last executing test programs: 2m51.972495087s ago: executing program 3 (id=900): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000340)={0x6, 0x19f7, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xa}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x30000, 0x1, 0x7}) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) read$FUSE(r4, 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r4, 0xc0106401, &(0x7f0000000000)={0x8f, &(0x7f00000003c0)=""/143}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) close_range(r0, 0xffffffffffffffff, 0x0) 2m51.709988079s ago: executing program 3 (id=902): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x4c603, 0x0) bind$unix(r2, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a76cf820d0062206f870010203010902240001000010000904b700"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) write$vga_arbiter(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='lock io'], 0xc) write$vga_arbiter(r1, &(0x7f00000001c0)=@unlock_all, 0xb) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) 2m47.702093964s ago: executing program 3 (id=915): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x6000, 0x1) unlink(&(0x7f0000000040)='./file0\x00') mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0xb7, 0x4) bind$inet(r0, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000000)) syz_usb_control_io$hid(r3, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5ab40bf85edaca83"], 0x0}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="000301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSFLAG(r5, 0x4004480f, &(0x7f0000000000)=0x3) readv(r5, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/69, 0x45}], 0x1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000005c0)={&(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0], 0x2, 0x8, 0x3, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f0000000600)={r6}) ioctl$HIDIOCGUSAGE(r5, 0xc018480b, 0x0) accept4$unix(r2, &(0x7f0000000240), &(0x7f00000002c0)=0x6e, 0x80800) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28400, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40046f41, &(0x7f0000000440)=0x1f) sendto$inet(r0, &(0x7f0000000100)="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", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0), 0x0) 2m43.515364849s ago: executing program 3 (id=927): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) syz_open_dev$sndctrl(0x0, 0x0, 0x800) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x3e, &(0x7f0000019400)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x8, 0x6, "7917fe", 0x8, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', {[@fragment={0x2f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x64}]}}}}}, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x24, 0x0, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x400001}]}, 0x24}}, 0x8005c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x100007, 0x4, 0x25, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r2}, 0x38) mremap(&(0x7f000096f000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 2m42.108135786s ago: executing program 3 (id=934): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001280)=@raw={'raw\x00', 0x3c1, 0x3, 0x570, 0x0, 0x8, 0x7f02ae, 0x368, 0x200, 0x4a0, 0x2e8, 0x2e8, 0x4a0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x340, 0x368, 0x0, {}, [@common=@unspec=@bpf1={{0x1f}, @fd}, @common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@remote, @ipv6=@mcast2, @ipv4=@remote}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0xfc}, @private2, [], [0x0, 0xff000000], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"a27d"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0xec, 0x5, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) (fail_nth: 1) 2m41.058149221s ago: executing program 3 (id=937): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1000000, &(0x7f0000000480)=ANY=[@ANYBLOB='huge=within_size,huge=always,mode=00000000000000000000015,nr_blocks=9O270-4,uid=', @ANYRESHEX=r1, @ANYBLOB=',context=user_u,subj_role=/dev/fuse\x00,smackfsdef=fuse\x00,func=CREDS_CHECK,appraise_type=imasig,seclabel,fowner=', @ANYRESDEC=r3, @ANYBLOB="2c646f6e745f43707072616973652c00bc5efe170e566e667c"]) write$cgroup_subtree(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="2d66726546000080202d637075202d637075202d6e65745f636c73202b6e657420"], 0x21) openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100001042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9980030000000000280012800b00011865727370616e00001800028004001200060011004e200000060010004e200000"], 0x48}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000180), 0x2, 0x2) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000340)}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r10, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x296a, 0x4, 0x6, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0xf5}, {0xf, 0x5, 0x9, '\x00', 0x13}, {0x7, 0x3e, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xac}, {0x6, 0x8, 0x6, '\x00', 0x8}, {0x1, 0xfa, 0x2, '\x00', 0x67}, {0x2, 0x7, 0x2, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) close_range(r8, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r7, 0xc0f8565c, &(0x7f0000000280)={0x1, 0x1, 0x1, {0x0, @raw_data="ba53a5f7b8f6cfcd32e7db140a46e9a2bb6ddc9d01d6a7d0a668b93fd8abfd1b581ffc1bfcd0ef9a86831b31cad11443530b3f21462da2ae7ddd47afa3061bd8fcbdf0248cb16b0e98a3c88f95781fb6fc0a649146709c79a21959510e1af1ebbd6eda60bd6b9c8306a0e49f3ca0091ecc812c0d35955861befd592c491dd58a1971ae892d69741c77ff716500eaa5556f52d11c38fe8c48836400b5a853957a9a97fa5d0b1f62d655bcda1597a419a88e0b850c6f38d7be9e1f147cc9688369d8144500234fd4a7"}, 0x6}) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r12 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r12, r11, &(0x7f00000000c0)=0x58, 0xa) 2m25.740381747s ago: executing program 32 (id=937): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1000000, &(0x7f0000000480)=ANY=[@ANYBLOB='huge=within_size,huge=always,mode=00000000000000000000015,nr_blocks=9O270-4,uid=', @ANYRESHEX=r1, @ANYBLOB=',context=user_u,subj_role=/dev/fuse\x00,smackfsdef=fuse\x00,func=CREDS_CHECK,appraise_type=imasig,seclabel,fowner=', @ANYRESDEC=r3, @ANYBLOB="2c646f6e745f43707072616973652c00bc5efe170e566e667c"]) write$cgroup_subtree(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="2d66726546000080202d637075202d637075202d6e65745f636c73202b6e657420"], 0x21) openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100001042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9980030000000000280012800b00011865727370616e00001800028004001200060011004e200000060010004e200000"], 0x48}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000180), 0x2, 0x2) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000340)}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r10, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x296a, 0x4, 0x6, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0xf5}, {0xf, 0x5, 0x9, '\x00', 0x13}, {0x7, 0x3e, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xac}, {0x6, 0x8, 0x6, '\x00', 0x8}, {0x1, 0xfa, 0x2, '\x00', 0x67}, {0x2, 0x7, 0x2, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) close_range(r8, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r7, 0xc0f8565c, &(0x7f0000000280)={0x1, 0x1, 0x1, {0x0, @raw_data="ba53a5f7b8f6cfcd32e7db140a46e9a2bb6ddc9d01d6a7d0a668b93fd8abfd1b581ffc1bfcd0ef9a86831b31cad11443530b3f21462da2ae7ddd47afa3061bd8fcbdf0248cb16b0e98a3c88f95781fb6fc0a649146709c79a21959510e1af1ebbd6eda60bd6b9c8306a0e49f3ca0091ecc812c0d35955861befd592c491dd58a1971ae892d69741c77ff716500eaa5556f52d11c38fe8c48836400b5a853957a9a97fa5d0b1f62d655bcda1597a419a88e0b850c6f38d7be9e1f147cc9688369d8144500234fd4a7"}, 0x6}) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r12 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r12, r11, &(0x7f00000000c0)=0x58, 0xa) 10.802162054s ago: executing program 1 (id=1425): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$cgroup_pid(r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r1, 0x0, 0x4000000) syz_init_net_socket$netrom(0x6, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r5, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Capture'], 0x86) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) dup3(r6, r5, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x118}}, 0x0) 9.793716998s ago: executing program 1 (id=1428): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0xa16, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x22, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r2 = getpgid(0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) syz_clone3(&(0x7f0000000180)={0x800000, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_pidfd_open(r2, 0x0) landlock_restrict_self(r3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x158, 0xe, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x138, 0x3, 0x0, 0x1, [{0x134, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4c, 0x7, 0x0, 0x1, @masq={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x31}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x4d}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xb}]}}}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_DATA={0xdc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2e, 0x1, "feb5fe6b183a65be789cafcd159d127c1381110607af732f2011c0a7888def1c46c97e29ac41155b1a09"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0xffffffffffffff59, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x180}, 0x1, 0x0, 0x0, 0x8000}, 0x4010) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000300)=0x1) pidfd_send_signal(r4, 0x1e, 0x0, 0x4) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3000000010000108fdff763f0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000008001a8004002d"], 0x30}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9}, 0x5}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000040)={0x4, 0x6575, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r9, 0x100000000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r10, 0x6, 0x2b, 0x0, 0x74efdfe049b861ab) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 8.875386993s ago: executing program 5 (id=1433): ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0xc, 0x1, 0x0, "8b27aaec7ae7ac393a7de8166eaf5234aa20b61f7d720e86d238152e1f5af600"}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESOCT=0x0], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3b071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xa, &(0x7f00000003c0)={0x5}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102400, 0x4605) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}}, 0x40) 8.214304278s ago: executing program 0 (id=1435): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/dev_mcast\x00') pread64(r1, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) (async) pread64(r1, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x4, 0x8001, 0x11840, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x0, 0x0, 0x0, @void, @value, @value=r1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x3ff}, [@call={0x85, 0x0, 0x0, 0x28}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x3ff}, [@call={0x85, 0x0, 0x0, 0x28}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000ff2d0000444a6ca2da234ab785389b6b0016000000000000005c38d98d905b2d5e2f48000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e}, 0x3f) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x33, 0xff}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x25, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) r6 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4a21, 0x9, @loopback, 0x40000001}, 0x1c) (async) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4a21, 0x9, @loopback, 0x40000001}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 7.45581077s ago: executing program 1 (id=1436): r0 = socket(0x10, 0x803, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f9, &(0x7f0000000140)="a6cc") ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000000300)=""/78, 0x0, 0xf250a284784867f7}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) eventfd2(0x8, 0x800) syz_open_dev$vim2m(0x0, 0x7, 0x2) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r6, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x121800, 0x0) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) 7.412124099s ago: executing program 2 (id=1437): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {r2, 0x4000, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @private=0xa010102}, @in={0x2, 0x4e22, @loopback}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000240)={0x13, 0xe, 0xfa00, {&(0x7f0000000a00), r2, 0x2}}, 0x18) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r3, 0x5602, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) syz_open_dev$I2C(&(0x7f0000000000), 0x7, 0x111040) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) pread64(r5, 0x0, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, 0x0) readahead(r0, 0x8, 0xa546) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[], 0xf) 6.567751258s ago: executing program 2 (id=1439): mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x7da, 0xfffffffffffffffe) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x102) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DONE(r6, 0x29, 0xc9, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f0000000500)=""/236, &(0x7f0000000100)=0xec) unlink(&(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700"/116], 0x84}}, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc040564a, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000000340)=[{{&(0x7f0000000040), 0x6e, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/227, 0xe3}], 0x1, &(0x7f0000000540)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x160}}], 0x1, 0x20, &(0x7f00000003c0)={r8, r9+60000000}) 6.35323939s ago: executing program 1 (id=1440): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000480)={0x0, {{0xa, 0x4e23, 0xfffffffc, @mcast1={0xff, 0x7}, 0x7fffffff}}, {{0xa, 0x0, 0x2000, @remote}}}, 0x108) 5.602396522s ago: executing program 1 (id=1442): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x8, 0xfffffe0000000001, 0xfa11, 0x8}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000009, 0x15031, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r2) socket$alg(0x26, 0x5, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x360}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ac4000/0x3000)=nil, 0x3000}) unshare(0x28040680) timerfd_create(0x0, 0x0) futex_waitv(&(0x7f00000047c0)=[{0x5, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) pipe(&(0x7f0000000540)) 5.062554929s ago: executing program 2 (id=1443): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0b00000005000000020000000400000005", @ANYBLOB="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"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) lseek(r3, 0x7, 0x1) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x5) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={r2, 0x0, 0x0}, 0x10) r5 = io_uring_setup(0x2844, &(0x7f0000000840)={0x0, 0x9a3d, 0x800, 0x1, 0x151}) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, &(0x7f0000002400)={0x1, 0x0, 0x0, &(0x7f0000002340)=[{0x0}], 0x0}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f00000026c0)={0x7f, 0x0, &(0x7f0000000400)=[{0x0}], 0x0, 0x1}, 0x20) setsockopt$MRT6_ASSERT(0xffffffffffffffff, 0x29, 0xcf, &(0x7f00000001c0), 0x4) 4.758313778s ago: executing program 4 (id=1444): r0 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000900)=ANY=[@ANYRES64=0x0, @ANYBLOB, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRESOCT, @ANYRES64=r0], 0x24}, 0x1, 0x0, 0x0, 0x4044080}, 0x20000000) socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102384, 0x18ff0) sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="050000002000000069111c00000000008510000002000000850000000500000095000000000000009500a505000000005ed70c66256f5b77355a285198b457089eac4a3e19a02d53ffc4923832b4fd1db4b1180fce09a17387e3e9d27e9f6009eb917b078384ea256cc52f2edfa455b6f035bbfc01554f4df4c87e4f1dd47cfcba3933d103cd9807b868c7f2f699394dadd96457be32b611da225d91a6557457693829f5b162bb6daded3e4cab7c4e0a7c8b1c619258b7a1a88fd43778ebfb5296eb4eefc81d8afafad904e8b6162cfb"], &(0x7f0000000080)='GPL\x00', 0x5, 0x43, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) syz_usb_connect(0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.574230821s ago: executing program 2 (id=1445): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x6, &(0x7f0000000540)=0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r6, 0x1, &(0x7f0000000880)=[0x0]) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) socket(0x10, 0x80002, 0x2) syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r4, 0x80047456, &(0x7f0000000040)={0x6, 0xb, 0x6, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff, 0x5}) r7 = socket$inet6(0xa, 0x3, 0x7) socket$netlink(0x10, 0x3, 0x0) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$kcm(0x2, 0x1, 0x84) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) connect$pptp(r1, &(0x7f0000000180)={0x18, 0x2, {0x40, @multicast2}}, 0x13) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940), 0x0, 0x0, 0x0, 0x7400}, 0x20000004) syz_usb_connect(0x5, 0xa2, &(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRESOCT, @ANYBLOB="2fb25abd9aaf15a8baa668c29ea1079357256c752653e8cc41c8527f336c4bf6df22703dc15bdfc5dd43", @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRES16, @ANYRES16=0x0], 0x0) 4.205743709s ago: executing program 5 (id=1446): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xc0}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x182000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000280)={0x80, 0x10, 0x10, 0x0, 0x6, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8, 0x40000000}, {0x0, 0x400006}, {0x0, 0xb, 0xfffffffd}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000002, 0x0, 