last executing test programs: 9.409211127s ago: executing program 4 (id=4494): r0 = socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006180)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 8.113119941s ago: executing program 4 (id=4498): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="100100003bba7618", @ANYRES16=0x0, @ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x15}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000300)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@initdev}}, &(0x7f0000000400)=0xe4) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000440)={0x4, 0x200, {}, {r4}, 0xfffffffc, 0x80000001}) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r3, 0x1) r7 = gettid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0c8) tkill(r7, 0xb) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 5.917381078s ago: executing program 3 (id=4506): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x19) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffddf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18d6092eae6379a93babdd69c1e9388d06a749a40af5437a7d2667000800004afc6d604d0005759572adf01d34422580848efeb1d1f1d2046dfbc480f8b634943b3304d1c7a742e76fe18864e47ddad36d840dac6289b0b370d72a5ed884743b706a17e872f9990ddd60e85cf80797e286fce7551f8839000000000000005d6d391b9e71dcecf2e250b8d1f63797eedb7aed01564de861616838de6987ccc1f2c39879dc63967d169515903f480da009066b57f71ee49e5735bfeac9d50df68c8667e1d9df1585a0c04af0da6b690b21c1f2704ce0f2122b86d14953d44abba62136796625a2623cc99f81439d"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000200)={0x100, r4}, 0x0) close(r4) close(r3) pwritev2(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) r5 = open(0x0, 0x44000, 0x0) dup3(r5, 0xffffffffffffffff, 0x0) 5.857920031s ago: executing program 2 (id=4507): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3c8, 0x0, 0x1d0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8200, 0xf801, 0x2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x5, 0xff, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @remote, @rand_addr=0x64010102, 0x1, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x4, 0x7, 0x9, 0x3}]}, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) r3 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) r4 = dup2(r3, r3) ioctl$VIDIOC_LOG_STATUS(r4, 0x5646, 0x0) 4.927655933s ago: executing program 3 (id=4510): r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100000ede84205a08090047a30102030109022d0001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) 4.494617337s ago: executing program 4 (id=4511): r0 = socket(0x2, 0x400000000002, 0x0) setsockopt(r0, 0x0, 0x1f, 0x0, 0x0) 4.423841052s ago: executing program 4 (id=4512): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000001c0)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e24, 0x0, @mcast2, 0x6a3}, {0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1, {[0x5, 0xa526, 0x4, 0x3, 0xfffffff1, 0x98, 0x3b, 0x4]}}, 0x5c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000003600), 0x2, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000080)={0xf0f041}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000034c0)={0x2020}, 0xcac) 4.394720728s ago: executing program 2 (id=4513): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=@newtfilter={0x74, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0xffffffffffffffff, 0x8, 0x1, 0x5, {0xb, 0x0, 0x4, 0x300, 0xc}, {0x4, 0x1, 0x0, 0x0, 0x2, 0x80000000}, 0x8, 0x229b, 0x7}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f", 0x7}], 0x2}, 0x5) 4.146805811s ago: executing program 2 (id=4515): fanotify_init(0x200, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x20201) r2 = syz_io_uring_setup(0x1248, &(0x7f0000000200)={0x0, 0xd5a1, 0x1, 0x40000002, 0xb8}, &(0x7f0000000400)=0x0, &(0x7f00000001c0)=0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdfffffffffffffff, &(0x7f0000000340)=[0xffffffffffffffff], 0x1, 0x0, 0x1}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000300)={0x9, [[0x5, 0x5, 0x51ea9978, 0xe9, 0x3, 0x641f, 0x9b48, 0x8001], [0x6, 0x101, 0x4, 0xf35, 0xfdff, 0x7, 0xfffff801, 0x7], [0x80000000, 0x7, 0x2, 0x9, 0x7, 0x8, 0x800, 0x5]], '\x00', [{0x8000, 0x5, 0x1, 0x0, 0x1, 0x1}, {0x100, 0x0, 0x1, 0x1, 0x1}, {0xf, 0x8008, 0x1, 0x1, 0x1}, {0x9, 0x200, 0x1, 0x1, 0x1}, {0x9, 0x8, 0x1, 0x0, 0x1}, {0x9, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x1, 0x9, 0x1, 0x1, 0x1}, {0x0, 0x5, 0x1, 0x1}, {0x7, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x80, 0x8f, 0x0, 0x1, 0x1}, {0x3, 0x8, 0x1, 0x1, 0x0, 0x1}, {0xe6, 0x3, 0x0, 0x1}], '\x00', 0x2}) 3.629229266s ago: executing program 0 (id=4521): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc00d100, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="9dbaac999f69835fc48373a1ee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.385127279s ago: executing program 0 (id=4523): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3c8, 0x0, 0x1d0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8200, 0xf801, 0x2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x5, 0xff, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @remote, @rand_addr=0x64010102, 0x1, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x4, 0x7, 0x9, 0x3}]}, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) r3 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) r4 = dup2(r3, r3) ioctl$VIDIOC_LOG_STATUS(r4, 0x5646, 0x0) 2.656131174s ago: executing program 1 (id=4525): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=@newtfilter={0x74, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0xffffffffffffffff, 0x8, 0x1, 0x5, {0xb, 0x0, 0x4, 0x300, 0xc}, {0x4, 0x1, 0x0, 0x0, 0x2, 0x80000000}, 0x8, 0x229b, 0x7}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f", 0x7}], 0x2}, 0x5) 2.654947439s ago: executing program 4 (id=4526): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r2 = syz_clone(0x40400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace(0x10, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r3) ptrace$peeksig(0x420e, r2, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22102, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r4, 0xc008aec1, &(0x7f0000000500)={0xb, 0x0, [{0xa, 0x4, 0x4, 0x7, 0x9, 0x7fff, 0x9}, {0xc0000000, 0x0, 0x0, 0x900, 0x3ff, 0xff}, {0x1, 0xa0bb, 0x7, 0x1, 0x2}, {0x80000001, 0x3, 0x1, 0x1, 0x6, 0xa0, 0x7}, {0x1, 0x4, 0x0, 0x6, 0x5, 0x4, 0x605}, {0x40000001, 0x31cb, 0x6, 0x5566bb86, 0x3, 0xfffffffa, 0x101}, {0x6, 0xfffff85a, 0x1, 0xff, 0x2, 0x5, 0x3}, {0xc0000001, 0x7, 0x0, 0x0, 0x4, 0xc, 0x9}, {0x4, 0x3, 0x4, 0x5800, 0x81, 0x6, 0x9}, {0x285c2d1f321dc362, 0x6, 0x1, 0x200, 0xfffffff9, 0xc, 0x40}, {0xd, 0x0, 0x1, 0x3, 0x81, 0x7ff, 0x9}]}) r5 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000003c0)={0x2, 0x0, 0x2, 0x0, 0x4}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x880) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000040)=@overlay={0x0, 0x1, 0x4, 0x0, 0xd, {}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x0, "12848098"}, 0x3}) r7 = semget$private(0x0, 0x1, 0x20) semctl$GETALL(r7, 0x0, 0xd, &(0x7f0000000140)=""/126) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0xffffffff, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x120, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x7, 0x4, 0x9}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x328) 2.547515085s ago: executing program 2 (id=4527): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000240)=ANY=[@ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf254400000008000300", @ANYRES32=r3, @ANYBLOB="040008010a0018"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x800) 2.526688097s ago: executing program 2 (id=4528): open(&(0x7f0000000080)='./file1\x00', 0x20, 0x190) r0 = getpid() fcntl$setown(0xffffffffffffffff, 0x6, r0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) 2.407525036s ago: executing program 0 (id=4529): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, 0x0, 0x0) socket(0x10, 0x2, 0x10000000000002) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0x4, 0x4, 0xfffffffb, 0x800, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x200004, 0x8, 0x10, 0x7, 0xb, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x7, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x4], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x5, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0x2000000e, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) readv(r1, &(0x7f0000001900), 0x0) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x21041, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xe) ioctl$VT_SETMODE(r3, 0x5602, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 2.339801447s ago: executing program 2 (id=4530): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00@\x00N']) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 2.330088631s ago: executing program 1 (id=4531): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xd, 0x410c118, r0, 0x81b20000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0x1ff, 0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69577000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x2) 1.475637217s ago: executing program 3 (id=4532): syz_emit_ethernet(0x1f, &(0x7f0000000040)=ANY=[@ANYBLOB="ff0300ffffff000000000000000442420300404000000062cf004a"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) write$tun(r3, &(0x7f0000000340)=ANY=[], 0xfdef) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req3, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x1000, 0x400, 0x3}, &(0x7f0000000140)=0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40) write(r0, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) socket$nl_route(0x10, 0x3, 0x0) 1.473821765s ago: executing program 0 (id=4533): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) keyctl$chown(0x4, 0x0, 0xee01, 0xee00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c00ffe4", @ANYRES16, @ANYBLOB], 0x1c}}, 0x64000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c040}, 0xd4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000200)='bridge0\x00') 1.255641334s ago: executing program 1 (id=4534): r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0x37, 0x0, 0x0) 949.410611ms ago: executing program 3 (id=4535): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x106f) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xd}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x10) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) 885.170166ms ago: executing program 1 (id=4536): open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r0 = open(&(0x7f0000000080)='./file0\x00', 0x18289, 0x110) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) r1 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x201, 0x80) ftruncate(r1, 0x40002) 870.390957ms ago: executing program 0 (id=4537): r0 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000000)={0x8, &(0x7f00000000c0)=[{0x11}]}) 715.269453ms ago: executing program 3 (id=4538): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000240)=ANY=[@ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf254400000008000300", @ANYRES32=r3, @ANYBLOB="040008010a0018"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x800) 632.012611ms ago: executing program 1 (id=4539): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000300)='/sys/power/resume', 0x8402, 0x37) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x9]}, 0x8) close(r1) syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000140)={0x3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x0, 0x3, 0x7}) 627.119246ms ago: executing program 0 (id=4540): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0xf00, 0x0, 0x2, 0x0, 0x0}) read$FUSE(r2, &(0x7f0000006180)={0x2020}, 0x2020) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) write$FUSE_INIT(r2, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x1) ioctl$BLKPG(r4, 0x1269, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) 554.927283ms ago: executing program 1 (id=4541): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=@newtfilter={0x74, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0xffffffffffffffff, 0x8, 0x1, 0x5, {0xb, 0x0, 0x4, 0x300, 0xc}, {0x4, 0x1, 0x0, 0x0, 0x2, 0x80000000}, 0x8, 0x229b, 0x7}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f", 0x7}], 0x2}, 0x5) 474.107351ms ago: executing program 3 (id=4542): r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x262, 0x1, {0x1}}) io_uring_enter(r0, 0x3516, 0xf400, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=4543): r0 = socket(0x2, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, @val, {@ipv4}}, 0x0) fcntl$setstatus(r0, 0x4, 0x40) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(r0, &(0x7f0000000000), 0x10) kernel console output (not intermixed with test programs): .3447'. [ 767.363925][T17184] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3440'. [ 767.571011][ T5847] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 767.628712][T17187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3448'. [ 767.740885][ T5847] usb 5-1: Using ep0 maxpacket: 32 [ 767.762924][ T5847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 767.799759][ T5847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 767.816232][ T5847] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 767.825828][ T5847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.851066][ T5847] usb 5-1: config 0 descriptor?? [ 767.940883][ T793] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 768.262313][ T793] usb 2-1: unable to get BOS descriptor or descriptor too short [ 768.286717][ T793] usb 2-1: not running at top speed; connect to a high speed hub [ 768.299522][ T793] usb 2-1: config 129 has an invalid interface number: 135 but max is 0 [ 768.310517][ T793] usb 2-1: config 129 has no interface number 0 [ 768.317270][ T793] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 768.336973][ T793] usb 2-1: config 129 interface 135 has no altsetting 0 [ 768.348790][ T793] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 768.358997][ T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.385339][ T793] usb 2-1: Product: syz [ 768.389794][ T793] usb 2-1: Manufacturer: syz [ 768.409738][ T793] usb 2-1: SerialNumber: syz [ 768.441513][ T5847] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 768.640348][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 768.648374][ C1] lec:lec_tx_timeout: lec0 [ 768.653052][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 768.700543][ T5847] ft260 0003:0403:6030.0008: failed to retrieve chip version [ 768.724762][ T5847] ft260 0003:0403:6030.0008: probe with driver ft260 failed with error -32 [ 768.754606][ T793] usb 2-1: USB disconnect, device number 31 [ 768.810586][ T1206] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 768.866810][T17214] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3458'. [ 768.990370][ T1206] usb 1-1: Using ep0 maxpacket: 16 [ 769.002568][ T1206] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 769.013191][ T1206] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 769.029058][T17222] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3459'. [ 769.045104][ T1206] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 769.062853][ T1206] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.080646][ T1206] usb 1-1: Product: syz [ 769.100397][ T1206] usb 1-1: Manufacturer: syz [ 769.105160][ T1206] usb 1-1: SerialNumber: syz [ 769.129666][ T1206] usb 1-1: config 0 descriptor?? [ 769.461221][ T793] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 769.461965][T17239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 769.479394][T17239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 769.704514][T17233] syzkaller0: entered promiscuous mode [ 769.710022][T17233] syzkaller0: entered allmulticast mode [ 769.865309][T17233] tipc: Started in network mode [ 769.867331][ T5887] usb 1-1: USB disconnect, device number 17 [ 769.877106][T17233] tipc: Node identity 86ac3a9c5515, cluster identity 4711 [ 769.886193][ T793] usb 3-1: config 1 has an invalid descriptor of length 183, skipping remainder of the config [ 769.940511][T17233] tipc: Enabled bearer , priority 0 [ 769.941526][ T793] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 769.962252][ T793] usb 3-1: New USB device found, idVendor=1d6b, idProduct=2101, bcdDevice= 0.40 [ 769.981304][T17233] tipc: Resetting bearer [ 769.993226][T17232] tipc: Resetting bearer [ 770.000876][ T793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.067080][T17232] tipc: Disabling bearer [ 770.076085][ T793] usb 3-1: Product: syz [ 770.082964][ T793] usb 3-1: Manufacturer: syz [ 770.091644][ T793] usb 3-1: SerialNumber: syz [ 