last executing test programs: 2m52.154650045s ago: executing program 0 (id=1446): syz_open_dev$ndb(0x0, 0x0, 0x0) r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x2, @empty}, 0x1c) socket$unix(0x1, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 2m52.032227081s ago: executing program 0 (id=1447): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100800000000000000a44000010203010902bf0002010650000900020000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c09000304240202042482"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 2m49.788744841s ago: executing program 0 (id=1469): r0 = syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000440)=ANY=[@ANYBLOB="12010003000000408c0d020140010102030109026e000301046008080b00010124300109040000000101"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) 2m45.596014098s ago: executing program 0 (id=1485): syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d01"], 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000680)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {0x0}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb", 0x4f}, {0x0}, {&(0x7f0000000500)="08383eeecdd57c523bb0ca7909dca756f65213f41cbed4b32d51", 0x1a}], 0x6}}], 0x1, 0x20000044) io_uring_setup(0x13b5, &(0x7f0000000140)={0x0, 0x911c, 0x40, 0x3, 0x2fa}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m42.351530955s ago: executing program 0 (id=1498): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r0 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(0x0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) fsmount(r0, 0x0, 0x20) 2m41.756319819s ago: executing program 0 (id=1502): syz_open_dev$ndb(&(0x7f0000000480), 0x0, 0x0) r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x2, @empty}, 0x1c) socket$unix(0x1, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 2m26.516624325s ago: executing program 32 (id=1502): syz_open_dev$ndb(&(0x7f0000000480), 0x0, 0x0) r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x2, @empty}, 0x1c) socket$unix(0x1, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 1m57.548189398s ago: executing program 1 (id=1736): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15", 0xcb}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571", 0x9c}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e", 0x70}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c6deeec6d4546fe7d00337f488ecee46577d71b39e2", 0x3f}], 0x1}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m57.311985097s ago: executing program 1 (id=1739): timer_settime(0x0, 0x1, &(0x7f0000000140), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, 0x0, 0x98010) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x406}}}, 0x7) r5 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(r5, 0x7) close_range(r0, 0xffffffffffffffff, 0x0) 1m55.028409372s ago: executing program 1 (id=1749): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000001380)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002700000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)="c5", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000400)="67ac", 0x2}], 0x1}}], 0x2, 0x4) 1m54.046237419s ago: executing program 1 (id=1755): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 1m53.907936872s ago: executing program 1 (id=1757): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsmount(0xffffffffffffffff, 0x0, 0x8) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000240)='gfs2\x00', 0x1008000, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000380)={0xe, @output={0x0, 0x1, {0x3, 0xa}, 0x58, 0x6}}) 1m52.91254677s ago: executing program 1 (id=1760): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000080"], 0x48) 1m52.580027414s ago: executing program 33 (id=1760): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000080"], 0x48) 9.829486653s ago: executing program 3 (id=2278): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe4000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000001900010000000000000000002001000000000000000ae10000000000ac14141500000000000000000000000000000005000000000a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f00000000000000000000000000000000000000000000ffffffffffffffffffffff7f0000000000000000000000000200000000000000000a00000000000000000000008040000000000000000008000000000000000001000000000000004400050000000000000000000000000000000000000004d23c00000000"], 0xfc}, 0x1, 0x0, 0x0, 0x2000c040}, 0x8000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x5, 0x0) listen(0xffffffffffffffff, 0xa) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000006bc0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x8080, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000180)='L', 0x1}], 0x1}}], 0x1, 0x4040001) 9.123660098s ago: executing program 3 (id=2280): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) r3 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, &(0x7f0000000480)={0x3, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r5, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r5, &(0x7f0000000200)={0x2, 0x0, {0x0, 0xd, 0x0, 0x0, 0x3}}, 0x48) bind$alg(r4, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x40480923, 0x9e) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 8.088259107s ago: executing program 3 (id=2285): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000980)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf2520000000080003", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x20048011}, 0x4004080) 8.075572322s ago: executing program 4 (id=2286): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb", 0x5c}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa", 0x69}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654", 0x48}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 7.409186611s ago: executing program 6 (id=2288): openat$ttynull(0xffffffffffffff9c, 0x0, 0x80, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5}]}, 0x24}}, 0x0) 6.377461058s ago: executing program 6 (id=2290): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000023c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004c800}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 6.275173351s ago: executing program 3 (id=2291): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000040)={0x8, 0x9, 0x4, {0x2, @vbi={0x9, 0x1, 0x7, 0x34565559, [0x34565348, 0xb22], [0x7], 0x1}}, 0x8}) socket(0x1d, 0x2, 0x6) sched_setattr(0x0, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000200)=0x20022a, 0x4) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, 0x0) syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0x80000) close_range(r4, 0xffffffffffffffff, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x50) io_setup(0x100, &(0x7f00000009c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x40, r5, &(0x7f0000000200)='8', 0x1, 0x10000000005971}]) process_vm_writev(0x0, 0x0, 0xffffffd1, 0x0, 0xfffffffffffffed6, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b05, &(0x7f0000000100)={'wlan1\x00'}) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) socket$key(0xf, 0x3, 0x2) 6.228257152s ago: executing program 4 (id=2292): syz_socket_connect_nvme_tcp() symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x1e0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) sendmsg$rds(r3, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@mask_fadd={0x58, 0x118, 0x8, {{0x0, 0x3}, 0x0, 0x0, 0x5c, 0x8}}], 0x58}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0xe, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) 6.174862093s ago: executing program 5 (id=2293): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ffe000/0x1000)=nil) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000280)={0x400, r2, 0x2}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000180)=0x6) r5 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000140)={0x3, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x10001, {}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {0x0}, 0x96000}) r6 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r6, {0x4, 0x5}}, './file0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r7) 5.355584632s ago: executing program 5 (id=2295): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) r3 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, &(0x7f0000000480)={0x3, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r5, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r5, &(0x7f0000000200)={0x2, 0x0, {0x0, 0xd, 0x0, 0x0, 0x3}}, 0x48) bind$alg(r4, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x40480923, 0x9e) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 4.474366563s ago: executing program 4 (id=2296): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cd", 0x69}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816", 0x5c}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654", 0x48}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512f", 0x6b}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deae", 0x13}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa46461", 0xe}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.255236304s ago: executing program 5 (id=2297): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x11}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2f}, 0x94) syz_kvm_add_vcpu$x86(0x0, 0x0) geteuid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000240)='tracefs\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) connect$pptp(r2, &(0x7f0000000180)={0x18, 0x2, {0xfffe, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) 3.668321267s ago: executing program 4 (id=2299): setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) socket$inet_sctp(0x2, 0x3, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x40, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0xc4042, 0x1ef) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) sendfile(r2, r3, 0x0, 0x20fffe82) rename(0x0, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) move_mount(r4, 0x0, r4, &(0x7f0000000040)='./file0\x00', 0x210) 3.620527775s ago: executing program 6 (id=2300): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000205f14120200000000000109022400010000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x6, "86ed100f"}]}}, 0x0}, 0x0) 3.418369471s ago: executing program 3 (id=2301): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x1c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000640)={0x800, 0x31364d4e, 0x2, @discrete={0x5, 0x200}}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x56a7}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x40050}, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r6, 0xc0044dff, &(0x7f0000000200)=0xb) socket$igmp(0x2, 0x3, 0x2) r7 = creat(&(0x7f0000000100)='./bus\x00', 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x10507e, 0xa6) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) fallocate(r7, 0x0, 0x0, 0x1000f4) io_setup(0x7d, 0x0) io_submit(0x0, 0x0, 0x0) 3.416130547s ago: executing program 2 (id=2302): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x98cbdd08856ddb1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x50}}, 0x80) 3.254502632s ago: executing program 2 (id=2303): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semop(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003500)}}], 0x2, 0xc085) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) ftruncate(r4, 0x2000009) sendfile(r3, r4, 0x0, 0x7ffff004) 2.381364389s ago: executing program 3 (id=2304): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f0000000240)={0x14, &(0x7f0000000100)={0x20, 0xc, 0x5, {0x5, 0xd, "6adc2c"}}, 0x0}, &(0x7f0000000680)={0x34, &(0x7f0000000400)={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c80)={0x84, &(0x7f0000000640)={0x40, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001300)={0x84, &(0x7f0000000e00)={0x20, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 2.298022786s ago: executing program 5 (id=2305): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ffe000/0x1000)=nil) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000280)={0x400, r2, 0x2}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000180)=0x6) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x3, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x10001, {}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {0x0}, 0x96000}) r5 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x4, 0x5}}, './file0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r6) 2.295862462s ago: executing program 2 (id=2306): syz_socket_connect_nvme_tcp() symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x1e0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) sendmsg$rds(r3, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@mask_fadd={0x58, 0x118, 0x8, {{0x0, 0x3}, 0x0, 0x0, 0x5c, 0x8}}], 0x58}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0xe, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) 1.632443676s ago: executing program 5 (id=2307): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) r3 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, &(0x7f0000000480)={0x3, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r5, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r5, &(0x7f0000000200)={0x2, 0x0, {0x0, 0xd, 0x0, 0x0, 0x3}}, 0x48) bind$alg(r4, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x40480923, 0x9e) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 1.544142697s ago: executing program 4 (id=2308): r0 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) rt_tgsigqueueinfo(r1, r1, 0x2a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(&(0x7f0000002740), 0x80080) r4 = fsopen(&(0x7f0000000040)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='test_dummy_encryption', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020) mount(0x0, 0x0, &(0x7f0000000180)='tmpfs\x00', 0x2204c96, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000001c0)='\x00', 0x0, r6) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') socket$inet6(0xa, 0x2, 0x0) r7 = socket(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000022c0)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000002000000000000000000000300000000020000000200000003000000000000000000000105000000080000000000000001000005000000000000000001000000000000000000a122d481344281c0bb15a77142f5c1de50b2f0400350b2d8548651b10d6af451b983e9cc134849cab4c6f15d498ee0804617d6d5975d6e49fedca8af49f989048cfc5304b1bba50752a9811f359c8e9e101de17491f5ceea003b0373"], 0x0, 0x5a}, 0x20) write(r7, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x108) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x89ff, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) 470.579436ms ago: executing program 4 (id=2309): r0 = syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000008662410804000010203010902600003010000840904000000"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 399.979599ms ago: executing program 6 (id=2310): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000001380)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002700000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)="c5", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000400)="67ac", 0x2}], 0x1}}], 0x2, 0x4) 353.625843ms ago: executing program 2 (id=2311): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) r2 = syz_open_dev$media(&(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000700)={0x0, 0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$isdn(0x22, 0x3, 0x22) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc804}, 0x82010) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)}, 0x804) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x24048800) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x48, 0x2, 0x6, 0x1, 0x6000000, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f00000000c0)={r0}) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r6, 0x1, 0x31, &(0x7f0000001600), 0x4) r7 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f00000005c0)={@mcast2, @remote, @ipv4={'\x00', '\xff\xff', @remote}, 0x3, 0x2, 0x5, 0x100, 0xbc, 0xc20022, r8}) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) 296.330102ms ago: executing program 6 (id=2312): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000280)=""/106, 0x6a}, {&(0x7f0000000f00)=""/231, 0xe7}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000000)=""/88, 0x58}], 0x5}, 0x70004}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x77}], 0x4, 0x100, 0x0) 260.565795ms ago: executing program 5 (id=2313): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="120100000b529708410e42416ed40102030109022400011e000000090400020221f768000905013d0004"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 194.63239ms ago: executing program 6 (id=2314): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x1c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000640)={0x800, 0x31364d4e, 0x2, @discrete={0x5, 0x200}}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x56a7}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x40050}, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r6, 0xc0044dff, &(0x7f0000000200)=0xb) socket$igmp(0x2, 0x3, 0x2) r7 = creat(&(0x7f0000000100)='./bus\x00', 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x10507e, 0xa6) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) fallocate(r7, 0x0, 0x0, 0x1000f4) io_setup(0x7d, 0x0) io_submit(0x0, 0x0, 0x0) 185.376168ms ago: executing program 2 (id=2315): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendto$packet(0xffffffffffffffff, &(0x7f0000000380)="fd", 0x1, 0x15, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) 0s ago: executing program 2 (id=2316): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x11}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2f}, 0x94) syz_kvm_add_vcpu$x86(0x0, 0x0) geteuid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000240)='tracefs\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) connect$pptp(r2, &(0x7f0000000180)={0x18, 0x2, {0xfffe, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) kernel console output (not intermixed with test programs): ly initialized and connected. [ 313.271105][ T5973] (NULL device *): no alternate interface [ 313.729489][ T5973] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 313.768320][T10081] netlink: 'syz.1.1505': attribute type 1 has an invalid length. [ 313.781552][ T5973] usb 2-1: USB disconnect, device number 35 [ 313.864743][T10081] 8021q: adding VLAN 0 to HW filter on device bond2 [ 313.883099][T10081] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10081 comm=syz.1.1505 [ 313.956326][ T29] audit: type=1326 audit(1776763155.691:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.3.