554] binder: 15553:15554 ioctl 4018620d 200000004a80 returned -16 [ 476.929082][ T5995] usb 10-1: USB disconnect, device number 35 [ 477.136848][T15573] syzkaller0: entered promiscuous mode [ 477.138646][T15573] syzkaller0: entered allmulticast mode [ 477.486573][ T6344] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 477.646569][ T6344] usb 5-1: Using ep0 maxpacket: 8 [ 477.649557][ T6344] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 477.652158][ T6344] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 477.655250][ T6344] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 477.658504][ T6344] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 477.661599][ T6344] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 477.665787][ T6344] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 477.668862][ T6344] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.876870][ T6344] usb 5-1: usb_control_msg returned -32 [ 477.878740][ T6344] usbtmc 5-1:16.0: can't read capabilities [ 478.306628][ T7382] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 478.456658][ T7382] usb 9-1: Using ep0 maxpacket: 8 [ 478.460093][ T7382] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 478.463038][ T7382] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 478.466549][ T7382] usb 9-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 478.470715][ T7382] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 478.473831][ T7382] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.485048][ T7382] usbtmc 9-1:16.0: bulk endpoints not found [ 478.580467][T15589] usbtmc 5-1:16.0: INITIATE_CLEAR returned 0 [ 478.738212][T15593] binder: 15592:15593 ioctl c0306201 0 returned -14 [ 478.926582][ T5930] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 479.088702][ T5930] usb 10-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 479.093376][ T5930] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 479.098892][ T5930] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 479.102760][ T5930] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.116456][ T5930] usb 10-1: config 0 descriptor?? [ 479.122690][ T5930] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 479.748120][T15602] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 479.755900][ T5930] usb 5-1: USB disconnect, device number 41 [ 480.495221][T15610] syzkaller0: entered promiscuous mode [ 480.497439][T15610] syzkaller0: entered allmulticast mode [ 481.069766][ T7382] usb 9-1: USB disconnect, device number 41 [ 481.682304][ T6344] usb 10-1: USB disconnect, device number 36 [ 482.266588][ T7382] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 482.373049][T15640] syzkaller0: entered promiscuous mode [ 482.375290][T15640] syzkaller0: entered allmulticast mode [ 482.426626][ T7382] usb 9-1: Using ep0 maxpacket: 8 [ 482.429945][ T7382] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 482.432559][ T7382] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 482.435812][ T7382] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 482.439050][ T7382] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 482.442258][ T7382] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 482.446446][ T7382] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 482.449409][ T7382] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.610733][T15646] binder: 15645:15646 ioctl c0306201 0 returned -14 [ 482.657936][ T7382] usb 9-1: usb_control_msg returned -32 [ 482.659796][ T7382] usbtmc 9-1:16.0: can't read capabilities [ 482.736627][ T5930] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 482.896832][ T5930] usb 6-1: Using ep0 maxpacket: 8 [ 482.902293][ T5930] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 482.904971][ T5930] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 482.909769][ T5930] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 482.914236][ T5930] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 482.917720][ T5930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.927207][ T5930] usbtmc 6-1:16.0: bulk endpoints not found [ 483.361842][T15656] usbtmc 9-1:16.0: INITIATE_CLEAR returned 0 [ 483.777453][T15662] binder: 15661:15662 ioctl c0306201 0 returned -14 [ 484.184991][T15665] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 484.189163][ T7382] usb 9-1: USB disconnect, device number 42 [ 484.566600][ T1905] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 484.728042][ T1905] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 484.731652][ T1905] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 484.734706][ T1905] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 484.739200][ T1905] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 484.742083][ T1905] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.746081][ T1905] usb 10-1: config 0 descriptor?? [ 484.750798][ T1905] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 485.511838][ T5995] usb 6-1: USB disconnect, device number 31 [ 485.529696][T15677] syzkaller0: entered promiscuous mode [ 485.531497][T15677] syzkaller0: entered allmulticast mode [ 486.462985][T15697] binder: 15696:15697 ioctl c0306201 0 returned -14 [ 486.746548][ T5995] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 486.896641][ T5995] usb 6-1: Using ep0 maxpacket: 8 [ 486.900736][ T5995] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 486.904079][ T5995] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 486.909058][ T5995] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 486.912929][ T5995] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 486.917238][ T5995] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 486.922275][ T5995] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 486.925577][ T5995] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.136636][ T5995] usb 6-1: usb_control_msg returned -32 [ 487.138623][ T5995] usbtmc 6-1:16.0: can't read capabilities [ 487.333614][ T5995] usb 10-1: USB disconnect, device number 37 [ 487.389459][T15711] syzkaller0: entered promiscuous mode [ 487.391508][T15711] syzkaller0: entered allmulticast mode [ 487.504507][T15717] binder: 15716:15717 ioctl c0306201 0 returned -14 [ 487.839367][T15723] usbtmc 6-1:16.0: INITIATE_CLEAR returned 0 [ 488.412416][T15729] binder: 15728:15729 ioctl c0306201 0 returned -14 [ 488.476715][ T5995] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 488.636623][ T5995] usb 10-1: Using ep0 maxpacket: 8 [ 488.641014][ T5995] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 488.644468][ T5995] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 488.649764][ T5995] usb 10-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 488.655277][ T5995] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 488.659141][ T5995] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.675258][ T5995] usbtmc 10-1:16.0: bulk endpoints not found [ 489.502306][ T7382] usb 6-1: USB disconnect, device number 32 [ 489.538522][ T1905] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 489.620389][T15748] syzkaller0: entered promiscuous mode [ 489.622200][T15748] syzkaller0: entered allmulticast mode [ 489.689694][ T1905] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 