770.324759][T17244] netlink: 'syz.3.3465': attribute type 10 has an invalid length. [ 770.327326][ T793] usb 3-1: 0:2 : does not exist [ 770.360456][T15081] usb 5-1: USB disconnect, device number 33 [ 770.421476][ T793] usb 3-1: USB disconnect, device number 40 [ 770.466486][T17244] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 770.484132][T17251] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3465'. [ 770.523666][T14481] udevd[14481]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 770.578596][T17249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3468'. [ 770.624448][T17254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3469'. [ 770.878049][T17258] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3471'. [ 771.520630][T17266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3473'. [ 771.942397][ T793] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 772.482646][ T5847] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 772.712390][ T793] usb 1-1: Using ep0 maxpacket: 16 [ 772.753779][ T793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.830532][ T5847] usb 2-1: Using ep0 maxpacket: 32 [ 772.873848][ T5847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.884912][ T793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 772.894680][ T5847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 772.904788][ T793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 772.915834][ T5847] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 772.925341][ T793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 772.936422][ T5847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.946623][ T793] usb 1-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 772.991050][ T793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.999616][ T5847] usb 2-1: config 0 descriptor?? [ 773.039973][ T793] usb 1-1: config 0 descriptor?? [ 773.443493][ T5847] ft260 0003:0403:6030.0009: unknown main item tag 0x0 [ 773.654732][ T5847] ft260 0003:0403:6030.0009: failed to retrieve chip version [ 773.665757][ T5847] ft260 0003:0403:6030.0009: probe with driver ft260 failed with error -32 [ 773.854213][ T793] usbhid 1-1:0.0: can't add hid device: -71 [ 773.880958][ T793] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 773.937789][ T793] usb 1-1: USB disconnect, device number 18 [ 773.991266][T12353] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 774.110443][T17300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3483'. [ 774.150589][T12353] usb 3-1: Using ep0 maxpacket: 8 [ 774.166658][T12353] usb 3-1: config 0 has an invalid interface number: 122 but max is 0 [ 774.237404][T12353] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 774.260552][T12353] usb 3-1: config 0 has no interface number 0 [ 774.291098][T12353] usb 3-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 774.980364][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6330 ms [ 774.988391][ C1] lec:lec_tx_timeout: lec0 [ 775.000381][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 775.323377][ T5807] Bluetooth: hci4: command 0x0405 tx timeout [ 775.372352][T12353] usb 3-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 775.390409][T12353] usb 3-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1023 [ 775.400723][T12353] usb 3-1: config 0 interface 122 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 775.437895][ T5887] usb 2-1: USB disconnect, device number 32 [ 775.520169][T12353] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 775.559923][T12353] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.583978][T12353] usb 3-1: Product: syz [ 775.588180][T12353] usb 3-1: Manufacturer: syz [ 775.620683][T11316] Bluetooth: hci1: command 0x0405 tx timeout [ 775.638489][T12353] usb 3-1: SerialNumber: syz [ 775.651128][T12353] usb 3-1: config 0 descriptor?? [ 775.667194][T17297] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 775.674681][T17297] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 775.687306][T17311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3488'. [ 775.703326][T17315] tipc: Enabled bearer , priority 0 [ 775.710778][T17315] syzkaller0: entered promiscuous mode [ 775.716262][T17315] syzkaller0: entered allmulticast mode [ 775.734176][T17315] tipc: Resetting bearer [ 775.783378][T17314] tipc: Resetting bearer [ 776.266209][T17314] tipc: Disabling bearer [ 776.625062][T12353] usb 3-1: NFC: intf ffff8880687e7000 id ffffffff8f5aa580 [ 778.627622][T12353] nfcmrvl 3-1:0.122: NFC: registered with nci successfully [ 778.830679][T12353] usb 3-1: USB disconnect, device number 41 [ 778.837960][T12353] usb 3-1: NFC: intf ffff8880687e7000 [ 780.443778][T12353] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 780.600675][ T5847] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 780.622256][T12353] usb 3-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 780.632303][T12353] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.650146][T12353] usb 3-1: config 0 descriptor?? [ 780.740378][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 780.748483][ C1] lec:lec_tx_timeout: lec0 [ 780.753812][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 780.784012][ T5847] usb 4-1: Using ep0 maxpacket: 16 [ 780.791650][ T5847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 780.803990][ T5847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 780.821415][ T5847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 780.832897][ T793] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 780.840805][ T5847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 780.850783][ T5847] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 780.860400][ T5847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.902329][ T5847] usb 4-1: config 0 descriptor?? [ 781.010989][ T793] usb 5-1: Using ep0 maxpacket: 8 [ 781.023455][ T793] usb 5-1: config 0 has an invalid interface number: 122 but max is 0 [ 781.032098][ T793] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 781.042874][ T793] usb 5-1: config 0 has no interface number 0 [ 781.049014][ T793] usb 5-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 781.059989][ T793] usb 5-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 781.070102][ T793] usb 5-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1023 [ 781.080523][T15081] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 781.088113][ T793] usb 5-1: config 0 interface 122 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 781.105311][ T793] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 781.121836][ T793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.130178][ T793] usb 5-1: Product: syz [ 781.134725][T12353] usbhid 3-1:0.0: can't add hid device: -71 [ 781.142970][ T793] usb 5-1: Manufacturer: syz [ 781.147752][T12353] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 781.156228][ T793] usb 5-1: SerialNumber: syz [ 781.162757][ T793] usb 5-1: config 0 descriptor?? [ 781.169430][T12353] usb 3-1: USB disconnect, device number 42 [ 781.176489][T17363] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 781.184557][T17363] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 781.250405][T15081] usb 2-1: Using ep0 maxpacket: 32 [ 781.257448][T15081] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 781.268655][T15081] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 781.278736][T15081] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 781.287874][T15081] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.297608][T15081] usb 2-1: config 0 descriptor?? [ 781.400163][ T793] usb 5-1: NFC: intf ffff888057e10000 id ffffffff8f5aa580 [ 781.429832][ T793] nfcmrvl 5-1:0.122: NFC: registered with nci successfully [ 781.454263][ T793] usb 5-1: USB disconnect, device number 34 [ 781.467464][ T793] usb 5-1: NFC: intf ffff888057e10000 [ 781.471444][T17373] tipc: Started in network mode [ 781.486546][T17373] tipc: Node identity 86f30a69ebe8, cluster identity 4711 [ 781.502020][T17373] tipc: Enabled bearer , priority 0 [ 781.526510][T17373] syzkaller0: entered promiscuous mode [ 781.533375][T17373] syzkaller0: entered allmulticast mode [ 781.539553][ T5847] usbhid 4-1:0.0: can't add hid device: -71 [ 781.548199][ T5847] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 781.558357][T17373] tipc: Resetting bearer [ 781.565851][ T5847] usb 4-1: USB disconnect, device number 22 [ 781.572383][T17372] tipc: Resetting bearer [ 781.593551][T17372] tipc: Disabling bearer [ 781.804189][T15081] ft260 0003:0403:6030.000A: unknown main item tag 0x0 [ 781.985482][T15081] ft260 0003:0403:6030.000A: failed to retrieve chip version [ 782.076272][T15081] ft260 0003:0403:6030.000A: probe with driver ft260 failed with error -32 [ 782.647249][T17397] ipvlan3: entered allmulticast mode [ 782.712354][T17399] netlink: 'syz.0.3514': attribute type 1 has an invalid length. [ 782.732562][T17399] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3514'. [ 783.828312][ T5890] usb 2-1: USB disconnect, device number 33 [ 784.700936][ T793] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 784.728899][T17429] ipvlan3: entered allmulticast mode [ 784.799593][T17429] netlink: 'syz.2.3525': attribute type 1 has an invalid length. [ 784.808994][T17429] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3525'. [ 784.870359][ T793] usb 4-1: Using ep0 maxpacket: 8 [ 784.878254][ T793] usb 4-1: config 0 has an invalid interface number: 122 but max is 0 [ 784.887172][ T793] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 784.897724][ T793] usb 4-1: config 0 has no interface number 0 [ 784.904321][ T793] usb 4-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 784.922370][ T793] usb 4-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 784.932914][ T793] usb 4-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1023 [ 784.963007][T17434] kvm: pic: level sensitive irq not supported [ 784.963204][T17434] kvm: pic: level sensitive irq not supported [ 784.966668][ T793] usb 4-1: config 0 interface 122 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 784.970588][T17434] kvm: pic: single mode not supported [ 785.065654][ T793] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 785.090068][ T793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.098973][ T793] usb 4-1: Product: syz [ 785.103474][ T793] usb 4-1: Manufacturer: syz [ 785.108078][ T793] usb 4-1: SerialNumber: syz [ 785.116646][ T793] usb 4-1: config 0 descriptor?? [ 785.123063][T17419] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 785.150488][T17419] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 785.414464][ T793] usb 4-1: NFC: intf ffff888028e9a000 id ffffffff8f5aa580 [ 785.486893][ T793] nfcmrvl 4-1:0.122: NFC: registered with nci successfully [ 785.538604][ T793] usb 4-1: USB disconnect, device number 23 [ 785.576116][ T793] usb 4-1: NFC: intf ffff888028e9a000 [ 785.649883][T17469] fuse: Bad value for 'fd' [ 785.769605][T17471] ipvlan3: entered allmulticast mode [ 785.800638][ T5887] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 785.846536][T17472] netlink: 'syz.4.3540': attribute type 1 has an invalid length. [ 785.857855][T17472] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3540'. [ 785.961730][ T5887] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 785.972103][ T5887] usb 1-1: config 0 has no interface number 0 [ 785.989622][ T5887] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 786.009832][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.044238][ T5887] usb 1-1: Product: syz [ 786.054006][ T5887] usb 1-1: Manufacturer: syz [ 786.068143][ T5887] usb 1-1: SerialNumber: syz [ 786.078201][ T5887] usb 1-1: config 0 descriptor?? [ 786.302357][ T5887] dvb_usb_ec168 1-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 786.336496][ T5887] usb 1-1: USB disconnect, device number 19 [ 786.500396][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 786.508424][ C1] lec:lec_tx_timeout: lec0 [ 786.520369][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 786.676392][T17489] tipc: Enabled bearer , priority 0 [ 786.693363][T17489] syzkaller0: entered promiscuous mode [ 786.807242][T17489] syzkaller0: entered allmulticast mode [ 786.867728][T17489] tipc: Resetting bearer [ 786.884063][T17488] tipc: Resetting bearer [ 786.918244][T17488] tipc: Disabling bearer [ 787.221375][T17498] syzkaller0: entered promiscuous mode [ 787.257069][T17498] syzkaller0: entered allmulticast mode [ 787.544937][T17513] 9p: Bad value for 'wfdno' [ 788.106023][T17527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3561'. [ 788.119850][T17525] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3559'. [ 788.359735][ T5887] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 788.605178][ T5887] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 788.640172][ T5887] usb 3-1: config 0 has no interface number 0 [ 788.727015][ T5887] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 788.834283][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.956820][ T5887] usb 3-1: Product: syz [ 789.011996][ T5887] usb 3-1: Manufacturer: syz [ 789.052125][ T5887] usb 3-1: SerialNumber: syz [ 789.095224][ T5887] usb 3-1: config 0 descriptor?? [ 789.737055][ T5887] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 789.900890][ T5887] usb 3-1: USB disconnect, device number 43 [ 790.136887][ T30] audit: type=1400 audit(1770505654.473:735): avc: denied { write } for pid=17552 comm="syz.0.3571" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 790.217868][T17555] tipc: Enabled bearer , priority 0 [ 790.225334][T17555] syzkaller0: entered promiscuous mode [ 790.252744][T17555] syzkaller0: entered allmulticast mode [ 790.275119][T17555] tipc: Resetting bearer [ 790.294157][T17554] tipc: Resetting bearer [ 790.335389][T17554] tipc: Disabling bearer [ 790.533841][T17566] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3574'. [ 791.530310][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 791.538383][ C1] lec:lec_tx_timeout: lec0 [ 791.544142][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 792.464174][T17595] 9p: Bad value for 'wfdno' [ 793.040617][ T5887] usb 3-1: new low-speed USB device number 44 using dummy_hcd [ 793.099593][T17603] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3589'. [ 793.102714][ T793] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 793.124690][T17603] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3589'. [ 793.242705][ T5887] usb 3-1: device descriptor read/64, error -71 [ 793.293140][ T793] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 793.302752][ T793] usb 5-1: config 0 has no interface number 0 [ 793.315811][ T793] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 793.340467][ T793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.360386][ T793] usb 5-1: Product: syz [ 793.364584][ T793] usb 5-1: Manufacturer: syz [ 793.379901][ T793] usb 5-1: SerialNumber: syz [ 793.390128][ T793] usb 5-1: config 0 descriptor?? [ 794.586913][ T5887] usb 3-1: new low-speed USB device number 45 using dummy_hcd [ 794.587649][ T793] dvb_usb_ec168 5-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 794.641474][ T793] usb 5-1: USB disconnect, device number 35 [ 794.742042][ T5887] usb 3-1: device descriptor read/64, error -71 [ 794.853027][ T5887] usb usb3-port1: attempt power cycle [ 795.790341][ T5890] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 795.850361][ T5887] usb 3-1: new low-speed USB device number 46 using dummy_hcd [ 795.885502][ T5887] usb 3-1: device descriptor read/8, error -71 [ 795.934481][T17624] 9p: Bad value for 'rfdno' [ 795.993110][ T5890] usb 2-1: config 68 has an invalid interface number: 220 but max is 0 [ 796.018294][ T5890] usb 2-1: config 68 has no interface number 0 [ 796.032108][ T5890] usb 2-1: config 68 interface 220 has no altsetting 0 [ 796.048662][ T5890] usb 2-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=67.7a [ 796.064191][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.085222][ T5890] usb 2-1: Product: syz [ 796.103583][ T5890] usb 2-1: Manufacturer: syz [ 796.123121][ T5890] usb 2-1: SerialNumber: syz [ 796.140752][ T5887] usb 3-1: new low-speed USB device number 47 using dummy_hcd [ 796.143482][T17633] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3600'. [ 796.159392][T17633] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3600'. [ 796.280652][ T5887] usb 3-1: device descriptor read/8, error -71 [ 796.411545][ T5887] usb usb3-port1: unable to enumerate USB device [ 796.457079][ T5890] gspca_main: spca501-2.14.0 probing 0497:c001 [ 796.467028][ T5890] gspca_spca501: reg write: error -71 [ 796.472629][ T5890] spca501 2-1:68.220: Reg write failed for 0x02,0x07,0x05 [ 796.481534][ T5890] spca501 2-1:68.220: probe with driver spca501 failed with error -22 [ 796.550320][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 796.558352][ C1] lec:lec_tx_timeout: lec0 [ 796.570367][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 796.582015][ T5890] usb 2-1: USB disconnect, device number 34 [ 797.094379][T17646] tipc: Enabled bearer , priority 0 [ 798.103722][T17645] syzkaller0: entered promiscuous mode [ 798.117709][T17645] syzkaller0: entered allmulticast mode [ 798.278650][ T43] tipc: Node number set to 1830488681 [ 798.286243][T17646] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3602'. [ 798.361082][T17645] tipc: Resetting bearer [ 798.384693][T17644] tipc: Resetting bearer [ 798.543189][T17644] tipc: Disabling bearer [ 798.667798][T17665] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3611'. [ 798.700465][T17665] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3611'. [ 798.846031][T17673] fuse: Bad value for 'fd' [ 798.851904][ T30] audit: type=1400 audit(1770505663.183:736): avc: denied { ioctl } for pid=17668 comm="syz.0.3613" path="mnt:[4026534013]" dev="nsfs" ino=4026534013 ioctlcmd=0xf50b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 798.929828][T17669] mac80211_hwsim hwsim21 wlan0: entered promiscuous mode [ 798.953081][T17669] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 799.130479][ T43] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 799.142968][T17680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3614'. [ 799.313028][ T43] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 799.345228][ T43] usb 4-1: config 0 has no interface number 0 [ 799.362640][ T43] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 799.371869][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.379866][ T43] usb 4-1: Product: syz [ 799.395546][ T30] audit: type=1400 audit(1770505663.723:737): avc: denied { read } for pid=17683 comm="syz.0.3618" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 799.402171][ T43] usb 4-1: Manufacturer: syz [ 799.430588][ T43] usb 4-1: SerialNumber: syz [ 799.433856][ T30] audit: type=1400 audit(1770505663.723:738): avc: denied { open } for pid=17683 comm="syz.0.3618" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 799.441279][ T43] usb 4-1: config 0 descriptor?? [ 799.501673][T17690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3619'. [ 799.695154][ T43] dvb_usb_ec168 4-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 799.714341][ T43] usb 4-1: USB disconnect, device number 24 [ 799.853861][ T30] audit: type=1800 audit(1770505664.133:739): pid=17696 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.3620" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 800.228772][T17684] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 800.235612][T17684] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 800.250217][T17684] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 800.256447][T17684] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 800.306980][T17684] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 800.318121][T17684] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 800.357979][T17684] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 800.366291][T17684] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 800.417184][T17684] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 800.489862][T17684] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 800.540056][T17684] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 800.555846][T17684] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 801.332357][T17729] tipc: Enabled bearer , priority 0 [ 801.339991][T17729] syzkaller0: entered promiscuous mode [ 801.346604][T17729] syzkaller0: entered allmulticast mode [ 801.372491][T17729] tipc: Resetting bearer [ 801.381710][T17728] tipc: Resetting bearer [ 801.402577][T17728] tipc: Disabling bearer [ 801.410624][ T5847] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 801.482807][T17737] syzkaller0: entered promiscuous mode [ 801.488350][T17737] syzkaller0: entered allmulticast mode [ 801.580340][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 801.588367][ C1] lec:lec_tx_timeout: lec0 [ 801.600222][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 801.620340][ T5805] Bluetooth: hci2: command 0x0405 tx timeout [ 801.757011][ T5847] usb 2-1: unable to get BOS descriptor or descriptor too short [ 801.807913][ T5847] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 801.820716][ T5847] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 801.829990][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.896909][ T5847] usb 2-1: Product: syz [ 801.905711][ T5847] usb 2-1: Manufacturer: syz [ 801.917277][ T5847] usb 2-1: SerialNumber: syz [ 802.456354][ T5805] Bluetooth: hci4: command 0x0405 tx timeout [ 802.462510][ T5805] Bluetooth: hci5: command 0x0406 tx timeout [ 802.468535][ T5805] Bluetooth: hci3: command 0x0c1a tx timeout [ 802.542244][ T5805] Bluetooth: hci1: command 0x0405 tx timeout [ 802.892135][ T5847] usb 2-1: reset high-speed USB device number 35 using dummy_hcd [ 803.846829][ T5805] Bluetooth: hci2: command 0x0405 tx timeout [ 803.925409][ T5847] usb 2-1: unable to get BOS descriptor or descriptor too short [ 803.950497][ T5847] usb 2-1: device firmware changed [ 804.430566][ T30] audit: type=1400 audit(1770505668.353:740): avc: denied { listen } for pid=17764 comm="syz.0.3645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 804.468620][ T5847] usb 2-1: USB disconnect, device number 35 [ 804.500438][ T5805] Bluetooth: hci5: command 0x0406 tx timeout [ 804.506476][ T5807] Bluetooth: hci4: command 0x0405 tx timeout [ 804.512714][ T5807] Bluetooth: hci3: command 0x0c1a tx timeout [ 804.520113][ T30] audit: type=1400 audit(1770505668.353:741): avc: denied { accept } for pid=17764 comm="syz.0.3645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 804.591522][ T5805] Bluetooth: hci1: command 0x0405 tx timeout [ 806.471336][ T5887] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 806.610312][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 806.618337][ C1] lec:lec_tx_timeout: lec0 [ 806.622948][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 806.643443][ T5805] Bluetooth: hci3: command 0x0c1a tx timeout [ 806.661493][ T5805] Bluetooth: hci1: command 0x0405 tx timeout [ 806.742254][ T5887] usb 2-1: Using ep0 maxpacket: 32 [ 806.870773][ T5887] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 806.878798][ T5887] usb 2-1: config 0 has no interface number 0 [ 806.897375][ T5887] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 806.950609][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.983109][ T5887] usb 2-1: Product: syz [ 806.987319][ T5887] usb 2-1: Manufacturer: syz [ 807.100865][ T5887] usb 2-1: SerialNumber: syz [ 807.116358][ T5887] usb 2-1: config 0 descriptor?? [ 807.277246][ T5887] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 807.341195][ T5887] usb 2-1: selecting invalid altsetting 1 [ 807.359408][ T5887] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 807.385517][ T5887] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 807.404831][ T5887] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 807.413730][ T5887] usb 2-1: media controller created [ 807.435304][ T5887] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 807.614693][T17820] fuse: Bad value for 'fd' [ 808.264567][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.500741][T17798] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 808.606459][ T5887] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 808.624893][ T5887] zl10353_read_register: readreg error (reg=127, ret==-71) [ 809.035240][ T5887] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 809.088780][ T5887] usb 2-1: USB disconnect, device number 36 [ 809.097087][T13736] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 809.521415][T13736] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 809.539022][T13736] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 809.556247][T13736] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 809.578715][T13736] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 809.593444][T13736] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 809.610404][T13736] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 809.619969][T13736] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 809.628471][T17848] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3670'. [ 809.640357][T13736] usb 5-1: Product: syz [ 809.644541][T13736] usb 5-1: Manufacturer: syz [ 809.672158][T13736] cdc_wdm 5-1:1.0: skipping garbage [ 809.677413][T13736] cdc_wdm 5-1:1.0: skipping garbage [ 809.692936][T13736] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 809.717770][T13736] cdc_wdm 5-1:1.0: Unknown control protocol [ 809.977961][T17860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3676'. [ 809.991632][T17860] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 809.999201][T17860] IPv6: NLM_F_CREATE should be set when creating new route [ 810.315116][ T5887] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 810.347806][ T30] audit: type=1400 audit(1770505674.673:742): avc: denied { read write } for pid=17836 comm="syz.4.3666" name="cdc-wdm0" dev="devtmpfs" ino=3133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 810.418186][ T30] audit: type=1400 audit(1770505674.673:743): avc: denied { open } for pid=17836 comm="syz.4.3666" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 810.444481][ T30] audit: type=1400 audit(1770505674.753:744): avc: denied { watch watch_with_perm watch_reads } for pid=17866 comm="syz.3.3677" path="/dev/ptmx" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 810.571777][ T5887] usb 1-1: config 68 has an invalid interface number: 220 but max is 0 [ 810.589839][ T5887] usb 1-1: config 68 has no interface number 0 [ 810.591801][ T5847] usb 5-1: USB disconnect, device number 36 [ 810.596946][ T5887] usb 1-1: config 68 interface 220 has no altsetting 0 [ 810.614933][ T5887] usb 1-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=67.7a [ 810.632026][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.647633][ T5887] usb 1-1: Product: syz [ 810.756014][ T5887] usb 1-1: Manufacturer: syz [ 810.776502][ T5887] usb 1-1: SerialNumber: syz [ 811.630597][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 811.638652][ C1] lec:lec_tx_timeout: lec0 [ 811.650367][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 812.049652][ T5887] gspca_main: spca501-2.14.0 probing 0497:c001 [ 812.060680][ T5887] gspca_spca501: reg write: error -71 [ 812.066055][ T5887] spca501 1-1:68.220: Reg write failed for 0x02,0x07,0x05 [ 812.106150][ T5887] spca501 1-1:68.220: probe with driver spca501 failed with error -22 [ 812.146603][ T5887] usb 1-1: USB disconnect, device number 20 [ 812.484885][T17892] binder: 17891:17892 ioctl 4018620d 0 returned -22 [ 815.126203][T17931] overlayfs: failed to resolve './file0': -2 [ 815.336088][T17929] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µ [ 815.368605][T17939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3701'. [ 815.428078][T17939] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 815.431846][T17941] binder: BINDER_SET_CONTEXT_MGR already set [ 815.435369][T17939] IPv6: NLM_F_CREATE should be set when creating new route [ 815.456230][T17941] binder: 17940:17941 ioctl 4018620d 200000004a80 returned -16 [ 816.924715][T17952] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 817.460326][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 817.468372][ C1] lec:lec_tx_timeout: lec0 [ 817.472951][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 818.416437][T17966] xt_hashlimit: max too large, truncated to 1048576 [ 818.458297][ T30] audit: type=1400 audit(1770505682.773:745): avc: denied { setopt } for pid=17961 comm="syz.1.3710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 818.669847][T17970] overlayfs: failed to resolve './file0': -2 [ 818.915018][T17974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3715'. [ 819.013361][T17976] overlayfs: failed to resolve './file0': -2 [ 819.880814][T17987] binder: BINDER_SET_CONTEXT_MGR already set [ 819.886826][T17987] binder: 17986:17987 ioctl 4018620d 200000004a80 returned -16 [ 819.998465][T17991] fuse: Bad value for 'group_id' [ 820.003646][T17991] fuse: Bad value for 'group_id' [ 820.056770][T17993] netlink: 'syz.2.3721': attribute type 3 has an invalid length. [ 820.082997][T17993] netlink: 'syz.2.3721': attribute type 11 has an invalid length. [ 820.126908][T17993] netlink: 'syz.2.3721': attribute type 5 has an invalid length. [ 820.339252][T18008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3728'. [ 820.361450][T18007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3727'. [ 820.375997][T18007] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 820.528630][T18016] fuse: Bad value for 'group_id' [ 820.537262][T18016] fuse: Bad value for 'group_id' [ 821.093109][T18025] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3735'. [ 822.480315][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 822.488386][ C1] lec:lec_tx_timeout: lec0 [ 822.493381][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 822.802077][T18053] overlayfs: failed to resolve './file0': -2 [ 822.957282][T18057] binder: BINDER_SET_CONTEXT_MGR already set [ 822.979158][T18057] binder: 18056:18057 ioctl 4018620d 200000004a80 returned -16 [ 825.501032][T18094] overlayfs: failed to resolve './file0': -2 [ 825.520573][ T1206] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 825.692964][ T1206] usb 3-1: unable to get BOS descriptor or descriptor too short [ 825.800604][ T1206] usb 3-1: not running at top speed; connect to a high speed hub [ 825.816303][ T1206] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 825.833800][ T1206] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 825.852811][ T1206] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 825.869854][ T1206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.885458][ T1206] usb 3-1: Product: syz [ 825.897927][ T1206] usb 3-1: Manufacturer: syz [ 825.904640][ T1206] usb 3-1: SerialNumber: syz [ 826.652506][ T1206] usb 3-1: 0:2 : does not exist [ 826.732954][ T1206] usb 3-1: USB disconnect, device number 48 [ 827.002737][ T8877] udevd[8877]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 827.463788][T18119] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3769'. [ 827.500319][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 827.508403][ C1] lec:lec_tx_timeout: lec0 [ 827.514250][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 827.724720][T18133] overlayfs: failed to resolve './file1': -2 [ 828.868995][T18147] syzkaller0: entered promiscuous mode [ 828.881683][T18147] syzkaller0: entered allmulticast mode [ 829.178351][T18153] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3780'. [ 829.560610][T18169] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3786'. [ 830.527346][T18180] tipc: Enabled bearer , priority 0 [ 830.557705][T18180] syzkaller0: entered promiscuous mode [ 830.588671][T18180] syzkaller0: entered allmulticast mode [ 830.655160][T18180] tipc: Resetting bearer [ 830.687463][T18179] tipc: Resetting bearer [ 830.715042][T18179] tipc: Disabling bearer [ 830.746453][T18185] syzkaller0: entered promiscuous mode [ 830.754631][T18185] syzkaller0: entered allmulticast mode [ 831.968948][T18208] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3799'. [ 832.035418][T18210] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3801'. [ 832.366017][T18214] tipc: Enabled bearer , priority 0 [ 832.381650][T18218] overlayfs: failed to resolve './file1': -2 [ 832.388398][T18214] syzkaller0: entered promiscuous mode [ 832.400849][T18214] syzkaller0: entered allmulticast mode [ 832.447523][T18214] tipc: Resetting bearer [ 832.504911][T18213] tipc: Resetting bearer [ 832.520324][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 832.528383][ C1] lec:lec_tx_timeout: lec0 [ 832.533367][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 832.685209][T18213] tipc: Disabling bearer [ 832.764599][T18222] syzkaller0: entered promiscuous mode [ 832.776139][T18222] syzkaller0: entered allmulticast mode [ 833.097942][ T30] audit: type=1400 audit(1770505697.433:746): avc: denied { mount } for pid=18233 comm="syz.3.3809" name="/" dev="autofs" ino=64142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 833.253787][T18236] syzkaller0: entered promiscuous mode [ 833.259624][T18236] syzkaller0: entered allmulticast mode [ 834.086416][T18246] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3813'. [ 834.297971][T18251] syzkaller0: entered promiscuous mode [ 834.344567][T18251] syzkaller0: entered allmulticast mode [ 834.412827][T18256] input: syz1 as /devices/virtual/input/input10 [ 837.540294][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 837.548319][ C1] lec:lec_tx_timeout: lec0 [ 837.560333][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 838.458174][T18271] slcan: can't register candev [ 839.083762][T18342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3830'. [ 839.422690][ T6081] nci: nci_rx_work: unknown MT 0x7 [ 839.865014][T18365] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3837'. [ 839.894281][T18365] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3837'. [ 839.931872][T18365] team0: entered promiscuous mode [ 839.938988][T18365] team_slave_0: entered promiscuous mode [ 839.946156][T18365] team_slave_1: entered promiscuous mode [ 839.956450][T18365] team0: left promiscuous mode [ 839.962015][T18365] team_slave_0: left promiscuous mode [ 839.968691][T18365] team_slave_1: left promiscuous mode [ 840.155018][T18369] syzkaller0: entered promiscuous mode [ 840.168997][T18369] syzkaller0: entered allmulticast mode [ 841.463556][T18375] syzkaller0: entered promiscuous mode [ 841.469058][T18375] syzkaller0: entered allmulticast mode [ 841.489484][T18384] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3842'. [ 841.712031][T18405] vivid-007: disconnect [ 841.800859][T18406] syzkaller0: entered promiscuous mode [ 841.820251][T18406] syzkaller0: entered allmulticast mode [ 842.110806][ T30] audit: type=1400 audit(1770505706.453:747): avc: denied { read } for pid=18408 comm="syz.0.3848" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 842.134200][ T30] audit: type=1400 audit(1770505706.453:748): avc: denied { open } for pid=18408 comm="syz.0.3848" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 842.205532][ T30] audit: type=1400 audit(1770505706.473:749): avc: denied { ioctl } for pid=18408 comm="syz.0.3848" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 842.280798][ T30] audit: type=1400 audit(1770505706.613:750): avc: denied { write } for pid=18408 comm="syz.0.3848" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 842.322436][T18350] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 842.445708][T18396] vivid-007: reconnect [ 842.570313][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 842.578347][ C1] lec:lec_tx_timeout: lec0 [ 842.590367][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 843.140481][ T30] audit: type=1400 audit(1770505707.143:751): avc: denied { getopt } for pid=18416 comm="syz.4.3851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 843.625087][ T30] audit: type=1400 audit(1770505707.153:752): avc: denied { associate } for pid=18424 comm="syz.4.3851" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 843.746503][T18420] syzkaller0: entered promiscuous mode [ 843.768509][T18420] syzkaller0: entered allmulticast mode [ 843.813561][T18435] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3855'. [ 844.121483][T18451] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 844.305604][T18456] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3861'. [ 845.263184][T18440] syzkaller0: entered promiscuous mode [ 845.268844][T18440] syzkaller0: entered allmulticast mode [ 845.803908][T18469] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3865'. [ 845.861562][T18469] libceph: resolve '0..' (ret=-3): failed [ 845.925321][T18475] syzkaller0: entered promiscuous mode [ 845.958071][T18475] syzkaller0: entered allmulticast mode [ 847.532920][T18496] syzkaller0: entered promiscuous mode [ 847.540635][T18496] syzkaller0: entered allmulticast mode [ 847.599661][T18503] syzkaller0: entered promiscuous mode [ 847.600351][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 847.613181][ C1] lec:lec_tx_timeout: lec0 [ 847.617718][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 847.640545][T18503] syzkaller0: entered allmulticast mode [ 851.522643][T18521] can0: slcan on ptm0. [ 851.534538][ T30] audit: type=1400 audit(1770505715.873:753): avc: denied { read } for pid=5472 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 851.761164][T18520] can0 (unregistered): slcan off ptm0. [ 851.840763][ T30] audit: type=1400 audit(1770505716.163:754): avc: denied { watch } for pid=18556 comm="syz.3.3891" path="/229/file0" dev="tmpfs" ino=1206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 852.217507][ T30] audit: type=1400 audit(1770505716.163:755): avc: denied { watch_sb watch_reads } for pid=18556 comm="syz.3.3891" path="/229/file0" dev="tmpfs" ino=1206 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 852.640296][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 852.649472][ C1] lec:lec_tx_timeout: lec0 [ 852.654137][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 853.220710][ T5876] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 853.482696][ T5876] usb 1-1: Using ep0 maxpacket: 8 [ 853.564965][ T5876] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 853.609370][ T5876] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 854.086628][ T5876] usb 1-1: config 0 has no interface number 0 [ 854.105567][ T5876] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 854.135302][ T5876] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 854.158486][ T5876] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1023 [ 854.188138][ T5876] usb 1-1: config 0 interface 122 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 854.229241][ T5876] usb 1-1: config 0 interface 122 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 854.362474][ T5876] usb 1-1: config 0 interface 122 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 854.378883][ T5876] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 854.388441][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.400016][ T5876] usb 1-1: Product: syz [ 854.407969][ T5876] usb 1-1: Manufacturer: syz [ 854.412919][ T5876] usb 1-1: SerialNumber: syz [ 854.432517][ T5876] usb 1-1: config 0 descriptor?? [ 854.466493][T18570] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 854.492922][T18570] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 854.631449][T18592] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3903'. [ 854.640621][T18592] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3903'. [ 854.822557][T18592] team0: entered promiscuous mode [ 854.828978][T18592] team_slave_0: entered promiscuous mode [ 854.851957][T18592] team_slave_1: entered promiscuous mode [ 854.903608][T18592] team0: left promiscuous mode [ 854.908463][T18592] team_slave_0: left promiscuous mode [ 854.914442][T18592] team_slave_1: left promiscuous mode [ 854.921185][ T5876] usb 1-1: NFC: intf ffff888025d61000 id ffffffff8f5aa580 [ 854.941483][ T5876] nfcmrvl 1-1:0.122: NFC: registered with nci successfully [ 854.980960][ T5876] usb 1-1: USB disconnect, device number 21 [ 855.013205][ T5876] usb 1-1: NFC: intf ffff888025d61000 [ 855.155067][T18605] netlink: 'syz.3.3906': attribute type 72 has an invalid length. [ 855.165693][T18603] tipc: Enabled bearer , priority 0 [ 855.174062][T18603] syzkaller0: entered promiscuous mode [ 855.200707][T18603] syzkaller0: entered allmulticast mode [ 855.232766][T18603] tipc: Resetting bearer [ 855.250588][T18602] tipc: Resetting bearer [ 855.283535][T18602] tipc: Disabling bearer [ 855.384169][ T30] audit: type=1400 audit(1770505719.723:756): avc: denied { read } for pid=18609 comm="syz.3.3908" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 855.795704][ T30] audit: type=1400 audit(1770505719.723:757): avc: denied { open } for pid=18609 comm="syz.3.3908" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 856.890363][ T5847] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 856.980544][T18625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3910'. [ 857.461199][ T5847] usb 3-1: unable to get BOS descriptor or descriptor too short [ 857.470881][ T5847] usb 3-1: not running at top speed; connect to a high speed hub [ 857.507042][ T5847] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 857.518189][ T5847] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 857.531679][ T5847] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 857.539462][T18637] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3914'. [ 857.549831][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.559570][ T5847] usb 3-1: Product: syz [ 857.564048][ T5847] usb 3-1: Manufacturer: syz [ 857.568743][ T5847] usb 3-1: SerialNumber: syz [ 857.946541][ T5847] usb 3-1: 0:2 : does not exist [ 857.953351][ T5847] usb 3-1: unit 0 not found! [ 858.020860][ T5847] usb 3-1: USB disconnect, device number 49 [ 858.067664][T18644] syzkaller0: entered promiscuous mode [ 858.097484][T18644] syzkaller0: entered allmulticast mode [ 858.279958][T18656] fuse: Unknown parameter 'group_i00000000000000000000' [ 858.330560][ T5887] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 858.457048][ T30] audit: type=1400 audit(1770505722.783:758): avc: denied { create } for pid=18660 comm="syz.4.3921" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 858.514336][T18664] evm: overlay not supported [ 858.688816][ T30] audit: type=1400 audit(1770505722.853:759): avc: denied { setattr } for pid=18660 comm="syz.4.3921" name="file1" dev="overlay" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 858.791762][ T5887] usb 4-1: Using ep0 maxpacket: 32 [ 858.800499][ T5847] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 858.820286][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6170 ms [ 858.828332][ C1] lec:lec_tx_timeout: lec0 [ 858.833551][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 859.035472][ T30] audit: type=1400 audit(1770505722.873:760): avc: denied { rename } for pid=18660 comm="syz.4.3921" name="#17" dev="tmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 859.060438][ T5847] usb 5-1: Using ep0 maxpacket: 32 [ 859.155641][ T5847] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 859.295302][ T5847] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 859.396131][ T5847] usb 5-1: too many endpoints for config 0 interface 0 altsetting 5: 69, using maximum allowed: 30 [ 859.969666][ T5847] usb 5-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 69 [ 860.058242][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 860.227316][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.025875][ T5887] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 861.076397][ T5847] usb 5-1: config 0 interface 0 has no altsetting 0 [ 861.101480][ T5847] usb 5-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 861.105971][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.113088][ T5847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 861.126684][ T5847] usb 5-1: SerialNumber: syz [ 861.152015][ T5847] usb 5-1: config 0 descriptor?? [ 861.183833][ T5847] usb-storage 5-1:0.0: USB Mass Storage device detected [ 861.215082][ T5887] usb 4-1: config 0 descriptor?? [ 861.234085][ T5847] usb-storage 5-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 861.252634][ T5887] usb 4-1: can't set config #0, error -71 [ 861.295442][T18685] syzkaller0: entered promiscuous mode [ 861.301994][T18685] syzkaller0: entered allmulticast mode [ 861.307944][ T5887] usb 4-1: USB disconnect, device number 25 [ 861.383899][ T5847] usb 5-1: USB disconnect, device number 37 [ 861.593648][T18691] fuse: Unknown parameter 'group_i00000000000000000000' [ 864.043201][T18727] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3944'. [ 864.121330][T18729] overlayfs: overlapping lowerdir path [ 864.552103][ T1206] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 864.582245][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 864.590346][ C1] lec:lec_tx_timeout: lec0 [ 864.594950][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 864.786486][ T1206] usb 3-1: unable to get BOS descriptor or descriptor too short [ 864.832011][ T1206] usb 3-1: config 251 has an invalid interface number: 188 but max is 0 [ 864.912408][ T1206] usb 3-1: config 251 has no interface number 0 [ 864.991448][ T1206] usb 3-1: config 251 interface 188 has no altsetting 0 [ 865.063615][ T1206] usb 3-1: New USB device found, idVendor=2040, idProduct=7050, bcdDevice=ea.b7 [ 865.163631][ T1206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.268239][ T1206] usb 3-1: Product: syz [ 865.279964][ T1206] usb 3-1: Manufacturer: syz [ 865.306067][ T1206] usb 3-1: SerialNumber: syz [ 865.590418][ T1206] dvb-usb: found a 'Hauppauge Nova-T Stick' in cold state, will try to load a firmware [ 865.654680][ T1206] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 865.666643][ T1206] dib0700: firmware download failed at 7 with -22 [ 865.709144][ T1206] usb 3-1: USB disconnect, device number 50 [ 865.977011][T18758] can0: slcan on ptm0. [ 866.428177][T18762] syzkaller0: entered promiscuous mode [ 866.481323][T18762] syzkaller0: entered allmulticast mode [ 866.767060][T18766] tipc: Enabled bearer , priority 0 [ 866.789062][T18766] syzkaller0: entered promiscuous mode [ 866.836410][T18766] syzkaller0: entered allmulticast mode [ 866.928242][T18766] tipc: Resetting bearer [ 867.009909][T18764] tipc: Resetting bearer [ 867.099409][T18774] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3957'. [ 867.112475][T18764] tipc: Disabling bearer [ 867.231619][T18777] overlayfs: failed to resolve './file1': -2 [ 867.363347][T18756] can0 (unregistered): slcan off ptm0. [ 867.817690][T18788] netlink: 'syz.0.3959': attribute type 2 has an invalid length. [ 867.849836][T18788] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3959'. [ 867.894743][T18790] program syz.1.3961 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 868.761801][T18816] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3969'. [ 869.610342][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 869.618340][ C1] lec:lec_tx_timeout: lec0 [ 869.630582][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 869.670561][ T30] audit: type=1400 audit(1770505734.003:761): avc: denied { unmount } for pid=14973 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 869.705679][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.201059][T18841] vivid-007: disconnect [ 870.462442][ T30] audit: type=1400 audit(1770505734.703:762): avc: denied { listen } for pid=18845 comm="syz.1.3974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 870.600777][T18848] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 870.916239][T18834] vivid-007: reconnect [ 870.992814][T18857] overlayfs: missing 'lowerdir' [ 871.420781][T18872] overlayfs: failed to resolve './file1': -2 [ 871.994241][T18879] tipc: Enabled bearer , priority 0 [ 872.057001][T18879] syzkaller0: entered promiscuous mode [ 872.076117][T18879] syzkaller0: entered allmulticast mode [ 872.115845][T18879] tipc: Resetting bearer [ 872.134424][T18877] tipc: Resetting bearer [ 872.842150][T18877] tipc: Disabling bearer [ 872.992060][T18889] ucma_write: process 462 (syz.4.3985) changed security contexts after opening file descriptor, this is not allowed. [ 873.580739][T18904] syzkaller0: entered promiscuous mode [ 873.739580][T18904] syzkaller0: entered allmulticast mode [ 873.768908][T18907] vivid-007: disconnect [ 874.076986][T18909] tipc: Enabling of bearer rejected, failed to enable media [ 874.393331][T18897] vivid-007: reconnect [ 874.640306][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 874.648361][ C1] lec:lec_tx_timeout: lec0 [ 874.653044][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 876.071316][T18941] netlink: 'syz.4.4000': attribute type 12 has an invalid length. [ 876.880388][ T5887] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 877.084388][ T5887] usb 1-1: Using ep0 maxpacket: 32 [ 877.122072][ T5887] usb 1-1: config 0 interface 0 has no altsetting 0 [ 877.135362][ T5887] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 877.158709][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.197532][ T5887] usb 1-1: Product: syz [ 877.213722][ T5887] usb 1-1: Manufacturer: syz [ 877.224881][ T5887] usb 1-1: SerialNumber: syz [ 877.251396][ T5887] usb 1-1: config 0 descriptor?? [ 877.364971][T18963] vivid-007: disconnect [ 878.011437][ T5887] gs_usb 1-1:0.0: Configuring for 2 interfaces [ 878.226394][T18955] vivid-007: reconnect [ 878.499670][ T5887] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 878.556771][ T5887] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 878.746257][ T5887] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 878.771161][ T5887] usb 1-1: USB disconnect, device number 22 [ 880.080376][ T5876] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 880.412194][ T5876] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 880.459171][ T5876] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 880.499800][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.577322][ T5876] usb 4-1: config 0 descriptor?? [ 880.580359][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5930 ms [ 880.590328][ C1] lec:lec_tx_timeout: lec0 [ 880.595161][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 880.656775][ T5876] pwc: Askey VC010 type 2 USB webcam detected. [ 881.094466][ T5876] pwc: recv_control_msg error -32 req 02 val 2b00 [ 881.155456][ T5876] pwc: recv_control_msg error -32 req 02 val 2700 [ 881.170803][ T5876] pwc: recv_control_msg error -32 req 02 val 2c00 [ 881.178227][ T5876] pwc: recv_control_msg error -32 req 04 val 1000 [ 881.185383][ T5876] pwc: recv_control_msg error -32 req 04 val 1300 [ 881.194355][ T5876] pwc: recv_control_msg error -32 req 04 val 1400 [ 881.201313][ T5876] pwc: recv_control_msg error -32 req 02 val 2000 [ 881.208237][ T5876] pwc: recv_control_msg error -32 req 02 val 2100 [ 881.215175][ T5876] pwc: recv_control_msg error -32 req 04 val 1500 [ 881.222727][ T5876] pwc: recv_control_msg error -32 req 02 val 2500 [ 881.363885][ T5876] pwc: recv_control_msg error -32 req 02 val 2400 [ 881.373654][ T5876] pwc: recv_control_msg error -32 req 02 val 2600 [ 881.382865][ T5876] pwc: recv_control_msg error -71 req 02 val 2900 [ 881.460379][ T5876] pwc: recv_control_msg error -71 req 02 val 2800 [ 881.513334][ T5876] pwc: recv_control_msg error -71 req 04 val 1100 [ 881.528545][ T5876] pwc: recv_control_msg error -71 req 04 val 1200 [ 881.565907][ T5876] pwc: Registered as video103. [ 881.581873][ T5876] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11 [ 881.709182][ T5876] usb 4-1: USB disconnect, device number 26 [ 882.040088][T19020] program syz.3.4023 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 882.265266][ T30] audit: type=1326 audit(1770505746.603:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19027 comm="syz.3.