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b959c819 code=0x7ffc0000 [ 313.998600][ T29] audit: type=1326 audit(1776763155.691:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.3.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b959c819 code=0x7ffc0000 [ 314.024765][ T29] audit: type=1326 audit(1776763155.691:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.3.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc2b959c819 code=0x7ffc0000 [ 314.083585][ T29] audit: type=1326 audit(1776763155.691:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.3.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b959c819 code=0x7ffc0000 [ 314.142779][ T29] audit: type=1326 audit(1776763155.691:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.3.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc2b959c819 code=0x7ffc0000 [ 314.169274][ T29] audit: type=1326 audit(1776763155.691:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.3.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b959c819 code=0x7ffc0000 [ 314.199199][ T803] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 314.200008][ T29] audit: type=1326 audit(1776763155.691:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.3.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc2b959c819 code=0x7ffc0000 [ 314.235077][ T29] audit: type=1326 audit(1776763155.701:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.3.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b959c819 code=0x7ffc0000 [ 314.268903][ T29] audit: type=1326 audit(1776763155.701:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.3.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc2b959c819 code=0x7ffc0000 [ 314.323139][ T29] audit: type=1326 audit(1776763155.701:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.3.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b959c819 code=0x7ffc0000 [ 314.349749][ T803] usb 4-1: device descriptor read/64, error -71 [ 315.407709][ T803] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 315.597492][ T803] usb 4-1: device descriptor read/64, error -71 [ 315.731239][ T803] usb usb4-port1: attempt power cycle [ 315.783484][T10114] 9pnet_fd: Insufficient options for proto=fd [ 315.849005][T10114] 9pnet_fd: Insufficient options for proto=fd [ 316.139285][ T803] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 316.171184][ T803] usb 4-1: device descriptor read/8, error -71 [ 316.657791][T10139] ±ÿ: renamed from lo [ 317.036061][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.044340][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.107603][ T803] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 317.126536][ T1218] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 317.161255][ T803] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.175083][ T803] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 317.188228][ T803] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 317.198821][ T803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.210192][ T803] usb 4-1: config 0 descriptor?? [ 317.229741][ T803] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 317.276342][ T1218] usb 5-1: Using ep0 maxpacket: 8 [ 317.296401][ T1218] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 317.315842][ T1218] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 317.340496][ T1218] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 317.376343][ T1218] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 317.391686][ T1218] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 317.402770][ T1218] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 317.420765][ T1218] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.434838][ T1218] usb 5-1: config 0 descriptor?? [ 317.452378][ T803] usb 4-1: USB disconnect, device number 29 [ 317.452518][T10132] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 318.062473][ T803] usb 5-1: USB disconnect, device number 36 [ 318.068627][ T5824] Bluetooth: hci5: Opcode 0x0c03 failed: -19 [ 320.126237][T10194] kvm: requested 128228 ns i8254 timer period limited to 200000 ns [ 320.150941][T10194] kvm: requested 18438 ns i8254 timer period limited to 200000 ns [ 320.159663][T10194] kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 320.167685][T10194] kvm: requested 88000 ns i8254 timer period limited to 200000 ns [ 320.177593][T10194] kvm: requested 191923 ns i8254 timer period limited to 200000 ns [ 320.186674][T10194] kvm: requested 112304 ns i8254 timer period limited to 200000 ns [ 320.198087][T10194] kvm: requested 168457 ns i8254 timer period limited to 200000 ns [ 320.206651][T10194] kvm: requested 102247 ns i8254 timer period limited to 200000 ns [ 320.305183][ T803] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 320.464946][ T803] usb 2-1: Using ep0 maxpacket: 32 [ 320.500125][ T803] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 320.527492][ T803] usb 2-1: config 0 has no interface number 0 [ 320.558160][ T803] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 320.616849][ T803] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 320.651326][ T803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.787064][ T803] usb 2-1: Product: syz [ 320.792347][ T803] usb 2-1: Manufacturer: syz [ 320.798881][ T803] usb 2-1: SerialNumber: syz [ 320.812583][ T803] usb 2-1: config 0 descriptor?? [ 320.942497][ T803] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 320.960244][ T803] em28xx 2-1:0.132: Video interface 132 found: [ 321.758382][ T803] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 322.045520][ T803] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 322.069090][ T803] em28xx 2-1:0.132: board has no eeprom [ 322.154510][ T803] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 322.172799][ T803] em28xx 2-1:0.132: analog set to bulk mode. [ 322.260848][T10219] CUSE: info not properly terminated [ 322.305099][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 322.305134][ T29] audit: type=1400 audit(1776763164.025:550): avc: denied { read } for pid=10216 comm="syz.4.1554" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 322.512647][ T29] audit: type=1400 audit(1776763164.025:551): avc: denied { open } for pid=10216 comm="syz.4.1554" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 322.561019][ T10] em28xx 2-1:0.132: Registering V4L2 extension [ 322.573276][ T803] usb 2-1: USB disconnect, device number 36 [ 322.584288][ T803] em28xx 2-1:0.132: Disconnecting em28xx [ 322.915233][ T10] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 322.946620][ T10] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 322.969468][ T10] em28xx 2-1:0.132: No AC97 audio processor [ 323.183581][ T10] usb 2-1: Decoder not found [ 323.188306][ T10] em28xx 2-1:0.132: failed to create media graph [ 323.217963][ T10] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 323.641289][ T29] audit: type=1400 audit(1776763165.415:552): avc: denied { getopt } for pid=10232 comm="syz.4.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 323.915591][ T10] em28xx 2-1:0.132: Remote control support is not available for this card. [ 323.938808][ T803] em28xx 2-1:0.132: Closing input extension [ 324.053322][ T803] em28xx 2-1:0.132: Freeing device [ 324.468236][ T29] audit: type=1400 audit(1776763166.246:553): avc: denied { create } for pid=10262 comm="syz.2.1572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 324.544356][ T29] audit: type=1400 audit(1776763166.276:554): avc: denied { connect } for pid=10262 comm="syz.2.1572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 324.908203][T10276] ipvlan2: entered promiscuous mode [ 324.915071][T10276] team0: Device ipvlan2 failed to register rx_handler [ 325.812760][ T803] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 326.684321][ T803] usb 5-1: Using ep0 maxpacket: 8 [ 326.728635][ T803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 326.782912][ T803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 326.813333][ T803] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 326.845265][ T803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 326.880185][ T803] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 326.901692][ T803] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 326.922217][ T803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.945610][ T803] usb 5-1: config 0 descriptor?? [ 326.963439][T10267] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 326.991513][ T5973] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 326.991541][ T5902] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 327.161546][ T5973] usb 4-1: Using ep0 maxpacket: 32 [ 327.180641][ T5973] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 327.194470][ T5973] usb 4-1: config 0 has no interface number 0 [ 327.206022][ T5902] usb 2-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 327.206536][ T5824] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 327.229922][ T5902] usb 2-1: config 1 interface 0 has no altsetting 0 [ 327.230342][ T5973] usb 4-1: config 0 interface 184 has no altsetting 0 [ 327.249405][ T24] usb 5-1: USB disconnect, device number 37 [ 327.273430][ T5902] usb 2-1: string descriptor 0 read error: -22 [ 327.280708][ T5973] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 327.282326][ T5902] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 327.293017][ T5973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.309055][ T5973] usb 4-1: Product: syz [ 327.313309][ T5973] usb 4-1: Manufacturer: syz [ 327.317948][ T5973] usb 4-1: SerialNumber: syz [ 327.334255][ T5973] usb 4-1: config 0 descriptor?? [ 327.357465][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.429987][ T29] audit: type=1804 audit(1776763169.207:555): pid=10299 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1584" name="/newroot/337/file0" dev="tmpfs" ino=1743 res=1 errno=0 [ 328.034507][ T5973] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 328.243213][ T5973] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 328.309945][ T5902] usbhid 2-1:1.0: can't add hid device: -32 [ 328.316059][ T5902] usbhid 2-1:1.0: probe with driver usbhid failed with error -32 [ 328.373480][ T5973] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 328.385258][ T5973] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 328.398642][ T5973] usb 4-1: USB disconnect, device number 30 [ 328.755649][ T29] audit: type=1400 audit(1776763170.518:556): avc: denied { connect } for pid=10305 comm="syz.4.1587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 329.215048][ T5902] usb 2-1: USB disconnect, device number 37 [ 329.255493][ T5830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 329.273025][ T5830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 329.500534][ T5830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 329.511891][ T5830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 329.529049][ T5830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 330.839772][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 331.000713][T10337] netlink: 392 bytes leftover after parsing attributes in process `syz.4.1596'. [ 331.438345][T10337] netlink: 392 bytes leftover after parsing attributes in process `syz.4.1596'. [ 331.540574][T10315] chnl_net:caif_netlink_parms(): no params data found [ 331.639241][ T5824] Bluetooth: hci5: command tx timeout [ 331.704922][T10337] netlink: 392 bytes leftover after parsing attributes in process `syz.4.1596'. [ 331.964391][T10315] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.997762][T10315] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.042938][T10315] bridge_slave_0: entered allmulticast mode [ 332.438275][T10315] bridge_slave_0: entered promiscuous mode [ 332.489319][T10315] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.503182][T10315] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.515789][T10315] bridge_slave_1: entered allmulticast mode [ 332.528134][T10315] bridge_slave_1: entered promiscuous mode [ 332.704112][T10315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.744808][T10315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.950097][T10315] team0: Port device team_slave_0 added [ 332.958932][T10315] team0: Port device team_slave_1 added [ 332.993594][T10315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.018777][T10315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.028549][ T5973] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 333.102381][ T29] audit: type=1400 audit(1776763174.870:557): avc: denied { create } for pid=10367 comm="syz.4.1604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 333.365596][ T5973] usb 4-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 333.441049][ T5973] usb 4-1: config 1 interface 0 has no altsetting 0 [ 333.458738][T10315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.471113][T10315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.478066][T10315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.506145][ T5973] usb 4-1: string descriptor 0 read error: -22 [ 333.508313][T10315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.519762][ T5973] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 333.541571][ T5973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.598228][ T803] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 333.707545][T10315] hsr_slave_0: entered promiscuous mode [ 333.718269][ T5824] Bluetooth: hci5: command tx timeout [ 333.741859][T10315] hsr_slave_1: entered promiscuous mode [ 333.766541][T10315] debugfs: 'hsr0' already exists in 'hsr' [ 333.801874][T10315] Cannot create hsr debugfs directory [ 333.818697][ T803] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 333.844722][ T803] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 333.888158][ T803] usb 2-1: config 220 has no interface number 2 [ 333.906398][ T803] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 333.943063][ T803] usb 2-1: config 220 interface 0 has no altsetting 0 [ 333.957710][ T803] usb 2-1: config 220 interface 76 has no altsetting 0 [ 333.973710][ T803] usb 2-1: config 220 interface 1 has no altsetting 0 [ 333.990887][ T803] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 334.015679][ T803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.075521][ T803] usb 2-1: Product: syz [ 334.116472][ T803] usb 2-1: Manufacturer: syz [ 334.148035][ T803] usb 2-1: SerialNumber: syz [ 334.231329][T10385] securityfs: Unknown parameter '' [ 334.249371][ T5973] usbhid 4-1:1.0: can't add hid device: -32 [ 334.987146][ T803] usb 2-1: selecting invalid altsetting 0 [ 335.119745][ T803] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 335.189032][ T803] uvcvideo 2-1:220.0: No valid video chain found. [ 335.231168][ T5973] usbhid 4-1:1.0: probe with driver usbhid failed with error -32 [ 335.458858][ T803] usb 2-1: selecting invalid altsetting 0 [ 335.519745][ T803] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 335.747314][ T803] usb 2-1: USB disconnect, device number 38 [ 335.797190][ T5824] Bluetooth: hci5: command tx timeout [ 336.605542][ T5973] usb 4-1: USB disconnect, device number 31 [ 337.149959][T10397] netlink: 'syz.3.1614': attribute type 13 has an invalid length. [ 337.347798][T10315] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 337.402051][T10315] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 337.425487][T10315] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 337.475846][T10315] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 337.514112][T10315] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 337.543945][T10315] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 337.552407][T10315] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 337.572058][T10315] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 337.880122][ T5824] Bluetooth: hci5: command tx timeout [ 337.956225][ T29] audit: type=1326 audit(1776763179.703:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10407 comm="syz.3.