0xfffffffc, 0x400009, 0x6, 0x0, 0x17, 0x0, 0x1, 0x6}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f00000001c0)={0x0, 0x16, 0x3, "11444a"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="20066e0000006e0b9c2ffb26940043425d6e6153cda8b6060a2a4707034dc602770eb89076450f725f1b340c5a2cf7d1523d9ee021a5c5f5c3f9b640105be1e063b705696ac4db3dde2f5e79a8187c07a22509521fcb3508b15f9356459a48a9d80807ef0b801e8e23c57f140000000000000000"], &(0x7f0000000340)={0x0, 0x3, 0xf8, @string={0xf8, 0x3, "709245c8ab9f0371b07500a6e90f770d19daf41bde92599f47240d8fab33fcf17e66b0e0fa8d97e767caa89c90f85538a1380c28f3a9ac6c0afd5af053d14078713326587474aef2d3a9b76036f7778acfa887a139c937613e95c08558109e67f23d74d0935f8f9425b550f581b2226e115051c36ee8412576e116f35e3aaca287ade296eded8caa0b9dbc24625da757cad6e1f79a50804c965e111047b0c0eb2297f06cd81f0a0df422535f439e43343e1ac7a5c8b199adc265f06e8dfab6508ce59e43b310661ac5b4b2e4837d5fd57bb2713c9714b9171b982e8d893a22e560b1c6b7494a25c4bb5422470c33f99dcb8088df1fc6"}}}, &(0x7f0000000880)={0x1c, &(0x7f0000000200)={0x20, 0x13, 0x35, "042f6e7889e598b15f3b315b59464b33eea646b9770cc9b29934ee9dda8cb56d78186a467a1d52b654551a52ca4efc73a700000000"}, &(0x7f0000000440)={0xa1, 0x1, 0x400, "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"}, &(0x7f00000008c0)={0x21, 0x0, 0x3, "8b8a8e"}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xc0}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x182000, 0x0) (async) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000280)={0x80, 0x10, 0x10, 0x0, 0x6, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8, 0x40000000}, {0x0, 0x400006}, {0x0, 0xb, 0xfffffffd}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000002, 0x0, 0xfffffffc, 0x400009, 0x6, 0x0, 0x17, 0x0, 0x1, 0x6}) (async) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f00000001c0)={0x0, 0x16, 0x3, "11444a"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) (async) syz_usb_control_io$sierra_net(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="20066e0000006e0b9c2ffb26940043425d6e6153cda8b6060a2a4707034dc602770eb89076450f725f1b340c5a2cf7d1523d9ee021a5c5f5c3f9b640105be1e063b705696ac4db3dde2f5e79a8187c07a22509521fcb3508b15f9356459a48a9d80807ef0b801e8e23c57f140000000000000000"], &(0x7f0000000340)={0x0, 0x3, 0xf8, @string={0xf8, 0x3, "709245c8ab9f0371b07500a6e90f770d19daf41bde92599f47240d8fab33fcf17e66b0e0fa8d97e767caa89c90f85538a1380c28f3a9ac6c0afd5af053d14078713326587474aef2d3a9b76036f7778acfa887a139c937613e95c08558109e67f23d74d0935f8f9425b550f581b2226e115051c36ee8412576e116f35e3aaca287ade296eded8caa0b9dbc24625da757cad6e1f79a50804c965e111047b0c0eb2297f06cd81f0a0df422535f439e43343e1ac7a5c8b199adc265f06e8dfab6508ce59e43b310661ac5b4b2e4837d5fd57bb2713c9714b9171b982e8d893a22e560b1c6b7494a25c4bb5422470c33f99dcb8088df1fc6"}}}, &(0x7f0000000880)={0x1c, &(0x7f0000000200)={0x20, 0x13, 0x35, "042f6e7889e598b15f3b315b59464b33eea646b9770cc9b29934ee9dda8cb56d78186a467a1d52b654551a52ca4efc73a700000000"}, &(0x7f0000000440)={0xa1, 0x1, 0x400, "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"}, &(0x7f00000008c0)={0x21, 0x0, 0x3, "8b8a8e"}}) (async) 3.76738924s ago: executing program 0 (id=1447): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$cgroup_pid(r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b0014000000000000000000000007"], 0x38}, 0x4000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$netrom(0x6, 0x5, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x51) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r6, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Capture'], 0x86) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) dup3(r7, r6, 0x20) r8 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r8, 0x4161, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) 3.059261611s ago: executing program 1 (id=1448): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0400000000000000280012800b0001006d61637365630000180002800c0004000300000100c28000080005000400000008000500", @ANYRES32=r4], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeeb, 0x8010, 0xffffffffffffffff, 0xf8a29000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) r8 = socket$inet6(0xa, 0x80001, 0x0) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00220f000000bd850000000b11200000b37488dffc8e8092aeef18eac5f65eb9777a55064672b56196627affd84ec4a583b440ec1122543e0fdb982df69be3182b47ec6da13a1b4d56619a2db10c5056d5f2a9a915d6899fb554d9879dd236fd21e259f1a83a510acdf3ca68fe8c382498903fdeb8fccc8691a96023dd9c420c307ee2b8af04fc59787ad4175553251802ed683e001c1f1c09623b"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000700), 0x800000000000000, 0x48901) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000240035b9000000000000000000000000060003000054f0"], 0x24}}, 0x0) pselect6(0x40, &(0x7f0000000100)={0x9, 0x0, 0xffff, 0x3, 0x0, 0x0, 0x0, 0x400}, 0x0, &(0x7f00000000c0)={0x1f, 0x3, 0x0, 0x10000000000, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000480)={'vlan0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000280)="12042bfdd3fc03fc01004788031c09100628", 0x12, 0x4, &(0x7f0000000140)={0x11, 0x17, r12, 0x1, 0xa, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x14) r13 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) sendmmsg$unix(r7, &(0x7f0000001f80)=[{{&(0x7f0000000400)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000780)=[{&(0x7f00000002c0)="3aa979d0262ce00d7492c95d7cca804e92de0900f6806e6ac4caf3a539c8689c07", 0x21}, {&(0x7f00000004c0)="b7bf377b309dfb45e90648cb9b8b67c97959e0f3375ea5a13e4a687928320958424279cfbefaa7114e03dcdf05efaf7831ef29e245", 0x35}, {&(0x7f0000000500)="8dd1c32803e1f2b102b43e0c8775ce2fe20268b7b1802f4099a403", 0x1b}, {&(0x7f0000000540)="76f25b88b2da79bd3459bfc215a3e2bd4aadaf003999041d28eecf22773877ca4f1e0602bf6a6b919c9a", 0x2a}, {&(0x7f00000005c0)="cc48838200659ea5735ce433b09b8d4c7baefc090ff65e809281155c04ce79551f7ff80d5bd8c87f6d825f57cc3e142e5604e7108453db405a9a19a7d81086b0702639f361", 0x45}, {&(0x7f0000000640)="29c59688a9cc8db05c80c92ba1ddc8eec835c769145a3768ec5ca9d8609c01faab38d4668e211ebe42fd6c4f9f91afa1644fa710707232931f280a4d8028e42d8bb6f8cecd53331f04076e02a842175d575ae3521c8e8d2436d03e596f", 0x5d}, {&(0x7f00000006c0)="ce10700b2a98df97f2dcee2cb57ccc742be5f267d5ae775457113015e0663ab407e6b0164e161140", 0x28}, {&(0x7f0000000700)}, {&(0x7f0000000740)="5c8dcc476d522403263c", 0xa}], 0x9, &(0x7f0000002080)=ANY=[@ANYBLOB="1c0000000000a9efd4c3fe3b9029e2f3ad90d4ae339bba215a559ce3008e189c76f6019742205e00000000000000000000efca76ec2b83df711999f847b8f230907c0e4e72d50f131b5b123058a3a2c1e43a51695542acb264c1d275734103ac37d08f90e52967278159cdcce9542b5afd6643e803f87aee48ffa085f8068ca0bc6bffff47ae48a33115f093a488f882fee89e97bd4bdba709783dbcb35f70b76fdcda08e346429326de7acfd5bbe648cc5d0c3f9d2d988703d812fa5fc13d2535657070c74af6789610eb3e191c1fa22b1669926edcf54c91d0820f15af7bed44ec8787465d2cc8a9c5455631d5e1213a16a8e95fa7b0dd770a3a276e723e2f63ea2d3816d56acb813fa7529c587136653d84f703fb49bb0d23d50a52029d57688069e79cb390657a2b7712100f42e835addfdc08c2c90def35a9b99b86a38a2aa647b301e12fcd60588bc58d546aaa9292621e6ce29d05c41b7f81417886d5ea7bbfe3b090497fe0060b8da817be0a0bda68d3e53acde365052a06c684a60a600c2e48131bcdf73b026126091b693d38cacebcee98ede5a0c40bca449415bee57160ac15cd", @ANYRES32=r1, @ANYRES32=r10, @ANYRES32=0x0, @ANYBLOB="0001000000000000000000000000000000000000a206da169c8cd792e838203bf402423d7bb32f0cf2d905ef8e0e5a332ad93d8fd90809413135e61cc0ec6d48ba161bc4e3b1c5c90383fe7485", @ANYRES32=r6, @ANYRES32=r11, @ANYRES32=r2, @ANYRES32=r11, @ANYRES32=r2, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r10, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r8, @ANYRES32=r0, @ANYBLOB="1c00"/16, @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r8, @ANYRES32=r3, @ANYRES32=r11, @ANYRES32=r3, @ANYRES32, @ANYRES32=r11, @ANYRES32=r2, @ANYRES32=r11, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000002000000", @ANYRESDEC=r11, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="004fe26c"], 0x128, 0x40000}}, {{&(0x7f0000000e80)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001340)=[{&(0x7f0000000f00)="5c64560825e2d7fe463ba0e0c39b17c1a82eb6d610b99c2befd05fdd1d7ad54e5b51041ed5f8daf6a707cc78d88b456843236f03176288172ab10cc69368442a18b0", 0x42}, {&(0x7f0000000d80)="768c4107e0ec08dd242a997c4ab59be752640d0adf29415bdc7e315cd956550741", 0x21}, {&(0x7f0000000f80)="0900000000000ea3a1", 0x9}, {&(0x7f0000000fc0)="9da25246f65a7d67da4b561bb577ac546ee6956e1f84ae240b2fa545b240ef075615fe0c7428443c42ced87b4656e8363e7eca625ec312455efbaff35dd32feae900e709f306131448030aaf731dab81161147f84bee119bd01d1cfcc32d33343d5c7df705c188a9534cf7a59095df304145662b8886e47736f6e2598d2a1d070960edff71d12c3a8bc410c477dc3acda441107edf2cd2101dd17b", 0x9b}, {&(0x7f0000001080)="df7140fa9b62e6b87ad15830c8d252db518d2e1da574c5e39f72da264eacc36029088c757cad09c034b27ef7e6b54c107281ae35508c2e5c33", 0x39}, {&(0x7f0000001180)="3a62c41995ebd6ea74651ed37584766cd0007eb9b71d8e17505e98121117845d14096f8b6f9013ecf8b5c47e6ba13aeaa947641448acd56aaa3f1061309c65bdbee59891e933c2e3d96d21b45706d7123ee9df60f05d1a9a2f5da4885fb4280d257dba39d6e701de7b4c001a220ff5e9f68bfd55126c55d50deaf58130b434bf71a5a3c6430857f7d34b724a0e11bf8952ed1c96e80b1174c8", 0x99}, {&(0x7f00000010c0)="bdf8d76f9abf011eda20eb4a0c355498da81167969d5eebe3956978e308a66ffcfd90eb5a44a7db6168a19a37bb76ab0a8ecb5e916afae9b7dc01b67a7b4d667e7e8f15fc6e6499cff82f024dd001af8d90c7ddd8e976e5230b2fb4293e771aa57660490172bde5f97e92ff8cfe69ea72d75e2", 0x73}, {&(0x7f0000001240)="87a7f19332118b5428b9eb362da523a6103855e20c5e772d7b13e75f72d56133df676565381bb8708d50c3d4e55e59ad5fc69c60d7867771d278a55bb516a369070e", 0x42}, {&(0x7f0000000580)="a2cfe14b46def08221c8dad132c4fe68f9c371b98107901002637b85fc6f5bf3d3e087569755e106048d98c6d0f1af0ea81c044572e90bff8ada27", 0x3b}, {&(0x7f0000000c00)="b2efed9bf234056e194165ce042df761330c9d3e210f813d0cda2fd7cd38c16befef70fec008b40bffa0458f4b8292167e057a1a49712ca3c38c0d40d43f430b0e4c14853f75a8b53fc655a11e31c765204a59040e1242d0bc78292108b220d80c62fd30160266ededf16a9258fb038fc74754650dd56b5bedc2b9473dc0a5ba003b82481d0a934f880942fdd92a0ba079220225ede5aff60bbe14faba7b979a563c23cbceb0bba9b5adf8", 0xab}], 0xa, &(0x7f0000001440)=[@cred={{0x1c}}], 0x20, 0x48008}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001480)="c2a0895beb865f8a976add96775decac601cfc3b40b07dd52d6123fa5eb3fd07d6e0a3c21e1aa965edf6cd159f18c7db34cad739c4b8119130ff1353cdf34e6a1f4472fab27302b4ab562612d5c3bab874e58119956c1219ffbb4059e0cc4ccf28fbd8036c02d5a8f537356081d403255c9a5d5c47c72282f848e73c18b074dd605de4df1ae4a409dc9053b1649a7eac49ffc9d54e88cb027a6504e3a1996e45ce2bf514db1f85f5debe8aadc99622c4d5cec7bebcf158f2f443785517f597b867cf21c1785aef389b89797006fba9ea085f67a43aec0764b59977a305fb25cad761471576d2f4e40c408c", 0xeb}, {&(0x7f0000001580)="a9847862d512a8667964a109fe20d828b9dfa38f7ea23b7cb0a8394b9c7abea7fab6f92d6819e3633c40b841dbb9c76799f0e19774841b252ebb547cd4d7e293c308d64d2260", 0x46}, {&(0x7f0000001600)="b09e444e62d5c0e67ccc112d80abf1d80e056cbb", 0x14}], 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000e1799a5bf75e5041a45712fbe6e1b9b6c2d16eab0238a981a6a1c2ed040308b7a3390816caa5b85e1cc338303dcab16ffcffffffff00000000214b46d41b15ec12bbfa948553b1ff32f67fb92bf0", @ANYRES32, @ANYRES32=r2, @ANYRES32=r10, @ANYRES32=r13, @ANYRES32=r11, @ANYRES16=r8, @ANYBLOB="24000000000000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32=r10, @ANYRESOCT=r12, @ANYRESOCT=r13, @ANYRESDEC=r5, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYBLOB="5b720e6ad0ee4fe3fcc7b8b2a5d333138dc9fe71074d0b6c1229c8f41db3ef918451834357ca4b2d56e880407b6f6f0c53babca7c6ec2bfad503381d4c22a19e4c572432150fda0426222b023228d4702449d0cb588a9b62517965166942d24cd05673815b7b91287e556b2f9578fa32420c9ada559f5eb431", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x108, 0x20000000}}, {{&(0x7f0000001b00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001e40)=[{&(0x7f0000000840)="9b59fd3898bc9b2a9a218b0775bcc597cde09ea116fe148abf9c171ea56ac9fb3ce6ffae21686c2242c571f10cc39326bb0ea6f8705171fb88f8a77c77b932e3db7ad6c133a63eeb73af6791a435f7babca8ab19d35d62a471a3880406cc6160a6599e314a95f94be62ec894400848ec261ee77dae5f4c200ddad98e5a1b5ab240b56ad9dd3f3af7ceb20bba", 0x8c}, {&(0x7f0000001c40)="68a028649d7ef7242c7a9edf448f0052296f0f06e6530b626ce63cd5ccaff08b8642deb33bf5eb592202d986153f1fdddf80fd6cb14cd2747605f8a812cb35930f0172f325dd1c3c83f25c747ea80d2cbe03c4364ae16e0475f8f82a2f5e757beb73a105373c71cd8f91b4cd8f598f93f3edb9099c933b583ca84ac7028366831bd8ef47363dd58deb39ea33428a50ceba50e5084eb222db8f7e1c20c839233703b8f64382b286f3ce48c5aaba49864a4aa76977f8fe2c13ebbecab73798e59ec8bcb3e9cf7d45e744ea6da4839e1185a17f2d972560d13adfac7ec9466c6c09ca80e1951f77c40583", 0xe9}, {&(0x7f0000000580)}, {&(0x7f0000001d80)="0fa43a463c8f584be1c6efaebf68f1cdb95671dd4b552ef0e8af97cfbec9e9f130ab6fc11f464d4d6f53965b8cd2118f51ec126c0dac012ee66f824bec794cba0c3fe42064102e949c78ba66b9e3059e867e1db5611c32940351185faab622cad7c06adfd951e659ed0d7ee8ab5f2fc17ebe3672e9bbb058ee22f7bbb11722a758b8d01bc9292d548deb4f10", 0x8c}], 0x4, &(0x7f0000001f00)=ANY=[@ANYBLOB="1000000000000000010000000100000034000000000000000100000001000000", @ANYRES32, @ANYRES32=r7, @ANYRES32, @ANYRES32=r13, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r8, @ANYBLOB="01010000"], 0x48, 0x8000880}}], 0x4, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r10], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20040004) 2.946549475s ago: executing program 4 (id=1449): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {r2, 0x4000, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @private=0xa010102}, @in={0x2, 0x4e22, @loopback}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000240)={0x13, 0xe, 0xfa00, {&(0x7f0000000a00), r2, 0x2}}, 0x18) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r3, 0x5602, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) syz_open_dev$I2C(&(0x7f0000000000), 0x7, 0x111040) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) pread64(r5, 0x0, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, 0x0) readahead(r0, 0x8, 0xa546) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[], 0xf) 2.831432162s ago: executing program 4 (id=1450): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1}, 0x0, 0x0}, 0x20) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4044844) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x28100, 0x0) (async) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (rerun: 64) r0 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f00009ec000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) accept(r1, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x400455c8, 0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) (async, rerun: 64) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvlan1\x00'}) (async) sendmsg$nl_route_sched(r4, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x2000000008b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 2.75829521s ago: executing program 0 (id=1451): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$cgroup_pid(r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r1, 0x0, 0x4000000) syz_init_net_socket$netrom(0x6, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r5, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Capture'], 0x86) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) dup3(r6, r5, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000000a4000000060a010400000000000000000100000008000b40000000007c000480"], 0x118}}, 0x0) 2.514268992s ago: executing program 4 (id=1452): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$cgroup_pid(r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c00"/12, @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b0014000000000000"], 0x38}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$netrom(0x6, 0x5, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x51) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r5, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Capture'], 0x86) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) dup3(r6, r5, 0x0) r7 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r7, 0x4161, 0x0) 1.654088327s ago: executing program 0 (id=1453): mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x7da, 0xfffffffffffffffe) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x102) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DONE(r6, 0x29, 0xc9, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f0000000500)=""/236, &(0x7f0000000100)=0xec) unlink(&(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700"/116], 0x84}}, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc040564a, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000000340)=[{{&(0x7f0000000040), 0x6e, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/227, 0xe3}], 0x1, &(0x7f0000000540)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x160}}], 0x1, 0x20, &(0x7f00000003c0)={r8, r9+60000000}) 868.953148ms ago: executing program 4 (id=1454): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r0, &(0x7f0000000180), &(0x7f00000005c0)=@udp, 0x3}, 0x20) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0xd11}) ioctl$KVM_SET_IRQCHIP(r3, 0xae64, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r3, 0x4010ae74, &(0x7f0000000000)={0x7, 0x9, 0x7}) ioctl$KVM_SET_PIT2(r3, 0xae71, &(0x7f00000003c0)={[{0x10000, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x80, 0x1, 0x0, 0x0, 0xffffffffffffffff}, {0xffffff7f, 0x0, 0x8, 0x4, 0x5, 0x0, 0x0, 0xff, 0x2, 0x2, 0x0, 0x10, 0x5}, {0x10000, 0x0, 0xfd, 0xfd, 0x0, 0x0, 0x21, 0x3, 0xfd, 0x0, 0xfe, 0x0, 0x400800}], 0x5}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') sendfile(r4, r4, &(0x7f00000002c0)=0xffffffff, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xd) mkdir(&(0x7f0000000640)='./file0\x00', 0x4) r5 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="68000000100001002cbd700020000000000000", @ANYRES32=0x0, @ANYBLOB="08009757c0200000140003006e657464657673696d3000000000000034001680300001802c000c801400010000000080"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000010) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) add_key(0x0, 