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1391b9aeb9 code=0x7ffc0000 [ 882.428400][ T30] audit: type=1326 audit(1770505746.633:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19027 comm="syz.3.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1391b9aeb9 code=0x7ffc0000 [ 882.649578][ T30] audit: type=1326 audit(1770505746.633:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19027 comm="syz.3.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1391b9aeb9 code=0x7ffc0000 [ 882.769734][ T30] audit: type=1326 audit(1770505746.633:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19027 comm="syz.3.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1391b9aeb9 code=0x7ffc0000 [ 882.922153][ T30] audit: type=1326 audit(1770505746.633:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19027 comm="syz.3.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1391b9aeb9 code=0x7ffc0000 [ 883.559224][ T30] audit: type=1326 audit(1770505746.633:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19027 comm="syz.3.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1391b9aeb9 code=0x7ffc0000 [ 883.764960][ T30] audit: type=1326 audit(1770505746.643:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19027 comm="syz.3.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1391b9aeb9 code=0x7ffc0000 [ 883.934804][T19057] overlayfs: failed to resolve './file0': -2 [ 883.987688][ T30] audit: type=1326 audit(1770505746.643:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19027 comm="syz.3.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1391b9aeb9 code=0x7ffc0000 [ 884.028544][ T30] audit: type=1326 audit(1770505746.643:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19027 comm="syz.3.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f1391b9aeb9 code=0x7ffc0000 [ 884.062525][ T30] audit: type=1326 audit(1770505746.643:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19027 comm="syz.3.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1391b9aeb9 code=0x7ffc0000 [ 884.205253][ T5805] Bluetooth: hci4: unexpected event for opcode 0x2006 [ 885.269601][T19066] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 885.277489][T19066] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 885.610322][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 885.618368][ C1] lec:lec_tx_timeout: lec0 [ 885.630356][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 887.376792][ T5805] Bluetooth: hci2: unexpected event for opcode 0x2062 [ 887.849520][ T5887] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 888.032048][ T5887] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 888.087122][ T5887] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 888.137668][ T5887] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 888.270863][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.740383][ T5887] usb 4-1: config 0 descriptor?? [ 888.755859][ T5887] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 888.766098][ T5887] dvb-usb: bulk message failed: -22 (3/0) [ 888.779087][ T5887] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 888.831957][ T5887] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 888.852191][ T5887] usb 4-1: media controller created [ 888.875059][ T5887] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 888.912206][ T5887] dvb-usb: bulk message failed: -22 (6/0) [ 888.938103][ T5887] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 888.975127][ T5887] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input12 [ 889.499549][ T5887] dvb-usb: schedule remote query interval to 150 msecs. [ 889.511088][ T5887] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 889.531738][ T5887] usb 4-1: USB disconnect, device number 27 [ 889.572615][ T5887] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 889.837519][T19129] fuse: Bad value for 'fd' [ 890.008369][ T5887] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 890.018505][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 890.018519][ T30] audit: type=1400 audit(1770505754.353:779): avc: denied { ioctl } for pid=19134 comm="syz.2.4059" path="/260/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 890.161730][ T5876] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 890.177429][ T5887] usb 4-1: Using ep0 maxpacket: 32 [ 890.284668][ T5887] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 890.361320][ T5887] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 890.376028][ T5887] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 890.386755][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.411138][ T5887] usb 4-1: config 0 descriptor?? [ 890.422037][ T5887] hub 4-1:0.0: bad descriptor, ignoring hub [ 890.437405][ T5876] usb 2-1: unable to get BOS descriptor or descriptor too short [ 890.445685][ T5887] hub 4-1:0.0: probe with driver hub failed with error -5 [ 890.454973][ T5876] usb 2-1: not running at top speed; connect to a high speed hub [ 890.466765][ T5876] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 890.515291][ T5876] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 890.524766][ T5887] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 890.539521][ T5876] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 890.554940][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.567205][ T5876] usb 2-1: Product: syz [ 890.573668][ T5876] usb 2-1: Manufacturer: syz [ 890.580814][ T5876] usb 2-1: SerialNumber: syz [ 890.640276][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 890.648352][ C1] lec:lec_tx_timeout: lec0 [ 890.652906][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 890.813268][ T5876] usb 2-1: 0:2 : does not exist [ 890.841926][T19144] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4054'. [ 890.888075][ T5876] usb 2-1: USB disconnect, device number 37 [ 891.383139][ T5805] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 891.394238][ T5805] Bluetooth: hci2: Injecting HCI hardware error event [ 891.407087][ T5807] Bluetooth: hci2: hardware error 0x00 [ 892.782061][T19167] overlayfs: failed to resolve './file0': -2 [ 892.833707][T19164] fuse: Bad value for 'fd' [ 893.620327][ T5807] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 893.809651][T13736] usb 4-1: USB disconnect, device number 28 [ 894.151118][ T5876] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 894.324522][ T5876] usb 2-1: device descriptor read/64, error -71 [ 894.890349][ T5876] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 895.116744][ T5876] usb 2-1: device descriptor read/64, error -71 [ 895.243803][ T5876] usb usb2-port1: attempt power cycle [ 895.755038][ T5847] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 895.999533][ T5876] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 896.021229][ T5876] usb 2-1: device descriptor read/8, error -71 [ 896.066813][T19212] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4082'. [ 896.104590][T19214] binder: BINDER_SET_CONTEXT_MGR already set [ 896.112128][T19214] binder: 19213:19214 ioctl 4018620d 200000004a80 returned -16 [ 896.181639][ T5847] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 896.189910][ T5847] usb 4-1: config 0 has no interface number 0 [ 896.197988][ T5847] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 896.207560][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.221054][ T5847] usb 4-1: Product: syz [ 896.230366][ T5847] usb 4-1: Manufacturer: syz [ 896.237961][ T5847] usb 4-1: SerialNumber: syz [ 896.249986][ T5847] usb 4-1: config 0 descriptor?? [ 896.270358][ T5876] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 896.310838][ T5876] usb 2-1: device descriptor read/8, error -71 [ 896.410379][ T793] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 896.438705][ T5876] usb usb2-port1: unable to enumerate USB device [ 896.467009][ T5847] dvb_usb_ec168 4-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 896.482868][ T5847] usb 4-1: USB disconnect, device number 29 [ 896.575980][ T793] usb 5-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 896.587667][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5930 ms [ 896.587695][ C1] lec:lec_tx_timeout: lec0 [ 896.595956][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 896.607997][ T793] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 896.630023][ T793] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 896.650409][ T793] usb 5-1: config 0 interface 0 has no altsetting 0 [ 896.659302][ T793] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 896.668975][ T793] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 896.677499][ T793] usb 5-1: Product: syz [ 896.686732][ T793] usb 5-1: Manufacturer: syz [ 896.691615][ T793] usb 5-1: SerialNumber: syz [ 896.707214][ T793] usb 5-1: config 0 descriptor?? [ 896.726954][T19216] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 896.751706][ T793] usb 5-1: selecting invalid altsetting 0 [ 897.085834][T19216] usb 5-1: BOGUS urb xfer, pipe 0 != type 1 [ 897.175101][ T30] audit: type=1400 audit(1770505761.483:780): avc: denied { ioctl } for pid=19229 comm="syz.3.4089" path="socket:[69018]" dev="sockfs" ino=69018 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 897.329542][ T30] audit: type=1400 audit(1770505761.513:781): avc: denied { write } for pid=19229 comm="syz.3.4089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 897.350535][ T30] audit: type=1400 audit(1770505761.543:782): avc: denied { read } for pid=19229 comm="syz.3.4089" path="socket:[69018]" dev="sockfs" ino=69018 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 898.742214][T19252] syzkaller0: entered promiscuous mode [ 898.749935][T19252] syzkaller0: entered allmulticast mode [ 898.865775][T19254] tipc: Enabling of bearer rejected, failed to enable media [ 898.897605][T15081] usb 5-1: USB disconnect, device number 38 [ 899.120370][ T793] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 899.132820][T19262] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4102'. [ 899.282831][ T793] usb 4-1: device descriptor read/64, error -71 [ 899.530561][ T793] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 899.850510][ T793] usb 4-1: device descriptor read/64, error -71 [ 899.962172][ T793] usb usb4-port1: attempt power cycle [ 900.310335][ T793] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 900.346070][ T793] usb 4-1: device descriptor read/8, error -71 [ 900.630472][ T793] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 900.704491][ T793] usb 4-1: device descriptor read/8, error -71 [ 900.832971][ T793] usb usb4-port1: unable to enumerate USB device [ 900.899409][ T30] audit: type=1800 audit(1770505765.233:783): pid=19303 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.4116" name="SYSV00000000" dev="tmpfs" ino=6 res=0 errno=0 [ 901.600340][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 901.608440][ C1] lec:lec_tx_timeout: lec0 [ 901.618640][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 902.434553][T19321] ALSA: mixer_oss: invalid OSS volume 'PH' [ 903.310870][ T30] audit: type=1400 audit(1770505767.623:784): avc: denied { bind } for pid=19326 comm="syz.2.4124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 903.689436][ T30] audit: type=1800 audit(1770505768.023:785): pid=19336 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.4129" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 905.133250][ T5807] Bluetooth: hci5: unexpected event for opcode 0x2062 [ 905.285547][T19364] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 905.303874][T19364] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 905.391072][ T793] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 905.493228][ T30] audit: type=1800 audit(1770505769.833:786): pid=19375 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.4143" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 905.556257][ T793] usb 1-1: Using ep0 maxpacket: 8 [ 905.582858][ T793] usb 1-1: no configurations [ 905.595016][ T793] usb 1-1: can't read configurations, error -22 [ 905.740530][ T793] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 905.890324][ T793] usb 1-1: Using ep0 maxpacket: 8 [ 905.896249][ T793] usb 1-1: no configurations [ 905.901219][ T793] usb 1-1: can't read configurations, error -22 [ 905.908052][ T793] usb usb1-port1: attempt power cycle [ 905.950364][ T5876] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 906.101806][ T5876] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 906.110107][ T5876] usb 5-1: config 0 has no interface number 0 [ 906.119736][ T5876] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 906.130033][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.158534][T19395] overlayfs: missing 'lowerdir' [ 906.158534][ T5876] usb 5-1: Product: syz [ 906.158551][ T5876] usb 5-1: Manufacturer: syz [ 906.173757][ T5876] usb 5-1: SerialNumber: syz [ 906.181838][ T5876] usb 5-1: config 0 descriptor?? [ 906.225568][T19397] fuse: Unknown parameter 'use00000000000000000000' [ 906.260724][ T793] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 906.291132][ T793] usb 1-1: Using ep0 maxpacket: 8 [ 906.299719][ T793] usb 1-1: no configurations [ 906.308958][ T793] usb 1-1: can't read configurations, error -22 [ 906.407020][ T5876] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 906.416617][ T5876] usb 5-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2 [ 906.425282][ T5876] usb 5-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw [ 906.578186][ T1206] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 906.630288][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 906.638338][ C1] lec:lec_tx_timeout: lec0 [ 906.650369][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 906.805235][ T1206] usb 4-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 906.885013][ T1206] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 906.912418][ T793] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 906.933556][ T1206] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 906.944748][ T793] usb 1-1: Using ep0 maxpacket: 8 [ 906.950686][ T1206] usb 4-1: config 0 interface 0 has no altsetting 0 [ 906.955006][ T793] usb 1-1: no configurations [ 906.965646][ T1206] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 906.974801][ T793] usb 1-1: can't read configurations, error -22 [ 906.975166][ T793] usb usb1-port1: unable to enumerate USB device [ 906.982219][T19409] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4158'. [ 907.001816][ T1206] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 907.010085][ T1206] usb 4-1: Product: syz [ 907.015202][ T1206] usb 4-1: Manufacturer: syz [ 907.019848][ T1206] usb 4-1: SerialNumber: syz [ 907.028425][ T1206] usb 4-1: config 0 descriptor?? [ 907.034883][T19399] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 907.054318][ T1206] usb 4-1: selecting invalid altsetting 0 [ 907.266971][T19414] ipvlan4: entered allmulticast mode [ 907.388065][T19417] netlink: 'syz.4.4160': attribute type 1 has an