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b959c819 code=0x7fc00000 [ 338.163799][T10315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.179915][ T5159] block nbd0: Possible stuck request ffff8880284f7000: control (read@0,4096B). Runtime 90 seconds [ 338.194937][T10315] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.206280][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.213451][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.227089][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.234239][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.407716][ T29] audit: type=1326 audit(1776763180.193:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10407 comm="syz.3.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc2b959c819 code=0x7fc00000 [ 338.618129][T10315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.939779][T10315] veth0_vlan: entered promiscuous mode [ 338.957921][T10315] veth1_vlan: entered promiscuous mode [ 339.006469][T10315] veth0_macvtap: entered promiscuous mode [ 339.022675][T10315] veth1_macvtap: entered promiscuous mode [ 339.052683][T10315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.084617][T10315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.096047][ T5899] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 339.118056][ T505] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.143279][ T505] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.163085][ T505] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.191590][ T71] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.278548][ T5899] usb 5-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 339.318704][ T5899] usb 5-1: config 1 interface 0 has no altsetting 0 [ 339.341582][ T5899] usb 5-1: string descriptor 0 read error: -22 [ 339.358210][ T5899] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 339.383224][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.444902][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.473383][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.572394][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.584955][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.624316][ T29] audit: type=1400 audit(1776763181.403:560): avc: denied { mounton } for pid=10315 comm="syz-executor" path="/root/syzkaller.gjCozG/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 339.679597][ T29] audit: type=1400 audit(1776763181.463:561): avc: denied { mounton } for pid=10315 comm="syz-executor" path="/root/syzkaller.gjCozG/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 339.710446][ T29] audit: type=1400 audit(1776763181.463:562): avc: denied { mounton } for pid=10315 comm="syz-executor" path="/root/syzkaller.gjCozG/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=28548 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 339.739321][ T29] audit: type=1400 audit(1776763181.493:563): avc: denied { mounton } for pid=10315 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 339.945068][ T9] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 340.106419][ T9] usb 2-1: device descriptor read/64, error -71 [ 340.416798][ T9] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 340.425475][ T29] audit: type=1400 audit(1776763182.184:564): avc: denied { mounton } for pid=10457 comm="syz.2.1631" path="/proc/931/task/932/net/stat" dev="proc" ino=4026532965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 340.482487][ T29] audit: type=1400 audit(1776763182.194:565): avc: denied { mount } for pid=10457 comm="syz.2.1631" name="/" dev="hugetlbfs" ino=29191 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 340.615799][ T9] usb 2-1: device descriptor read/64, error -71 [ 340.745484][ T9] usb usb2-port1: attempt power cycle [ 340.772062][ T5899] usbhid 5-1:1.0: can't add hid device: -32 [ 340.781778][ T5899] usbhid 5-1:1.0: probe with driver usbhid failed with error -32 [ 340.973895][T10470] netlink: 308 bytes leftover after parsing attributes in process `syz.2.1634'. [ 341.094886][ T9] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 341.145170][ T9] usb 2-1: device descriptor read/8, error -71 [ 341.243306][ T29] audit: type=1326 audit(1776763183.024:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10483 comm="syz.5.1641" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3e4af9c819 code=0x0 [ 341.404466][ T9] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 341.415905][ T5899] usb 5-1: USB disconnect, device number 38 [ 341.445119][ T9] usb 2-1: device descriptor read/8, error -71 [ 341.567889][ T9] usb usb2-port1: unable to enumerate USB device [ 342.035847][T10497] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1646'. [ 342.181252][T10501] binder: BINDER_SET_CONTEXT_MGR already set [ 342.215741][T10501] binder: 10500:10501 ioctl 4018620d 200000001000 returned -16 [ 342.238726][T10508] netlink: 'syz.5.1650': attribute type 3 has an invalid length. [ 343.641157][T10532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1659'. [ 343.681142][ T29] audit: type=1400 audit(1776763185.465:567): avc: denied { read } for pid=10533 comm="syz.5.1661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 343.874196][ T5926] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 344.232984][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 344.985093][ T5824] Bluetooth: hci0: command 0x0406 tx timeout [ 345.052927][ T5926] usb 2-1: device descriptor read/64, error -71 [ 345.112879][T10550] libceph: resolve ' [ 345.112879][T10550] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 345.112879][T10550] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 345.132569][ T29] audit: type=1326 audit(1776763186.916:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10518 comm="syz.3.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b959c819 code=0x7fc00000 [ 345.197948][ T29] audit: type=1326 audit(1776763186.946:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10518 comm="syz.3.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc2b959c819 code=0x7fc00000 [ 345.321870][ T5926] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 345.872276][ T5926] usb 2-1: device descriptor read/64, error -71 [ 345.992867][ T5926] usb usb2-port1: attempt power cycle [ 346.382106][ T5926] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 346.422638][ T5926] usb 2-1: device descriptor read/8, error -71 [ 347.316519][T10589] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1682'. [ 347.603351][T10602] /dev/nbd2: Can't lookup blockdev [ 348.036105][T10615] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 349.131661][ T5926] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 349.750258][ T1218] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 349.995054][ T1218] usb 5-1: Using ep0 maxpacket: 8 [ 350.062064][ T5926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 350.062546][ T1218] usb 5-1: unable to get BOS descriptor or descriptor too short [ 350.074457][ T5926] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 350.096336][ T5926] usb 6-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 350.115237][ T1218] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.126597][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.127294][ T1218] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 350.140698][ T5926] usb 6-1: config 0 descriptor?? [ 350.280634][ T1218] usb 5-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 350.292066][ T1218] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.301521][ T1218] usb 5-1: Product: syz [ 350.305738][ T1218] usb 5-1: Manufacturer: syz [ 350.312581][ T1218] usb 5-1: SerialNumber: syz [ 350.314341][T10636] gfs2: error -5 reading superblock [ 351.102592][ T1218] usb 5-1: cannot find UAC_HEADER [ 351.146156][ T5926] usbhid 6-1:0.0: can't add hid device: -71 [ 351.183937][ T5926] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 351.212532][ T1218] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 351.242990][ T5926] usb 6-1: USB disconnect, device number 2 [ 351.327166][T10155] udevd[10155]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 351.883253][T10653] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1706'. [ 351.964438][ T1218] usb 5-1: USB disconnect, device number 39 [ 353.319436][T10677] gfs2: error -5 reading superblock [ 353.486295][ T29] audit: type=1400 audit(1776763195.260:570): avc: denied { getopt } for pid=10676 comm="syz.2.1716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 353.985150][T10690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1720'. [ 354.206938][ T29] audit: type=1326 audit(1776763196.001:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10671 comm="syz.4.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381419c819 code=0x7fc00000 [ 354.282460][ T29] audit: type=1326 audit(1776763196.001:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10671 comm="syz.4.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f381419c819 code=0x7fc00000 [ 355.815235][T10716] gfs2: error -5 reading superblock [ 356.586343][T10728] syz_tun: entered allmulticast mode [ 356.627887][T10728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1732'. [ 356.691161][T10728] syz_tun (unregistering): left allmulticast mode [ 356.951302][ T29] audit: type=1400 audit(1776763198.742:573): avc: denied { read } for pid=10740 comm="syz.5.1738" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 357.122858][ T29] audit: type=1400 audit(1776763198.752:574): avc: denied { open } for pid=10740 comm="syz.5.1738" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 357.242293][T10746] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 357.416796][T10746] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 357.429156][T10746] overlayfs: failed to look up (tracing) for ino (-66) [ 358.286245][ T29] audit: type=1326 audit(1776763200.053:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10743 comm="syz.1.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84479c819 code=0x7fc00000 [ 358.487289][ T29] audit: type=1326 audit(1776763200.053:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10743 comm="syz.1.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe84479c819 code=0x7fc00000 [ 358.883750][T10749] gfs2: error -5 reading superblock [ 359.044653][ T29] audit: type=1400 audit(1776763200.823:577): avc: denied { unmount } for pid=10315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 359.403596][T10775] loop8: detected capacity change from 0 to 4 [ 359.420082][T10775] Dev loop8: unable to read RDB block 4 [ 359.429683][T10775] loop8: unable to read partition table [ 359.435808][T10775] loop8: partition table beyond EOD, truncated [ 359.443878][T10775] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 360.034996][ T803] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 360.043492][ T5902] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 360.226155][ T5902] usb 6-1: Using ep0 maxpacket: 8 [ 360.232602][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 360.242933][ T803] usb 5-1: Using ep0 maxpacket: 8 [ 360.262743][ T5902] usb 6-1: config 30 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 360.273385][ T803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 360.297028][ T5902] usb 6-1: config 30 interface 0 has no altsetting 0 [ 360.308743][ T803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 360.365307][ T5902] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 360.374455][ T803] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 360.384468][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.400711][ T803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 360.412754][ T5902] usb 6-1: Product: syz [ 360.418665][ T5902] usb 6-1: Manufacturer: syz [ 360.423553][ T803] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 360.433854][ T5902] usb 6-1: SerialNumber: syz [ 360.438699][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 360.451130][ T9] usb 4-1: too many configurations: 55, using maximum allowed: 8 [ 360.478049][ T803] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 360.492682][ T5902] snd_usb_toneport 6-1:30.0: Line 6 TonePort UX2 found [ 360.501842][ T803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.536690][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 360.548679][ T9] usb 4-1: can't read configurations, error -61 [ 360.582875][ T803] usb 5-1: config 0 descriptor?? [ 360.599905][T10780] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 360.689069][ T5902] snd_usb_toneport 6-1:30.0: cannot get proper max packet size [ 360.718555][ T5902] snd_usb_toneport 6-1:30.0: Line 6 TonePort UX2 now disconnected [ 360.730194][ T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 360.761414][ T5902] snd_usb_toneport 6-1:30.0: probe with driver snd_usb_toneport failed with error -22 [ 360.900508][ T5902] usb 6-1: USB disconnect, device number 3 [ 360.916082][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 360.925419][ T9] usb 4-1: too many configurations: 55, using maximum allowed: 8 [ 360.944139][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 361.193018][ T29] audit: type=1326 audit(1776763202.914:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10799 comm="syz.2.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5839b9c819 code=0x7fc00000 [ 361.247234][ T29] audit: type=1326 audit(1776763202.914:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10799 comm="syz.2.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5839b9c819 code=0x7fc00000 [ 361.366992][ T5973] usb 5-1: USB disconnect, device number 40 [ 361.377695][ T5824] Bluetooth: hci3: Opcode 0x0c03 failed: -19 [ 361.526191][ T9] usb 4-1: can't read configurations, error -61 [ 361.533199][ T9] usb usb4-port1: attempt power cycle [ 361.810481][ T29] audit: type=1400 audit(1776763203.604:580): avc: denied { read } for pid=5489 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 362.019107][ T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 362.998882][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 363.074563][T10818] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1765'. [ 363.134685][ T5824] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 363.149168][ T5824] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 363.159571][ T5824] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 363.169109][ T5824] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 363.193688][ T5824] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 363.250752][ T1100] bridge_slave_1: left promiscuous mode [ 363.260893][ T9] usb 4-1: device descriptor read/all, error -71 [ 363.266099][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.296289][ T1100] bridge_slave_0: left promiscuous mode [ 363.313739][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.683377][ T5902] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 364.214746][ T5902] usb 6-1: device descriptor read/64, error -71 [ 364.352389][ T1100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.406831][ T1100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.434412][ T1100] bond0 (unregistering): Released all slaves [ 364.471691][ T1100] bond1 (unregistering): Released all slaves [ 364.506839][ T5902] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 364.521278][ T1100] bond2 (unregistering): Released all slaves [ 364.567927][T10843] dummy0: Device is already in use. [ 364.687719][ T5902] usb 6-1: device descriptor read/64, error -71 [ 364.901358][ T5902] usb usb6-port1: attempt power cycle [ 364.923292][ T5489] 8021q: adding VLAN 0 to HW filter on device eth1 [ 365.252528][ T5902] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 365.305596][ T5824] Bluetooth: hci3: command tx timeout [ 365.448107][ T5902] usb 6-1: device descriptor read/8, error -71 [ 365.717264][ T5902] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 365.796797][ T5902] usb 6-1: device descriptor read/8, error -71 [ 365.894180][ T29] audit: type=1326 audit(1776763207.626:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10854 comm="syz.4.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381419c819 code=0x7fc00000 [ 365.927533][ T29] audit: type=1326 audit(1776763207.626:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10854 comm="syz.4.