489.699552][ T1905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 489.707936][ T1905] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 489.719930][ T1905] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 489.727705][ T1905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.739000][ T1905] usb 5-1: config 0 descriptor?? [ 489.748202][ T1905] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 491.250712][ T34] usb 10-1: USB disconnect, device number 38 [ 491.372784][T15772] syzkaller0: entered promiscuous mode [ 491.375280][T15772] syzkaller0: entered allmulticast mode [ 492.294857][ T1905] usb 5-1: USB disconnect, device number 42 [ 492.447975][T15795] syzkaller0: entered promiscuous mode [ 492.449871][T15795] syzkaller0: entered allmulticast mode [ 492.626651][ T1905] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 492.776624][ T1905] usb 5-1: Using ep0 maxpacket: 8 [ 492.779647][ T1905] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 492.782341][ T1905] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 492.785578][ T1905] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 492.789955][ T1905] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 492.793120][ T1905] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 492.797162][ T1905] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 492.800691][ T1905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.817725][ T1905] usbtmc 5-1:16.0: bulk endpoints not found [ 493.576643][ T1905] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 493.728030][ T1905] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 493.731882][ T1905] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 493.735574][ T1905] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 493.740889][ T1905] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 493.744099][ T1905] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.749436][ T1905] usb 10-1: config 0 descriptor?? [ 493.757309][ T1905] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 495.280198][T15829] syzkaller0: entered promiscuous mode [ 495.282430][T15829] syzkaller0: entered allmulticast mode [ 495.347226][ T5930] usb 5-1: USB disconnect, device number 43 [ 495.434280][T15833] hfsplus: unable to find HFS+ superblock [ 495.440891][T15833] netlink: 'syz.1.3418': attribute type 64 has an invalid length. [ 496.345831][ T5930] usb 10-1: USB disconnect, device number 39 [ 496.904124][T15855] syzkaller0: entered promiscuous mode [ 496.906206][T15855] syzkaller0: entered allmulticast mode [ 497.126650][ T10] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 497.282196][T15865] hfsplus: unable to find HFS+ superblock [ 497.286631][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 497.291045][T15865] netlink: 'syz.5.3430': attribute type 64 has an invalid length. [ 497.291571][ T10] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 497.296409][ T10] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 497.299790][ T10] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 497.303048][ T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 497.307158][ T10] usb 9-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 497.312298][ T10] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 497.315142][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.412088][ T10] usbtmc 9-1:16.0: bulk endpoints not found [ 497.616573][ T1905] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 497.767867][ T1905] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.772409][ T1905] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.776303][ T1905] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 497.780511][ T1905] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 497.783501][ T1905] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.788249][ T1905] usb 10-1: config 0 descriptor?? [ 498.201602][ T1905] usbhid 10-1:0.0: can't add hid device: -71 [ 498.203671][ T1905] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 498.210340][ T1905] usb 10-1: USB disconnect, device number 40 [ 498.444982][T15881] syzkaller0: entered promiscuous mode [ 498.446998][T15881] syzkaller0: entered allmulticast mode [ 499.901920][ T1905] usb 9-1: USB disconnect, device number 43 [ 500.552712][T15908] hfsplus: unable to find HFS+ superblock [ 500.609154][T15909] netlink: 'syz.0.3445': attribute type 64 has an invalid length. [ 500.802507][T15915] binder: 15914:15915 ioctl c0306201 200000000700 returned -14 [ 500.807619][T15917] syzkaller0: entered promiscuous mode [ 500.809726][T15917] syzkaller0: entered allmulticast mode [ 500.997009][ T5995] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 501.146609][ T7382] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 501.167968][ T5995] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.171663][ T5995] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.174938][ T5995] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 501.179554][ T5995] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 501.182635][ T5995] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.187049][ T5995] usb 10-1: config 0 descriptor?? [ 501.306552][ T7382] usb 6-1: Using ep0 maxpacket: 8 [ 501.310421][ T7382] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 501.313850][ T7382] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 501.318275][ T7382] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 501.322247][ T7382] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 501.326342][ T7382] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 501.331872][ T7382] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 501.335579][ T7382] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.347683][ T7382] usbtmc 6-1:16.0: bulk endpoints not found [ 501.602678][ T5995] usbhid 10-1:0.0: can't add hid device: -71 [ 501.605265][ T5995] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 501.610987][ T5995] usb 10-1: USB disconnect, device number 41 [ 502.764142][T15945] binder: 15944:15945 ioctl c0306201 200000000700 returned -14 [ 502.796762][T15947] syzkaller0: entered promiscuous mode [ 502.798921][T15947] syzkaller0: entered allmulticast mode [ 503.276540][ T5930] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 503.438034][ T5930] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.441619][ T5930] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.444803][ T5930] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 503.449171][ T5930] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 503.452121][ T5930] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.456222][ T5930] usb 10-1: config 0 descriptor?? [ 503.833397][T15958] hfsplus: unable to find HFS+ superblock [ 503.864201][ T5930] usbhid 10-1:0.0: can't add hid device: -71 [ 503.866238][ T5930] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 503.871196][ T5930] usb 10-1: USB disconnect, device number 42 [ 503.890722][T15959] netlink: 'syz.4.3462': attribute type 64 has an invalid length. [ 503.924566][ T7382] usb 6-1: USB disconnect, device number 33 [ 504.399892][T15971] binder: 15970:15971 ioctl c0306201 200000000700 returned -14 [ 504.726736][ T5995] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 