invalid length. [ 907.396815][T19417] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4160'. [ 907.410040][T19419] tipc: Can't bind to reserved service type 2 [ 908.791066][T19432] overlayfs: missing 'lowerdir' [ 908.856431][T19435] fuse: Unknown parameter 'use00000000000000000000' [ 909.140513][ T5807] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 909.149133][ T5807] Bluetooth: hci5: Injecting HCI hardware error event [ 909.158155][ T5807] Bluetooth: hci5: hardware error 0x00 [ 909.229749][T19441] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4169'. [ 909.278941][ T793] usb 4-1: USB disconnect, device number 34 [ 909.480526][T13736] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 909.564916][T19456] random: crng reseeded on system resumption [ 909.622237][ T30] audit: type=1400 audit(1770505773.903:787): avc: denied { write } for pid=19449 comm="syz.3.4173" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 909.729818][T13736] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 909.735887][T19462] overlayfs: missing 'lowerdir' [ 909.738765][T13736] usb 1-1: config 0 has no interface number 0 [ 909.762497][T13736] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 909.778721][T13736] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.795221][T13736] usb 1-1: Product: syz [ 909.799406][T13736] usb 1-1: Manufacturer: syz [ 909.834782][T13736] usb 1-1: SerialNumber: syz [ 909.841207][T19464] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4179'. [ 909.869382][ T793] IPVS: starting estimator thread 0... [ 909.893611][T13736] usb 1-1: config 0 descriptor?? [ 909.900363][ T1206] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 909.961165][T19466] IPVS: using max 74 ests per chain, 177600 per kthread [ 909.997777][T19253] udevd[19253]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 910.040376][ T1206] usb 2-1: device descriptor read/64, error -71 [ 910.050995][ T8636] udevd[8636]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 910.099489][T19473] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4181'. [ 910.119240][T13736] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 910.300342][ T1206] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 910.342397][ T30] audit: type=1400 audit(1770505774.683:788): avc: denied { name_bind } for pid=19474 comm="syz.3.4182" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 910.440650][ T1206] usb 2-1: device descriptor read/64, error -71 [ 910.560917][ T1206] usb usb2-port1: attempt power cycle [ 910.700657][ T5887] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 910.856091][ T5887] usb 4-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 910.878967][ T5887] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 910.891196][ T5887] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 910.903862][ T5887] usb 4-1: config 0 interface 0 has no altsetting 0 [ 910.911881][ T1206] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 910.922814][ T5887] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 910.937834][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 910.958640][ T5887] usb 4-1: Product: syz [ 910.968659][ T1206] usb 2-1: device descriptor read/8, error -71 [ 910.976907][ T5887] usb 4-1: Manufacturer: syz [ 910.990781][ T5887] usb 4-1: SerialNumber: syz [ 910.998279][ T5887] usb 4-1: config 0 descriptor?? [ 911.013530][T19481] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 911.043182][ T5887] usb 4-1: selecting invalid altsetting 0 [ 911.221019][ T5807] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 911.230557][ T1206] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 911.272521][ T1206] usb 2-1: device descriptor read/8, error -71 [ 911.283205][T19496] 9pnet_fd: p9_fd_create_unix (19496): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 911.434248][ T1206] usb usb2-port1: unable to enumerate USB device [ 912.430286][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 912.438333][ C1] lec:lec_tx_timeout: lec0 [ 912.450776][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 913.833473][ T1206] usb 4-1: USB disconnect, device number 35 [ 914.516285][ T30] audit: type=1400 audit(1770505778.853:789): avc: denied { write } for pid=19512 comm="syz.3.4199" path="socket:[70351]" dev="sockfs" ino=70351 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 914.763200][T19522] tipc: Enabled bearer , priority 0 [ 914.782397][T19522] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4202'. [ 914.856312][T19529] tipc: Resetting bearer [ 914.868428][T19528] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4194'. [ 914.936182][T19527] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4197'. [ 914.948639][T19521] tipc: Disabling bearer [ 915.784992][ T8636] udevd[8636]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 917.383019][T19562] netlink: 'syz.2.4213': attribute type 16 has an invalid length. [ 917.390972][T19562] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4213'. [ 917.430688][T15081] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 917.449920][T19564] fuse: Unknown parameter 'user_i00000000000000000000' [ 917.460299][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 917.468341][ C1] lec:lec_tx_timeout: lec0 [ 917.472924][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 917.543477][T19566] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4215'. [ 917.620805][T15081] usb 2-1: Using ep0 maxpacket: 32 [ 917.627399][T15081] usb 2-1: config 0 interface 0 has no altsetting 0 [ 917.636356][T15081] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 917.656635][T15081] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.803178][T15081] usb 2-1: Product: syz [ 917.812028][T15081] usb 2-1: Manufacturer: syz [ 917.820608][T15081] usb 2-1: SerialNumber: syz [ 917.847881][T15081] usb 2-1: config 0 descriptor?? [ 917.967626][ T30] audit: type=1400 audit(1770505782.303:790): avc: denied { create } for pid=19569 comm="syz.4.4217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 918.266656][T15081] gs_usb 2-1:0.0: Configuring for 77 interfaces [ 918.486412][T15081] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 918.497586][T15081] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 918.630829][T15081] usb 2-1: USB disconnect, device number 46 [ 918.862184][T19584] syzkaller0: entered promiscuous mode [ 918.885146][T19584] syzkaller0: entered allmulticast mode [ 919.059494][T19593] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4226'. [ 919.240704][ T5847] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 919.560022][ T5847] usb 4-1: Using ep0 maxpacket: 32 [ 919.577403][ T5847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 919.619504][ T5847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 919.650559][ T5847] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 919.666793][ T5847] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 919.677416][ T5847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.695685][ T5847] usb 4-1: config 0 descriptor?? [ 920.538087][T19617] syzkaller0: entered promiscuous mode [ 920.546157][T19617] syzkaller0: entered allmulticast mode [ 920.547384][ T5847] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.000B/input/input13 [ 920.576906][ T30] audit: type=1400 audit(1770505784.913:791): avc: denied { mount } for pid=19618 comm="syz.4.4236" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 920.633533][ T30] audit: type=1400 audit(1770505784.943:792): avc: denied { remount } for pid=19618 comm="syz.4.4236" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 920.657357][ T30] audit: type=1400 audit(1770505784.963:793): avc: denied { unmount } for pid=16326 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 920.722976][ T5847] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.000B/input/input14 [ 920.878522][ T5847] kye 0003:0458:5011.000B: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 920.950783][T19626] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4240'. [ 921.352112][T19639] ieee802154 phy1 wpan1: encryption failed: -22 [ 921.359081][ T30] audit: type=1400 audit(1770505785.693:794): avc: denied { create } for pid=19634 comm="syz.2.4244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 921.517979][ T30] audit: type=1400 audit(1770505785.693:795): avc: denied { write } for pid=19634 comm="syz.2.4244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 921.746365][ C0] kye 0003:0458:5011.000B: usb_submit_urb(ctrl) failed: -1 [ 922.480272][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 922.488318][ C1] lec:lec_tx_timeout: lec0 [ 922.492919][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 922.660284][ T1206] usb 4-1: USB disconnect, device number 36 [ 924.389560][T19688] tipc: Enabled bearer , priority 0 [ 924.426581][T19688] syzkaller0: entered promiscuous mode [ 924.440319][T19688] syzkaller0: entered allmulticast mode [ 924.859127][T19695] tipc: Resetting bearer [ 924.925946][T19686] tipc: Resetting bearer [ 924.984867][T19686] tipc: Disabling bearer [ 925.072362][ T30] audit: type=1804 audit(1770505789.413:796): pid=19698 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.4266" name="/newroot/214/bus/bus" dev="overlay" ino=1165 res=1 errno=0 [ 925.328834][T19704] xt_hashlimit: size too large, truncated to 1048576 [ 925.360140][T19704] xt_hashlimit: invalid rate [ 927.011620][ T5890] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 927.029946][T19717] vivid-007: disconnect [ 927.042493][T19716] vivid-007: reconnect [ 927.171897][ T5890] usb 4-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 927.198423][ T5890] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 927.214074][ T5890] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 927.225600][ T5890] usb 4-1: config 0 interface 0 has no altsetting 0 [ 927.228814][T19741] xt_hashlimit: max too large, truncated to 1048576 [ 927.235889][ T5890] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 927.257603][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 927.279638][ T5890] usb 4-1: Product: syz [ 927.290809][ T5890] usb 4-1: Manufacturer: syz [ 927.298624][ T5890] usb 4-1: SerialNumber: syz [ 927.500281][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 927.508288][ C1] lec:lec_tx_timeout: lec0 [ 927.516947][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 928.405378][ T5890] usb 4-1: config 0 descriptor?? [ 928.501145][T19720] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 928.515580][ T5890] usb 4-1: selecting invalid altsetting 0 [ 928.771125][T19754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4282'. [ 928.782296][T19754] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4282'. [ 928.831632][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 928.842306][ T5890] usb 4-1: USB disconnect, device number 37 [ 929.066028][T19764] vivid-007: disconnect [ 929.081182][T19763] vivid-007: reconnect [ 929.137433][ T5807] Bluetooth: hci3: unexpected event for opcode 0x8442 [ 931.152646][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.348101][T19790] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4293'. [ 931.552178][T19798] xt_hashlimit: max too large, truncated to 1048576 [ 931.887523][T19797] vivid-007: disconnect [ 931.893590][ T5807] Bluetooth: hci1: unexpected event for opcode 0x8442 [ 931.911473][T19796] vivid-007: reconnect [ 932.530414][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 932.530444][ C1] lec:lec_tx_timeout: lec0 [ 932.531261][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 932.694535][T19818] vivid-002: ================= START STATUS ================= [ 932.703241][T19818] vivid-002: Radio HW Seek Mode: Bounded [ 932.709968][T19818] vivid-002: Radio Programmable HW Seek: false [ 932.717609][T19818] vivid-002: RDS Rx I/O Mode: Block I/O [ 932.726622][T19818] vivid-002: Generate RBDS Instead of RDS: false [ 932.736131][T19818] vivid-002: RDS Reception: true [ 932.742990][T19818] vivid-002: RDS Program Type: 0 inactive [ 932.763247][T19818] vivid-002: RDS PS Name: inactive [ 932.768580][T19818] vivid-002: RDS Radio Text: inactive [ 932.775168][T19818] vivid-002: RDS Traffic Announcement: false inactive [ 932.785514][T19818] vivid-002: RDS Traffic Program: false inactive [ 932.793522][T19818] vivid-002: RDS Music: false inactive [ 932.799892][T19818] vivid-002: ================== END STATUS ================== [ 933.457809][ T5807] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 933.466645][ T5807] Bluetooth: hci3: Injecting HCI hardware error event [ 933.475523][ T5807] Bluetooth: hci3: hardware error 0x00 [ 933.787056][T19828] can0: slcan on ptm0. [ 935.540548][ T5807] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 935.864466][ T5807] Bluetooth: hci1: unexpected event for opcode 0x8442 [ 935.873881][T19823] can0 (unregistered): slcan off ptm0. [ 935.950355][ T5807] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 935.959987][ T5807] Bluetooth: hci1: Injecting HCI hardware error event [ 935.969304][ T5807] Bluetooth: hci1: hardware error 0x00 [ 936.358465][T19865] xt_hashlimit: max too large, truncated to 1048576 [ 937.041974][ T30] audit: type=1400 audit(1770505800.983:797): avc: denied { accept } for pid=19864 comm="syz.4.4315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 937.138630][T19876] binder: BINDER_SET_CONTEXT_MGR already set [ 937.158017][T19876] binder: 19874:19876 ioctl 4018620d 200000000040 returned -16 [ 937.550284][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 937.558314][ C1] lec:lec_tx_timeout: lec0 [ 937.566298][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 938.349286][ T5807] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 939.313259][T19911] random: crng reseeded on system resumption [ 939.319935][ T30] audit: type=1400 audit(1770505803.653:798): avc: denied { append } for pid=19899 comm="syz.1.4322" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 939.415672][ T30] audit: type=1804 audit(1770505803.663:799): pid=19915 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.4325" name="/newroot/195/bus/bus" dev="overlay" ino=1066 res=1 errno=0 [ 939.440594][ T5890] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 939.564010][T19918] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 939.601915][ T5890] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 939.610192][ T5890] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 939.625579][ T5890] usb 4-1: config 0 has no interface number 0 [ 939.637236][ T5890] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 939.647314][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.658741][ T5890] usb 4-1: Product: syz [ 939.665324][ T5890] usb 4-1: Manufacturer: syz [ 939.673648][ T5890] usb 4-1: SerialNumber: syz [ 939.693441][ T5890] usb 4-1: config 0 descriptor?? [ 939.705217][ T5890] yurex 4-1:0.50: Could not find endpoints [ 939.830683][ T10] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 939.992369][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 940.001484][ T10] usb 3-1: config 0 has no interface number 0 [ 940.022214][ T10] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 940.032438][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.067859][ T10] usb 3-1: Product: syz [ 940.081523][ T10] usb 3-1: Manufacturer: syz [ 940.086239][ T10] usb 3-1: SerialNumber: syz [ 940.097351][ T10] usb 3-1: config 0 descriptor?? [ 940.311597][ T10] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 940.336624][ T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 940.365713][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 940.388280][ T10] usb 3-1: media controller created [ 940.419813][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 940.537569][ T30] audit: type=1400 audit(1770505804.873:800): avc: denied { read write } for pid=19931 comm="syz.1.4331" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 940.563301][ T30] audit: type=1400 audit(1770505804.873:801): avc: denied { open } for pid=19931 comm="syz.1.4331" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 941.556349][ T10] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 941.596442][ T10] usb 3-1: USB disconnect, device number 51 [ 941.706886][ T5890] usb 4-1: USB disconnect, device number 38 [ 942.175735][T19951] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4339'. [ 942.190779][T19951] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.198164][T19951] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.580579][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 942.588617][ C1] lec:lec_tx_timeout: lec0 [ 942.593273][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 944.400499][ T5890] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 944.425186][T19982] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 