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f381419c819 code=0x7fc00000 [ 366.052224][ T5902] usb usb6-port1: unable to enumerate USB device [ 366.064829][T10820] chnl_net:caif_netlink_parms(): no params data found [ 366.154283][T10881] ±ÿ: entered allmulticast mode [ 366.279968][T10881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1778'. [ 366.330190][ T1100] hsr_slave_0: left promiscuous mode [ 366.343633][ T1100] hsr_slave_1: left promiscuous mode [ 366.364221][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.391471][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.517893][T10903] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 366.836482][T10910] program syz.3.1782 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 367.092374][ T1100] team0 (unregistering): Port device team_slave_1 removed [ 367.128921][ T1100] team0 (unregistering): Port device team_slave_0 removed [ 367.231917][ T803] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 367.384645][ T5824] Bluetooth: hci3: command tx timeout [ 367.403674][ T803] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.419300][ T803] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 367.434632][ T803] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 367.471453][ T803] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 367.490982][ T5489] 8021q: adding VLAN 0 to HW filter on device eth2 [ 367.506408][ T803] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 367.531575][ T803] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 240, setting to 64 [ 367.578446][ T803] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 367.619447][ T803] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 367.635698][T10880] ±ÿ: left allmulticast mode [ 367.660106][ T803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.676268][T10820] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.676341][ T803] usb 4-1: Product: syz [ 367.700302][ T803] usb 4-1: Manufacturer: syz [ 367.725765][T10820] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.733778][ T803] usb 4-1: SerialNumber: syz [ 367.748587][ T803] usb 4-1: config 0 descriptor?? [ 367.749054][T10820] bridge_slave_0: entered allmulticast mode [ 367.770654][T10820] bridge_slave_0: entered promiscuous mode [ 367.794747][T10913] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 367.805474][T10820] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.814030][T10913] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 368.417421][ T5159] block nbd0: Possible stuck request ffff8880284f7000: control (read@0,4096B). Runtime 120 seconds [ 368.446129][T10820] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.460156][T10820] bridge_slave_1: entered allmulticast mode [ 368.471359][T10820] bridge_slave_1: entered promiscuous mode [ 368.536047][T10820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.595281][T10820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.684407][T10913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.705373][T10913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.766168][T10820] team0: Port device team_slave_0 added [ 368.798895][T10820] team0: Port device team_slave_1 added [ 368.860188][ T1100] IPVS: stop unused estimator thread 0... [ 368.943027][T10820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.965360][T10820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.053402][T10820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.076305][T10820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.083356][T10820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.110005][T10820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.227935][T10820] hsr_slave_0: entered promiscuous mode [ 369.257400][T10820] hsr_slave_1: entered promiscuous mode [ 369.277306][T10820] debugfs: 'hsr0' already exists in 'hsr' [ 369.279310][ T29] audit: type=1326 audit(1776763467.079:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10932 comm="syz.5.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4af9c819 code=0x7fc00000 [ 369.291778][T10820] Cannot create hsr debugfs directory [ 369.471985][ T5824] Bluetooth: hci3: command tx timeout [ 369.581885][T10913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.638055][T10913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.707607][ T29] audit: type=1326 audit(1776763467.109:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10932 comm="syz.5.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3e4af9c819 code=0x7fc00000 [ 369.752953][T10913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.788042][T10913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.814212][T10913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.852410][T10913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.947236][T10913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.972707][T10913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.126468][ T5489] 8021q: adding VLAN 0 to HW filter on device eth3 [ 370.308353][T10956] program syz.4.1793 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 370.479595][ T29] audit: type=1400 audit(1776763468.259:585): avc: denied { append } for pid=10958 comm="syz.5.1794" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 370.572906][ T29] audit: type=1400 audit(1776763468.359:586): avc: denied { setopt } for pid=10958 comm="syz.5.1794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 370.684746][ T803] rc_core: IR keymap rc-snapstream-firefly not found [ 370.700886][ T803] Registered IR keymap rc-empty [ 370.706473][T10969] ±ÿ: entered allmulticast mode [ 370.712103][ T9] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 370.729337][T10820] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 370.731534][ T803] rc rc0: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 370.767252][T10975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1796'. [ 370.777849][ T803] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input21 [ 370.805411][T10820] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 370.829407][ T803] input: syz syz mouse as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input22 [ 370.838543][T10820] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 370.897312][T10820] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 370.912075][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 370.923227][ T803] usb 4-1: USB disconnect, device number 36 [ 370.929192][ C0] ati_remote 4-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 370.952294][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 370.953621][T10968] ±ÿ: left allmulticast mode [ 370.996818][ T9] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 371.031216][ T9] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 371.035787][T10820] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 371.075152][ T9] usb 5-1: Product: syz [ 371.086299][ T9] usb 5-1: Manufacturer: syz [ 371.088633][T10820] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 371.119182][ T9] usb 5-1: SerialNumber: syz [ 371.134002][T10820] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 371.156805][ T9] usb 5-1: config 0 descriptor?? [ 371.184220][T10964] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 371.208545][T10820] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 371.480838][ T9] usb 5-1: USB disconnect, device number 41 [ 371.489677][T10820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.543207][ T5824] Bluetooth: hci3: command tx timeout [ 371.561685][T10820] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.618644][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.625845][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.699130][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.706329][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.849104][ T5489] 8021q: adding VLAN 0 to HW filter on device eth4 [ 372.080780][T11007] netlink: 'syz.3.1800': attribute type 13 has an invalid length. [ 372.299308][T10820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.531924][ T9] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 372.661886][ T9] usb 5-1: device descriptor read/64, error -71 [ 372.664171][ T29] audit: type=1326 audit(1776763470.469:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11019 comm="syz.5.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4af9c819 code=0x7fc00000 [ 372.697818][T10820] veth0_vlan: entered promiscuous mode [ 372.709831][T10820] veth1_vlan: entered promiscuous mode [ 372.829040][T10820] veth0_macvtap: entered promiscuous mode [ 372.887232][T10820] veth1_macvtap: entered promiscuous mode [ 372.922295][ T9] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 373.169856][ T29] audit: type=1326 audit(1776763470.499:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11019 comm="syz.5.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3e4af9c819 code=0x7fc00000 [ 373.223550][T10820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.245807][T10820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.272050][ T1018] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.292177][ T1018] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.352333][ T9] usb 5-1: device descriptor read/64, error -71 [ 373.495994][ T9] usb usb5-port1: attempt power cycle [ 373.502013][ T35] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.522128][ T35] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.569493][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.583740][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.619597][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.641886][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.864381][ T9] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 373.920723][ T9] usb 5-1: device descriptor read/8, error -71 [ 373.932210][ T5973] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 374.048189][T11055] netlink: 'syz.2.1811': attribute type 13 has an invalid length. [ 374.091842][ T5973] usb 4-1: Using ep0 maxpacket: 8 [ 374.101435][ T5973] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 374.113892][ T5973] usb 4-1: can't read configurations, error -61 [ 374.171816][ T9] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 374.291826][ T5973] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 374.292540][ T9] usb 5-1: device descriptor read/8, error -71 [ 374.754016][ T5902] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 374.762109][ T9] usb usb5-port1: unable to enumerate USB device [ 374.861795][ T5973] usb 4-1: Using ep0 maxpacket: 8 [ 374.873650][ T5973] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 374.883626][ T5973] usb 4-1: can't read configurations, error -61 [ 374.897987][ T5973] usb usb4-port1: attempt power cycle [ 374.931834][ T5902] usb 6-1: Using ep0 maxpacket: 32 [ 374.944898][ T5902] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 374.962814][ T5902] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 374.972164][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 374.980520][ T5902] usb 6-1: Product: syz [ 374.985826][ T5902] usb 6-1: Manufacturer: syz [ 374.990495][ T5902] usb 6-1: SerialNumber: syz [ 375.001638][ T5902] usb 6-1: config 0 descriptor?? [ 375.022517][T11053] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 375.316921][ T5902] usb 6-1: USB disconnect, device number 8 [ 375.461830][ T5973] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 375.498399][ T5973] usb 4-1: Using ep0 maxpacket: 8 [ 375.519317][ T5973] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 375.527759][ T5973] usb 4-1: can't read configurations, error -61 [ 375.657445][ T29] audit: type=1326 audit(1776763473.459:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11070 comm="syz.4.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381419c819 code=0x7fc00000 [ 375.704923][ T5973] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 375.732620][ T29] audit: type=1326 audit(1776763473.489:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11070 comm="syz.4.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f381419c819 code=0x7fc00000 [ 375.773467][ T5973] usb 4-1: Using ep0 maxpacket: 8 [ 375.792145][ T5973] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 375.820193][ T5973] usb 4-1: can't read configurations, error -61 [ 375.847236][ T5973] usb usb4-port1: unable to enumerate USB device [ 376.021853][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 376.811877][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 377.682705][ T24] usb 7-1: config 30 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 377.840380][ T24] usb 7-1: config 30 interface 0 has no altsetting 0 [ 377.853353][ T24] usb 7-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 377.864650][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.873083][ T24] usb 7-1: Product: syz [ 377.877277][ T24] usb 7-1: Manufacturer: syz [ 377.882235][ T24] usb 7-1: SerialNumber: syz [ 377.953858][T11096] overlayfs: missing 'lowerdir' [ 378.037994][T11097] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 378.196277][T11097] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 378.206506][T11097] overlayfs: failed to look up (tracing) for ino (-66) [ 378.502496][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.742390][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.172917][ T24] usb 7-1: can't set config #30, error -71 [ 379.234987][ T24] usb 7-1: USB disconnect, device number 2 [ 379.353768][T11105] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 379.849135][ T29] audit: type=1400 audit(1776763477.649:591): avc: denied { bind } for pid=11113 comm="syz.6.1829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 381.013109][T11122] random: crng reseeded on system resumption [ 381.019219][ T29] audit: type=1400 audit(1776763478.819:592): avc: denied { read } for pid=11118 comm="syz.3.1833" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 381.111564][T11121] 9p: Bad value for 'rfdno' [ 381.116325][ T29] audit: type=1400 audit(1776763478.909:593): avc: denied { mounton } for pid=11118 comm="syz.3.1833" path="/370/file0" dev="tmpfs" ino=1906 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 381.247479][T11128] ±ÿ: entered allmulticast mode [ 381.314528][T11132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1835'. [ 381.453042][T11127] ±ÿ: left allmulticast mode [ 381.721081][ T29] audit: type=1400 audit(1776763479.509:594): avc: denied { connect } for pid=11152 comm="syz.5.1846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 381.742906][ T9] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 382.321813][ T803] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 382.343449][ T9] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 382.360326][ T9] usb 7-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 382.372015][ T9] usb 7-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 382.381219][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.482018][ T803] usb 4-1: Using ep0 maxpacket: 8 [ 382.488893][ T803] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 382.507621][ T803] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.539927][ T803] usb 4-1: config 0 has no interfaces? [ 382.552205][ T803] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 382.562364][ T803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.570455][ T803] usb 4-1: Product: syz [ 382.580298][ T803] usb 4-1: Manufacturer: syz [ 382.587203][ T803] usb 4-1: SerialNumber: syz [ 382.605109][ T5902] usb 7-1: USB disconnect, device number 3 [ 382.623215][ T803] usb 4-1: config 0 descriptor?? [ 382.651817][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 382.803733][ T9] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 382.819284][ T9] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 382.849213][ T9] usb 6-1: config 220 has no interface number 2 [ 382.865873][ T9] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 382.891785][ T9] usb 6-1: config 220 interface 0 has no altsetting 0 [ 382.914092][ T9] usb 6-1: config 220 interface 76 has no altsetting 0 [ 382.926015][ T9] usb 6-1: config 220 interface 1 has no altsetting 0 [ 382.946099][ T9] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 382.967186][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.990095][ T9] usb 6-1: Product: syz [ 383.003711][ T9] usb 6-1: Manufacturer: syz [ 383.018675][ T9] usb 6-1: SerialNumber: syz [ 383.534296][ T9] usb 6-1: selecting invalid altsetting 0 [ 383.562123][ T9] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 383.581108][ T9] uvcvideo 6-1:220.0: No valid video chain found. [ 383.630307][ T9] usb 6-1: selecting invalid altsetting 0 [ 383.658311][ T9] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 383.682873][T11196] netlink: 'syz.6.1863': attribute type 13 has an invalid length. [ 383.708176][ T9] usb 6-1: USB disconnect, device number 9 [ 384.571267][ T29] audit: type=1400 audit(1776763482.059:595): avc: denied { getopt } for pid=11202 comm="syz.4.1865" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 384.681626][T11215] overlayfs: missing 'lowerdir' [ 384.767499][T11216] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 384.928220][T11216] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 384.940012][T11216] overlayfs: failed to look up (tracing) for ino (-66) [ 385.113564][ T9] usb 4-1: USB disconnect, device number 41 [ 386.607823][T11234] kvm: pic: level sensitive irq not supported [ 386.608001][T11234] kvm: pic: non byte read [ 386.632681][T11234] kvm: pic: level sensitive irq not supported [ 386.632742][T11234] kvm: pic: non byte read [ 387.578554][T11257] netlink: 'syz.4.1877': attribute type 13 has an invalid length. [ 387.966248][ T29] audit: type=1400 audit(1776763485.769:596): avc: denied { bind } for pid=11266 comm="syz.6.