504.966577][ T5995] usb 6-1: Using ep0 maxpacket: 8 [ 505.489926][T15995] binder: 15994:15995 ioctl 4018620d 0 returned -22 [ 505.496815][ T5995] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 505.532960][ T5995] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 505.537037][ T5995] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 505.540532][ T5995] usb 6-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 505.544474][ T5995] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 505.549417][ T5995] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 505.552758][ T5995] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.558323][ T5995] usbtmc 6-1:16.0: bulk endpoints not found [ 505.636551][ T34] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 505.799241][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.803984][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.808565][ T34] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 505.814236][ T34] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 505.818591][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.825297][ T34] usb 5-1: config 0 descriptor?? [ 506.232445][ C3] raw-gadget.1 gadget.0: ignoring, device is not running [ 506.235347][ T34] usbhid 5-1:0.0: can't add hid device: -71 [ 506.238339][ T34] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 506.242615][ T34] usb 5-1: USB disconnect, device number 44 [ 506.766417][T16007] hfsplus: unable to find HFS+ superblock [ 506.772128][T16007] netlink: 'syz.0.3480': attribute type 64 has an invalid length. [ 507.586699][ T29] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 507.736637][ T29] usb 10-1: Using ep0 maxpacket: 8 [ 507.740956][ T29] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 507.743617][ T29] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 507.746776][ T29] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 507.749879][ T29] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 507.753063][ T29] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 507.757393][ T29] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 507.760710][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.835376][ T5995] usb 6-1: USB disconnect, device number 34 [ 507.968777][ T29] usb 10-1: usb_control_msg returned -32 [ 507.970704][ T29] usbtmc 10-1:16.0: can't read capabilities [ 508.574021][T16030] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input44 [ 508.585258][T16033] fuse: Bad value for 'group_id' [ 508.586987][T16033] fuse: Bad value for 'group_id' [ 508.696879][T16038] usbtmc 10-1:16.0: usb_control_msg returned -32 [ 508.878995][ T29] usb 10-1: USB disconnect, device number 43 [ 509.656720][ T7382] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 509.816595][ T7382] usb 10-1: Using ep0 maxpacket: 8 [ 509.820296][ T7382] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 509.822889][ T7382] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 509.826224][ T7382] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 509.829666][ T7382] usb 10-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 509.833096][ T7382] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 509.837547][ T7382] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 509.840448][ T7382] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.847744][ T7382] usbtmc 10-1:16.0: bulk endpoints not found [ 509.956578][ T34] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 510.013368][T16060] binder: 16059:16060 ioctl 4018620d 0 returned -22 [ 510.127948][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.131743][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.135126][ T34] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 510.139648][ T34] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 510.142719][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.153312][ T34] usb 5-1: config 0 descriptor?? [ 510.567058][ T34] usbhid 5-1:0.0: can't add hid device: -71 [ 510.569137][ T34] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 510.573871][ T34] usb 5-1: USB disconnect, device number 45 [ 512.016620][ T5995] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 512.167552][ T5995] usb 9-1: Using ep0 maxpacket: 8 [ 512.171889][ T5995] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 512.174673][ T5995] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 512.178824][ T5995] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 512.181944][ T5995] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 512.185203][ T5995] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 512.189721][ T5995] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 512.192916][ T5995] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.400923][ T5995] usb 9-1: usb_control_msg returned -32 [ 512.402802][ T5995] usbtmc 9-1:16.0: can't read capabilities [ 512.436083][ T5930] usb 10-1: USB disconnect, device number 44 [ 512.870972][T16089] binder: 16088:16089 ioctl 4018620d 0 returned -22 [ 513.105814][T16091] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 513.306662][ T29] usb 9-1: USB disconnect, device number 44 [ 513.556675][ T831] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 513.708415][ T831] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.712246][ T831] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.715626][ T831] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 513.720304][ T831] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 513.723385][ T831] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.729217][ T831] usb 10-1: config 0 descriptor?? [ 514.140098][ T831] usbhid 10-1:0.0: can't add hid device: -71 [ 514.143146][ T831] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 514.151895][ T831] usb 10-1: USB disconnect, device number 45 [ 514.245956][T16103] Bluetooth: hci0: unsupported parameter 255 [ 514.248388][T16103] Bluetooth: hci0: unsupported parameter 255 [ 514.526589][ T29] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 514.676680][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 514.680576][ T29] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 514.683825][ T29] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 514.687949][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 514.696634][ T29] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 514.707749][ T29] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 514.712914][ T29] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 514.716739][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.724844][ T29] usbtmc 5-1:16.0: bulk endpoints not found [ 515.856816][ T7382] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 516.016602][ T7382] usb 9-1: Using ep0 maxpacket: 8 [ 516.020677][ T7382] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 516.024379][ T7382] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 516.029003][ T7382] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 516.033068][ T7382] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 516.036957][ T7382] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 516.042498][ T7382] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 516.045992][ T7382] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.257455][ T7382] usb 9-1: usb_control_msg returned -32 [ 516.260063][ T7382] usbtmc 9-1:16.0: can't read capabilities [ 516.414021][T16126] binder: 16125:16126 ioctl c0306201 0 returned -14 [ 516.961743][T16129] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 517.163371][ T10] usb 9-1: USB disconnect, device number 45 [ 517.311312][ T5930] usb 5-1: USB disconnect, device number 46 [ 517.343493][T16135] Bluetooth: hci0: unsupported parameter 255 [ 517.346211][T16135] Bluetooth: hci0: unsupported parameter 255 [ 517.996599][ T5930] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 518.311785][T16152] binder: 16151:16152 ioctl c0306201 0 returned -14 [ 518.458470][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.463147][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.467734][ T5930] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 518.473655][ T5930] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 518.477508][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.483028][ T5930] usb 5-1: config 0 descriptor?? [ 518.709121][T16156] fuse: Bad value for 'group_id' [ 518.711226][T16156] fuse: Bad value for 'group_id' [ 519.016808][ T7382] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 519.097459][ T5930] usbhid 5-1:0.0: can't add hid device: -71 [ 519.100071][ T5930] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 519.109587][ T5930] usb 5-1: USB disconnect, device number 47 [ 519.123973][T16160] Bluetooth: hci0: unsupported parameter 255 [ 519.126135][T16160] Bluetooth: hci0: unsupported parameter 255 [ 519.166913][ T7382] usb 9-1: Using ep0 maxpacket: 8 [ 519.173759][ T7382] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 519.177648][ T7382] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 519.182325][ T7382] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 519.187430][ T7382] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 519.191643][ T7382] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 519.196276][ T7382] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 519.202635][ T7382] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 519.206384][ T7382] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.215313][ T7382] usbtmc 9-1:16.0: probe with driver usbtmc failed with error -22 [ 519.416710][ T10] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 519.566621][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 519.569981][ T10] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 519.573461][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 519.577105][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 519.580396][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 519.583665][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 519.587780][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 519.590538][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.684801][T16169] binder: 16168:16169 ioctl c0306201 0 returned -14 [ 519.800162][ T10] usb 6-1: usb_control_msg returned -32 [ 519.802029][ T10] usbtmc 6-1:16.0: can't read capabilities [ 520.477755][T16177] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 521.858491][T16192] Bluetooth: hci0: invalid len left 7, exp >= 38 [ 522.136627][ T5995] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 522.289954][ T5995] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.294273][ T5995] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.297732][T16196] binder: 16195:16196 ioctl c0306201 0 returned -14 [ 522.298247][ T5995] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 522.304002][ T5995] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 522.307174][ T5995] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.311136][ T5995] usb 10-1: config 0 descriptor?? [ 522.920993][ T5995] usbhid 10-1:0.0: can't add hid device: -71 [ 522.923599][ T5995] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 522.927349][ T5995] usb 10-1: USB disconnect, device number 46 [ 523.450770][T16202] binder: 16201:16202 ioctl c0306201 0 returned -14 [ 524.964992][T16216] Bluetooth: hci0: invalid len left 7, exp >= 38 [ 525.426754][ T5930] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 525.488372][T16175] usbtmc 6-1:16.0: usb_control_msg returned -110 [ 525.490984][ T7382] usb 9-1: USB disconnect, device number 46 [ 525.506716][ T34] usb 6-1: USB disconnect, device number 35 [ 525.578272][ T5930] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.582151][ T5930] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.585504][ T5930] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 525.590905][ T5930] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 525.594805][ T5930] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.601433][ T5930] usb 10-1: config 0 descriptor?? [ 525.893000][T16230] binder: 16229:16230 ioctl c0306201 0 returned -14 [ 526.210531][ T5930] usbhid 10-1:0.0: can't add hid device: -71 [ 526.216148][ T5930] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 526.221723][ T5930] usb 10-1: USB disconnect, device number 47 [ 526.441514][T16238] Bluetooth: hci0: invalid len left 7, exp >= 38 [ 527.651944][T16262] netlink: 'syz.4.3569': attribute type 1 has an invalid length. [ 527.654468][T16262] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3569'. [ 529.107045][T16290] netlink: 'syz.1.3580': attribute type 1 has an invalid length. [ 529.109301][T16290] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3580'. [ 530.346822][ T7382] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 530.523735][ T7382] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.529497][ T7382] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.534441][ T7382] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 530.540602][ T7382] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 530.544988][ T7382] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.570173][ T7382] usb 9-1: config 0 descriptor?? [ 530.896148][T16328] netlink: 'syz.5.3595': attribute type 1 has an invalid length. [ 530.898876][T16328] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3595'. [ 531.251647][ T7382] usbhid 9-1:0.0: can't add hid device: -71 [ 531.253924][ T7382] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 531.258339][ T7382] usb 9-1: USB disconnect, device number 47 [ 531.790399][T16347] fuse: Unknown parameter 'grou00000000000000000000' [ 532.931313][ T10] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 533.139399][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.144197][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.148530][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 533.154220][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 533.158256][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.166703][ T10] usb 5-1: config 0 descriptor?? [ 533.797299][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 533.800441][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 533.813892][ T10] usb 5-1: USB disconnect, device number 48 [ 534.050744][T16387] fuse: Unknown parameter 'grou00000000000000000000' [ 534.188157][T16393] Bluetooth: hci0: invalid len left 7, exp >= 38 [ 