0x0, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) r7 = syz_open_dev$loop(&(0x7f0000000240), 0x3, 0x0) unshare(0x20400) sendfile(0xffffffffffffffff, r7, 0x0, 0x10000200000200) 750.591565ms ago: executing program 5 (id=1455): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x141301) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x4004550d, &(0x7f0000000000)={0x25d6, 0x1, [{0xb, 0x1}]}) 633.794284ms ago: executing program 4 (id=1456): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000440)={0xc}, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x992d, 0x400, 0xffffffff, 0x3b9}, &(0x7f0000000340)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="f000000000000000010000005eb7000075177ff3309da1d8c85f82edfed4bb53954223bd9d5ed15e772b9f42bc28de83c35f12ef0e5a50ee1e38bc77ee86a3f8536afe510f411731dd16ccd50ef88788e58b91dcb90a33af1104b199f023b2f1e848bd5ff446f4329d0c647852abf81992adc4ced5ba47f8037ae4306f519b835659f6a0160f94ec6b6265ff069a1950dd0e47a544f92d6fe23183dd00ebcd83cc8940e4e153f0ac7f22c599dc6a4241df91d1b88b78ac2a3b5b8a927325d8fa797bd2a1b20c129daae788155431779e9208e1afc14ac6d27d2124c6db6569a7e89a1df7a849af490ace439998b27e0088000000000000000c0100000a0000004587e2218aba2bbd5d926f2500607ef93120718ff1716c0ec85714843724bc1d8485007f9eeb6c3063b7fd49744699dc07679e79e8a8922030f548550ce2c151b43c7a95770464893f929b66be05863d02b20dcdea7c71696820cd5d6ef8045de5594bcf95447bab306cf4c414269820e400000000000000200000000000000013010000e30f000087f7cfef6937d55f2bb0d3640000000078000000000000000100000001000000529fc01ddd98c8e4893b6a0c57044002fa9105670ca3d8110272df7d15958f10169448647650f73bb889ca1fc432fd8a5f6b26278e32165bdb4dc14071266dd1b47782f4c93c563fe4a917d2656af0ba15453697a518c3e1fd169b1c53fa755f530cb43c01000000b80000000000000014010000030000006cbadba9dd3dc276d15d7bdbb346952ff931f007c4525e33c52cd8451ffe3cf1d078efc9dec7a09f93bba9814b65654f22b7f25a43126d4dc64f556e063d502421dc3b8513b06a2008096451b68fc101ed07a2b9c1c91c1a95eec91a99f0734f93c5565364993b086893ab1a06892b45adc36fdbcd0ecd8d73a9851eb811c2143f4bd9e5546a1f2e06abc9b4f7cdedfb34721abf2db555fb0de85a9943603a383a63a400000000007800000000000000110100000900000093e0e9cc93d74b0f9bbbb4ddc39b630330077ed7cd75898e59a8ed04a030db7617ddc5aa4f2e40e16e8636913f0bbd12dbf496c7c7558d9188b6a8b8a4e3b0b1ecb647fe01bb8930c514fbf465db1787ead6c6fe9f37ed072dae4daa72878e48aa1a000000000000100000000000000001000000e37b000028000000000000000000000000000000d7ef081a4e412d77969dcff9b227b114a4991dc000000000c0"], 0x438}, 0x0, 0x12f4c4729764eade, 0x1}) io_uring_enter(r3, 0x3516, 0xa00100, 0x0, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x800) recvmmsg(0xffffffffffffffff, &(0x7f0000007700), 0x318, 0xfc0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000004c0), 0x4) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000200)={0x0, 0xf000, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010004000000010000000900000030000380140002007663616e30010000000000000000000008000300000000000800010001000000060007004e200000"], 0x44}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x10000000000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000580)=ANY=[@ANYBLOB="24010000160011092cbd7000fedbdf25ac1414aa000000000000000000000000fc0200000000000000000000000000004e2400004e2400060a0020a03c00", @ANYRESOCT=r8, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000ffffac1414bb000004d46c0000000000000000000000000000000000000109000000000000000000000000000000ffffffffffffff7f00000000003000000902008000800000000000000000000001800000000000004ed2000000000000ccacffffffffffff0500000000000000030000000000000039640000000000000600000009000000060000002bbd7000073500000a00014148000000000000000400000004"], 0x124}, 0x1, 0x0, 0x0, 0xc804}, 0x24040000) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000800)={0x2bc, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5d9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0xffffffffffffff36, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcb1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x0, 0x4, 0xf}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ffeffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5523}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x60}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7aed}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5cd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9d}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x80000001, @mcast1, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1ff, @private0, 0x1}}}}]}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x4000841}, 0x40000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x0, 0x69, 0x5, 0x6}]}) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000100)}, 0x5}], 0x1, 0x40000100, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000100)={0x1, 0x4, 0x0, 0x0}) 521.272745ms ago: executing program 0 (id=1457): syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0404"], 0xd) r0 = socket(0x1000000010, 0x80802, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000002a80), r1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000007000010000000000000000000700", @ANYRES32=0x0, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}}, 0x0) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10b, 0x0, &(0x7f00000003c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_enter(r2, 0x7277, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') readv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x14}], 0x1) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="0cde60ff158b93700f1f3eb9ceff383364a55021319a3afa4ae2d620380af6ec69b42d0bd6e2568bee6dc26c9687c6e71271bbcbbb3a42", 0x37) 458.274782ms ago: executing program 5 (id=1458): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x80000001}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$vga_arbiter(r1, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000090601080000000000000000050000000900020073797a3100000000050001000700000020000780060004404e21050005000700ff0000000c000180080001400a"], 0x48}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x2000c880}, 0x48084) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r4, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86ddf06712e90009118db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000d40)='$\x00\x00\x00\x00\x00', 0x6}, {&(0x7f0000000c80)="a43b2eaab40000000000f294601e8cde77cff5", 0x13}], 0x3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x288, 0x2e, 0x1, 0x70bd27, 0x0, {0x3}, [@nested={0x272, 0xef, 0x0, 0x1, [@nested={0x156, 0x2b, 0x0, 0x1, [@nested={0x4, 0xa3}, @generic="46d3785874f5aed5a3b21f94cc8941888b8794c5ca734cd993791e6082011f87b2ccb1c8909d08221f0f0c3493c9", @typed={0x8, 0x116, 0x0, 0x0, @fd=r0}, @typed={0xc, 0x51, 0x0, 0x0, @u64=0x5}, @generic="69d7af39142dd29aff66878050354a0733e213f4d2e0f08fe6335e5b240ca16d2a060a4fc5ea5de763298d90e437f02f35dbb58d315aa640beb2a6750d095551382244ad6ff3f6ca32d51c1bca477b2cbb94131b2c13071f1a75ea80b6b28304eb1701519aa367050dee563c67193602db044afc399ee84d55210c6731fa988c87f692187d95089a733829353bc71c7cc23c7c9ebd46a3819d57262fd5bb3763a24ffe60318aa6739e0bb89eae0c09ca59fbd310e671593b2ce1861aa0f35ff8bcdf37513dd04cdf765be9e83a4b51d59a4c72d1ab08e2e610056c73f1e3a0c1fa82df4c86b3a29a0750bf74", @generic="3ed7483c6ab4578eb52952894ce0dbd785e4900afc6df334", @typed={0x8, 0x2, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x26}}]}, @generic="966c79f1df229447df6f1239d651a85727a15b7bf228619c21b6bef8a2fadd0380d169e09327a0c175a10bd68d6b", @nested={0xe6, 0x123, 0x0, 0x1, [@nested={0x4, 0x34}, @typed={0x8, 0x59, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x4, 0xa7}, @generic="cf64e7e29c73e3173dad2d75b8da68a5e01b3544d7add49c88a09f9c84a39df397855f36bebf373457feeb5a1e46d5e3c3b4bb8ae112861860a59a1221f9ebbcbc2632b40ac69ab9e1d95ebe626e3921bdc61d9497fe67f21ce0fb466fa150721828823508ca1fe3adbddb31a29aaeda8695a12c2ee8a99d306dc51cd6de3e78b34ad0f5cb1aa41b1547c5be19b3fc2bafa760bbcaaeffc81c485dc3d83860a1be8178c1580c056dfc581089dee166cc2036e430d6e6e2d8ca852eb3474b6f7569211941176e8cf86a22362aa41c533e8f69"]}]}]}, 0x288}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 256.563121ms ago: executing program 0 (id=1459): syz_open_dev$sndctrl(&(0x7f0000000000), 0x3, 0x68100) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r1 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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", @ANYRES8=r0]) 172.119462ms ago: executing program 2 (id=1460): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {r2, 0x4000, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @private=0xa010102}, @in={0x2, 0x4e22, @loopback}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000240)={0x13, 0xe, 0xfa00, {&(0x7f0000000a00), r2, 0x2}}, 0x18) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r3, 0x5602, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) syz_open_dev$I2C(&(0x7f0000000000), 0x7, 0x111040) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) pread64(r5, 0x0, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, 0x0) readahead(r0, 0x8, 0xa546) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB], 0xf) 62.416894ms ago: executing program 5 (id=1461): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="100000f0ffff0000000000000000", 0x0, 0xe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) 5.467887ms ago: executing program 2 (id=1462): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={&(0x7f0000000440)=@newtaction={0x14, 0x16, 0xe67c0fb78d4e40bf, 0xfffffffe, 0x25dfdbfc, {0xa}}, 0x14}}, 0x10) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000280)=0x7, 0x4) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x44}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) syz_emit_ethernet(0xda, &(0x7f0000000480)={@local, @remote, @val={@void, {0x8100, 0x6, 0x1, 0x3}}, {@ipv6={0x86dd, @dccp_packet={0x7, 0x6, "91749c", 0xa0, 0x21, 0x1, @private2, @ipv4={'\x00', '\xff\xff', @multicast2}, {[@hopopts={0x33, 0x9, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0xc}, @hao={0xc9, 0x10, @remote}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x18, {0x2, 0x4, 0x90, 0x4, [0x88a5, 0x1]}}, @jumbo={0xc2, 0x4, 0x7}]}, @dstopts={0xff, 0x1, '\x00', [@pad1, @enc_lim, @ra={0x5, 0x2, 0x6}]}, @hopopts={0x2b, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @enc_lim={0x4, 0x1, 0x37}, @enc_lim={0x4, 0x1, 0x80}]}, @hopopts={0x2}], {{0x4e22, 0x4e20, 0x4, 0x1, 0x8, 0x0, 0x0, 0x4, 0x0, "148a96", 0x9, "1f8e33"}}}}}}}, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c9d064bbd27b2aa57459cff33a3a9831ac46b8829b48fff3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) keyctl$setperm(0x5, r5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x12, &(0x7f00000000c0)={@random="dfa473846208", @random="cc4a363554da", @val={@void, {0x8100, 0x2, 0x1}}, {@generic={0x8906}}}, 0x0) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r6 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000002c0)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, 0x0) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$uac1(0x2, 0xb2, &(0x7f0000000a00)=ANY=[@ANYBLOB="12010003000000106b1d01014000010203010902a000030156c0020904000000010100000a24010101bb02010211240601040507000a00080003000200050524050e0f0f2406020504020002000a000900040a2404020104000000120924060502010600000924030303030505"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 5 (id=1463): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$cgroup_pid(r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r1, 0x0, 0x4000000) syz_init_net_socket$netrom(0x6, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r5, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Capture'], 0x86) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) dup3(r6, r5, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000000a4000000060a010400000000000000000100000008000b40000000007c000480"], 0x118}}, 0x0) kernel console output (not intermixed with test programs): 9597] hsr_slave_0: entered promiscuous mode [ 386.434813][ T9597] hsr_slave_1: entered promiscuous mode [ 386.482347][ T9597] debugfs: 'hsr0' already exists in 'hsr' [ 386.494835][ T9597] Cannot create hsr debugfs directory [ 386.651205][ T9641] netlink: 'syz.4.1003': attribute type 10 has an invalid length. [ 386.661340][ T9641] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1003'. [ 386.987103][ T5872] usb 2-1: USB disconnect, device number 32 [ 387.003390][ T5811] Bluetooth: hci0: connection err: -111 [ 387.046030][ T9649] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1006'. [ 387.573966][ T9651] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65436 sclass=netlink_route_socket pid=9651 comm=syz.0.1006 [ 388.063963][ T9597] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 388.166618][ T9663] netlink: 612 bytes leftover after parsing attributes in process `syz.4.1008'. [ 388.203406][ T5811] Bluetooth: hci5: command tx timeout [ 388.299722][ T9597] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 388.309675][ T9666] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1008'. [ 388.552238][ T9597] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 388.645640][ T9597] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 388.655377][ T9664] netlink: 'syz.2.1009': attribute type 1 has an invalid length. [ 388.655408][ T9664] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1009'. [ 389.539947][ T9672] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1010'. [ 389.629002][ T9597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.639326][ T9597] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.642105][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.642197][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.707246][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.707292][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.737935][ T9597] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 389.737951][ T9597] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 390.336821][ T5811] Bluetooth: hci5: command tx timeout [ 390.545547][ T9597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.622224][ T9689] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1013'. [ 390.629652][ T9689] netlink: 'syz.1.1013': attribute type 1 has an invalid length. [ 390.629666][ T9689] netlink: 'syz.1.1013': attribute type 2 has an invalid length. [ 390.629673][ T9689] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1013'. [ 390.821462][ T9699] netlink: 'syz.0.1015': attribute type 10 has an invalid length. [ 390.821514][ T9699] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1015'. [ 391.031201][ T29] audit: type=1400 audit(1770907582.624:469): avc: denied { create } for pid=9701 comm="syz.2.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 391.038005][ T29] audit: type=1400 audit(1770907582.634:470): avc: denied { bind } for pid=9701 comm="syz.2.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 391.038412][ T29] audit: type=1400 audit(1770907582.634:471): avc: denied { connect } for pid=9701 comm="syz.2.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 391.038819][ T29] audit: type=1400 audit(1770907582.634:472): avc: denied { write } for pid=9701 comm="syz.2.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 391.911852][ T5821] Bluetooth: hci2: connection err: -111 [ 391.962469][ T5877] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 391.991747][ T9597] veth0_vlan: entered promiscuous mode [ 392.003911][ T9718] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65436 sclass=netlink_route_socket pid=9718 comm=syz.1.1020 [ 392.021845][ T9597] veth1_vlan: entered promiscuous mode [ 392.113691][ T9597] veth0_macvtap: entered promiscuous mode [ 392.133466][ T9597] veth1_macvtap: entered promiscuous mode [ 392.225080][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.237475][ T5877] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 392.252096][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.265194][ T9597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.272707][ T5877] usb 1-1: config 0 descriptor?? [ 392.352357][ T9726] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1022'. [ 392.368098][ T5821] Bluetooth: hci5: command tx timeout [ 392.677608][ T9597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.703543][ T9711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.712189][ T9711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.723219][ T5819] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 392.749133][ T5931] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.765213][ T5877] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor [ 392.778069][ T5931] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.805210][ T5877] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0013/input/input36 [ 392.825133][ T5931] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.835536][ T5931] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.033882][ T5819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.070587][ T5819] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 393.699921][ T5819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.710401][ T5819] usb 5-1: config 0 descriptor?? [ 393.727272][ T9734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.792705][ T9734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.816568][ T5877] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 393.997427][ T3436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.010290][ T5877] usb 1-1: USB disconnect, device number 28 [ 394.039015][ T3436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.080614][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.091978][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.102574][ T29] audit: type=1400 audit(1770907585.704:473): avc: denied { mounton } for pid=9597 comm="syz-executor" path="/root/syzkaller.mSzcBl/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 394.115744][ T9738] fido_id[9738]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 394.128012][ T29] audit: type=1400 audit(1770907585.704:474): avc: denied { mounton } for pid=9597 comm="syz-executor" path="/root/syzkaller.mSzcBl/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 394.158771][ T9721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.171357][ T29] audit: type=1400 audit(1770907585.714:475): avc: denied { mounton } for pid=9597 comm="syz-executor" path="/root/syzkaller.mSzcBl/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=22939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 394.205949][ T29] audit: type=1400 audit(1770907585.784:476): avc: denied { mounton } for pid=9597 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 394.208545][ T9721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.327649][ T5819] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor [ 394.357577][ T5819] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0014/input/input37 [ 394.616153][ T5819] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 394.635354][ C1] keyboard: can't emulate rawmode for keycode 240 [ 394.642947][ C1] keyboard: can't emulate rawmode for keycode 240 [ 395.210047][ T5886] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 395.309257][ T9721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.392419][ T5886] usb 6-1: Using ep0 maxpacket: 8 [ 395.399398][ T9721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.418039][ T5886] usb 6-1: unable to get BOS descriptor or descriptor too short [ 395.430347][ T5886] usb 6-1: config 0 has an invalid interface number: 88 but max is 0 [ 395.438836][ T5886] usb 6-1: config 0 has no interface number 0 [ 395.446140][ T5886] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 395.457505][ T5886] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 395.473231][ T5886] usb 6-1: config 0 interface 88 has no altsetting 0 [ 395.480999][ T5886] usb 6-1: language id specifier not provided by device, defaulting to English [ 395.484556][ T5877] usb 5-1: USB disconnect, device number 33 [ 395.490276][ C1] keytouch 0003:0926:3333.0014: usb_submit_urb(ctrl) failed: -19 [ 395.506018][ T5886] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 395.522445][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 395.558527][ T5886] usb 6-1: Product: syz [ 395.607345][ T5886] usb 6-1: Manufacturer: 焗뜭ퟸ㈓Ⳗìºè‘´äˆ¯é›ãš«á›µæ·²î«âŠ–╵՛옾ꬶٽåƒê¼—à¹ç¶•ç€Ÿá€¦ì¨î¹´ä§§Â§íˆ¶æ®ƒí‘¯ã©¨í… è¦Žë済꧴ײַ咥â£ÑƒçƒªãŽ³æ€´â ­æŒìˆ·ã¿ì—綑ë˜à¬±á©†å¤—ä‘뚽艧 [ 395.616055][ T9760] netlink: 'syz.1.1028': attribute type 12 has an invalid length. [ 395.665076][ T5886] usb 6-1: SerialNumber: syz [ 395.735967][ T9763] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1030'. [ 395.810668][ T9763] netlink: 'syz.0.1030': attribute type 1 has an invalid length. [ 395.818618][ T9763] netlink: 'syz.0.1030': attribute type 2 has an invalid length. [ 395.826467][ T9763] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1030'. [ 396.053272][ T5886] usb 6-1: config 0 descriptor?? [ 396.265840][ T9742] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 396.811515][ T5821] Bluetooth: hci4: connection err: -111 [ 396.832592][ T9770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1032'. [ 396.926856][ T9771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65436 sclass=netlink_route_socket pid=9771 comm=syz.4.1032 [ 397.363860][ T9777] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1033'. [ 397.881230][ T9779] netlink: 'syz.2.1034': attribute type 10 has an invalid length. [ 397.889378][ T9779] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1034'. [ 398.248745][ T5886] input: 焗뜭ퟸ㈓Ⳗìºè‘´äˆ¯é›ãš«á›µæ·²î«âŠ–╵՛옾ꬶٽåƒê¼—à¹ç¶•ç€Ÿá€¦ì¨î¹´ä§§Â§íˆ¶æ®ƒí‘¯ã©¨í… è¦Žë済꧴ײַ咥â£ÑƒçƒªãŽ as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.88/input/input38 [ 398.380066][ T9783] fuse: Unknown parameter '’3' [ 398.419845][ T5886] usb 6-1: USB disconnect, device number 2 [ 399.110087][ T5981] udevd[5981]: Error opening device "/dev/input/event4": No such file or directory [ 399.119916][ T5981] udevd[5981]: Unable to EVIOCGABS device "/dev/input/event4" [ 399.128516][ T5981] udevd[5981]: Unable to EVIOCGABS device "/dev/input/event4" [ 399.262245][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 399.262262][ T29] audit: type=1400 audit(1770907590.854:477): avc: denied { write } for pid=9791 comm="syz.1.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 399.561759][ T9802] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1042'. [ 399.681580][ T9803] netlink: 'syz.0.1042': attribute type 1 has an invalid length. [ 399.689947][ T9803] netlink: 'syz.0.1042': attribute type 2 has an invalid length. [ 399.697974][ T9803] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1042'. [ 400.134532][ T5821] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 400.202353][ T5886] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 400.332486][ T5886] usb 6-1: device descriptor read/64, error -71 [ 400.584748][ T9812] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1044'. [ 400.612802][ T5886] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 400.705606][ T29] audit: type=1400 audit(1770907592.304:478): avc: denied { read } for pid=9811 comm="syz.0.1044" path="socket:[23118]" dev="sockfs" ino=23118 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 400.832613][ T5886] usb 6-1: device descriptor read/64, error -71 [ 400.952619][ T5886] usb usb6-port1: attempt power cycle [ 400.972510][ T5819] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 400.998191][ T29] audit: type=1326 audit(1770907592.594:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9820 comm="syz.4.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03caf9bf79 code=0x7ffc0000 [ 401.080673][ T5821] Bluetooth: hci2: connection err: -111 [ 401.090345][ T9827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1048'. [ 401.095312][ T29] audit: type=1326 audit(1770907592.664:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9820 comm="syz.4.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03caf9bf79 code=0x7ffc0000 [ 401.332686][ T5886] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 401.424482][ T5819] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 401.451660][ T5886] usb 6-1: device descriptor read/8, error -71 [ 401.458172][ T29] audit: type=1326 audit(1770907592.674:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9820 comm="syz.4.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03caf9bf79 code=0x7ffc0000 [ 401.458218][ T29] audit: type=1326 audit(1770907592.674:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9820 comm="syz.4.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03caf9bf79 code=0x7ffc0000 [ 401.525443][ T9827] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65436 sclass=netlink_route_socket pid=9827 comm=syz.1.1048 [ 401.545171][ T29] audit: type=1326 audit(1770907592.674:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9820 comm="syz.4.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f03caf95d97 code=0x7ffc0000 [ 401.561495][ T5819] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 401.659832][ T29] audit: type=1326 audit(1770907592.674:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9820 comm="syz.4.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f03caf3d399 code=0x7ffc0000 [ 401.738308][ T5819] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 401.754095][ T5819] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 401.767218][ T5819] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 401.776309][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.052024][ T29] audit: type=1326 audit(1770907592.674:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9820 comm="syz.4.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03caf9bf79 code=0x7ffc0000 [ 402.078703][ T29] audit: type=1326 audit(1770907592.674:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9820 comm="syz.4.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f03caf9bf79 code=0x7ffc0000 [ 402.110193][ T5819] usb 3-1: config 0 descriptor?? [ 402.503151][ T9846] fuse: Bad value for 'fd' [ 402.532534][ T9846] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 402.599048][ T9846] erofs (device loop0): cannot find valid erofs superblock [ 402.881955][ T9849] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1055'. [ 402.991298][ T9849] netlink: 'syz.4.1055': attribute type 1 has an invalid length. [ 402.999341][ T9849] netlink: 'syz.4.1055': attribute type 2 has an invalid length. [ 403.007272][ T9849] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1055'. [ 403.159703][ T5819] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 403.256050][ T5821] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 404.334986][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 404.334990][ T9867] syzkaller0: entered promiscuous mode [ 404.335002][ T29] audit: type=1400 audit(1770907595.934:497): avc: denied { ioctl } for pid=9866 comm="syz.0.1061" path="socket:[23273]" dev="sockfs" ino=23273 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 404.341074][ T9867] syzkaller0: entered allmulticast mode [ 404.408947][ T9869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1062'. [ 404.421374][ T29] audit: type=1400 audit(1770907596.014:498): avc: denied { ioctl } for pid=9868 comm="syz.1.1062" path="socket:[23716]" dev="sockfs" ino=23716 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 404.653115][ T5872] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 404.926173][ T5872] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 404.946441][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 404.992465][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 405.020433][ T5872] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 405.061301][ T5872] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 405.079979][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.107701][ T5872] usb 5-1: config 0 descriptor?? [ 405.162888][ T5865] usb 3-1: reset high-speed USB device number 35 using dummy_hcd [ 405.372603][ T5886] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 405.575236][ T5872] plantronics 0003:047F:FFFF.0016: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 405.639976][ T5886] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 405.662725][ T5886] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 405.713822][ T3128] block nbd0: Possible stuck request ffff888027690000: control (read@0,1024B). Runtime 90 seconds [ 405.724676][ T3128] block nbd0: Possible stuck request ffff888027690200: control (read@1024,1024B). Runtime 90 seconds [ 405.735820][ T3128] block nbd0: Possible stuck request ffff888027690400: control (read@2048,1024B). Runtime 90 seconds [ 405.747020][ T3128] block nbd0: Possible stuck request ffff888027690600: control (read@3072,1024B). Runtime 90 seconds [ 405.759770][ T5886] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 405.772367][ T5914] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 405.779056][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 405.800261][ T5886] usb 2-1: SerialNumber: syz [ 405.850293][ T5886] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 405.862809][ T5886] usb-storage 2-1:1.0: USB Mass Storage device detected [ 405.881078][ T5886] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 405.966152][ T5914] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 405.975366][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.985754][ T5914] usb 6-1: Product: syz [ 405.989915][ T5914] usb 6-1: Manufacturer: syz [ 405.995307][ T5914] usb 6-1: SerialNumber: syz [ 406.172357][ T5877] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 406.302417][ T5865] usb 3-1: device descriptor read/64, error -71 [ 406.325562][ T5877] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 406.340224][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.356694][ T5877] usb 1-1: Product: syz [ 406.367616][ T5877] usb 1-1: Manufacturer: syz [ 406.376233][ T5877] usb 1-1: SerialNumber: syz [ 406.447625][ T5914] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 406.460489][ T9892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.470517][ T9892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.478430][ T5914] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 406.542362][ T5865] usb 3-1: reset high-speed USB device number 35 using dummy_hcd [ 406.553531][ T5865] usb 3-1: device reset changed ep0 maxpacket size! [ 406.564360][ T5819] usb 3-1: USB disconnect, device number 35 [ 406.732362][ T5819] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 406.795194][ T5877] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 406.807487][ T5877] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 406.808314][ T9904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.831387][ T9904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.902471][ T5819] usb 3-1: Using ep0 maxpacket: 32 [ 406.909474][ T5819] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 406.918225][ T5819] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 406.927814][ T5819] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 406.937828][ T5819] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 406.947902][ T5819] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 406.958305][ T5819] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 406.971550][ T5819] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 406.980634][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.991176][ T5819] usb 3-1: config 0 descriptor?? [ 407.097937][ T9892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.106825][ T9892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.456931][ T9904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.467960][ T9904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.516843][ T5914] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 407.529147][ T5914] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 407.540322][ T5914] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 407.552077][ T5914] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 407.605922][ T5914] usb 5-1: USB disconnect, device number 34 [ 408.013536][ T5877] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 408.042061][ T5877] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 408.080895][ T5877] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 408.228130][ T5877] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 408.247073][ T5865] usb 2-1: USB disconnect, device number 33 [ 408.694551][ T5821] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 408.738107][ T5819] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 36 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 408.797695][ T5819] usb 3-1: USB disconnect, device number 36 [ 408.825459][ T5819] usblp0: removed [ 409.791520][ T9931] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1080'. [ 409.835133][ T5819] usb 6-1: USB disconnect, device number 7 [ 410.083128][ T118] usb 1-1: USB disconnect, device number 29 [ 410.594768][ T29] audit: type=1400 audit(1770907602.194:499): avc: denied { name_bind } for pid=9939 comm="syz.2.1083" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 411.218529][ T5877] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 411.663024][ T5877] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 411.675447][ T9960] tipc: Started in network mode [ 411.680291][ T9960] tipc: Node identity 4, cluster identity 4711 [ 411.685007][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 411.713505][ T9960] tipc: Node number set to 4 [ 411.721455][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 411.816628][ T5877] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 411.829933][ T5877] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 411.839114][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.858315][ T5877] usb 5-1: config 0 descriptor?? [ 411.942240][ T9968] o2cb: This node has not been configured. [ 411.948843][ T9968] o2cb: Cluster check failed. Fix errors before retrying. [ 411.956037][ T9968] (syz.2.1091,9968,1):user_dlm_register:674 ERROR: status = -22 [ 411.963854][ T9968] (syz.2.1091,9968,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 413.332205][ T9973] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1093'. [ 413.363184][ T5877] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 413.694480][ T5819] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 413.710911][ T9972] netlink: 'syz.5.1093': attribute type 1 has an invalid length. [ 413.718676][ T9972] netlink: 'syz.5.1093': attribute type 2 has an invalid length. [ 413.726376][ T9972] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1093'. [ 414.234425][ T5819] usb 3-1: device descriptor read/64, error -71 [ 414.552597][ T5819] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 414.712420][ T5819] usb 3-1: device descriptor read/64, error -71 [ 414.835871][ T5819] usb usb3-port1: attempt power cycle [ 415.192421][ T5819] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 415.233920][ T5819] usb 3-1: device descriptor read/8, error -71 [ 415.698478][ T5819] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 415.723138][ T5819] usb 3-1: device descriptor read/8, error -71 [ 415.899344][ T5819] usb usb3-port1: unable to enumerate USB device [ 416.182375][ T5877] usb 5-1: reset high-speed USB device number 35 using dummy_hcd [ 416.222594][ T5819] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 416.363253][ T5877] usb 5-1: device firmware changed [ 416.402425][ T5865] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 416.404300][ T118] usb 5-1: USB disconnect, device number 35 [ 416.418200][ T5819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.474332][ T5819] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 416.523821][ T5819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.592432][ T5865] usb 6-1: Using ep0 maxpacket: 32 [ 416.642256][ T5865] usb 