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 388.087934][T11271] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1881'. [ 388.558521][T11278] overlay: Unknown parameter '/' [ 388.636730][T11279] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 388.772664][T11279] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 388.782822][T11279] overlayfs: failed to look up (tracing) for ino (-66) [ 389.999060][T11289] kvm: pic: level sensitive irq not supported [ 390.001193][T11289] kvm: pic: non byte read [ 390.028332][T11289] kvm: pic: level sensitive irq not supported [ 390.028393][T11289] kvm: pic: non byte read [ 390.078200][T11296] netlink: 'syz.3.1890': attribute type 13 has an invalid length. [ 390.651826][ T5926] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 390.844938][ T5926] usb 5-1: config 8 has an invalid interface number: 177 but max is 0 [ 390.867822][ T5926] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 390.911477][ T5926] usb 5-1: config 8 has no interface number 0 [ 390.945101][ T5926] usb 5-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 390.987615][ T5926] usb 5-1: config 8 interface 177 has no altsetting 0 [ 391.001226][T11335] netlink: 'syz.5.1903': attribute type 13 has an invalid length. [ 391.009787][ T5926] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 391.028361][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.257661][ T5926] usb 5-1: string descriptor 0 read error: -71 [ 391.292686][ T5926] ir_toy 5-1:8.177: required endpoints not found [ 391.322534][ T5926] usb 5-1: USB disconnect, device number 46 [ 393.851090][T11403] GUP no longer grows the stack in syz.5.1925 (11403): 200000002000-200000005000 (200000001000) [ 393.886009][T11403] CPU: 0 UID: 0 PID: 11403 Comm: syz.5.1925 Not tainted syzkaller #0 PREEMPT(full) [ 393.886043][T11403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 393.886065][T11403] Call Trace: [ 393.886074][T11403] [ 393.886083][T11403] dump_stack_lvl+0x100/0x190 [ 393.886119][T11403] gup_vma_lookup.cold+0x83/0x96 [ 393.886149][T11403] __get_user_pages+0x241/0x32a0 [ 393.886181][T11403] ? down_read_killable+0x307/0x4b0 [ 393.886213][T11403] ? __pfx___get_user_pages+0x10/0x10 [ 393.886235][T11403] ? __kernel_text_address+0xd/0x30 [ 393.886272][T11403] __gup_longterm_locked+0x279/0x16f0 [ 393.886305][T11403] ? __pfx___gup_longterm_locked+0x10/0x10 [ 393.886332][T11403] ? __get_pfnblock_flags_mask+0x128/0x240 [ 393.886362][T11403] ? sanity_check_pinned_pages+0x4f2/0x8b0 [ 393.886390][T11403] gup_fast_fallback+0x16dc/0x2790 [ 393.886436][T11403] ? __pfx_gup_fast_fallback+0x10/0x10 [ 393.886476][T11403] pin_user_pages_fast+0xa7/0xf0 [ 393.886505][T11403] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 393.886531][T11403] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 393.886565][T11403] ? frame_vector_create+0x61/0x110 [ 393.886596][T11403] get_vaddr_frames+0x89/0x190 [ 393.886624][T11403] vb2_create_framevec+0x64/0xd0 [ 393.886664][T11403] vb2_vmalloc_get_userptr+0x137/0x510 [ 393.886695][T11403] ? __pfx_vb2_vmalloc_get_userptr+0x10/0x10 [ 393.886722][T11403] __prepare_userptr.constprop.0+0x3a7/0x1560 [ 393.886755][T11403] ? __pfx___prepare_userptr.constprop.0+0x10/0x10 [ 393.886820][T11403] ? __mutex_lock+0x26d/0x1b10 [ 393.886847][T11403] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 393.886876][T11403] __buf_prepare+0x352/0x790 [ 393.886903][T11403] vb2_core_prepare_buf+0xa9/0x260 [ 393.886928][T11403] vb2_prepare_buf+0x22f/0x300 [ 393.886955][T11403] v4l2_m2m_prepare_buf+0xe8/0x1e0 [ 393.886981][T11403] v4l_prepare_buf+0x93/0xc0 [ 393.887008][T11403] __video_do_ioctl+0xb2a/0xdf0 [ 393.887044][T11403] ? __might_fault+0xc5/0x140 [ 393.887074][T11403] ? __pfx___video_do_ioctl+0x10/0x10 [ 393.887118][T11403] video_usercopy+0x47d/0x1700 [ 393.887151][T11403] ? __pfx___video_do_ioctl+0x10/0x10 [ 393.887184][T11403] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 393.887213][T11403] ? __pfx_video_usercopy+0x10/0x10 [ 393.887262][T11403] v4l2_ioctl+0x1bd/0x250 [ 393.887290][T11403] ? __pfx_v4l2_ioctl+0x10/0x10 [ 393.887324][T11403] __x64_sys_ioctl+0x18e/0x210 [ 393.887350][T11403] do_syscall_64+0x10b/0xf80 [ 393.887378][T11403] ? clear_bhb_loop+0x40/0x90 [ 393.887406][T11403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.887431][T11403] RIP: 0033:0x7f3e4af9c819 [ 393.887461][T11403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.887485][T11403] RSP: 002b:00007f3e4bece028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 393.887513][T11403] RAX: ffffffffffffffda RBX: 00007f3e4b215fa0 RCX: 00007f3e4af9c819 [ 393.887529][T11403] RDX: 0000200000002dc0 RSI: 00000000c058565d RDI: 0000000000000003 [ 393.887545][T11403] RBP: 00007f3e4b032c91 R08: 0000000000000000 R09: 0000000000000000 [ 393.887559][T11403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.887572][T11403] R13: 00007f3e4b216038 R14: 00007f3e4b215fa0 R15: 00007ffdf7737518 [ 393.887601][T11403] [ 394.801812][ T5973] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 394.942560][ T5899] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 394.953798][ T5973] usb 7-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 394.979306][ T5973] usb 7-1: config 1 interface 0 has no altsetting 0 [ 395.018692][ T5973] usb 7-1: string descriptor 0 read error: -22 [ 395.025319][ T5973] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 395.034693][ T5973] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.093775][ T5899] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.107254][ T5899] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 395.134487][ T5899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 395.151076][ T5899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 395.194535][ T5899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 395.239078][ T5899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 240, setting to 64 [ 395.268463][ T5899] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 395.301924][ T5899] usb 6-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 395.311917][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.322315][ T5899] usb 6-1: Product: syz [ 395.327140][ T5899] usb 6-1: Manufacturer: syz [ 395.332335][ T5899] usb 6-1: SerialNumber: syz [ 395.362588][ T5899] usb 6-1: config 0 descriptor?? [ 395.369620][T11410] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 395.381194][T11410] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 395.507765][ T5973] hid_parser_main: 4007 callbacks suppressed [ 395.507791][ T5973] lenovo 0003:17EF:6047.0006: unknown main item tag 0x0 [ 395.539452][ T5973] lenovo 0003:17EF:6047.0006: unknown main item tag 0x0 [ 395.549514][ T5973] lenovo 0003:17EF:6047.0006: unknown main item tag 0x0 [ 395.569801][ T5973] lenovo 0003:17EF:6047.0006: unknown main item tag 0x0 [ 395.580133][ T5973] lenovo 0003:17EF:6047.0006: unknown main item tag 0x0 [ 395.592196][ T5973] lenovo 0003:17EF:6047.0006: unknown main item tag 0x0 [ 395.600104][T11410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.624626][T11410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.639116][ T5973] lenovo 0003:17EF:6047.0006: unknown main item tag 0x0 [ 395.691297][ T5973] lenovo 0003:17EF:6047.0006: unknown main item tag 0x0 [ 395.719781][ T5973] lenovo 0003:17EF:6047.0006: unknown main item tag 0x0 [ 395.731215][ T5973] lenovo 0003:17EF:6047.0006: unknown main item tag 0x0 [ 396.232589][ T5973] lenovo 0003:17EF:6047.0006: hidraw0: USB HID v0.01 Device [HID 17ef:6047] on usb-dummy_hcd.6-1/input0 [ 396.462318][T11410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.482329][T11410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.493548][T11410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.507456][T11410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.531391][T11410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.646302][ T1218] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 396.689354][T11410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.173105][T11410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.183233][ T5926] usb 7-1: USB disconnect, device number 4 [ 397.212462][T11410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.248370][ T1218] usb 5-1: Using ep0 maxpacket: 32 [ 397.261576][ T1218] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 397.288927][ T1218] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 397.311025][ T1218] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 397.331345][ T1218] usb 5-1: Product: syz [ 397.495192][ T1218] usb 5-1: Manufacturer: syz [ 397.504515][ T1218] usb 5-1: SerialNumber: syz [ 397.522228][ T1218] usb 5-1: config 0 descriptor?? [ 397.558746][T11437] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 397.681948][ T5899] rc_core: IR keymap rc-snapstream-firefly not found [ 397.726617][ T5899] Registered IR keymap rc-empty [ 397.867814][ T5899] rc rc0: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 397.990922][ T1218] usb 5-1: USB disconnect, device number 47 [ 398.001290][ T5899] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input23 [ 398.067567][ T5899] input: syz syz mouse as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input24 [ 398.142656][ C1] ati_remote 6-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 398.150311][ T5899] usb 6-1: USB disconnect, device number 10 [ 398.285797][ T8973] ati_remote 6-1:0.0: ati_remote_open: usb_submit_urb failed! [ 398.692884][ T5899] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 398.874175][ T5899] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 398.892266][ T5899] usb 6-1: config 0 has no interface number 0 [ 398.920539][ T5899] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 398.937779][ T5899] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.975716][ T5159] block nbd0: Possible stuck request ffff8880284f7000: control (read@0,4096B). Runtime 150 seconds [ 398.996013][ T5899] usb 6-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 399.010126][ T5899] usb 6-1: config 0 interface 1 has no altsetting 0 [ 399.017214][ T5899] usb 6-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 399.026569][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.082516][ T5899] usb 6-1: config 0 descriptor?? [ 399.548273][ T5899] usbhid 6-1:0.1: can't add hid device: -71 [ 399.568761][ T5899] usbhid 6-1:0.1: probe with driver usbhid failed with error -71 [ 399.635056][ T5899] usb 6-1: USB disconnect, device number 11 [ 399.937153][T11480] program syz.3.1947 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 400.616042][ T5926] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 400.761842][ T5899] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 400.803308][ T5926] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.827466][ T5926] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 400.916825][ T5926] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 400.929306][ T5899] usb 4-1: Using ep0 maxpacket: 32 [ 400.945494][ T5899] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.968502][ T5926] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 400.981419][ T803] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 400.997417][ T5926] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 401.011148][ T5899] usb 4-1: config 0 has no interfaces? [ 401.027682][ T5926] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 240, setting to 64 [ 401.029247][ T5899] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 401.070516][ T5926] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 401.096917][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.113419][ T5926] usb 7-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 401.133518][ T5899] usb 4-1: config 0 descriptor?? [ 401.139771][ T5926] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.161818][ T803] usb 6-1: Using ep0 maxpacket: 32 [ 401.173315][ T5926] usb 7-1: Product: syz [ 401.180344][ T803] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 401.193451][ T5926] usb 7-1: Manufacturer: syz [ 401.204119][ T5926] usb 7-1: SerialNumber: syz [ 401.212099][ T803] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 401.228810][ T803] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 401.238059][ T5926] usb 7-1: config 0 descriptor?? [ 401.249451][T11479] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 401.261345][ T803] usb 6-1: Product: syz [ 401.267831][T11479] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 401.278058][ T803] usb 6-1: Manufacturer: syz [ 401.288199][ T803] usb 6-1: SerialNumber: syz [ 401.307173][ T803] usb 6-1: config 0 descriptor?? [ 401.323784][T11488] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 401.501662][T11479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.534180][T11479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.609332][ T5899] usb 6-1: USB disconnect, device number 12 [ 402.373087][T11479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.863898][ T29] audit: type=1326 audit(1776763500.049:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11504 comm="syz.2.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5839b9c819 code=0x7fc00000 [ 402.897969][ T29] audit: type=1326 audit(1776763500.049:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11504 comm="syz.2.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5839b9c819 code=0x7fc00000 [ 402.924749][T11479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.959707][T11479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.976785][T11479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.990686][T11479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.000495][ T5899] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 403.016051][T11479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.034365][T11479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.050092][T11479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.138558][ T24] usb 4-1: USB disconnect, device number 42 [ 403.163053][ T5899] usb 5-1: config index 0 descriptor too short (expected 65183, got 72) [ 403.178767][ T5899] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 403.202799][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.223124][ T5899] usb 5-1: Product: syz [ 403.235361][ T5899] usb 5-1: Manufacturer: syz [ 403.240472][ T5899] usb 5-1: SerialNumber: syz [ 403.259399][ T5899] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 403.283043][ T1218] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 404.162859][T11508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.271813][ T5926] rc_core: IR keymap rc-snapstream-firefly not found [ 404.282680][T11508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.303491][ T5926] Registered IR keymap rc-empty [ 404.320747][ T5926] rc rc0: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 404.364310][T11508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.380017][ T5926] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input25 [ 404.434925][T11508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.443966][ T1218] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 404.470164][ T1218] ath9k_htc: Failed to initialize the device [ 404.481940][ T5926] input: syz syz mouse as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input26 [ 404.516866][T11508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.525639][ T24] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 404.597117][T11508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.661297][ T5926] usb 7-1: USB disconnect, device number 5 [ 404.668265][ C0] ati_remote 7-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 404.702182][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 404.746878][ T24] usb 4-1: config 0 has no interfaces? [ 404.771996][ T5179] ati_remote 7-1:0.0: ati_remote_open: usb_submit_urb failed! [ 404.791383][ T24] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 404.817364][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.847857][ T24] usb 4-1: Product: syz [ 404.859712][ T1218] usb 5-1: ath9k_htc: USB layer deinitialized [ 404.870161][ T24] usb 4-1: Manufacturer: syz [ 404.905484][ T24] usb 4-1: SerialNumber: syz [ 405.023191][ T24] usb 4-1: config 0 descriptor?? [ 405.036866][ T5899] usb 5-1: USB disconnect, device number 48 [ 405.274322][ T5976] usb 4-1: USB disconnect, device number 43 [ 405.412962][ T5899] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 405.423152][ T29] audit: type=1326 audit(1776763503.229:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11539 comm="syz.6.