534.237685][T16397] hfsplus: unable to find HFS+ superblock [ 534.246277][T16397] netlink: 'syz.4.3620': attribute type 64 has an invalid length. [ 535.067203][T16415] fuse: Unknown parameter 'group_i00000000000000000000' [ 535.139632][T16421] hfsplus: unable to find HFS+ superblock [ 535.147195][T16421] netlink: 'syz.5.3629': attribute type 64 has an invalid length. [ 535.197543][T16423] Bluetooth: hci0: invalid len left 7, exp >= 38 [ 535.477327][ T7382] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 535.492687][T16441] fuse: Unknown parameter 'group_i00000000000000000000' [ 535.628196][ T7382] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.632088][ T7382] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.637554][ T7382] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 535.645609][ T7382] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 535.652691][ T7382] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.668217][ T7382] usb 10-1: config 0 descriptor?? [ 536.088691][ T7382] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 536.091396][ T7382] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 536.093892][ T7382] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 536.096359][ T7382] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 536.099340][ T7382] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 536.102335][ T7382] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 536.118497][ T7382] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 536.340517][T16450] hfsplus: unable to find HFS+ superblock [ 536.350174][ T7382] usb 10-1: USB disconnect, device number 48 [ 536.365142][T16450] netlink: 'syz.0.3639': attribute type 64 has an invalid length. [ 536.450747][T16454] binder: 16452:16454 ioctl c0306201 0 returned -14 [ 536.898399][T16460] Bluetooth: hci0: unsupported parameter 255 [ 536.900366][T16460] Bluetooth: hci0: unsupported parameter 255 [ 537.012224][T16467] fuse: Unknown parameter 'group_i00000000000000000000' [ 538.481120][T16488] Bluetooth: hci0: unsupported parameter 255 [ 538.483694][T16488] Bluetooth: hci0: unsupported parameter 255 [ 538.676568][ T7382] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 538.773587][T16501] fuse: Unknown parameter 'group_id00000000000000000000' [ 539.330157][T16505] binder: 16504:16505 ioctl c0306201 0 returned -14 [ 539.368199][ T7382] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.371843][ T7382] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.375045][ T7382] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 539.379444][ T7382] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 539.382336][ T7382] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.387722][ T7382] usb 6-1: config 0 descriptor?? [ 539.800756][ T7382] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 539.805349][ T7382] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 539.808125][ T7382] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 539.810614][ T7382] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 539.825518][ T7382] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 540.058447][ T7382] usb 6-1: USB disconnect, device number 36 [ 541.195184][T16521] Bluetooth: hci0: unsupported parameter 255 [ 541.197240][T16521] Bluetooth: hci0: unsupported parameter 255 [ 541.601392][T16529] fuse: Unknown parameter 'group_id00000000000000000000' [ 542.295013][T16535] binder: 16534:16535 ioctl c0306201 0 returned -14 [ 542.816537][ T34] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 543.259014][T16552] fuse: Unknown parameter 'group_id00000000000000000000' [ 543.318455][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.321607][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.331662][ T34] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 543.335508][ T34] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 543.345016][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.355633][ T34] usb 9-1: config 0 descriptor?? [ 543.794435][ T34] hid_parser_main: 2 callbacks suppressed [ 543.794449][ T34] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 543.799107][ T34] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 543.801612][ T34] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 543.804298][ T34] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 543.807408][ T34] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 543.810085][ T34] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 543.816994][ T34] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 544.059041][ T34] usb 9-1: USB disconnect, device number 48 [ 545.105458][T16587] fuse: Bad value for 'user_id' [ 545.109848][T16587] fuse: Bad value for 'user_id' [ 546.156564][ T10] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 546.902267][T16613] fuse: Bad value for 'user_id' [ 546.904407][T16613] fuse: Bad value for 'user_id' [ 546.977993][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.981473][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.985049][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 546.990205][ T10] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 546.993122][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.997520][ T10] usb 9-1: config 0 descriptor?? [ 547.419020][ T10] plantronics 0003:047F:FFFF.0008: reserved main item tag 0xd [ 547.424320][ T10] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 547.430167][ T10] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 547.435248][ T10] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 547.440116][ T10] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 547.450131][ T10] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 547.690138][ T7382] usb 9-1: USB disconnect, device number 49 [ 548.166603][ T34] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 548.326547][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 548.329840][ T34] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 548.332601][ T34] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 548.335792][ T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 548.339134][ T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 548.342290][ T34] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 548.346591][ T34] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 548.349684][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.559315][ T34] usb 5-1: usb_control_msg returned -32 [ 548.561190][ T34] usbtmc 5-1:16.0: can't read capabilities [ 548.815665][T16654] hfsplus: unable to find HFS+ superblock [ 548.821506][T16654] netlink: 'syz.5.3712': attribute type 64 has an invalid length. [ 550.256632][ T10] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 550.408895][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.412332][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.415416][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 550.419590][ T10] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 550.422434][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.428868][ T10] usb 9-1: config 0 descriptor?? [ 550.839242][ T10] plantronics 0003:047F:FFFF.0009: reserved main item tag 0xd [ 550.841819][ T10] hid_parser_main: 1 callbacks