6-1: config 0 has an invalid interface number: 16 but max is 0 [ 416.660633][ T5819] usb 1-1: config 0 descriptor?? [ 416.673885][ T5865] usb 6-1: config 0 has no interface number 0 [ 416.700361][ T5865] usb 6-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 416.720689][ T5865] usb 6-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 416.739110][ T5865] usb 6-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 417.862365][ T118] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 418.169603][ T5865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.179551][T10002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.202775][T10002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.210754][ T5865] usb 6-1: Product: syz [ 418.215020][ T5865] usb 6-1: Manufacturer: syz [ 418.219634][ T5865] usb 6-1: SerialNumber: syz [ 418.234144][ T118] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.234876][ T5819] keytouch 0003:0926:3333.0018: fixing up Keytouch IEC report descriptor [ 418.248901][ T118] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 418.257205][ T5865] usb 6-1: config 0 descriptor?? [ 418.270260][ T118] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.278833][T10004] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 418.294380][ T118] usb 5-1: config 0 descriptor?? [ 418.302952][ T5865] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 418.313405][ T5819] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0018/input/input42 [ 418.448071][ T5819] keytouch 0003:0926:3333.0018: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 418.453600][ T5877] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 418.506227][ C1] keyboard: can't emulate rawmode for keycode 240 [ 418.513017][ C1] keyboard: can't emulate rawmode for keycode 240 [ 418.519443][ C1] keyboard: can't emulate rawmode for keycode 240 [ 418.525866][ C1] keyboard: can't emulate rawmode for keycode 240 [ 418.533005][ C1] keyboard: can't emulate rawmode for keycode 240 [ 418.539553][ C1] keyboard: can't emulate rawmode for keycode 240 [ 418.545962][ C1] keyboard: can't emulate rawmode for keycode 240 [ 418.552676][ C1] keyboard: can't emulate rawmode for keycode 240 [ 418.559114][ C1] keyboard: can't emulate rawmode for keycode 240 [ 418.565524][ C1] keyboard: can't emulate rawmode for keycode 240 [ 418.739578][ T9998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.755242][ T9998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.774463][ T5877] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 418.966572][ T9998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.983046][ T5914] usb 6-1: USB disconnect, device number 8 [ 418.988991][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.002467][T10002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.002719][ T9998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.014293][T10002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.025279][ T5877] usb 2-1: Product: syz [ 419.031128][ T5877] usb 2-1: Manufacturer: syz [ 419.035957][ T5877] usb 2-1: SerialNumber: syz [ 419.051391][ T5819] usb 1-1: USB disconnect, device number 30 [ 419.075269][ T118] keytouch 0003:0926:3333.0019: fixing up Keytouch IEC report descriptor [ 419.099915][ T118] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0019/input/input43 [ 419.370578][T10025] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1108'. [ 419.505723][ T118] keytouch 0003:0926:3333.0019: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 419.570737][T10024] netlink: 'syz.2.1108': attribute type 1 has an invalid length. [ 419.578588][T10024] netlink: 'syz.2.1108': attribute type 2 has an invalid length. [ 419.586375][T10024] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1108'. [ 419.798698][T10017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.807637][ T5877] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 419.830344][T10017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.842571][ T5877] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 419.884504][ T118] usb 5-1: USB disconnect, device number 36 [ 420.250051][T10038] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1111'. [ 420.392700][ T5914] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 420.497353][T10017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.570246][ T5914] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 420.582843][T10017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.622029][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 420.717967][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 420.806151][ T5914] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 420.956975][ T5914] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 421.066539][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.067032][ T5821] Bluetooth: hci0: unexpected event for opcode 0x2003 [ 421.160740][ T5914] usb 3-1: config 0 descriptor?? [ 421.353130][ T5877] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 422.482393][ T5877] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 422.517898][ T5877] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 422.559276][ T5877] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 422.584817][ T5877] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 422.692525][ T5877] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 422.862740][ T5877] usb 2-1: USB disconnect, device number 34 [ 422.908946][ T5914] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 423.113297][T10069] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1120'. [ 423.303900][T10069] netlink: 'syz.5.1120': attribute type 1 has an invalid length. [ 423.311772][T10069] netlink: 'syz.5.1120': attribute type 2 has an invalid length. [ 423.320254][T10069] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1120'. [ 423.426277][ T5819] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 423.572353][ T5819] usb 2-1: Using ep0 maxpacket: 32 [ 423.586237][ T5819] usb 2-1: config 0 has an invalid interface number: 16 but max is 0 [ 423.657503][ T5819] usb 2-1: config 0 has no interface number 0 [ 423.701833][ T5819] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 423.761481][ T5819] usb 2-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 423.854349][ T5819] usb 2-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 423.898714][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.943364][ T5819] usb 2-1: Product: syz [ 423.951931][ T5819] usb 2-1: Manufacturer: syz [ 423.962973][ T5819] usb 2-1: SerialNumber: syz [ 423.983515][ T5819] usb 2-1: config 0 descriptor?? [ 423.995105][T10072] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 424.015378][ T5819] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 424.782487][ T5865] usb 3-1: reset high-speed USB device number 41 using dummy_hcd [ 425.197095][ T5914] usb 2-1: USB disconnect, device number 35 [ 425.312350][T10092] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1124'. [ 425.818505][ T5821] Bluetooth: hci0: unexpected event for opcode 0x2003 [ 425.822774][ T5886] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 425.880736][ T5821] Bluetooth: hci0: connection err: -111 [ 425.978169][T10100] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65436 sclass=netlink_route_socket pid=10100 comm=syz.0.1128 [ 425.993744][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.011540][ T5886] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 426.024653][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.096832][ T5886] usb 6-1: config 0 descriptor?? [ 426.109266][ T5819] usb 3-1: USB disconnect, device number 41 [ 426.253276][T10107] netlink: 'syz.2.1129': attribute type 1 has an invalid length. [ 426.268177][T10107] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1129'. [ 426.362710][ T5914] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 426.596898][T10087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.624435][T10087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.703733][T10087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.733014][T10087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.735577][ T5914] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 426.743473][ T5886] keytouch 0003:0926:3333.001B: fixing up Keytouch IEC report descriptor [ 427.047387][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.063804][ T5914] usb 1-1: Product: syz [ 427.071214][ T5914] usb 1-1: Manufacturer: syz [ 427.075441][ T5886] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.001B/input/input45 [ 427.096839][ T5914] usb 1-1: SerialNumber: syz [ 427.326380][ T5865] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 427.336158][ T5886] keytouch 0003:0926:3333.001B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 427.551294][T10106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.762242][ T5914] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 427.772911][ T5865] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 427.788846][ T5914] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 427.794233][ T5886] usb 6-1: USB disconnect, device number 9 [ 427.811792][T10106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.826275][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 427.857627][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 427.870059][ T5865] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 427.887572][ T5865] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 427.897567][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.928873][ T5865] usb 5-1: config 0 descriptor?? [ 428.359535][ T5865] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 428.493436][T10106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.569472][T10106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.583765][T10132] o2cb: This node has not been configured. [ 428.589613][T10132] o2cb: Cluster check failed. Fix errors before retrying. [ 428.597178][T10132] (syz.2.1137,10132,0):user_dlm_register:674 ERROR: status = -22 [ 428.604968][T10132] (syz.2.1137,10132,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 429.083474][T10142] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1139'. [ 429.515895][ T5821] Bluetooth: hci1: connection err: -111 [ 429.522188][T10144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1140'. [ 429.605072][T10145] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65436 sclass=netlink_route_socket pid=10145 comm=syz.2.1140 [ 429.639812][ T5914] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 429.707817][ T5914] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 429.726397][ T5914] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 429.755878][ T5914] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 429.773007][ T5914] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 429.787731][ T5914] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 429.799115][ T5914] usb 1-1: USB disconnect, device number 31 [ 429.870654][ T5821] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 430.154458][ T118] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 430.428988][ T118] usb 6-1: Using ep0 maxpacket: 32 [ 430.549668][ T118] usb 6-1: config 0 has an invalid interface number: 16 but max is 0 [ 430.561501][ T118] usb 6-1: config 0 has no interface number 0 [ 430.592327][ T118] usb 6-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 430.607426][ T118] usb 6-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 430.623921][ T118] usb 6-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 430.662347][ T118] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.682366][ T118] usb 6-1: Product: syz [ 430.692339][ T118] usb 6-1: Manufacturer: syz [ 430.696958][ T118] usb 6-1: SerialNumber: syz [ 430.777510][ T118] usb 6-1: config 0 descriptor?? [ 430.802123][T10148] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 430.828954][ T118] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 431.207468][ T5886] usb 5-1: USB disconnect, device number 37 [ 431.718979][ T118] usb 6-1: USB disconnect, device number 10 [ 432.237299][T10170] netlink: 'syz.4.1148': attribute type 1 has an invalid length. [ 432.248136][T10170] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1148'. [ 432.302336][ T5877] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 432.494684][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.512917][ T5877] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 432.603357][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.646500][ T5877] usb 3-1: config 0 descriptor?? [ 432.746538][T10186] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1151'. [ 433.078778][T10174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.142802][T10174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.239541][T10174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.257491][T10189] o2cb: This node has not been configured. [ 433.263389][T10189] o2cb: Cluster check failed. Fix errors before retrying. [ 433.270512][T10189] (syz.5.1152,10189,1):user_dlm_register:674 ERROR: status = -22 [ 433.278938][T10189] (syz.5.1152,10189,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 433.282742][T10174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.375816][ T5877] keytouch 0003:0926:3333.001D: fixing up Keytouch IEC report descriptor [ 433.402233][ T5877] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.001D/input/input47 [ 433.438293][ T5821] Bluetooth: hci0: connection err: -111 [ 433.442066][T10191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1153'. [ 433.511141][ T5877] keytouch 0003:0926:3333.001D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 433.528075][T10192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65436 sclass=netlink_route_socket pid=10192 comm=syz.0.1153 [ 433.606366][ C0] kbd_keycode: 62 callbacks suppressed [ 433.606383][ C0] keyboard: can't emulate rawmode for keycode 240 [ 433.618518][ C0] keyboard: can't emulate rawmode for keycode 240 [ 433.848693][ T5877] usb 3-1: USB disconnect, device number 42 [ 434.462586][ T5865] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 434.612441][ T5886] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 434.752442][ T5865] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 434.761520][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.771384][ T5865] usb 1-1: Product: syz [ 434.775603][ T5865] usb 1-1: Manufacturer: syz [ 434.780240][ T5865] usb 1-1: SerialNumber: syz [ 435.144035][ T5886] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 435.155717][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 435.166885][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 435.176719][ T5886] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 435.332026][T10203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.396328][T10203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.633743][ T5865] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 435.645720][ T5886] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 435.659624][ T5865] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 435.671853][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.684158][ T5886] usb 2-1: config 0 descriptor?? [ 436.372777][ T3128] block nbd0: Possible stuck request ffff888027690000: control (read@0,1024B). Runtime 120 seconds [ 436.384072][ T3128] block nbd0: Possible stuck request ffff888027690200: control (read@1024,1024B). Runtime 120 seconds [ 436.395435][ T3128] block nbd0: Possible stuck request ffff888027690400: control (read@2048,1024B). Runtime 120 seconds [ 436.406697][ T3128] block nbd0: Possible stuck request ffff888027690600: control (read@3072,1024B). Runtime 120 seconds [ 436.577116][ T5886] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 436.704802][T10203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.730590][ T5821] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 436.731264][T10203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.410191][T10241] netlink: 'syz.4.1165': attribute type 1 has an invalid length. [ 437.418018][ T5865] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 437.443226][T10241] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1165'. [ 437.465542][ T5865] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 437.466921][ T118] usb 2-1: USB disconnect, device number 36 [ 437.479047][ T5865] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 437.509931][ T5865] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 437.563697][ T5821] Bluetooth: hci5: connection err: -111 [ 437.599298][ T5865] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 437.612564][T10244] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1166'. [ 437.654954][ T5865] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 437.742091][ T5865] usb 1-1: USB disconnect, device number 32 [ 437.867674][T10245] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65436 sclass=netlink_route_socket pid=10245 comm=syz.5.1166 [ 438.151624][T10249] o2cb: This node has not been configured. [ 438.159619][T10249] o2cb: Cluster check failed. Fix errors before retrying. [ 438.169618][T10249] (syz.4.1167,10249,0):user_dlm_register:674 ERROR: status = -22 [ 438.177381][T10249] (syz.4.1167,10249,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 439.881202][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.332366][ T5877] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 440.580363][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.690836][T10273] netlink: 'syz.2.1175': attribute type 1 has an invalid length. [ 440.698749][T10273] netlink: 'syz.2.1175': attribute type 2 has an invalid length. [ 440.706703][T10273] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1175'. [ 440.823299][ T5877] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 440.838283][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.849290][ T5877] usb 2-1: config 0 descriptor?? [ 