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4979c819 code=0x7fc00000 [ 405.466141][ T29] audit: type=1326 audit(1776763503.229:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11539 comm="syz.6.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3f4979c819 code=0x7fc00000 [ 405.734167][ T24] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 405.771797][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 405.778670][ T5899] usb 5-1: config index 0 descriptor too short (expected 241, got 72) [ 406.292480][ T5899] usb 5-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 406.348033][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.362313][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.389733][ T5899] usb 5-1: config 0 descriptor?? [ 406.461391][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 406.473498][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 406.473707][ T5899] usb 5-1: can't set config #0, error -71 [ 406.496523][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 406.507862][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 406.525857][ T5899] usb 5-1: USB disconnect, device number 49 [ 406.533512][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 240, setting to 64 [ 406.546662][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 406.568466][ T24] usb 6-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 406.599889][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.623102][ T24] usb 6-1: Product: syz [ 406.653226][ T24] usb 6-1: Manufacturer: syz [ 406.669289][ T24] usb 6-1: SerialNumber: syz [ 406.706000][ T24] usb 6-1: config 0 descriptor?? [ 406.739206][T11551] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 406.756735][T11551] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 406.789200][ T29] audit: type=1400 audit(1776763504.589:601): avc: denied { setopt } for pid=11563 comm="syz.4.1979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 406.993462][T11551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.190797][T11551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.131854][ T24] rc_core: IR keymap rc-snapstream-firefly not found [ 408.151080][ T24] Registered IR keymap rc-empty [ 408.169940][ T24] rc rc0: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 408.201960][ T24] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input27 [ 408.228372][T11551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.258172][ T24] input: syz syz mouse as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input28 [ 408.272565][T11551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.308039][T11551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.344395][T11551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.432052][T11551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.487102][T11551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.549492][T11551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.592396][T11551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.635560][ T5899] usb 6-1: USB disconnect, device number 13 [ 408.641594][ C1] ati_remote 6-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 408.678780][ T5179] ati_remote 6-1:0.0: ati_remote_open: usb_submit_urb failed! [ 409.101811][ T803] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 409.812902][ T803] usb 5-1: Using ep0 maxpacket: 32 [ 409.833097][ T803] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 409.968013][ T803] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.000116][ T803] usb 5-1: config 0 has no interface number 0 [ 410.038997][ T803] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 410.077850][ T803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.110628][ T803] usb 5-1: Product: syz [ 410.129766][ T803] usb 5-1: Manufacturer: syz [ 410.145177][ T803] usb 5-1: SerialNumber: syz [ 410.183520][ T803] usb 5-1: config 0 descriptor?? [ 410.462299][ T803] usb 5-1: USB disconnect, device number 50 [ 410.971866][ T5899] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 411.277673][ T5899] usb 6-1: unable to get BOS descriptor or descriptor too short [ 411.303418][ T5899] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 411.329730][ T5899] usb 6-1: can't read configurations, error -71 [ 411.463385][T11649] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2009'. [ 411.687681][ T29] audit: type=1400 audit(1776763509.489:602): avc: denied { map } for pid=11653 comm="syz.3.2012" path="socket:[34230]" dev="sockfs" ino=34230 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 411.940641][T11664] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 412.253484][ T29] audit: type=1804 audit(1776763510.059:603): pid=11672 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.2018" name="/newroot/74/file0" dev="tmpfs" ino=397 res=1 errno=0 [ 412.498995][T11676] program syz.6.2020 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 412.647268][T11679] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2021'. [ 413.913049][ T29] audit: type=1400 audit(1776763511.709:604): avc: denied { ioctl } for pid=11711 comm="syz.4.2033" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x587f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 414.041382][T11716] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2034'. [ 414.424275][T11710] binder: 11709:11710 ioctl 40046205 0 returned -22 [ 414.582595][ T803] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 415.271479][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 415.372325][ T803] usb 5-1: Using ep0 maxpacket: 8 [ 415.384479][ T803] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 415.406524][ T803] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 415.429538][ T803] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 415.450398][ T803] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10 [ 415.469718][ T803] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024 [ 415.485062][ T10] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 415.583408][ T803] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 415.611270][ T10] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 415.627056][ T803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.669886][ T10] usb 7-1: config 220 has no interface number 2 [ 415.679375][ T10] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 415.696131][ T803] hub 5-1:1.0: bad descriptor, ignoring hub [ 415.703313][ T803] hub 5-1:1.0: probe with driver hub failed with error -5 [ 415.721764][ T803] cdc_wdm 5-1:1.0: skipping garbage [ 415.727144][ T10] usb 7-1: config 220 interface 0 has no altsetting 0 [ 415.735114][ T803] cdc_wdm 5-1:1.0: skipping garbage [ 415.745603][ T10] usb 7-1: config 220 interface 76 has no altsetting 0 [ 415.753257][ T803] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 415.851193][ T10] usb 7-1: config 220 interface 1 has no altsetting 0 [ 415.978467][ T10] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 416.135109][ T803] usb 5-1: USB disconnect, device number 51 [ 416.142965][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.172954][ T10] usb 7-1: Product: syz [ 416.185942][ T10] usb 7-1: Manufacturer: syz [ 416.197095][ T10] usb 7-1: SerialNumber: syz [ 416.434238][ T10] usb 7-1: selecting invalid altsetting 0 [ 417.093145][ T5899] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 417.408175][ T5899] usb 5-1: Using ep0 maxpacket: 8 [ 417.494881][ T10] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 417.502352][ T10] uvcvideo 7-1:220.0: No valid video chain found. [ 417.516483][ T10] usb 7-1: selecting invalid altsetting 0 [ 417.523951][ T10] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 417.558220][ T5899] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 417.558226][ T10] usb 7-1: USB disconnect, device number 6 [ 417.558250][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.609955][ T5899] usb 5-1: Product: syz [ 417.615988][ T5899] usb 5-1: Manufacturer: syz [ 417.627316][ T5899] usb 5-1: SerialNumber: syz [ 417.655312][ T5899] usb 5-1: config 0 descriptor?? [ 417.748202][ T29] audit: type=1804 audit(1776763515.549:605): pid=11766 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.2053" name="/newroot/46/file0" dev="tmpfs" ino=252 res=1 errno=0 [ 418.071869][ T5973] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 418.232026][ T5899] dvb_usb_rtl28xxu 5-1:0.0: chip type detection failed -71 [ 418.336553][ T5899] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 418.374873][ T5899] usb 5-1: USB disconnect, device number 52 [ 418.408919][T11771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2055'. [ 418.415024][ T5973] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 418.429555][ T5973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.441103][ T5973] usb 4-1: Product: syz [ 418.453176][ T5973] usb 4-1: Manufacturer: syz [ 418.464938][ T5973] usb 4-1: SerialNumber: syz [ 418.846137][T11781] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2058'. [ 418.883562][ T5973] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 418.900576][ T5973] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 419.988665][T11796] binder: BINDER_SET_CONTEXT_MGR already set [ 420.005743][T11796] binder: 11794:11796 ioctl 4018620d 200000000100 returned -16 [ 420.045266][ T29] audit: type=1804 audit(1776763517.849:606): pid=11798 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.2064" name="/newroot/84/file0" dev="tmpfs" ino=448 res=1 errno=0 [ 420.262043][ T5830] Bluetooth: hci3: command 0x0405 tx timeout [ 420.411879][ T803] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 420.572028][ T803] usb 5-1: Using ep0 maxpacket: 16 [ 420.582965][ T803] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.597958][ T803] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 420.609653][ T803] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 420.629869][ T803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.649765][ T803] usb 5-1: config 0 descriptor?? [ 420.874087][ T5973] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 420.887426][ T5973] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 421.977996][ T5973] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 422.036308][ T5973] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 422.084945][ T5973] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 422.133098][ T5973] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 422.188260][ T5973] usb 4-1: USB disconnect, device number 44 [ 422.741951][ T5973] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 422.935067][ T5973] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 422.961383][ T5973] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 422.984930][ T5973] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 422.996945][ T5973] usb 4-1: config 220 has no interface number 2 [ 423.004140][ T5973] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 423.018548][ T5973] usb 4-1: config 220 interface 0 has no altsetting 0 [ 423.026604][ T5973] usb 4-1: config 220 interface 76 has no altsetting 0 [ 423.034418][ T5973] usb 4-1: config 220 interface 1 has no altsetting 0 [ 423.075083][ T5973] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 423.086752][ T5973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.096125][ T5973] usb 4-1: Product: syz [ 423.100617][ T5973] usb 4-1: Manufacturer: syz [ 423.105944][ T5973] usb 4-1: SerialNumber: syz [ 423.210976][ T9] usb 5-1: USB disconnect, device number 53 [ 423.476768][ T5973] usb 4-1: selecting invalid altsetting 0 [ 423.523173][ T5973] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 423.545474][ T5973] uvcvideo 4-1:220.0: No valid video chain found. [ 423.587729][ T5973] usb 4-1: selecting invalid altsetting 0 [ 423.605473][ T5973] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 423.651062][ T5973] usb 4-1: USB disconnect, device number 45 [ 425.722359][ T5973] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 425.992413][ T5973] usb 4-1: Using ep0 maxpacket: 16 [ 426.003086][ T5973] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.015874][ T5973] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 426.026372][ T5973] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 426.035733][ T5973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.051157][ T5973] usb 4-1: config 0 descriptor?? [ 428.482301][ T5973] usb 4-1: USB disconnect, device number 46 [ 428.688802][ T29] audit: type=1400 audit(1776764038.488:607): avc: denied { create } for pid=11929 comm="syz.5.2115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 428.763927][ T29] audit: type=1400 audit(1776764038.548:608): avc: denied { read } for pid=11932 comm="syz.6.2114" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 428.853767][ T29] audit: type=1400 audit(1776764038.548:609): avc: denied { open } for pid=11932 comm="syz.6.2114" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 429.642816][ T5159] block nbd0: Possible stuck request ffff8880284f7000: control (read@0,4096B). Runtime 180 seconds [ 429.852259][ T9] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 429.938179][T11962] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 430.017255][T11964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2124'. [ 430.021993][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 430.054904][T11964] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2124'. [ 430.060591][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.111031][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 430.150714][ T9] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 430.184701][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.224298][ T9] usb 5-1: config 0 descriptor?? [ 431.511957][ T5973] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 431.562471][T11989] gfs2: error -5 reading superblock [ 431.821224][ T5973] usb 4-1: Using ep0 maxpacket: 8 [ 431.831124][ T5973] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 431.844772][ T5973] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 431.856154][ T5973] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 431.867212][ T5973] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 431.911959][ T5973] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 431.974568][ T5973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.581361][ T5973] usb 4-1: GET_CAPABILITIES returned 0 [ 432.675308][ T5899] usb 5-1: USB disconnect, device number 54 [ 432.704280][ T5973] usbtmc 4-1:16.0: can't read capabilities [ 432.839407][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 432.863793][T11977] usbtmc 4-1:16.0: Unable to send data, error -71 [ 432.882632][ T5973] usb 4-1: USB disconnect, device number 47 [ 433.071785][ T5899] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 433.231770][ T5899] usb 5-1: Using ep0 maxpacket: 8 [ 433.247491][ T5899] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 433.264160][ T5899] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 433.313267][ T5899] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 433.399051][ T5899] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 433.509684][ T5899] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 433.724878][ T5899] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 433.761460][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.011113][ T5899] usb 5-1: GET_CAPABILITIES returned 0 [ 434.022098][ T5899] usbtmc 5-1:16.0: can't read capabilities [ 434.061916][ T5926] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 434.220089][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 434.229547][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 434.238657][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 434.247743][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 434.270004][T12024] binder: 12023:12024 ioctl 4018620d 0 returned -22 [ 434.283377][ T5926] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 434.305294][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 434.314425][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 434.323564][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 434.332639][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 434.343009][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 434.352132][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 434.361195][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 434.370263][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 434.379326][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 434.388397][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 434.397504][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 434.406564][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 434.415724][ T5926] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 434.428654][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 434.440280][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 434.451535][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 434.467475][ T5899] usb 5-1: USB disconnect, device number 55 [ 434.471787][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 