suppressed [ 550.841831][ T10] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 550.845987][ T10] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 550.850507][ T10] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 550.852878][ T10] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 550.855128][ T10] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 550.860613][ T10] plantronics 0003:047F:FFFF.0009: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 551.038980][ T10] usb 9-1: USB disconnect, device number 50 [ 551.868701][T16689] fuse: Bad value for 'user_id' [ 551.870300][T16689] fuse: Bad value for 'user_id' [ 553.716756][ T7382] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 553.889515][ T7382] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.894130][ T7382] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.898180][ T7382] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 553.903650][ T7382] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 553.907334][ T7382] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.913317][ T7382] usb 9-1: config 0 descriptor?? [ 554.244705][T16715] fuse: Bad value for 'fd' [ 554.323542][ T7382] plantronics 0003:047F:FFFF.000A: reserved main item tag 0xd [ 554.327124][ T7382] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 554.330891][ T7382] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 554.334104][ T7382] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 554.337653][ T7382] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 554.340651][ T7382] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 554.355274][ T7382] plantronics 0003:047F:FFFF.000A: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 554.366782][T16669] usbtmc 5-1:16.0: usb_control_msg returned -110 [ 554.378447][ T29] usb 5-1: USB disconnect, device number 49 [ 554.522990][ T7382] usb 9-1: USB disconnect, device number 51 [ 555.697840][T16740] fuse: Bad value for 'fd' [ 555.996589][ T29] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 556.157341][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 556.160341][ T29] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 556.163014][ T29] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 556.166339][ T29] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 556.169493][ T29] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 556.172603][ T29] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 556.176807][ T29] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 556.179689][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.298690][ T831] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 556.387558][ T29] usb 6-1: usb_control_msg returned -32 [ 556.389451][ T29] usbtmc 6-1:16.0: can't read capabilities [ 556.478393][ T831] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.482527][ T831] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.485955][ T831] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 556.491013][ T831] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 556.494446][ T831] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.499348][ T831] usb 10-1: config 0 descriptor?? [ 556.996544][ T831] plantronics 0003:047F:FFFF.000B: reserved main item tag 0xd [ 557.034644][ T831] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 557.042819][ T831] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 557.095649][ T831] plantronics 0003:047F:FFFF.000B: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 557.285659][ T831] usb 10-1: USB disconnect, device number 49 [ 557.641776][T16766] fuse: Bad value for 'fd' [ 559.426700][ T7382] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 559.502941][T16788] fuse: Bad value for 'fd' [ 559.578110][ T7382] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.581676][ T7382] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.584993][ T7382] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 559.589474][ T7382] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 559.592468][ T7382] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.597276][ T7382] usb 9-1: config 0 descriptor?? [ 560.043064][ T7382] plantronics 0003:047F:FFFF.000C: reserved main item tag 0xd [ 560.050380][ T7382] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 560.053475][ T7382] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 560.070082][ T7382] plantronics 0003:047F:FFFF.000C: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 560.220580][ T34] usb 9-1: USB disconnect, device number 52 [ 562.207088][T16757] usbtmc 6-1:16.0: usb_control_msg returned -110 [ 562.225586][ T10] usb 6-1: USB disconnect, device number 37 [ 562.249244][T16823] fuse: Bad value for 'fd' [ 562.746568][ T10] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 562.898492][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.903482][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.907746][ T10] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 562.913549][ T10] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 562.917845][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.925010][ T10] usb 10-1: config 0 descriptor?? [ 563.345141][ T10] plantronics 0003:047F:FFFF.000D: reserved main item tag 0xd [ 563.347835][ T10] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 563.350203][ T10] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 563.358510][ T10] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 563.598117][ T34] usb 10-1: USB disconnect, device number 50 [ 564.131589][T16852] fuse: Bad value for 'fd' [ 564.366726][ T831] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 564.536663][ T831] usb 6-1: Using ep0 maxpacket: 8 [ 564.541001][ T831] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 564.545361][ T831] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 564.552889][ T831] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 564.558566][ T831] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 564.562772][ T831] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 564.568862][ T831] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 564.572745][ T831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.808285][ T831] usb 6-1: usb_control_msg returned -32 [ 564.810125][ T831] usbtmc 6-1:16.0: can't read capabilities [ 565.596598][ T831] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 565.769870][ T831] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.774768][ T831] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.778445][ T831] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 565.782769][ T831] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 565.786679][ T831] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.791839][ T831] usb 9-1: config 0 descriptor?? [ 566.670384][ T831] plantronics 0003:047F:FFFF.000E: reserved main item tag 0xd [ 566.886346][ T831] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 566.909018][ T831] plantronics 0003:047F:FFFF.000E: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 566.916027][ T831] usb 9-1: USB disconnect, device number 53 [ 566.921264][T16892] IPv6: NLM_F_REPLACE set, but no existing node found! [ 