441.347861][T10263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.356556][T10263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.367418][ T5877] keytouch 0003:0926:3333.001F: fixing up Keytouch IEC report descriptor [ 441.391727][ T5877] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.001F/input/input49 [ 441.511446][T10283] netlink: 'syz.5.1178': attribute type 1 has an invalid length. [ 441.551927][ T5877] keytouch 0003:0926:3333.001F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 441.564373][T10283] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1178'. [ 441.594911][ C0] keyboard: can't emulate rawmode for keycode 240 [ 441.601778][ C0] keyboard: can't emulate rawmode for keycode 240 [ 441.608376][ C0] keyboard: can't emulate rawmode for keycode 240 [ 441.615156][ C0] keyboard: can't emulate rawmode for keycode 240 [ 441.623043][ C0] keyboard: can't emulate rawmode for keycode 240 [ 441.629786][ C0] keyboard: can't emulate rawmode for keycode 240 [ 441.636240][ C0] keyboard: can't emulate rawmode for keycode 240 [ 441.643017][ C0] keyboard: can't emulate rawmode for keycode 240 [ 441.649437][ C0] keyboard: can't emulate rawmode for keycode 240 [ 441.655845][ C0] keyboard: can't emulate rawmode for keycode 240 [ 441.952805][T10263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.986200][T10263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.048502][T10290] ALSA: mixer_oss: invalid OSS volume '' [ 442.525184][ T5865] usb 2-1: USB disconnect, device number 37 [ 442.862450][ T5877] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 442.964047][ T118] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 443.166844][ T5877] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 443.187495][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 443.246427][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 443.259272][ T5877] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 443.272732][ T5877] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 443.293782][ T118] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 443.304022][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.315319][ T118] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.325502][ T5877] usb 5-1: config 0 descriptor?? [ 443.330518][ T118] usb 1-1: Product: syz [ 443.335290][ T118] usb 1-1: Manufacturer: syz [ 443.361370][ T118] usb 1-1: SerialNumber: syz [ 445.141850][ T5877] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 445.385695][T10317] o2cb: This node has not been configured. [ 445.391575][T10317] o2cb: Cluster check failed. Fix errors before retrying. [ 445.398744][T10317] (syz.5.1185,10317,1):user_dlm_register:674 ERROR: status = -22 [ 445.406543][T10317] (syz.5.1185,10317,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 445.633391][T10296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.642300][ T118] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 445.660533][T10296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.676205][ T118] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 446.232017][ T9] usb 5-1: USB disconnect, device number 38 [ 446.299347][ T5821] Bluetooth: hci5: connection err: -111 [ 446.485089][T10335] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65436 sclass=netlink_route_socket pid=10335 comm=syz.5.1189 [ 446.589393][T10337] ALSA: mixer_oss: invalid OSS volume '' [ 446.706631][T10296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.042200][T10296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.647093][T10347] netlink: 'syz.4.1192': attribute type 1 has an invalid length. [ 447.651564][T10350] netlink: 'syz.1.1195': attribute type 1 has an invalid length. [ 447.655139][T10347] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1192'. [ 447.662774][T10350] netlink: 'syz.1.1195': attribute type 2 has an invalid length. [ 447.679559][T10350] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1195'. [ 447.836827][ T5865] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 447.844435][ T118] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 447.844482][ T118] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 447.845016][ T118] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 447.847663][ T118] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 447.859637][ T118] usb 1-1: USB disconnect, device number 33 [ 448.514905][ T5865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.514934][ T5865] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 448.514949][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.524925][ T5865] usb 6-1: config 0 descriptor?? [ 448.924666][ T118] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 448.934077][T10346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.947716][T10346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.959394][ T5865] keytouch 0003:0926:3333.0021: fixing up Keytouch IEC report descriptor [ 448.978009][ T5865] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0021/input/input51 [ 449.012347][ T5886] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 449.082345][ T118] usb 3-1: device descriptor read/64, error -71 [ 449.332344][ T118] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 449.414588][ T5865] keytouch 0003:0926:3333.0021: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 449.447591][T10346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.474741][ T118] usb 3-1: device descriptor read/64, error -71 [ 449.480805][T10346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.514612][ T5865] usb 6-1: USB disconnect, device number 11 [ 449.565452][T10365] fido_id[10365]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 449.586310][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.592936][ T118] usb usb3-port1: attempt power cycle [ 449.602838][ T5886] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 449.612968][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.625213][ T5886] usb 2-1: config 0 descriptor?? [ 449.886696][T10368] o2cb: This node has not been configured. [ 449.893936][T10368] o2cb: Cluster check failed. Fix errors before retrying. [ 449.901108][T10368] (syz.4.1200,10368,0):user_dlm_register:674 ERROR: status = -22 [ 449.908907][T10368] (syz.4.1200,10368,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 449.942555][ T118] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 449.962946][ T118] usb 3-1: device descriptor read/8, error -71 [ 450.061544][T10358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.073500][T10358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.134659][T10358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.165266][T10358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.205005][ T118] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 450.218492][ T5886] keytouch 0003:0926:3333.0022: fixing up Keytouch IEC report descriptor [ 450.242923][ T118] usb 3-1: device descriptor read/8, error -71 [ 450.245883][ T5886] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0022/input/input52 [ 450.363305][ T118] usb usb3-port1: unable to enumerate USB device [ 450.363389][ T5886] keytouch 0003:0926:3333.0022: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 450.440546][ C1] kbd_keycode: 108 callbacks suppressed [ 450.440565][ C1] keyboard: can't emulate rawmode for keycode 240 [ 450.454933][ C1] keyboard: can't emulate rawmode for keycode 240 [ 450.462898][ C1] keyboard: can't emulate rawmode for keycode 240 [ 450.469761][ C1] keyboard: can't emulate rawmode for keycode 240 [ 450.476173][ C1] keyboard: can't emulate rawmode for keycode 240 [ 450.482602][ C1] keyboard: can't emulate rawmode for keycode 240 [ 450.489007][ C1] keyboard: can't emulate rawmode for keycode 240 [ 450.496654][ C1] keyboard: can't emulate rawmode for keycode 240 [ 450.503079][ C1] keyboard: can't emulate rawmode for keycode 240 [ 450.510258][ C1] keyboard: can't emulate rawmode for keycode 240 [ 450.521307][ T5819] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 450.704065][ T5819] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 450.730061][ T5819] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 450.800726][ T5819] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 450.814351][ T5819] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 450.830284][ T5819] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 450.914315][ T5819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.918990][ T9] usb 2-1: USB disconnect, device number 38 [ 451.078852][ T5819] usb 6-1: config 0 descriptor?? [ 451.341674][ T5821] Bluetooth: hci0: connection err: -111 [ 451.823089][ T5819] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 451.842542][T10391] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65436 sclass=netlink_route_socket pid=10391 comm=syz.0.1205 [ 452.301468][T10402] netlink: 'syz.4.1209': attribute type 1 has an invalid length. [ 452.309534][T10402] netlink: 'syz.4.1209': attribute type 2 has an invalid length. [ 452.319170][T10402] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1209'. [ 452.565788][ T5819] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 452.879237][T10412] netlink: 'syz.4.1211': attribute type 1 has an invalid length. [ 452.887161][T10412] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1211'. [ 452.926450][ T5819] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 452.935718][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.944396][ T5819] usb 2-1: Product: syz [ 452.948683][ T5819] usb 2-1: Manufacturer: syz [ 452.953811][ T5819] usb 2-1: SerialNumber: syz [ 454.013395][ T5819] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 454.017375][T10403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.025645][ T5819] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 454.102834][ T10] usb 6-1: reset high-speed USB device number 12 using dummy_hcd [ 454.118088][T10403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.784359][T10403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.888114][T10403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.189622][ T5914] usb 6-1: USB disconnect, device number 12 [ 455.692763][ T5865] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 455.742366][ T5886] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 455.752984][T10438] o2cb: This node has not been configured. [ 455.758830][T10438] o2cb: Cluster check failed. Fix errors before retrying. [ 455.766030][T10438] (syz.4.1213,10438,1):user_dlm_register:674 ERROR: status = -22 [ 455.773811][T10438] (syz.4.1213,10438,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 455.865038][ T5865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.876115][ T5886] usb 3-1: device descriptor read/64, error -71 [ 455.883440][ T5865] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 455.892729][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.903488][ T5865] usb 1-1: config 0 descriptor?? [ 456.122463][ T5886] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 456.228026][ T5819] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO [ 456.241274][ T5819] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 456.253299][ T5819] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 456.264739][ T5886] usb 3-1: device descriptor read/64, error -71 [ 456.277330][ T5819] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 456.311887][T10432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.316465][ T5819] usb 2-1: USB disconnect, device number 39 [ 456.320698][T10432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.338983][T10432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.354322][T10432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.374407][ T5886] usb usb3-port1: attempt power cycle [ 456.871841][ T5865] keytouch 0003:0926:3333.0024: fixing up Keytouch IEC report descriptor [ 456.883759][ T5821] Bluetooth: hci4: connection err: -111 [ 456.925071][ T5865] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0024/input/input54 [ 456.951908][T10450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65436 sclass=netlink_route_socket pid=10450 comm=syz.4.1220 [ 457.110414][ T5865] keytouch 0003:0926:3333.0024: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 457.132625][ T5886] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 457.173717][ T5886] usb 3-1: device descriptor read/8, error -71 [ 458.042425][ T5886] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 458.063028][ T5886] usb 3-1: device descriptor read/8, error -71 [ 458.160313][ T5865] usb 1-1: USB disconnect, device number 34 [ 458.226880][T10464] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1222'. [ 458.532369][T10428] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 458.570666][ T5886] usb usb3-port1: unable to enumerate USB device [ 458.736660][T10428] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 458.777357][T10428] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 458.802328][T10428] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 458.812091][T10428] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 458.849512][T10428] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 458.869560][T10428] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.903050][T10428] usb 6-1: config 0 descriptor?? [ 459.102386][ T5821] Bluetooth: unknown link type 15 [ 459.107710][ T5821] Bluetooth: hci1: connection err: -111 [ 459.713284][ T5821] Bluetooth: hci1: connection err: -111 [ 459.803288][T10428] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 459.888836][T10491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65436 sclass=netlink_route_socket pid=10491 comm=syz.2.1232 [ 460.863486][T10428] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 460.955537][T10515] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1239'. [ 461.440100][ T118] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 461.447811][T10428] usb 5-1: device descriptor read/64, error -71 [ 461.524029][T10517] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1241'. [ 461.633868][ T118] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.681281][ T118] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 461.697827][ T118] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.706125][T10428] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 461.723140][ T5886] usb 6-1: reset high-speed USB device number 13 using dummy_hcd [ 461.725355][ T118] usb 2-1: config 0 descriptor?? [ 462.006158][ T29] kauditd_printk_skb: 182 callbacks suppressed [ 462.018737][ T29] audit: type=1400 audit(1770907653.434:502): avc: denied { setopt } for pid=10518 comm="syz.0.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 462.142400][T10428] usb 5-1: device descriptor read/64, error -71 [ 462.272607][T10428] usb usb5-port1: attempt power cycle [ 462.344120][T10511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.702691][T10511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.724972][T10511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.742366][T10428] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 462.742711][T10511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.764220][ T118] keytouch 0003:0926:3333.0026: fixing up Keytouch IEC report descriptor [ 462.775105][T10428] usb 5-1: device descriptor read/8, error -71 [ 462.783835][ T118] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0026/input/input56 [ 463.059491][ T118] keytouch 0003:0926:3333.0026: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 463.092637][T10428] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 463.133154][T10428] usb 5-1: device descriptor read/8, error -71 [ 463.333222][T10428] usb usb5-port1: unable to enumerate USB device [ 463.378680][ T5819] usb 6-1: USB disconnect, device number 13 [ 463.419766][T10428] usb 2-1: USB disconnect, device number 40 [ 463.588243][ T5821] Bluetooth: hci5: connection err: -111 [ 463.765907][ T118] usb 3-1: new low-speed USB device number 51 using dummy_hcd [ 464.133888][T10548] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65436 sclass=netlink_route_socket pid=10548 comm=syz.5.1248 [ 464.294390][ T118] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 464.302156][ T118] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 464.321800][ T118] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 464.333927][ T118] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 464.345539][ T118] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 464.358073][ T118] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 464.384238][ T118] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 464.411636][ T118] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 464.504438][ T118] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 464.538619][ T118] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 464.554125][T10554] ALSA: mixer_oss: invalid OSS volume '' [ 464.710117][ T118] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 464.898259][ T118] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 465.058744][ T118] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 465.070735][ T118] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 465.092201][ T118] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 465.107240][ T118] usb 3-1: string descriptor 0 read error: -22 [ 465.113957][ T118] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 465.123232][ T118] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.183336][T10560] o2cb: This node has not been configured. [ 465.189193][T10560] o2cb: Cluster check failed. Fix errors before retrying. [ 465.197266][T10560] (syz.4.1252,10560,0):user_dlm_register:674 ERROR: status = -22 [ 465.205035][T10560] (syz.4.1252,10560,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 465.270040][ T118] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 465.692326][ T5886] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 465.971155][ T5886] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 465.982838][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 