240, setting to 64 [ 434.486237][ T5926] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 434.510110][ T5926] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 434.519553][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.527745][ T5926] usb 4-1: Product: syz [ 434.536466][ T5926] usb 4-1: Manufacturer: syz [ 434.541904][ T5926] usb 4-1: SerialNumber: syz [ 434.551253][ T5926] usb 4-1: config 0 descriptor?? [ 434.568479][T12020] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 434.580598][T12020] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 434.959824][T12020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.987655][T12020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.415589][ T5976] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 435.618073][ T5976] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 435.638928][ T5976] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 435.653780][ T5976] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 435.664201][ T5976] usb 7-1: config 220 has no interface number 2 [ 435.671314][ T5976] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 435.685438][ T5976] usb 7-1: config 220 interface 0 has no altsetting 0 [ 435.692323][ T5976] usb 7-1: config 220 interface 76 has no altsetting 0 [ 435.699288][ T5976] usb 7-1: config 220 interface 1 has no altsetting 0 [ 435.702026][ T803] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 435.710407][ T5976] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 435.714358][ T9] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 435.731113][ T5976] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.739257][ T5976] usb 7-1: Product: syz [ 435.743617][ T5976] usb 7-1: Manufacturer: syz [ 435.748278][ T5976] usb 7-1: SerialNumber: syz [ 435.834233][T12020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.843624][T12020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.854064][T12020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.863060][T12020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.874780][T12020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.884449][ T803] usb 6-1: Using ep0 maxpacket: 32 [ 435.889641][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 435.892448][T12020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.899388][ T803] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 435.906286][T12020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.914551][ T803] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.922455][T12020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.931831][ T9] usb 5-1: config 30 has an invalid descriptor of length 0, skipping remainder of the config [ 435.950965][ T803] usb 6-1: config 0 has no interface number 0 [ 435.958475][ T9] usb 5-1: config 30 has 0 interfaces, different from the descriptor's value: 1 [ 435.966162][ T5976] usb 7-1: selecting invalid altsetting 0 [ 435.971123][ T803] usb 6-1: config 0 interface 132 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 435.977379][ T5976] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 435.996403][ T5976] uvcvideo 7-1:220.0: No valid video chain found. [ 436.006411][ T9] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 436.011555][ T5976] usb 7-1: selecting invalid altsetting 0 [ 436.016604][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.026680][ T5976] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 436.036234][ T9] usb 5-1: Product: syz [ 436.044326][ T803] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 436.044509][ T5976] usb 7-1: USB disconnect, device number 7 [ 436.054056][ T803] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.073812][ T803] usb 6-1: Product: syz [ 436.079261][ T9] usb 5-1: Manufacturer: syz [ 436.084027][ T803] usb 6-1: Manufacturer: syz [ 436.088857][ T9] usb 5-1: SerialNumber: syz [ 436.095206][ T803] usb 6-1: SerialNumber: syz [ 436.122528][ T803] usb 6-1: config 0 descriptor?? [ 436.339802][ T5976] usb 6-1: USB disconnect, device number 16 [ 437.221892][ T5926] rc_core: IR keymap rc-snapstream-firefly not found [ 437.230993][ T5926] Registered IR keymap rc-empty [ 437.237293][ T5926] rc rc0: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 437.249815][ T5926] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input29 [ 437.272777][ T5926] input: syz syz mouse as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input30 [ 437.564619][ C0] ati_remote 4-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 437.572261][ T5926] usb 4-1: USB disconnect, device number 48 [ 438.156574][ T24] usb 5-1: USB disconnect, device number 56 [ 438.286737][T12072] binder: 12071:12072 ioctl 4018620d 0 returned -22 [ 438.441834][ T5926] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 438.582675][ T5926] usb 7-1: device descriptor read/64, error -71 [ 438.721815][ T24] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 438.842311][ T5926] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 438.958215][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 438.969350][ T24] usb 5-1: not running at top speed; connect to a high speed hub [ 438.981561][ T24] usb 5-1: config 1 has an invalid interface number: 64 but max is 0 [ 439.028795][ T5926] usb 7-1: device descriptor read/64, error -71 [ 439.031852][ T24] usb 5-1: config 1 has an invalid descriptor of length 155, skipping remainder of the config [ 439.107809][ T24] usb 5-1: config 1 has no interface number 0 [ 439.131500][ T24] usb 5-1: too many endpoints for config 1 interface 64 altsetting 130: 203, using maximum allowed: 30 [ 439.160283][ T5926] usb usb7-port1: attempt power cycle [ 439.175336][ T24] usb 5-1: config 1 interface 64 altsetting 130 has 0 endpoint descriptors, different from the interface descriptor's value: 203 [ 439.219102][ T24] usb 5-1: config 1 interface 64 has no altsetting 0 [ 439.236861][ T24] usb 5-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 439.252765][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.265806][ T24] usb 5-1: Product: syz [ 439.271958][ T24] usb 5-1: Manufacturer: syz [ 439.281825][ T24] usb 5-1: SerialNumber: syz [ 439.633053][ T24] ums-usbat 5-1:1.64: USB Mass Storage device detected [ 439.662248][ T5926] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 439.684104][ T5926] usb 7-1: device descriptor read/8, error -71 [ 439.709392][ T24] ums-usbat 5-1:1.64: This device (03f0,0307,0001 S d9 P 80) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 439.709392][ T24] Please send a copy of this message to and [ 439.868835][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.876426][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.932287][ T24] usb 5-1: USB disconnect, device number 57 [ 440.033824][ T5899] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 440.361855][ T5899] usb 6-1: Using ep0 maxpacket: 8 [ 440.404433][ T5899] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 440.414891][ T5899] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 440.437822][ T5899] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 440.451838][ T5926] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 440.470025][ T5899] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10 [ 440.482529][ T5926] usb 7-1: device descriptor read/8, error -71 [ 440.496727][ T5899] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024 [ 440.523144][ T5899] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 440.541913][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.557776][T12107] binder: 12106:12107 ioctl 4018620d 0 returned -22 [ 440.566428][ T5899] hub 6-1:1.0: bad descriptor, ignoring hub [ 440.581201][ T5899] hub 6-1:1.0: probe with driver hub failed with error -5 [ 440.591325][T12109] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2177'. [ 440.602068][ T5899] cdc_wdm 6-1:1.0: skipping garbage [ 440.608436][ T5899] cdc_wdm 6-1:1.0: skipping garbage [ 440.612792][ T5926] usb usb7-port1: unable to enumerate USB device [ 440.620867][ T5899] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 441.189837][ T5899] usb 6-1: USB disconnect, device number 17 [ 442.286173][T12139] securityfs: Unknown parameter '' [ 442.997767][T12141] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2189'. [ 443.149365][ T29] audit: type=1400 audit(1776764052.948:610): avc: denied { read } for pid=12146 comm="syz.5.2190" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 443.431855][ T5926] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 444.131821][ T5926] usb 7-1: Using ep0 maxpacket: 8 [ 444.219824][ T5926] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 444.347105][ T5926] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 444.361532][ T5926] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 444.374877][ T5926] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10 [ 444.389572][ T5926] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024 [ 444.831089][ T5926] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 444.853147][ T5926] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.880188][ T5926] hub 7-1:1.0: bad descriptor, ignoring hub [ 445.049096][ T5926] hub 7-1:1.0: probe with driver hub failed with error -5 [ 445.093093][ T5926] cdc_wdm 7-1:1.0: skipping garbage [ 445.113339][ T5926] cdc_wdm 7-1:1.0: skipping garbage [ 445.127442][ T5926] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 445.402887][ T5976] usb 7-1: USB disconnect, device number 12 [ 445.481795][ T1218] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 445.661998][ T1218] usb 5-1: Using ep0 maxpacket: 16 [ 445.688160][ T1218] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.714786][ T1218] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 445.740979][ T1218] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 445.771586][ T1218] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.807745][ T1218] usb 5-1: config 0 descriptor?? [ 446.720174][ T29] audit: type=1400 audit(1776764056.518:611): avc: denied { read } for pid=12187 comm="syz.5.2203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 446.781981][T12194] binder: 12192:12194 ioctl 4018620d 0 returned -22 [ 447.208670][ T29] audit: type=1400 audit(1776764056.948:612): avc: denied { create } for pid=12187 comm="syz.5.2203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 447.572018][ T5926] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 447.754840][ T5926] usb 6-1: unable to get BOS descriptor or descriptor too short [ 447.783255][ T5926] usb 6-1: config 1 has an invalid descriptor of length 244, skipping remainder of the config [ 447.815715][ T5926] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 447.879247][ T5926] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 447.902078][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.919908][ T5926] usb 6-1: Product: syz [ 447.929629][ T5926] usb 6-1: Manufacturer: syz [ 447.940224][ T5926] usb 6-1: SerialNumber: syz [ 448.316926][ T5899] usb 5-1: USB disconnect, device number 58 [ 448.701958][ T5899] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 448.898297][ T803] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 449.154954][ T5899] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 449.170479][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.185150][ T5899] usb 5-1: Product: syz [ 449.192172][ T5899] usb 5-1: Manufacturer: syz [ 449.196931][ T5899] usb 5-1: SerialNumber: syz [ 449.201991][ T803] usb 7-1: device descriptor read/64, error -71 [ 449.441876][ T803] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 449.601829][ T803] usb 7-1: device descriptor read/64, error -71 [ 449.684943][ T5899] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 449.723990][ T803] usb usb7-port1: attempt power cycle [ 449.724464][ T5899] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 449.962598][ T5926] usb 6-1: USB disconnect, device number 18 [ 450.251457][ T29] audit: type=1400 audit(1776764060.028:613): avc: denied { bind } for pid=12234 comm="syz.2.2218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 450.291998][ T29] audit: type=1400 audit(1776764060.048:614): avc: denied { write } for pid=12234 comm="syz.2.2218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 450.463432][ T803] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 450.492922][ T803] usb 7-1: device descriptor read/8, error -71 [ 450.691543][T12239] netlink: 'syz.3.2219': attribute type 72 has an invalid length. [ 450.704337][T12239] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2219'. [ 450.889737][ T803] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 450.912918][ T803] usb 7-1: device descriptor read/8, error -71 [ 450.981957][ T24] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 451.353627][ T803] usb usb7-port1: unable to enumerate USB device [ 451.441889][ T5899] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 451.454950][ T5899] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 451.467718][ T5899] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 451.483117][ T24] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 451.494303][ T5899] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 451.503614][ T24] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.517396][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 451.534016][ T24] usb 6-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 451.549309][ T5899] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 451.558929][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.580210][ T5899] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 451.594670][ T24] usb 6-1: config 0 descriptor?? [ 451.623501][ T5899] usb 5-1: USB disconnect, device number 59 [ 452.018056][ T24] hid_parser_main: 4007 callbacks suppressed [ 452.018080][ T24] hid-steam 0003:28DE:1102.0007: unknown main item tag 0x0 [ 452.051104][T12262] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 452.054613][ T24] hid-steam 0003:28DE:1102.0007: unknown main item tag 0x0 [ 452.077048][ T24] hid-steam 0003:28DE:1102.0007: unknown main item tag 0x0 [ 452.091791][ T803] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 452.091807][ T24] hid-steam 0003:28DE:1102.0007: unknown main item tag 0x0 [ 452.091835][ T24] hid-steam 0003:28DE:1102.0007: unknown main item tag 0x0 [ 452.095835][ T24] hid-steam 0003:28DE:1102.0007: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.5-1/input0 [ 452.261788][ T803] usb 4-1: Using ep0 maxpacket: 8 [ 452.274606][ T803] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 452.291859][ T5824] Bluetooth: hci5: command 0x0405 tx timeout [ 452.316652][ T803] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 452.348211][ T803] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 452.358996][ T803] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 452.372234][ T803] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 452.381316][ T803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.605912][ T803] usb 4-1: GET_CAPABILITIES returned 0 [ 452.612015][ T803] usbtmc 4-1:16.0: can't read capabilities [ 452.872198][ C0] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 452.881816][T12256] usbtmc 4-1:16.0: Unable to send data, error -71 [ 452.890186][ T803] usb 4-1: USB disconnect, device number 49 [ 453.054172][ T24] usb 6-1: USB disconnect, device number 19 [ 453.172568][ T29] audit: type=1400 audit(1776764062.978:615): avc: denied { ioctl } for pid=12270 comm="syz.6.2230" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 453.726142][T12290] CIFS: VFS: UNC: path must begin with // or \\ [ 453.732927][T12290] Malformed UNC in devname [ 453.732927][T12290] [ 453.740071][T12290] CIFS: VFS: Malformed UNC in devname [ 453.861836][ T5976] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 454.012322][ T5976] usb 7-1: device descriptor read/64, error -71 [ 454.203003][T12295] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 454.294960][ T5976] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 454.406629][T12299] ipvlan2: entered promiscuous mode [ 454.451858][ T5976] usb 7-1: device descriptor read/64, error -71 [ 454.574558][ T5976] usb usb7-port1: attempt power cycle [ 455.042162][ T5976] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 455.072532][ T5976] usb 7-1: device descriptor read/8, error -71 [ 455.348495][ T5976] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 455.682284][ T5976] usb 7-1: device descriptor read/8, error -71 [ 455.802114][ T5976] usb usb7-port1: unable to enumerate USB device [ 456.282124][ T1218] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 456.576303][ T1218] usb 5-1: Using ep0 maxpacket: 8 [ 456.842175][ T1218] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 456.865076][ T1218] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 456.897844][ T1218] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 456.935785][ T1218] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 456.985786][ T1218] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 457.017300][ T1218] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.606118][ T1218] usb 5-1: GET_CAPABILITIES returned 0 [ 457.613602][ T1218] usbtmc 5-1:16.0: can't read capabilities [ 457.631173][ T1218] usb 5-1: USB disconnect, device number 60 [ 458.527779][T12353] binder: 12351:12353 ioctl 4018620d 0 returned -22 [ 459.130171][T12355] ipvlan2: entered promiscuous mode [ 459.801780][ T5159] block nbd0: Possible stuck request ffff8880284f7000: control (read@0,4096B). Runtime 210 seconds [ 460.880317][ T29] audit: type=1400 audit(1776764070.678:616): avc: denied { read } for pid=12384 comm="syz.6.2267" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 460.931796][ T29] audit: type=1400 audit(1776764070.678:617): avc: denied { open } for pid=12384 comm="syz.6.2267" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 461.098015][ T5926] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 461.251780][ T5926] usb 5-1: Using ep0 maxpacket: 8 [ 461.259096][ T5926] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 461.279454][ T5926] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 461.299579][ T5926] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 461.325650][ T5926] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 461.352388][ T5926] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 461.381934][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.612865][ T5926] usb 5-1: GET_CAPABILITIES returned 0 [ 461.631105][ T5926] usbtmc 5-1:16.0: can't read capabilities [ 461.855330][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 461.866857][T12383] usbtmc 5-1:16.0: Unable to send data, error -71 [ 461.896808][ T5926] usb 5-1: USB disconnect, device number 61 [ 461.994100][T12402] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 462.785855][T12405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2273'. [ 463.340495][ T29] audit: type=1400 audit(1776764073.138:618): avc: denied { setopt } for pid=12404 comm="syz.4.2274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 464.316618][ T29] audit: type=1400 audit(1776764073.148:619): avc: denied { ioctl } for pid=12404 comm="syz.4.2274" path="/dev/input/event1" dev="devtmpfs" ino=919 ioctlcmd=0x4584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 464.763876][T12421] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 464.790765][T12421] CIFS mount error: No usable UNC path provided in device string! [ 464.790765][T12421] [ 464.801472][T12421] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 466.115695][T12439] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2282'. [ 466.464441][T12447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2285'. [ 468.183575][ T29] audit: type=1400 audit(1776764077.988:620): avc: denied { unmount } for pid=10315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 471.716905][ T5973] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 471.894187][ T5973] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 471.915795][ T5973] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 471.934291][ T5973] usb 7-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 471.957003][ T5973] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.995182][ T5973] usb 7-1: config 0 descriptor?? [ 472.352105][ T5973] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 472.575309][ T5973] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 472.601202][ T5973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.624779][ T5973] usb 4-1: Product: syz [ 472.637773][ T5973] usb 4-1: Manufacturer: syz [ 472.651358][ T5973] usb 4-1: SerialNumber: syz [ 473.137743][ T5973] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 473.153920][ T5973] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 473.334609][T12526] IPv6: syztnl0: Disabled Multicast RS [ 473.941760][ T5976] usb 7-1: USB disconnect, device number 21 [ 474.104539][T12532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2311'. [ 474.197426][ T5902] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 474.351857][ T5902] usb 5-1: Using ep0 maxpacket: 8 [ 474.360488][ T5902] usb 5-1: unable to get BOS descriptor or descriptor too short [ 474.381384][ T5902] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 474.394040][ T5902] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 474.405566][ T5902] usb 5-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 474.420597][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.439790][ T5902] usb 5-1: Product: syz [ 474.445374][ T5902] usb 5-1: Manufacturer: syz [ 474.450265][ T5902] usb 5-1: SerialNumber: syz [ 474.543995][ T30] INFO: task syz.0.1502:10070 blocked for more than 144 seconds. [ 474.552332][ T30] Not tainted syzkaller #0 [ 474.557564][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 474.569353][ T30] task:syz.0.1502 state:D stack:28792 pid:10070 tgid:10069 ppid:5820 task_flags:0x400040 flags:0x00080002 [ 474.615712][ T30] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 474.663386][ T30] [ 474.694034][ T30] __schedule+0x10e9/0x6820 [ 474.763660][ T30] ? __pfx___schedule+0x10/0x10 [ 474.823945][ T5973] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 474.833578][ T30] ? find_held_lock+0x2b/0x80 [ 474.852137][ T5973] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 474.872133][ T5973] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 474.875244][ T30] ? schedule+0x2bf/0x390 [ 474.892489][ T5976] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 474.930598][ T5973] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 474.932689][ T30] schedule+0xdd/0x390 [ 474.956611][ T30] schedule_preempt_disabled+0x13/0x30 [ 474.968577][ T30] __mutex_lock+0xced/0x1b10 [ 475.002751][ T5973] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 475.004318][ T30] ? bdev_open+0x41a/0xe40 [ 475.029281][ T30] ? find_inode_fast+0x5e3/0x910 [ 475.034659][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 475.039784][ T30] ? find_inode_fast+0x1fa/0x910 [ 475.045271][ T30] ? bdev_open+0x41a/0xe40 [ 475.056060][ T30] bdev_open+0x41a/0xe40 [ 475.060376][ T30] ? iput+0x3a/0x40 [ 475.068561][ T30] blkdev_open+0x34e/0x4f0 [ 475.076325][ T30] do_dentry_open+0x6d8/0x1660 [ 475.104740][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 475.111841][ T5976] usb 6-1: Using ep0 maxpacket: 8 [ 475.126761][ T30] vfs_open+0x82/0x3f0 [ 475.135190][ T30] path_openat+0x208c/0x31a0 [ 475.142034][ T30] ? __pfx_path_openat+0x10/0x10 [ 475.150451][ T30] do_file_open+0x20e/0x430 [ 475.155178][ T30] ? __pfx_do_file_open+0x10/0x10 [ 475.160416][ T30] ? alloc_fd+0x476/0x790 [ 475.164882][ T30] ? do_getname+0x191/0x390 [ 475.169547][ T30] do_sys_openat2+0x10d/0x1e0 [ 475.174332][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 475.179696][ T30] ? do_raw_spin_lock+0x128/0x260 [ 475.184873][ T30] ? find_held_lock+0x2b/0x80 [ 475.189573][ T30] __x64_sys_openat+0x12d/0x210 [ 475.194995][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 475.200422][ T30] ? kcov_ioctl+0x16a/0x720 [ 475.205836][ T30] ? rcu_is_watching+0x12/0xc0 [ 475.210653][ T30] do_syscall_64+0x10b/0xf80 [ 475.215308][ T30] ? clear_bhb_loop+0x40/0x90 [ 475.219998][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.226267][ T30] RIP: 0033:0x7f6a4015d04e [ 475.230725][ T30] RSP: 002b:00007f6a41110b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 475.239522][ T30] RAX: ffffffffffffffda RBX: 00007f6a411116c0 RCX: 00007f6a4015d04e [ 475.247681][ T30] RDX: 0000000000000000 RSI: 00007f6a41110c00 RDI: ffffffffffffff9c [ 475.255711][ T30] RBP: 00007f6a41110c00 R08: 0000000000000000 R09: 0000000000000000 [ 475.263886][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 475.271956][ T30] R13: 00007f6a40416038 R14: 00007f6a40415fa0 R15: 00007ffc16df2b68 [ 475.280005][ T30] [ 475.284871][ T30] [ 475.284871][ T30] Showing all locks held in the system: [ 475.285666][ T5973] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 475.294840][ T30] 1 lock held by khungtaskd/30: [ 475.360392][ T30] #0: ffffffff8e7e5460 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 475.380353][ T5973] usb 4-1: USB disconnect, device number 50 [ 475.396128][ T30] 2 locks held by getty/5581: [ 475.415559][ T30] #0: ffff88803a72f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 475.461929][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 475.502212][ T30] 3 locks held by kworker/0:4/5902: [ 475.510527][ T30] #0: ffff88813feb3140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 475.545073][ T30] #1: ffffc90004167d08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 475.591772][ T30] #2: ffffffff8e7f0fa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 475.610498][ T30] 3 locks held by kworker/1:7/5973: [ 475.632294][ T30] 5 locks held by kworker/1:8/5976: [ 475.655390][ T30] #0: ffff88802368d940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 475.686779][ T30] #1: ffffc90004487d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 475.724063][ T30] #2: ffff88802bbc41d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 475.745171][ T30] #3: ffff88802bc5e568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2bd2/0x4af0 [ 475.773295][ T30] #4: ffff88802bb2bc60 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2bfb/0x4af0 [ 475.793270][ T30] 1 lock held by udevd/8874: [ 475.801932][ T30] #0: ffff888027fdc350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 475.823456][ T30] 1 lock held by syz.0.1502/10070: [ 475.833704][ T30] #0: ffff888027fdc350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 475.871766][ T30] 1 lock held by syz.3.2304/12509: [ 475.882410][ T30] #0: ffffffff9062e360 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 475.901864][ T30] 2 locks held by syz.4.2309/12528: [ 475.911917][ T30] 4 locks held by syz.5.2313/12536: [ 475.921992][ T30] #0: ffff88802ca84ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 475.946414][ T30] #1: ffff88802ca840b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 475.971789][ T30] #2: ffffffff908c5a00 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 475.991787][ T30] #3: ffff888023b89af8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x95/0x710 [ 476.005380][ T30] 1 lock held by syz.6.2314/12538: [ 476.022565][ T30] #0: ffffffff8e7f0fa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 476.037152][ T30] 1 lock held by syz.2.2316/12544: [ 476.054556][ T30] [ 476.058692][ T30] ============================================= [ 476.058692][ T30] [ 476.085567][ T30] NMI backtrace for cpu 1 [ 476.085587][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 476.085607][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 476.085617][ T30] Call Trace: [ 476.085623][ T30] [ 476.085630][ T30] dump_stack_lvl+0x100/0x190 [ 476.085657][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 476.085678][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 476.085701][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 476.085731][ T30] sys_info+0x141/0x190 [ 476.085754][ T30] watchdog+0xcb1/0x1030 [ 476.085779][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 476.085799][ T30] ? __pfx_watchdog+0x10/0x10 [ 476.085818][ T30] ? __kthread_parkme+0x18c/0x230 [ 476.085839][ T30] ? kthread+0x13a/0x450 [ 476.085857][ T30] ? __pfx_watchdog+0x10/0x10 [ 476.085875][ T30] kthread+0x370/0x450 [ 476.085893][ T30] ? __pfx_kthread+0x10/0x10 [ 476.085913][ T30] ret_from_fork+0x72b/0xd50 [ 476.085936][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 476.085958][ T30] ? __switch_to+0x800/0x1100 [ 476.085983][ T30] ? __pfx_kthread+0x10/0x10 [ 476.086004][ T30] ret_from_fork_asm+0x1a/0x30 [ 476.086040][ T30] [ 476.086046][ T30] Sending NMI from CPU 1 to CPUs 0: [ 476.220835][ C0] NMI backtrace for cpu 0 [ 476.220855][ C0] CPU: 0 UID: 0 PID: 803 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 476.220878][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 476.220894][ C0] Workqueue: events drain_vmap_area_work [ 476.220919][ C0] RIP: 0010:unwind_next_frame+0x153a/0x2090 [ 476.220947][ C0] Code: f6 40 0f 95 c6 41 84 f0 0f 85 a7 07 00 00 83 e0 07 38 c2 40 0f 9e c6 84 d2 0f 95 c0 40 84 c6 0f 85 90 07 00 00 48 0f bf 69 02 08 00 00 00 4c 89 ef 4d 8d 7d 34 4c 01 f5 48 89 ee e8 cf e8 ff [ 476.220965][ C0] RSP: 0018:ffffc900042c7600 EFLAGS: 00000246 [ 476.220979][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff917d75a6 [ 476.220990][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffffff917d75a8 [ 476.221002][ C0] RBP: ffffffffffffffd0 R08: 0000000000000001 R09: 0000000000000007 [ 476.221013][ C0] R10: 0000000000000200 R11: 000000000000d225 R12: ffffc900042c76c0 [ 476.221025][ C0] R13: ffffc900042c7670 R14: ffffc900042c7ea0 R15: ffffc900042c76a4 [ 476.221037][ C0] FS: 0000000000000000(0000) GS:ffff8881242e1000(0000) knlGS:0000000000000000 [ 476.221055][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 476.221067][ C0] CR2: 00007fd21e690bd0 CR3: 00000000365a6000 CR4: 00000000003526f0 [ 476.221079][ C0] Call Trace: [ 476.221084][ C0] [ 476.221092][ C0] ? kthread+0x370/0x450 [ 476.221120][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 476.221140][ C0] arch_stack_walk+0x94/0xf0 [ 476.221168][ C0] ? ret_from_fork+0x72b/0xd50 [ 476.221192][ C0] stack_trace_save+0x8e/0xc0 [ 476.221209][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 476.221228][ C0] ? __lock_acquire+0x4a5/0x2630 [ 476.221252][ C0] save_stack+0x162/0x1e0 [ 476.221269][ C0] ? __pfx_save_stack+0x10/0x10 [ 476.221285][ C0] ? __free_frozen_pages+0x747/0x1040 [ 476.221306][ C0] ? kasan_depopulate_vmalloc_pte+0x5d/0x80 [ 476.221332][ C0] ? __apply_to_page_range+0xb1d/0x1520 [ 476.221354][ C0] ? __kasan_release_vmalloc+0xd7/0xe0 [ 476.221378][ C0] ? purge_vmap_node+0x210/0xb40 [ 476.221394][ C0] ? __purge_vmap_area_lazy+0x91b/0xc00 [ 476.221411][ C0] ? drain_vmap_area_work+0x27/0x40 [ 476.221434][ C0] ? process_one_work+0xa0e/0x1980 [ 476.221455][ C0] ? worker_thread+0x5ef/0xe50 [ 476.221476][ C0] ? kthread+0x370/0x450 [ 476.221497][ C0] ? page_ext_put+0x3e/0xd0 [ 476.221517][ C0] __reset_page_owner+0x84/0x190 [ 476.221536][ C0] __free_frozen_pages+0x747/0x1040 [ 476.221560][ C0] ? __pfx_kasan_depopulate_vmalloc_pte+0x10/0x10 [ 476.221586][ C0] kasan_depopulate_vmalloc_pte+0x5d/0x80 [ 476.221611][ C0] __apply_to_page_range+0xb1d/0x1520 [ 476.221637][ C0] ? __pfx_kasan_depopulate_vmalloc_pte+0x10/0x10 [ 476.221666][ C0] ? __pfx___apply_to_page_range+0x10/0x10 [ 476.221696][ C0] __kasan_release_vmalloc+0xd7/0xe0 [ 476.221717][ C0] purge_vmap_node+0x210/0xb40 [ 476.221734][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 476.221759][ C0] ? preempt_schedule_common+0x42/0xc0 [ 476.221779][ C0] ? __pfx_purge_vmap_node+0x10/0x10 [ 476.221794][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 476.221825][ C0] __purge_vmap_area_lazy+0x91b/0xc00 [ 476.221845][ C0] drain_vmap_area_work+0x27/0x40 [ 476.221861][ C0] process_one_work+0xa0e/0x1980 [ 476.221891][ C0] ? __pfx_process_one_work+0x10/0x10 [ 476.221921][ C0] ? __pfx_drain_vmap_area_work+0x10/0x10 [ 476.221941][ C0] worker_thread+0x5ef/0xe50 [ 476.221968][ C0] ? __pfx_worker_thread+0x10/0x10 [ 476.221992][ C0] ? kthread+0x13a/0x450 [ 476.222010][ C0] ? __pfx_worker_thread+0x10/0x10 [ 476.222034][ C0] kthread+0x370/0x450 [ 476.222054][ C0] ? __pfx_kthread+0x10/0x10 [ 476.222075][ C0] ret_from_fork+0x72b/0xd50 [ 476.222095][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 476.222123][ C0] ? __switch_to+0x800/0x1100 [ 476.222150][ C0] ? __pfx_kthread+0x10/0x10 [ 476.222171][ C0] ret_from_fork_asm+0x1a/0x30 [ 476.222205][ C0] [ 476.751826][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 476.758725][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 476.767848][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 476.777909][ T30] Call Trace: [ 476.781193][ T30] [ 476.784141][ T30] dump_stack_lvl+0x100/0x190 [ 476.788834][ T30] vpanic+0x552/0x970 [ 476.792828][ T30] ? __pfx_vpanic+0x10/0x10 [ 476.797358][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 476.803542][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 476.809774][ T30] panic+0xd1/0xe0 [ 476.813529][ T30] ? __pfx_panic+0x10/0x10 [ 476.817974][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 476.824156][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 476.830358][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 476.836525][ T30] ? watchdog.cold+0x1ec/0x234 [ 476.841281][ T30] ? watchdog+0xcc1/0x1030 [ 476.845695][ T30] watchdog.cold+0x1fd/0x234 [ 476.850287][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 476.856092][ T30] ? __pfx_watchdog+0x10/0x10 [ 476.860764][ T30] ? __kthread_parkme+0x18c/0x230 [ 476.865780][ T30] ? kthread+0x13a/0x450 [ 476.870014][ T30] ? __pfx_watchdog+0x10/0x10 [ 476.874684][ T30] kthread+0x370/0x450 [ 476.878760][ T30] ? __pfx_kthread+0x10/0x10 [ 476.883343][ T30] ret_from_fork+0x72b/0xd50 [ 476.887931][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 476.893041][ T30] ? __switch_to+0x800/0x1100 [ 476.897717][ T30] ? __pfx_kthread+0x10/0x10 [ 476.902305][ T30] ret_from_fork_asm+0x1a/0x30 [ 476.907079][ T30] [ 476.910589][ T30] Kernel Offset: disabled [ 476.914901][ T30] Rebooting in 86400 seconds..