566.947860][T16890] fido_id[16890]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb9/report_descriptor': No such file or directory [ 567.077040][T16902] binder: 16901:16902 ioctl c0306201 200000000700 returned -14 [ 568.564718][T16917] fuse: Bad value for 'rootmode' [ 568.850699][T16926] Bluetooth: hci0: invalid len left 7, exp >= 38 [ 569.148413][T16942] fuse: Bad value for 'rootmode' [ 569.227339][T16946] binder: 16945:16946 ioctl c0306201 0 returned -14 [ 569.871950][T16954] Bluetooth: hci0: unsupported parameter 255 [ 569.874239][T16954] Bluetooth: hci0: unsupported parameter 255 [ 569.949767][T16961] fuse: Bad value for 'rootmode' [ 570.336597][ T831] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 570.489703][ T831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.494479][ T831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.499446][ T831] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 570.504681][ T831] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 570.507853][ T831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.513554][ T831] usb 5-1: config 0 descriptor?? [ 570.607232][T16878] usbtmc 6-1:16.0: usb_control_msg returned -110 [ 570.621773][ T6344] usb 6-1: USB disconnect, device number 38 [ 570.863658][T16979] Bluetooth: hci0: unsupported parameter 255 [ 570.865695][T16979] Bluetooth: hci0: unsupported parameter 255 [ 570.929630][ T831] plantronics 0003:047F:FFFF.000F: reserved main item tag 0xd [ 570.932456][ T831] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 570.940359][ T831] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 570.947505][T16984] hfsplus: unable to find HFS+ superblock [ 570.953726][T16984] netlink: 'syz.5.3839': attribute type 64 has an invalid length. [ 571.033918][T16989] binder: 16988:16989 ioctl c0306201 0 returned -14 [ 571.201286][ T34] usb 5-1: USB disconnect, device number 50 [ 571.606584][ T5930] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 571.766611][ T5930] usb 9-1: Using ep0 maxpacket: 8 [ 571.769584][ T5930] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 571.772542][ T5930] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 571.775737][ T5930] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 571.778884][ T5930] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 571.782012][ T5930] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 571.786234][ T5930] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 571.789962][ T5930] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.861192][T16989] binder: 16988:16989 ioctl c0306201 200000000700 returned -14 [ 571.988791][T17004] Bluetooth: hci0: unsupported parameter 255 [ 571.991378][T17004] Bluetooth: hci0: unsupported parameter 255 [ 572.022532][ T5930] usb 9-1: usb_control_msg returned -32 [ 572.024876][ T5930] usbtmc 9-1:16.0: can't read capabilities [ 572.189143][T17006] hfsplus: unable to find HFS+ superblock [ 572.230328][T17006] netlink: 'syz.5.3848': attribute type 64 has an invalid length. [ 572.404242][T17014] fuse: Unknown parameter 'use00000000000000000000' [ 572.728805][T17023] usbtmc 9-1:16.0: CHECK_CLEAR_STATUS returned 4b [ 572.886657][ T831] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 572.930158][ T10] usb 9-1: USB disconnect, device number 54 [ 573.037988][ T831] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.041443][ T831] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.044547][ T831] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 573.048766][ T831] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 573.051637][ T831] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.055808][ T831] usb 10-1: config 0 descriptor?? [ 573.462728][ T831] plantronics 0003:047F:FFFF.0010: reserved main item tag 0xd [ 573.470000][ T831] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 573.497281][T17031] hfsplus: unable to find HFS+ superblock [ 573.502156][T17031] netlink: 'syz.0.3857': attribute type 64 has an invalid length. [ 573.662679][ T831] usb 10-1: USB disconnect, device number 51 [ 574.408140][T17050] hfsplus: unable to find HFS+ superblock [ 574.414333][T17050] netlink: 'syz.1.3866': attribute type 64 has an invalid length. [ 574.445984][T17053] fuse: Unknown parameter 'user_i00000000000000000000' [ 574.496988][ T10] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 574.646587][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 574.649708][ T10] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 574.653200][ T10] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 574.656319][ T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 574.659764][ T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 574.662949][ T10] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 574.667686][ T10] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 574.670499][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.736538][ T831] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 574.878742][ T10] usb 9-1: usb_control_msg returned -32 [ 574.880613][ T10] usbtmc 9-1:16.0: can't read capabilities [ 574.888593][ T831] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.892485][ T831] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.895529][ T831] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 574.900953][ T831] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 574.904725][ T831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.910418][ T831] usb 6-1: config 0 descriptor?? [ 575.320892][ T831] plantronics 0003:047F:FFFF.0011: reserved main item tag 0xd [ 575.327199][ T831] plantronics 0003:047F:FFFF.0011: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 575.543867][ T10] usb 6-1: USB disconnect, device number 39 [ 575.590480][T17073] usbtmc 9-1:16.0: CHECK_CLEAR_STATUS returned 4b [ 575.794565][ T7382] usb 9-1: USB disconnect, device number 55 [ 576.123175][T17077] hfsplus: unable to find HFS+ superblock [ 576.132867][T17077] netlink: 'syz.1.3875': attribute type 64 has an invalid length. [ 577.166850][ T10] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 577.318033][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.321907][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.325299][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 577.330363][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 577.333461][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.338056][ T10] usb 5-1: config 0 descriptor?? [ 577.414701][T17108] hfsplus: unable to find HFS+ superblock [ 577.420839][T17108] netlink: 'syz.5.3886': attribute type 64 has an invalid length. [ 577.696580][ T5982] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 577.750205][ T10] plantronics 0003:047F:FFFF.0012: reserved main item tag 0xd [ 577.762056][ T10] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 577.846533][ T5982] usb 10-1: Using ep0 maxpacket: 8 [ 577.849985][ T5982] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 577.853321][ T5982] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 577.865440][ T5982] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 577.869522][ T5982] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 577.873543][ T5982] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 577.878686][ T5982] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 577.882308][ T5982] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.947743][T17124] binder: 17123:17124 ioctl c0306201 0 returned -14 [ 577.952585][ T10] usb 5-1: USB disconnect, device number 51 [ 578.091465][ T5982] usb 10-1: usb_control_msg returned -32 [ 578.093738][ T5982] usbtmc 10-1:16.0: can't read capabilities [ 578.524512][T17131] hfsplus: unable to find HFS+ superblock [ 578.529572][T17131] netlink: 'syz.0.3895': attribute type 64 has an invalid length. [ 578.819832][T17140] usbtmc 10-1:16.0: CHECK_CLEAR_STATUS returned 4b [ 579.020128][ T10] usb 10-1: USB disconnect, device number 52 [ 579.905296][T17161] hfsplus: unable to find HFS+ superblock [ 579.912851][T17161] netlink: 'syz.0.3906': attribute type 64 has an invalid length. [ 580.036698][ T39] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 580.205396][ T39] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.209331][ T39] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 580.212499][ T39] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 580.218008][ T39] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 580.220894][ T39] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.225205][ T39] usb 9-1: config 0 descriptor?? [ 580.360457][T17177] Oops: general protection fault, probably for non-canonical address 0xe000080fc4c233e2: 0000 [#1] SMP KASAN NOPTI [ 580.364591][T17177] KASAN: probably user-memory-access in range [0x0000607e26119f10-0x0000607e26119f17] [ 580.368335][T17177] CPU: 2 UID: 0 PID: 17177 Comm: syz.1.3913 Tainted: G L syzkaller #0 PREEMPT(full) [ 580.371741][T17177] Tainted: [L]=SOFTLOCKUP [ 580.373146][T17177] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 580.376264][T17177] RIP: 0010:try_module_get+0x23/0xd0 [ 580.378221][T17177] Code: 90 90 90 90 90 90 90 f3 0f 1e fa 48 85 ff 0f 84 9b 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 55 48 c1 ea 03 53 48 89 fb <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 89 00 00 00 83 3b 02 74 67 48 [ 580.384679][T17177] RSP: 0018:ffffc9002301f8b8 EFLAGS: 00010206 [ 580.386678][T17177] RAX: dffffc0000000000 RBX: 0000607e26119f10 RCX: ffffc900074b3000 [ 580.389172][T17177] RDX: 00000c0fc4c233e2 RSI: ffffffff87ed7c00 RDI: 0000607e26119f10 [ 580.391654][T17177] RBP: ffff88802df1d000 R08: 0000000000000001 R09: fffffbfff1fda261 [ 580.394282][T17177] R10: ffffffff8fed130f R11: 0000000000000000 R12: ffff88802d5b0540 [ 580.397117][T17177] R13: ffff88802d822b80 R14: ffff88802fd55c10 R15: ffff88802d5b0588 [ 580.399787][T17177] FS: 00007f251aa8c6c0(0000) GS:ffff8880d6539000(0000) knlGS:0000000000000000 [ 580.402586][T17177] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 580.404671][T17177] CR2: 00007f2519b85e40 CR3: 00000000508d0000 CR4: 0000000000352ef0 [ 580.407177][T17177] Call Trace: [ 580.408281][T17177] [ 580.409237][T17177] dvb_device_open+0x124/0x3b0 [ 580.410984][T17177] ? __pfx_dvb_device_open+0x10/0x10 [ 580.412832][T17177] chrdev_open+0x234/0x6a0 [ 580.414460][T17177] ? __pfx_chrdev_open+0x10/0x10 [ 580.416201][T17177] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 580.418436][T17177] do_dentry_open+0x6d8/0x1660 [ 580.419973][T17177] ? __pfx_chrdev_open+0x10/0x10 [ 580.421543][T17177] vfs_open+0x82/0x3f0 [ 580.422887][T17177] path_openat+0x208c/0x31a0 [ 580.424371][T17177] ? __pfx_path_openat+0x10/0x10 [ 580.425948][T17177] do_file_open+0x20e/0x430 [ 580.427502][T17177] ? __pfx_do_file_open+0x10/0x10 [ 580.429384][T17177] ? alloc_fd+0x476/0x790 [ 580.430979][T17177] ? do_getname+0x191/0x390 [ 580.432638][T17177] do_sys_openat2+0x10d/0x1e0 [ 580.434183][T17177] ? __pfx_do_sys_openat2+0x10/0x10 [ 580.435845][T17177] ? arch_do_signal_or_restart+0x1f9/0x7a0 [ 580.437833][T17177] __x64_sys_openat+0x12d/0x210 [ 580.439398][T17177] ? __pfx___x64_sys_openat+0x10/0x10 [ 580.441108][T17177] ? do_user_addr_fault+0x8d6/0x12f0 [ 580.442854][T17177] do_syscall_64+0x106/0xf80 [ 580.444509][T17177] ? clear_bhb_loop+0x40/0x90 [ 580.446022][T17177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.447925][T17177] RIP: 0033:0x7f2519b5d04e [ 580.449433][T17177] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 580.455899][T17177] RSP: 002b:00007f251aa8bb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 580.458523][T17177] RAX: ffffffffffffffda RBX: 00007f251aa8c6c0 RCX: 00007f2519b5d04e [ 580.461012][T17177] RDX: 0000000000000002 RSI: 00007f251aa8bc00 RDI: ffffffffffffff9c [ 580.463510][T17177] RBP: 00007f251aa8bc00 R08: 0000000000000000 R09: 0000000000000000 [ 580.466024][T17177] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 580.468623][T17177] R13: 00007f2519e16038 R14: 00007f2519e15fa0 R15: 00007fffac191738 [ 580.471989][T17177] [ 580.473473][T17177] Modules linked in: [ 580.475545][T17177] ---[ end trace 0000000000000000 ]--- [ 580.477384][T17177] RIP: 0010:try_module_get+0x23/0xd0 [ 580.479142][T17177] Code: 90 90 90 90 90 90 90 f3 0f 1e fa 48 85 ff 0f 84 9b 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 55 48 c1 ea 03 53 48 89 fb <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 89 00 00 00 83 3b 02 74 67 48 [ 580.485262][T17177] RSP: 0018:ffffc9002301f8b8 EFLAGS: 00010206 [ 580.487555][T17177] RAX: dffffc0000000000 RBX: 0000607e26119f10 RCX: ffffc900074b3000 [ 580.488731][ T40] audit: type=1400 audit(1775517208.649:579): avc: denied { read } for pid=5320 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 580.490258][T17177] RDX: 00000c0fc4c233e2 RSI: ffffffff87ed7c00 RDI: 0000607e26119f10 [ 580.497782][ T40] audit: type=1400 audit(1775517208.649:580): avc: denied { search } for pid=5320 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 580.497806][ T40] audit: type=1400 audit(1775517208.649:581): avc: denied { search } for pid=5320 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 580.497824][ T40] audit: type=1400 audit(1775517208.659:582): avc: denied { add_name } for pid=5320 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 580.497841][ T40] audit: type=1400 audit(1775517208.659:583): avc: denied { create } for pid=5320 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 580.497858][ T40] audit: type=1400 audit(1775517208.659:584): avc: denied { append open } for pid=5320 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 580.497877][ T40] audit: type=1400 audit(1775517208.659:585): avc: denied { getattr } for pid=5320 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 580.516614][ T5930] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 580.518858][T17177] RBP: ffff88802df1d000 R08: 0000000000000001 R09: fffffbfff1fda261 [ 580.554472][T17177] R10: ffffffff8fed130f R11: 0000000000000000 R12: ffff88802d5b0540 [ 580.557854][T17177] R13: ffff88802d822b80 R14: ffff88802fd55c10 R15: ffff88802d5b0588 [ 580.560663][T17177] FS: 00007f251aa8c6c0(0000) GS:ffff8880d6539000(0000) knlGS:0000000000000000 [ 580.564177][T17177] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 580.566988][T17177] CR2: 00007f2519b85e40 CR3: 00000000508d0000 CR4: 0000000000352ef0 [ 580.570386][T17177] Kernel panic - not syncing: Fatal exception [ 580.574265][T17177] Kernel Offset: disabled [ 580.575708][T17177] Rebooting in 86400 seconds..