944.563086][ T5890] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 944.572534][ T5890] usb 3-1: config 0 has no interface number 0 [ 944.585741][ T5890] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 944.595587][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.604333][ T5890] usb 3-1: Product: syz [ 944.609473][ T5890] usb 3-1: Manufacturer: syz [ 944.614469][ T5890] usb 3-1: SerialNumber: syz [ 944.623987][ T5890] usb 3-1: config 0 descriptor?? [ 944.835149][ T5890] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 944.989000][ T5890] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 945.001172][ T5890] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 945.009893][ T5890] usb 3-1: media controller created [ 945.026252][ T5890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 945.088768][ T5890] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 945.145982][ T5890] usb 3-1: USB disconnect, device number 52 [ 946.034288][T20001] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 946.040839][T20001] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 946.053240][T20001] vhci_hcd vhci_hcd.0: Device attached [ 946.630395][ T5847] usb 42-1: SetAddress Request (2) to port 0 [ 946.636692][ T5847] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 947.600266][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 947.608298][ C1] lec:lec_tx_timeout: lec0 [ 947.612858][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 948.071574][T20002] vhci_hcd: connection reset by peer [ 948.096880][ T1031] vhci_hcd vhci_hcd.4: stop threads [ 948.109304][ T1031] vhci_hcd vhci_hcd.4: release socket [ 948.124623][ T1031] vhci_hcd vhci_hcd.4: disconnect device [ 949.340603][T15085] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 949.623879][T15085] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 949.653880][T15085] usb 3-1: config 0 has no interface number 0 [ 949.687670][T15085] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 949.702014][T15085] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.729763][T15085] usb 3-1: Product: syz [ 949.740575][T15085] usb 3-1: Manufacturer: syz [ 949.755791][T15085] usb 3-1: SerialNumber: syz [ 949.774445][T15085] usb 3-1: config 0 descriptor?? [ 950.194589][T15085] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 950.286466][T15085] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 950.308684][T15085] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 950.407022][ T30] audit: type=1400 audit(1770505814.733:802): avc: denied { setattr } for pid=20057 comm="syz.1.4364" name="RAWv6" dev="sockfs" ino=72984 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 951.225591][T15085] usb 3-1: media controller created [ 951.239282][T15085] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 951.762182][ T5847] usb 42-1: device descriptor read/8, error -110 [ 951.866395][T15085] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 952.001715][T20073] random: crng reseeded on system resumption [ 952.099956][T15085] usb 3-1: USB disconnect, device number 53 [ 952.162106][ T5847] usb usb42-port1: attempt power cycle [ 952.362416][T20077] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 952.620555][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 952.628603][ C1] lec:lec_tx_timeout: lec0 [ 952.633198][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 952.810947][ T5847] usb usb42-port1: unable to enumerate USB device [ 953.257047][T20088] netlink: 'syz.1.4383': attribute type 16 has an invalid length. [ 953.265198][T20088] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4383'. [ 953.397926][T20090] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 955.113263][T20107] syzkaller0: entered promiscuous mode [ 955.125870][T20107] syzkaller0: entered allmulticast mode [ 956.721956][T12353] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 956.921402][T12353] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 956.929487][T12353] usb 3-1: config 0 has no interface number 0 [ 956.947142][T12353] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 956.972339][T12353] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.035071][T12353] usb 3-1: Product: syz [ 957.126162][T12353] usb 3-1: Manufacturer: syz [ 957.184449][T12353] usb 3-1: SerialNumber: syz [ 957.257430][T12353] usb 3-1: config 0 descriptor?? [ 957.494382][T12353] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 957.517162][T12353] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 957.640261][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 957.648300][ C1] lec:lec_tx_timeout: lec0 [ 957.657774][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 957.678665][T12353] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 957.687024][T12353] usb 3-1: media controller created [ 957.704450][T12353] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 957.750721][T12353] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 957.802803][T12353] usb 3-1: USB disconnect, device number 54 [ 959.760589][T20147] netlink: 'syz.4.4400': attribute type 16 has an invalid length. [ 959.768536][T20147] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4400'. [ 961.100166][T20155] syzkaller0: entered promiscuous mode [ 961.105796][T20155] syzkaller0: entered allmulticast mode [ 961.312301][ T30] audit: type=1400 audit(1770505825.653:803): avc: denied { write } for pid=20159 comm="syz.3.4405" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 962.334095][ T30] audit: type=1400 audit(1770505826.153:804): avc: denied { ioctl } for pid=20159 comm="syz.3.4405" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d08 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 963.780322][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6120 ms [ 963.788344][ C1] lec:lec_tx_timeout: lec0 [ 963.792964][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 964.887144][T20190] syzkaller0: entered promiscuous mode [ 964.915840][T20190] syzkaller0: entered allmulticast mode [ 967.210933][T13736] usb 1-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 967.226693][T13736] dvb_usb_ec168 1-1:0.1: probe with driver dvb_usb_ec168 failed with error -2 [ 967.257433][T13736] usb 1-1: USB disconnect, device number 27 [ 967.271811][ T5876] usb 5-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 967.294466][ T5876] dvb_usb_ec168 5-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 967.306475][ T5876] usb 5-1: USB disconnect, device number 39 [ 968.902190][T20222] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4424'. [ 969.204947][T20232] syzkaller0: entered promiscuous mode [ 969.239346][T20232] syzkaller0: entered allmulticast mode [ 969.540276][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 969.548338][ C1] lec:lec_tx_timeout: lec0 [ 969.553149][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 969.735779][ T30] audit: type=1400 audit(1770505834.073:805): avc: denied { write } for pid=20244 comm="syz.0.4421" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 969.850595][ T10] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 970.260997][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 970.362684][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 970.473510][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 970.593937][ T10] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 970.623614][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.704306][ T10] usb 2-1: config 0 descriptor?? [ 971.220740][T20266] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 971.380033][T13736] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 971.446891][ T10] ft260 0003:0403:6030.000C: unknown main item tag 0x0 [ 971.498672][T20274] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4440'. [ 971.550145][T13736] usb 4-1: Using ep0 maxpacket: 16 [ 971.583100][T13736] usb 4-1: config 0 has an invalid interface number: 13 but max is 0 [ 971.610323][T13736] usb 4-1: config 0 has no interface number 0 [ 971.620573][T13736] usb 4-1: config 0 interface 13 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 971.660422][ T10] ft260 0003:0403:6030.000C: chip code: 6424 8183 [ 971.667052][T13736] usb 4-1: config 0 interface 13 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 64 [ 971.708726][T13736] usb 4-1: New USB device found, idVendor=0e8d, idProduct=00a7, bcdDevice=b5.31 [ 971.709585][T20281] syzkaller0: entered promiscuous mode [ 971.730363][T13736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.750429][T20281] syzkaller0: entered allmulticast mode [ 971.813258][T13736] usb 4-1: Product: syz [ 971.826730][T13736] usb 4-1: Manufacturer: syz [ 971.837631][T13736] usb 4-1: SerialNumber: syz [ 971.854735][ T10] ft260 0003:0403:6030.000C: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 971.882318][T13736] usb 4-1: config 0 descriptor?? [ 971.907599][T20267] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 971.915964][T20267] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 971.927142][T13736] option 4-1:0.13: GSM modem (1-port) converter detected [ 972.061222][ T10] ft260 0003:0403:6030.000C: failed to retrieve status: -32, no wakeup [ 972.079242][ T10] ft260 0003:0403:6030.000C: failed to retrieve status: -32 [ 972.110398][ T10] ft260 0003:0403:6030.000C: failed to reset I2C controller: -71 [ 972.147756][T15081] usb 4-1: USB disconnect, device number 39 [ 972.155712][ T10] usb 2-1: USB disconnect, device number 47 [ 972.342169][T20296] random: crng reseeded on system resumption [ 972.376501][T15081] option 4-1:0.13: device disconnected [ 973.921231][T20307] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4452'. [ 974.036886][T20311] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4454'. [ 974.046625][T20311] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4454'. [ 974.176133][T20314] tipc: Enabling of bearer rejected, failed to enable media [ 974.255512][T20315] syzkaller0: entered promiscuous mode [ 974.267885][T20315] syzkaller0: entered allmulticast mode [ 974.560331][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 974.568333][ C1] lec:lec_tx_timeout: lec0 [ 974.580423][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 975.014931][T20330] lo speed is unknown, defaulting to 1000 [ 975.021145][T20330] lo speed is unknown, defaulting to 1000 [ 975.036816][T20330] lo speed is unknown, defaulting to 1000 [ 975.182988][T20330] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 975.456760][T20330] lo speed is unknown, defaulting to 1000 [ 975.463646][T20330] lo speed is unknown, defaulting to 1000 [ 975.470010][T20330] lo speed is unknown, defaulting to 1000 [ 975.476828][T20330] lo speed is unknown, defaulting to 1000 [ 975.483219][T20330] lo speed is unknown, defaulting to 1000 [ 975.489548][T20330] lo speed is unknown, defaulting to 1000 [ 975.496162][T20330] lo speed is unknown, defaulting to 1000 [ 975.502574][T20330] lo speed is unknown, defaulting to 1000 [ 977.064286][T20341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4466'. [ 977.102880][T20341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4466'. [ 977.203583][ T30] audit: type=1400 audit(1770505841.533:806): avc: denied { setopt } for pid=20342 comm="syz.4.4451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 977.301736][T20345] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4468'. [ 977.439041][ T30] audit: type=1400 audit(1770505841.773:807): avc: denied { map } for pid=20350 comm="syz.4.4470" path="socket:[73628]" dev="sockfs" ino=73628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 977.500821][ T30] audit: type=1400 audit(1770505841.773:808): avc: denied { accept } for pid=20350 comm="syz.4.4470" path="socket:[73628]" dev="sockfs" ino=73628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 977.560300][T15081] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 977.639526][T20353] syzkaller0: entered promiscuous mode [ 977.651499][T20353] syzkaller0: entered allmulticast mode [ 977.670048][T20357] tipc: Enabled bearer , priority 0 [ 977.679253][T20357] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4464'. [ 977.724794][T15081] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 977.777036][T15081] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 977.845366][T15081] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 977.855032][T15081] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 977.891921][T15081] usb 2-1: SerialNumber: syz [ 978.169760][T15081] usb 2-1: 0:2 : does not exist [ 978.217913][T15081] usb 2-1: USB disconnect, device number 48 [ 978.358058][ T8877] udevd[8877]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 979.590293][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 979.598391][ C1] lec:lec_tx_timeout: lec0 [ 979.602924][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 979.867036][T20361] tipc: Resetting bearer [ 979.898428][T20355] tipc: Disabling bearer [ 979.907911][T20376] tipc: Enabling of bearer rejected, failed to enable media [ 979.917087][T15081] tipc: Node number set to 1540868517 [ 980.115503][T20391] vivid-007: disconnect [ 980.410023][T20395] vivid-000: ================= START STATUS ================= [ 980.417779][T20395] vivid-000: Radio HW Seek Mode: Bounded [ 980.423791][T20395] vivid-000: Radio Programmable HW Seek: false [ 980.430112][T20395] vivid-000: RDS Rx I/O Mode: Block I/O [ 980.435843][T20395] vivid-000: Generate RBDS Instead of RDS: false [ 980.442404][T20395] vivid-000: RDS Reception: true [ 980.447430][T20395] vivid-000: RDS Program Type: 0 inactive [ 980.453269][T20395] vivid-000: RDS PS Name: inactive [ 980.458603][T20395] vivid-000: RDS Radio Text: inactive [ 980.464349][T20395] vivid-000: RDS Traffic Announcement: false inactive [ 980.471297][T20395] vivid-000: RDS Traffic Program: false inactive [ 980.477802][T20395] vivid-000: RDS Music: false inactive [ 980.483521][T20395] vivid-000: ================== END STATUS ================== [ 981.197578][T20384] vivid-007: reconnect [ 981.495274][T20417] tipc: Enabled bearer , priority 0 [ 981.503439][T20416] syzkaller0: entered promiscuous mode [ 981.508936][T20416] syzkaller0: entered allmulticast mode [ 981.518249][T20417] syzkaller0: entered promiscuous mode [ 981.524558][T20417] syzkaller0: entered allmulticast mode [ 981.535560][T20419] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 981.589990][T20417] tipc: Resetting bearer [ 981.596944][T20413] tipc: Resetting bearer [ 981.612057][T20413] tipc: Disabling bearer [ 981.903999][T20427] vivid-001: ================= START STATUS ================= [ 981.911836][T20427] vivid-001: Radio HW Seek Mode: Bounded [ 981.917578][T20427] vivid-001: Radio Programmable HW Seek: false [ 981.924189][T20427] vivid-001: RDS Rx I/O Mode: Block I/O [ 981.930369][T20427] vivid-001: Generate RBDS Instead of RDS: false [ 981.936807][T20427] vivid-001: RDS Reception: true [ 981.942473][T20427] vivid-001: RDS Program Type: 0 inactive [ 981.948311][T20427] vivid-001: RDS PS Name: inactive [ 981.953633][T20427] vivid-001: RDS Radio Text: inactive [ 981.959918][T20427] vivid-001: RDS Traffic Announcement: false inactive [ 981.966861][T20427] vivid-001: RDS Traffic Program: false inactive [ 981.973357][T20427] vivid-001: RDS Music: false inactive [ 981.978982][T20427] vivid-001: ================== END STATUS ================== [ 983.269518][T20436] vivid-007: disconnect [ 983.473617][T20428] vivid-007: reconnect [ 983.700554][T15085] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 984.093636][T20447] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 984.111338][T15085] usb 1-1: Using ep0 maxpacket: 32 [ 984.120725][T15085] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 984.197354][T15085] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 984.224268][T15085] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 984.243001][T15085] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.265811][T15085] usb 1-1: config 0 descriptor?? [ 984.610250][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 984.618281][ C1] lec:lec_tx_timeout: lec0 [ 984.627525][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 984.706307][T20460] syzkaller0: entered promiscuous mode [ 984.732769][T20460] syzkaller0: entered allmulticast mode [ 985.121360][T15085] ft260 0003:0403:6030.000D: unknown main item tag 0x0 [ 985.170321][ T5847] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 985.191948][T15085] ft260 0003:0403:6030.000D: chip code: 6424 8183 [ 985.301517][ T5876] page_pool_release_retry() stalled pool shutdown: id 110, 1 inflight 60 sec [ 985.402940][T15085] ft260 0003:0403:6030.000D: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 985.409049][ T5847] usb 2-1: Using ep0 maxpacket: 32 [ 985.523348][ T5847] usb 2-1: config 0 interface 0 has no altsetting 0 [ 985.566184][ T5847] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 985.597617][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.609969][ T5847] usb 2-1: Product: syz [ 985.610357][T15085] ft260 0003:0403:6030.000D: failed to retrieve status: -32, no wakeup [ 985.616243][ T5847] usb 2-1: Manufacturer: syz [ 985.630675][ T5847] usb 2-1: SerialNumber: syz [ 985.657993][ T5847] usb 2-1: config 0 descriptor?? [ 985.669290][T15085] ft260 0003:0403:6030.000D: failed to retrieve status: -32 [ 985.695145][T15085] ft260 0003:0403:6030.000D: failed to reset I2C controller: -71 [ 985.738374][T15085] usb 1-1: USB disconnect, device number 28 [ 986.067103][T20478] vivid-000: ================= START STATUS ================= [ 986.074912][T20478] vivid-000: Radio HW Seek Mode: Bounded [ 986.080610][T20478] vivid-000: Radio Programmable HW Seek: false [ 986.086781][T20478] vivid-000: RDS Rx I/O Mode: Block I/O [ 986.092386][T20478] vivid-000: Generate RBDS Instead of RDS: false [ 986.098757][T20478] vivid-000: RDS Reception: true [ 986.103764][T20478] vivid-000: RDS Program Type: 0 inactive [ 986.109511][T20478] vivid-000: RDS PS Name: inactive [ 986.115001][T20478] vivid-000: RDS Radio Text: inactive [ 986.120683][T20478] vivid-000: RDS Traffic Announcement: false inactive [ 986.127949][T20478] vivid-000: RDS Traffic Program: false inactive [ 986.134807][T20478] vivid-000: RDS Music: false inactive [ 986.140425][T20478] vivid-000: ================== END STATUS ================== [ 986.296024][ T5847] gs_usb 2-1:0.0: Couldn't get device config: (err=-32) [ 986.303341][ T5847] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -32 [ 987.269307][T20493] syzkaller0: entered promiscuous mode [ 987.274999][T20493] syzkaller0: entered allmulticast mode [ 987.455871][T20496] vivid-007: disconnect [ 987.530296][ T5876] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 987.730551][ T5876] usb 4-1: Using ep0 maxpacket: 32 [ 987.747506][ T5876] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 987.772415][ T5876] usb 4-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 987.789698][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.818271][ T5876] usb 4-1: Product: syz [ 987.823015][ T5876] usb 4-1: Manufacturer: syz [ 987.828615][ T5876] usb 4-1: SerialNumber: syz [ 987.838983][ T5876] usb 4-1: config 0 descriptor?? [ 987.858949][ T10] usb 2-1: USB disconnect, device number 49 [ 987.903295][T20509] binder: 20508:20509 ioctl 4018620d 0 returned -22 [ 988.062132][ T30] audit: type=1400 audit(1770505852.403:809): avc: denied { bind } for pid=20512 comm="syz.1.4520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 988.112005][ T5876] kaweth 4-1:0.0: Firmware present in device. [ 988.131593][T20491] vivid-007: reconnect [ 988.292489][ T5876] kaweth 4-1:0.0: Statistics collection: 0 [ 988.299310][ T5876] kaweth 4-1:0.0: Multicast filter limit: 0 [ 988.330041][ T5876] kaweth 4-1:0.0: MTU: 0 [ 988.349844][ T5876] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 988.559813][T20523] vivid-001: ================= START STATUS ================= [ 988.567621][T20523] vivid-001: Radio HW Seek Mode: Bounded [ 988.573428][T20523] vivid-001: Radio Programmable HW Seek: false [ 988.579687][T20523] vivid-001: RDS Rx I/O Mode: Block I/O [ 988.585773][T20523] vivid-001: Generate RBDS Instead of RDS: false [ 988.592563][T20523] vivid-001: RDS Reception: true [ 988.597579][T20523] vivid-001: RDS Program Type: 0 inactive [ 988.603434][T20523] vivid-001: RDS PS Name: inactive [ 988.608777][T20523] vivid-001: RDS Radio Text: inactive [ 988.614535][T20523] vivid-001: RDS Traffic Announcement: false inactive [ 988.621491][T20523] vivid-001: RDS Traffic Program: false inactive [ 988.627977][T20523] vivid-001: RDS Music: false inactive [ 988.633598][T20523] vivid-001: ================== END STATUS ================== [ 989.072269][T20527] syzkaller0: entered promiscuous mode [ 989.078483][T20527] syzkaller0: entered allmulticast mode [ 989.103234][ T5876] kaweth 4-1:0.0: kaweth interface created at eth1 [ 989.300613][ T5876] usb 4-1: USB disconnect, device number 40 [ 989.388392][T20535] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 989.584273][T12353] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 989.640299][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 989.648321][ C1] lec:lec_tx_timeout: lec0 [ 989.660311][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 990.046440][T20540] input: syz1 as /devices/virtual/input/input15 [ 990.193525][T12353] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 990.219151][T12353] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.243311][T12353] usb 3-1: Product: syz [ 990.329271][T12353] usb 3-1: Manufacturer: syz [ 990.335863][T20555] bridge0: port 3(gretap0) entered blocking state [ 990.345209][T12353] usb 3-1: SerialNumber: syz [ 990.350476][T20555] bridge0: port 3(gretap0) entered disabled state [ 990.362414][T20555] gretap0: entered allmulticast mode [ 990.415381][T20555] gretap0: entered promiscuous mode [ 990.421570][T12353] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 990.421704][T20555] bridge0: port 3(gretap0) entered blocking state [ 990.436500][T20555] bridge0: port 3(gretap0) entered forwarding state [ 990.790682][ T793] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 991.262275][T20580] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4540'. [ 991.352102][ T5876] IPVS: starting estimator thread 0... [ 991.441326][T20577] syzkaller0: entered promiscuous mode [ 991.609191][T20577] syzkaller0: entered allmulticast mode [ 991.650422][T20583] IPVS: using max 38 ests per chain, 91200 per kthread [ 992.391070][ T793] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 992.410463][ T793] ath9k_htc: Failed to initialize the device [ 992.581911][ C1] ------------[ cut here ]------------ [ 992.587602][ C1] ODEBUG: free active (active state 0) object: ffff888057f0f890 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 992.594608][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.600551][ C1] WARNING: lib/debugobjects.c:612 at debug_print_object+0x18e/0x2a0, CPU#1: kworker/1:1H/56 [ 992.616839][ C1] Modules linked in: [ 992.620940][ C1] CPU: 1 UID: 0 PID: 56 Comm: kworker/1:1H Tainted: G L syzkaller #0 PREEMPT(full) [ 992.631814][ C1] Tainted: [L]=SOFTLOCKUP [ 992.636137][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 992.646245][ C1] Workqueue: events_highpri snd_vmidi_output_work [ 992.652674][ C1] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 992.658480][ C1] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d d2 05 d2 0b 41 56 48 8b 14 dd 60 4a fa 8b 4c 89 e6 <67> 48 0f b9 3a 58 83 05 3c ed c7 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 992.678135][ C1] RSP: 0018:ffffc90000a08a18 EFLAGS: 00010246 [ 992.684224][ C1] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 992.692221][ C1] RDX: ffffffff8bfa49a0 RSI: ffffffff8bfa45c0 RDI: ffffffff90c19a60 [ 992.700200][ C1] RBP: 0000000000000001 R08: ffff888057f0f890 R09: ffffffff8b92b9e0 [ 992.708203][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8bfa45c0 [ 992.716201][ C1] R13: ffffffff8b92ba20 R14: ffffffff8a664400 R15: ffffc90000a08b18 [ 992.724189][ C1] FS: 0000000000000000(0000) GS:ffff8881246d9000(0000) knlGS:0000000000000000 [ 992.733141][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 992.739725][ C1] CR2: 0000200000003000 CR3: 0000000063071000 CR4: 00000000003526f0 [ 992.747709][ C1] Call Trace: [ 992.750983][ C1] [ 992.753814][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 992.759451][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 992.765264][ C1] debug_check_no_obj_freed+0x4da/0x630 [ 992.770830][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 992.776900][ C1] ? mark_held_locks+0x40/0x70 [ 992.781667][ C1] ? kasan_quarantine_put+0x104/0x240 [ 992.787036][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 992.792252][ C1] kfree+0x34c/0x690 [ 992.796134][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 992.801526][ C1] ? rose_timer_expiry+0x53f/0x630 [ 992.806634][ C1] ? rose_timer_expiry+0x53f/0x630 [ 992.811746][ C1] rose_timer_expiry+0x53f/0x630 [ 992.816690][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 992.822149][ C1] call_timer_fn+0x19a/0x590 [ 992.826740][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 992.831860][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 992.837315][ C1] ? mark_held_locks+0x40/0x70 [ 992.842080][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 992.847536][ C1] __run_timers+0x757/0xac0 [ 992.852041][ C1] ? __pfx___run_timers+0x10/0x10 [ 992.857065][ C1] run_timer_base+0x114/0x190 [ 992.861742][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 992.866943][ C1] run_timer_softirq+0x1a/0x50 [ 992.871705][ C1] handle_softirqs+0x1ea/0x910 [ 992.876468][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 992.881762][ C1] __irq_exit_rcu+0xef/0x150 [ 992.886351][ C1] irq_exit_rcu+0x9/0x30 [ 992.890599][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 992.896228][ C1] [ 992.899141][ C1] [ 992.902069][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 992.908046][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 992.914466][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 16 6b 69 f6 48 89 df e8 fe b8 69 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 b5 07 5a f6 65 8b 05 ae b8 6a 08 85 c0 74 16 5b [ 992.934119][ C1] RSP: 0018:ffffc9000131fad0 EFLAGS: 00000246 [ 992.940188][ C1] RAX: 0000000000000006 RBX: ffff888030f34038 RCX: 0000000000000040 [ 992.948172][ C1] RDX: 0000000000000000 RSI: ffffffff8dc46051 RDI: ffffffff8bfa38a0 [ 992.956163][ C1] RBP: 0000000000000293 R08: 0000000000000001 R09: 0000000000000000 [ 992.964152][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888030f34038 [ 992.972138][ C1] R13: 0000000000000293 R14: 0000000000000001 R15: ffff88814d472c00 [ 992.980120][ C1] snd_rawmidi_transmit+0x117/0x160 [ 992.985347][ C1] snd_vmidi_output_work+0x111/0x390 [ 992.990640][ C1] ? __pfx_snd_vmidi_output_work+0x10/0x10 [ 992.996448][ C1] ? process_one_work+0x80b/0x1840 [ 993.001565][ C1] ? rcu_is_watching+0x12/0xc0 [ 993.006326][ C1] process_one_work+0x9c2/0x1840 [ 993.011272][ C1] ? __pfx_process_one_work+0x10/0x10 [ 993.016644][ C1] ? assign_work+0x19c/0x250 [ 993.021281][ C1] worker_thread+0x5da/0xe40 [ 993.025920][ C1] ? __pfx_worker_thread+0x10/0x10 [ 993.031059][ C1] ? kthread+0x17d/0x730 [ 993.035296][ C1] ? __pfx_worker_thread+0x10/0x10 [ 993.040411][ C1] kthread+0x3b3/0x730 [ 993.044473][ C1] ? __pfx_kthread+0x10/0x10 [ 993.049063][ C1] ? ret_from_fork+0x79/0xaf0 [ 993.053742][ C1] ? ret_from_fork+0x79/0xaf0 [ 993.058417][ C1] ? rcu_is_watching+0x12/0xc0 [ 993.063198][ C1] ? __pfx_kthread+0x10/0x10 [ 993.067779][ C1] ret_from_fork+0x754/0xaf0 [ 993.072398][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 993.077524][ C1] ? __switch_to+0x7b9/0x10c0 [ 993.082218][ C1] ? __pfx_kthread+0x10/0x10 [ 993.086807][ C1] ret_from_fork_asm+0x1a/0x30 [ 993.091589][ C1] [ 993.094602][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 993.101870][ C1] CPU: 1 UID: 0 PID: 56 Comm: kworker/1:1H Tainted: G L syzkaller #0 PREEMPT(full) [ 993.112687][ C1] Tainted: [L]=SOFTLOCKUP [ 993.116991][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 993.127016][ C1] Workqueue: events_highpri snd_vmidi_output_work [ 993.133407][ C1] Call Trace: [ 993.136661][ C1] [ 993.139479][ C1] dump_stack_lvl+0x100/0x190 [ 993.144133][ C1] vpanic+0x20d/0x630 [ 993.148098][ C1] panic+0xd1/0xd1 [ 993.151791][ C1] ? __pfx_panic+0x10/0x10 [ 993.156189][ C1] ? check_panic_on_warn+0x1f/0x90 [ 993.161280][ C1] check_panic_on_warn.cold+0x19/0x34 [ 993.166647][ C1] ? debug_print_object+0x18e/0x2a0 [ 993.171823][ C1] __warn.cold+0x191/0x2f8 [ 993.176226][ C1] __report_bug+0x296/0x3d0 [ 993.180703][ C1] ? debug_print_object+0x18e/0x2a0 [ 993.185880][ C1] ? __pfx___report_bug+0x10/0x10 [ 993.190888][ C1] ? mark_held_locks+0x40/0x70 [ 993.195630][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 993.201423][ C1] report_bug_entry+0xe1/0x290 [ 993.206161][ C1] ? debug_print_object+0x19b/0x2a0 [ 993.211335][ C1] handle_bug+0x1c9/0x2a0 [ 993.215643][ C1] exc_invalid_op+0x17/0x50 [ 993.220120][ C1] asm_exc_invalid_op+0x1a/0x20 [ 993.224943][ C1] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 993.230723][ C1] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d d2 05 d2 0b 41 56 48 8b 14 dd 60 4a fa 8b 4c 89 e6 <67> 48 0f b9 3a 58 83 05 3c ed c7 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 993.250308][ C1] RSP: 0018:ffffc90000a08a18 EFLAGS: 00010246 [ 993.256358][ C1] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 993.264314][ C1] RDX: ffffffff8bfa49a0 RSI: ffffffff8bfa45c0 RDI: ffffffff90c19a60 [ 993.272271][ C1] RBP: 0000000000000001 R08: ffff888057f0f890 R09: ffffffff8b92b9e0 [ 993.280230][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8bfa45c0 [ 993.288176][ C1] R13: ffffffff8b92ba20 R14: ffffffff8a664400 R15: ffffc90000a08b18 [ 993.296123][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 993.301752][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 993.307367][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 993.313157][ C1] debug_check_no_obj_freed+0x4da/0x630 [ 993.318685][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 993.324741][ C1] ? mark_held_locks+0x40/0x70 [ 993.329478][ C1] ? kasan_quarantine_put+0x104/0x240 [ 993.334828][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 993.340002][ C1] kfree+0x34c/0x690 [ 993.343869][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 993.349213][ C1] ? rose_timer_expiry+0x53f/0x630 [ 993.354300][ C1] ? rose_timer_expiry+0x53f/0x630 [ 993.359385][ C1] rose_timer_expiry+0x53f/0x630 [ 993.364309][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 993.369752][ C1] call_timer_fn+0x19a/0x590 [ 993.374321][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 993.379413][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 993.384842][ C1] ? mark_held_locks+0x40/0x70 [ 993.389605][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 993.395041][ C1] __run_timers+0x757/0xac0 [ 993.399536][ C1] ? __pfx___run_timers+0x10/0x10 [ 993.404549][ C1] run_timer_base+0x114/0x190 [ 993.409214][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 993.414387][ C1] run_timer_softirq+0x1a/0x50 [ 993.419123][ C1] handle_softirqs+0x1ea/0x910 [ 993.423865][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 993.429137][ C1] __irq_exit_rcu+0xef/0x150 [ 993.433703][ C1] irq_exit_rcu+0x9/0x30 [ 993.437922][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 993.443534][ C1] [ 993.446442][ C1] [ 993.449348][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 993.455304][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 993.461692][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 16 6b 69 f6 48 89 df e8 fe b8 69 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 b5 07 5a f6 65 8b 05 ae b8 6a 08 85 c0 74 16 5b [ 993.481286][ C1] RSP: 0018:ffffc9000131fad0 EFLAGS: 00000246 [ 993.487339][ C1] RAX: 0000000000000006 RBX: ffff888030f34038 RCX: 0000000000000040 [ 993.495283][ C1] RDX: 0000000000000000 RSI: ffffffff8dc46051 RDI: ffffffff8bfa38a0 [ 993.503246][ C1] RBP: 0000000000000293 R08: 0000000000000001 R09: 0000000000000000 [ 993.511205][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888030f34038 [ 993.519150][ C1] R13: 0000000000000293 R14: 0000000000000001 R15: ffff88814d472c00 [ 993.527125][ C1] snd_rawmidi_transmit+0x117/0x160 [ 993.532303][ C1] snd_vmidi_output_work+0x111/0x390 [ 993.537568][ C1] ? __pfx_snd_vmidi_output_work+0x10/0x10 [ 993.543353][ C1] ? process_one_work+0x80b/0x1840 [ 993.548440][ C1] ? rcu_is_watching+0x12/0xc0 [ 993.553180][ C1] process_one_work+0x9c2/0x1840 [ 993.558109][ C1] ? __pfx_process_one_work+0x10/0x10 [ 993.563458][ C1] ? assign_work+0x19c/0x250 [ 993.568022][ C1] worker_thread+0x5da/0xe40 [ 993.572590][ C1] ? __pfx_worker_thread+0x10/0x10 [ 993.577675][ C1] ? kthread+0x17d/0x730 [ 993.581889][ C1] ? __pfx_worker_thread+0x10/0x10 [ 993.586974][ C1] kthread+0x3b3/0x730 [ 993.591017][ C1] ? __pfx_kthread+0x10/0x10 [ 993.595589][ C1] ? ret_from_fork+0x79/0xaf0 [ 993.600243][ C1] ? ret_from_fork+0x79/0xaf0 [ 993.604915][ C1] ? rcu_is_watching+0x12/0xc0 [ 993.609685][ C1] ? __pfx_kthread+0x10/0x10 [ 993.614263][ C1] ret_from_fork+0x754/0xaf0 [ 993.618831][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 993.623917][ C1] ? __switch_to+0x7b9/0x10c0 [ 993.628575][ C1] ? __pfx_kthread+0x10/0x10 [ 993.633161][ C1] ret_from_fork_asm+0x1a/0x30 [ 993.637905][ C1] [ 993.641201][ C1] Kernel Offset: disabled [ 993.645591][ C1] Rebooting in 86400 seconds..