465.994309][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 466.004378][ T5886] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 466.018283][ T5886] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 466.027648][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.472444][ T3128] block nbd0: Possible stuck request ffff888027690000: control (read@0,1024B). Runtime 150 seconds [ 466.483241][ T3128] block nbd0: Possible stuck request ffff888027690200: control (read@1024,1024B). Runtime 150 seconds [ 466.494215][ T3128] block nbd0: Possible stuck request ffff888027690400: control (read@2048,1024B). Runtime 150 seconds [ 466.505215][ T3128] block nbd0: Possible stuck request ffff888027690600: control (read@3072,1024B). Runtime 150 seconds [ 466.518422][ T5886] usb 1-1: config 0 descriptor?? [ 466.728150][ T5821] Bluetooth: unknown link type 15 [ 466.734411][ T5821] Bluetooth: hci5: connection err: -111 [ 467.477007][ T5886] plantronics 0003:047F:FFFF.0027: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 467.592568][ T5819] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 467.762766][ T5819] usb 6-1: device descriptor read/64, error -71 [ 467.835259][ T5821] Bluetooth: hci4: connection err: -111 [ 467.926959][T10592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65436 sclass=netlink_route_socket pid=10592 comm=syz.4.1261 [ 467.947783][ T5821] Bluetooth: hci2: connection err: -111 [ 468.008536][T10595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65436 sclass=netlink_route_socket pid=10595 comm=syz.1.1262 [ 468.035077][ T5819] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 468.182346][ T5819] usb 6-1: device descriptor read/64, error -71 [ 468.292612][ T5819] usb usb6-port1: attempt power cycle [ 468.379118][ T5914] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 468.393790][T10602] ALSA: mixer_oss: invalid OSS volume '' [ 468.562354][ T5914] usb 5-1: Using ep0 maxpacket: 32 [ 468.574179][ T5914] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 468.589981][ T5914] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 468.608514][ T5914] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 468.618942][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 468.629972][ T5914] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 468.640195][ T5914] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 468.653773][ T5914] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 468.662841][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.672503][ T5914] usb 5-1: config 0 descriptor?? [ 468.855469][ T5872] usb 1-1: USB disconnect, device number 35 [ 468.906409][ T5914] usblp 5-1:0.0: usblp1: USB Bidirectional printer dev 43 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 468.908465][ T5819] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 468.953357][ T5819] usb 6-1: device descriptor read/8, error -71 [ 469.017734][ T5914] usb 3-1: USB disconnect, device number 51 [ 469.659013][ T5819] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 469.682732][ T5819] usb 6-1: device descriptor read/8, error -71 [ 469.853624][ T5819] usb usb6-port1: unable to enumerate USB device [ 469.917341][ T5914] usb 5-1: USB disconnect, device number 43 [ 470.036049][ T5914] usblp1: removed [ 470.330367][ T5821] Bluetooth: unknown link type 15 [ 470.335859][ T5821] Bluetooth: hci5: connection err: -111 [ 471.508654][ T118] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 471.813843][ T118] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.825444][ T118] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 471.836096][T10635] netlink: 'syz.5.1273': attribute type 1 has an invalid length. [ 471.843908][T10635] netlink: 'syz.5.1273': attribute type 2 has an invalid length. [ 471.851598][T10635] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1273'. [ 471.865705][ T118] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.886018][ T118] usb 2-1: config 0 descriptor?? [ 472.012330][T10428] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 472.295579][T10634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.313128][T10634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.942332][T10649] ALSA: mixer_oss: invalid OSS volume '' [ 473.060484][T10646] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1277'. [ 473.261243][T10634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.276026][T10428] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 474.387099][T10634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.407913][T10428] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 474.984364][T10428] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 474.995140][T10428] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 475.008255][T10428] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 475.017420][ T118] usbhid 2-1:0.0: can't add hid device: -71 [ 475.023396][ T118] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 475.032337][T10428] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.044690][ T118] usb 2-1: USB disconnect, device number 41 [ 475.074302][T10428] usb 5-1: config 0 descriptor?? [ 475.142488][ T5886] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 475.143546][T10667] netlink: 612 bytes leftover after parsing attributes in process `syz.1.1282'. [ 475.212384][T10428] usb 5-1: can't set config #0, error -71 [ 475.352510][ T5886] usb 6-1: device descriptor read/64, error -71 [ 475.431178][T10428] usb 5-1: USB disconnect, device number 44 [ 475.570922][T10665] netlink: 'syz.1.1282': attribute type 1 has an invalid length. [ 475.578743][T10665] netlink: 'syz.1.1282': attribute type 2 has an invalid length. [ 475.586514][T10665] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1282'. [ 475.751488][ T5821] Bluetooth: unknown link type 15 [ 475.751518][ T5821] Bluetooth: hci0: connection err: -111 [ 476.627543][ T5886] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 476.893501][T10680] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1287'. [ 476.922402][ T5886] usb 6-1: device descriptor read/64, error -71 [ 477.123931][ T5886] usb usb6-port1: attempt power cycle [ 477.194210][T10686] ALSA: mixer_oss: invalid OSS volume '' [ 478.492352][T10692] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1289'. [ 479.454248][ T5886] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 479.492624][ T5886] usb 6-1: device descriptor read/8, error -71 [ 479.610960][T10698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1291'. [ 479.988578][ T5821] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 480.888418][T10720] netlink: 612 bytes leftover after parsing attributes in process `syz.5.1299'. [ 481.112917][T10721] netlink: 'syz.5.1299': attribute type 1 has an invalid length. [ 481.120780][T10721] netlink: 'syz.5.1299': attribute type 2 has an invalid length. [ 481.128723][T10721] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1299'. [ 481.486481][T10726] netlink: 'syz.4.1300': attribute type 1 has an invalid length. [ 481.494362][T10726] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1300'. [ 481.662395][ T5886] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 481.731040][T10731] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1302'. [ 482.146484][ T5886] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 482.160691][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.169322][ T5886] usb 2-1: Product: syz [ 482.174109][ T5886] usb 2-1: Manufacturer: syz [ 482.178814][ T5886] usb 2-1: SerialNumber: syz [ 482.382392][ T5821] Bluetooth: unknown link type 15 [ 482.387537][ T5821] Bluetooth: hci0: connection err: -111 [ 482.452919][T10428] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 482.646122][ T5886] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 482.659648][T10725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.669098][ T5886] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 482.683550][T10725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.716618][T10428] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 482.728769][T10428] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 482.888536][T10428] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 482.899935][T10428] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 482.915048][T10428] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 482.925285][T10428] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.016077][T10428] usb 3-1: config 0 descriptor?? [ 483.176980][ T5821] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 483.639854][T10428] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 483.770265][T10750] netlink: 'syz.4.1308': attribute type 1 has an invalid length. [ 483.778216][T10750] netlink: 'syz.4.1308': attribute type 2 has an invalid length. [ 483.785984][T10750] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1308'. [ 484.312050][ T5886] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 484.312081][ T5886] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 484.312424][ T5886] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 484.324252][ T5886] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 484.483427][T10771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1312'. [ 484.864273][ T5821] Bluetooth: unknown link type 15 [ 484.869413][ T5821] Bluetooth: hci0: connection err: -111 [ 485.279260][T10783] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1315'. [ 485.775490][ T5886] usb 2-1: USB disconnect, device number 42 [ 485.895406][ T5914] usb 3-1: reset high-speed USB device number 52 using dummy_hcd [ 485.968103][ T5821] Bluetooth: hci0: unexpected event for opcode 0x2003 [ 486.205596][T10798] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1319'. [ 486.559316][ T118] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 486.656311][T10799] netlink: 612 bytes leftover after parsing attributes in process `syz.2.1320'. [ 487.002387][ T118] usb 6-1: Using ep0 maxpacket: 32 [ 487.039630][T10428] usb 3-1: USB disconnect, device number 52 [ 487.045873][ T118] usb 6-1: config 0 has an invalid interface number: 16 but max is 0 [ 487.055717][ T118] usb 6-1: config 0 has no interface number 0 [ 487.070630][ T118] usb 6-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 487.080874][ T118] usb 6-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 487.096630][ T118] usb 6-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 487.105936][ T118] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.115007][ T118] usb 6-1: Product: syz [ 487.119280][ T118] usb 6-1: Manufacturer: syz [ 487.124028][ T118] usb 6-1: SerialNumber: syz [ 487.186013][ T118] usb 6-1: config 0 descriptor?? [ 487.197047][T10790] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 487.208343][T10796] netlink: 'syz.2.1320': attribute type 1 has an invalid length. [ 487.216903][T10796] netlink: 'syz.2.1320': attribute type 2 has an invalid length. [ 487.729374][T10796] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1320'. [ 487.849761][ T118] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 488.273856][T10819] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1316'. [ 488.631054][T10821] netlink: 'syz.2.1325': attribute type 1 has an invalid length. [ 488.638886][T10821] netlink: 'syz.2.1325': attribute type 2 has an invalid length. [ 488.649071][T10821] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1325'. [ 488.889553][ T5886] usb 6-1: USB disconnect, device number 22 [ 488.991114][T10820] netlink: 'syz.4.1324': attribute type 1 has an invalid length. [ 488.998985][T10820] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1324'. [ 489.665156][T10834] netlink: 612 bytes leftover after parsing attributes in process `syz.2.1329'. [ 489.759609][ T5865] usb 2-1: new low-speed USB device number 43 using dummy_hcd [ 490.049650][T10833] netlink: 'syz.2.1329': attribute type 1 has an invalid length. [ 490.057436][T10833] netlink: 'syz.2.1329': attribute type 2 has an invalid length. [ 490.065183][T10833] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1329'. [ 490.098874][ T5865] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 490.098920][ T5865] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 490.098946][ T5865] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 490.098967][ T5865] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 490.098989][ T5865] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 490.099913][ T5865] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 490.099949][ T5865] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 490.099972][ T5865] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 490.099993][ T5865] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 490.100014][ T5865] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 490.100831][ T5865] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 490.100867][ T5865] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 490.100889][ T5865] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 490.100911][ T5865] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 490.100927][ T5865] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 490.104171][ T5865] usb 2-1: string descriptor 0 read error: -22 [ 490.104225][ T5865] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 490.104239][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.127932][ T5865] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 490.351825][ T5886] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 490.546721][ T5886] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 490.592745][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 490.661108][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 490.699282][ T5886] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 491.082749][T10855] netlink: 612 bytes leftover after parsing attributes in process `syz.4.1334'. [ 491.247377][T10855] netlink: 'syz.4.1334': attribute type 1 has an invalid length. [ 491.255257][T10855] netlink: 'syz.4.1334': attribute type 2 has an invalid length. [ 491.263063][T10855] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1334'. [ 491.478870][T10854] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1333'. [ 491.785368][ T5886] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 491.794541][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.858108][ T5886] usb 1-1: config 0 descriptor?? [ 492.152330][ T9] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 492.302348][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 492.313090][ T9] usb 3-1: no configurations [ 492.318166][ T9] usb 3-1: can't read configurations, error -22 [ 492.337662][ T5865] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 492.358336][ T5886] plantronics 0003:047F:FFFF.0029: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 492.483247][ T9] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 492.503112][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.514540][ T5865] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 492.529651][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.563424][ T5865] usb 5-1: config 0 descriptor?? [ 492.642501][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 492.652567][ T5886] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 492.662382][ T9] usb 3-1: no configurations [ 492.666987][ T9] usb 3-1: can't read configurations, error -22 [ 492.693589][ T9] usb usb3-port1: attempt power cycle [ 492.832412][ T5886] usb 6-1: Using ep0 maxpacket: 32 [ 492.839325][ T5886] usb 6-1: config 0 has an invalid interface number: 16 but max is 0 [ 492.854967][ T5886] usb 6-1: config 0 has no interface number 0 [ 492.862536][ T5886] usb 6-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 492.873447][ T5886] usb 6-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 492.896891][ T5886] usb 6-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 492.906934][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.915029][ T5886] usb 6-1: Product: syz [ 492.919307][ T5886] usb 6-1: Manufacturer: syz [ 492.924131][ T5886] usb 6-1: SerialNumber: syz [ 492.930944][ T5886] usb 6-1: config 0 descriptor?? [ 492.936853][T10864] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 492.947812][ T5886] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 492.997316][T10861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.014413][T10861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.031851][ T5865] keytouch 0003:0926:3333.002A: fixing up Keytouch IEC report descriptor [ 493.033541][ T9] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 493.050149][ T5865] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.002A/input/input60 [ 493.072803][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 493.078622][ T9] usb 3-1: no configurations [ 493.084972][ T9] usb 3-1: can't read configurations, error -22 [ 493.138380][ T5865] keytouch 0003:0926:3333.002A: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 493.214124][ T9] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 493.230362][T10867] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1337'. [ 493.506485][ T118] usb 6-1: USB disconnect, device number 23 [ 493.525862][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 493.548718][ T9] usb 3-1: no configurations [ 493.565295][ T9] usb 3-1: can't read configurations, error -22 [ 493.579680][ T9] usb usb3-port1: unable to enumerate USB device [ 493.589853][ C1] keyboard: can't emulate rawmode for keycode 240 [ 493.598312][ C1] keyboard: can't emulate rawmode for keycode 240 [ 493.598839][ C1] keyboard: can't emulate rawmode for keycode 240 [ 493.612176][ C1] keyboard: can't emulate rawmode for keycode 240 [ 493.612188][ C1] keyboard: can't emulate rawmode for keycode 240 [ 493.612206][ C1] keyboard: can't emulate rawmode for keycode 240 [ 493.612214][ C1] keyboard: can't emulate rawmode for keycode 240 [ 493.612490][ C1] keyboard: can't emulate rawmode for keycode 240 [ 493.612513][ C1] keyboard: can't emulate rawmode for keycode 240 [ 493.619323][ C1] keyboard: can't emulate rawmode for keycode 240 [ 493.903179][ T118] usb 1-1: USB disconnect, device number 36 [ 493.963280][ T9] usb 2-1: USB disconnect, device number 43 [ 494.104973][T10861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.114150][T10861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.128624][ T118] usb 5-1: USB disconnect, device number 45 [ 494.128706][ C1] keytouch 0003:0926:3333.002A: usb_submit_urb(ctrl) failed: -19 [ 494.502567][T10879] ALSA: mixer_oss: invalid OSS volume '' [ 494.617885][T10881] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1341'. [ 495.185779][ T5821] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 495.226126][ T5821] Bluetooth: hci4: connection err: -111 [ 495.229356][T10887] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1344'. [ 495.319463][T10893] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 495.590680][T10899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1347'. [ 495.833551][T10903] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65436 sclass=netlink_route_socket pid=10903 comm=syz.4.1344 [ 496.144132][T10428] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 496.162336][ T5886] usb 3-1: new low-speed USB device number 57 using dummy_hcd [ 496.192303][ T5865] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 496.262374][ T118] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 496.313771][ T5886] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 496.321272][ T5886] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 496.333273][ T5886] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 496.335175][T10428] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 496.345240][ T5886] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 496.354552][T10428] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.365660][ T5865] usb 2-1: Using ep0 maxpacket: 32 [ 496.373916][T10428] usb 6-1: Product: syz [ 496.382838][ T5886] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 496.383902][T10428] usb 6-1: Manufacturer: syz [ 496.399039][T10428] usb 6-1: SerialNumber: syz [ 496.399667][ T5865] usb 2-1: config 0 has an invalid interface number: 16 but max is 0 [ 496.413187][ T5886] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 496.420643][ T5886] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 496.432157][ T5865] usb 2-1: config 0 has no interface number 0 [ 496.438394][ T5865] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 496.458798][ T5886] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 496.459590][ T118] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 496.481638][ T118] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.490210][ T5865] usb 2-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 496.500185][ T118] usb 5-1: config 0 descriptor?? [ 496.503453][ T5886] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 496.525704][ T118] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 496.534605][ T3128] block nbd0: Possible stuck request ffff888027690000: control (read@0,1024B). Runtime 180 seconds [ 496.546125][ T3128] block nbd0: Possible stuck request ffff888027690200: control (read@1024,1024B). Runtime 180 seconds [ 496.557270][ T3128] block nbd0: Possible stuck request ffff888027690400: control (read@2048,1024B). Runtime 180 seconds [ 496.570613][ T3128] block nbd0: Possible stuck request ffff888027690600: control (read@3072,1024B). Runtime 180 seconds [ 496.581788][ T5886] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 496.593324][ T5865] usb 2-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 496.602781][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.611053][ T5865] usb 2-1: Product: syz [ 496.616845][ T5886] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 496.630682][ T5886] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 496.646413][ T5865] usb 2-1: Manufacturer: syz [ 496.651107][ T5865] usb 2-1: SerialNumber: syz [ 496.668423][ T5886] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 496.681557][ T5886] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 496.693993][ T5865] usb 2-1: config 0 descriptor?? [ 496.699551][T10911] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 496.699784][ T5886] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 496.721056][ T5865] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 496.737699][ T5886] usb 3-1: string descriptor 0 read error: -22 [ 496.745558][ T5886] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 496.756035][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.794445][ T5886] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 496.816483][T10428] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 496.830197][T10906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.841571][T10906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.850494][T10428] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 496.959665][ T118] gp8psk: usb in 128 operation failed. [ 497.028084][T10921] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1351'. [ 497.083162][T10913] bond0: entered allmulticast mode [ 497.192325][T10913] bond_slave_0: entered allmulticast mode [ 497.228978][T10913] bond_slave_1: entered allmulticast mode [ 497.240493][ T118] gp8psk: usb in 137 operation failed. [ 497.249754][ T118] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 497.273525][ T5914] usb 2-1: USB disconnect, device number 44 [ 497.401918][ T118] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 497.637364][ T118] usb 5-1: media controller created [ 498.016619][T10428] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 498.118910][T10428] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 498.187491][ T118] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 498.257652][T10428] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 498.432124][T10428] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 498.603709][ T118] gp8psk_fe: Frontend attached [ 498.670360][ T118] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 498.833724][ T118] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 499.217323][ T5821] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 499.446127][ T5914] usb 6-1: USB disconnect, device number 24 [ 499.591219][ T118] gp8psk: usb in 138 operation failed. [ 499.614673][ T118] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 499.921438][ T118] gp8psk: found Genpix USB device pID = 203 (hex) [ 500.031827][ T118] usb 5-1: USB disconnect, device number 46 [ 500.099442][ T118] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 501.011493][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.560080][T10952] netlink: 'syz.0.1364': attribute type 1 has an invalid length. [ 501.567940][T10952] netlink: 'syz.0.1364': attribute type 2 has an invalid length. [ 501.575745][T10952] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1364'. [ 501.773833][ T118] usb 3-1: USB disconnect, device number 57 [ 501.804923][T10957] overlayfs: missing 'workdir' [ 501.892556][T10961] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 501.910316][ T5821] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 501.992333][ T5865] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 502.069120][T10968] nfs: Unknown parameter '' [ 502.313879][ T5865] usb 2-1: Using ep0 maxpacket: 32 [ 502.321926][ T5865] usb 2-1: config 0 has an invalid interface number: 16 but max is 0 [ 502.340348][ T5865] usb 2-1: config 0 has no interface number 0 [ 502.348462][ T5865] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 502.360875][ T5865] usb 2-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 502.377096][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 502.377112][ T29] audit: type=1400 audit(1770907693.974:503): avc: denied { append } for pid=10973 comm="syz.0.1373" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 502.418346][ T5865] usb 2-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 502.429659][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.438341][ T5865] usb 2-1: Product: syz [ 502.443344][ T5865] usb 2-1: Manufacturer: syz [ 502.458521][T10976] syzkaller0: entered promiscuous mode [ 502.462100][ T29] audit: type=1400 audit(1770907694.054:504): avc: denied { write } for pid=10973 comm="syz.0.1373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 502.478148][T10976] syzkaller0: entered allmulticast mode [ 502.484553][ T5865] usb 2-1: SerialNumber: syz [ 502.520331][ T5865] usb 2-1: config 0 descriptor?? [ 502.535606][T10955] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 502.547087][ T5865] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 502.972713][T10985] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1363'. [ 503.361644][T10986] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1365'. [ 503.729139][ T5865] usb 2-1: USB disconnect, device number 45 [ 504.285982][T10999] ipt_ECN: cannot use operation on non-tcp rule [ 504.552353][ T5914] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 504.595631][T11011] IPVS: set_ctl: invalid protocol: 4 127.0.0.1:20003 [ 504.685097][ T5865] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 504.768182][T11014] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1384'. [ 504.782812][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.798207][ T5914] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 504.821895][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.845032][ T5914] usb 3-1: config 0 descriptor?? [ 504.878802][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.890364][ T5865] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 504.899841][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.910627][ T5865] usb 5-1: config 0 descriptor?? [ 505.091857][ T5886] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 505.191994][T11020] binder_alloc: 11019: binder_alloc_buf size -888 failed, no address space [ 505.201634][T11020] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 8192 (num: 1 largest: 8192) [ 505.322080][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.363576][T11003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.395124][T11005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.405943][T11003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.487710][T11005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.528535][T11003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.613314][T11003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.654590][T11005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.697589][T11005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.737931][ T5914] keytouch 0003:0926:3333.002B: fixing up Keytouch IEC report descriptor [ 505.835133][ T5914] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.002B/input/input61 [ 506.070654][T11026] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1387'. [ 506.580232][ T5914] keytouch 0003:0926:3333.002B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 506.818782][ T5865] keytouch 0003:0926:3333.002C: fixing up Keytouch IEC report descriptor [ 508.233880][T11031] input: syz1 as /devices/virtual/input/input62 [ 508.525873][ T5886] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 508.804465][T11027] Bluetooth: hci5: command 0x0406 tx timeout [ 508.845362][ T5914] usb 3-1: USB disconnect, device number 58 [ 508.846336][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.896296][ T5865] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.002C/input/input63 [ 509.196160][ T5886] usb 2-1: config 0 descriptor?? [ 509.230708][ T5886] usb 2-1: can't set config #0, error -71 [ 509.335373][ T5886] usb 2-1: USB disconnect, device number 46 [ 509.396597][ T29] audit: type=1400 audit(1770907700.669:505): avc: denied { shutdown } for pid=11042 comm="syz.1.1390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 509.477372][ T29] audit: type=1400 audit(1770907700.669:506): avc: denied { read } for pid=11042 comm="syz.1.1390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 509.504937][ T29] audit: type=1400 audit(1770907700.772:507): avc: denied { getopt } for pid=11050 comm="syz.2.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 509.508300][T11055] input: syz0 as /devices/virtual/input/input64 [ 509.551249][ T5865] keytouch 0003:0926:3333.002C: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 509.642166][ T5865] usb 5-1: USB disconnect, device number 47 [ 509.851845][T11063] fuse: Bad value for 'user_id' [ 509.856759][T11063] fuse: Bad value for 'user_id' [ 509.879446][T11063] fuse: Unknown parameter '&d' [ 510.028648][ T29] audit: type=1400 audit(1770907701.118:508): avc: denied { mounton } for pid=11058 comm="syz.0.1396" path="/300/file1/file0" dev="autofs" ino=28048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 510.062534][T11057] fido_id[11057]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 510.407519][ T29] audit: type=1400 audit(1770907701.642:509): avc: denied { map } for pid=11059 comm="syz.2.1397" path="socket:[28085]" dev="sockfs" ino=28085 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 510.489218][T11073] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1398'. [ 510.511337][ T5819] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 510.519240][ T29] audit: type=1400 audit(1770907701.642:510): avc: denied { accept } for pid=11059 comm="syz.2.1397" path="socket:[28085]" dev="sockfs" ino=28085 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 510.714554][ T5865] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 510.798892][ T5819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.822525][ T5819] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 510.834206][ T5819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.903093][ T5819] usb 1-1: config 0 descriptor?? [ 510.912300][T11076] netlink: 'syz.2.1401': attribute type 4 has an invalid length. [ 510.928029][T11076] netlink: 'syz.2.1401': attribute type 32 has an invalid length. [ 510.937071][T11076] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1401'. [ 510.940536][T11061] netlink: 'syz.4.1394': attribute type 1 has an invalid length. [ 510.955489][T11061] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1394'. [ 510.972694][ T5865] usb 6-1: config 0 has no interfaces? [ 510.988277][ T5865] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 510.998429][ T5865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.022253][ T5865] usb 6-1: Product: syz [ 511.033506][ T5865] usb 6-1: Manufacturer: syz [ 511.042798][ T5865] usb 6-1: SerialNumber: syz [ 511.079726][ T5865] usb 6-1: config 0 descriptor?? [ 511.352275][T11084] syzkaller1: entered promiscuous mode [ 511.358619][T11084] syzkaller1: entered allmulticast mode [ 511.417896][T11068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.503805][T11068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.613283][T11068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.689930][T11068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.822119][ T5819] keytouch 0003:0926:3333.002D: fixing up Keytouch IEC report descriptor [ 511.848594][T11088] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 512.143014][ T5819] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.002D/input/input66 [ 512.524500][ T5819] keytouch 0003:0926:3333.002D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 512.631596][ T29] audit: type=1400 audit(1770907703.718:511): avc: denied { read append } for pid=11065 comm="syz.5.1400" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 512.658128][ T5819] usb 1-1: USB disconnect, device number 37 [ 512.879648][T11097] fido_id[11097]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 513.046081][ T29] audit: type=1400 audit(1770907704.111:512): avc: denied { append } for pid=11106 comm="syz.4.1412" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 513.051556][T11107] loop5: detected capacity change from 0 to 7 [ 513.088445][ T5795] Dev loop5: unable to read RDB block 7 [ 513.094143][ T5795] loop5: AHDI p1 [ 513.097869][ T5795] loop5: partition table partially beyond EOD, truncated [ 513.110827][T11107] Dev loop5: unable to read RDB block 7 [ 513.121270][T11107] loop5: AHDI p1 [ 513.125807][T11107] loop5: partition table partially beyond EOD, truncated [ 513.158238][ T9] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 513.325941][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 513.337377][ T9] usb 2-1: config 6 has an invalid interface number: 200 but max is 0 [ 513.345848][ T9] usb 2-1: config 6 has no interface number 0 [ 513.354164][ T9] usb 2-1: config 6 interface 200 has no altsetting 0 [ 513.365820][ T5914] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 513.385799][ T9] usb 2-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 513.394969][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.413947][ T9] usb 2-1: Product: syz [ 513.418294][ T9] usb 2-1: Manufacturer: syz [ 513.433129][ T9] usb 2-1: SerialNumber: syz [ 513.598588][T11119] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1414'. [ 514.047624][ T5819] usb 6-1: USB disconnect, device number 25 [ 514.146097][ T5914] usb 5-1: Using ep0 maxpacket: 16 [ 514.152978][ T5914] usb 5-1: config 1 has an invalid interface number: 69 but max is 0 [ 514.161309][ T5914] usb 5-1: config 1 has no interface number 0 [ 514.400507][ T5914] usb 5-1: config 1 interface 69 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 515.062364][T11124] program syz.1.1410 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 515.310009][ T9] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 515.319411][ T5914] usb 5-1: config 1 interface 69 has no altsetting 0 [ 515.358537][ T5914] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a7e, bcdDevice=60.c4 [ 515.374382][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.388180][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 515.623446][ T5914] usb 5-1: Product: syz [ 516.099044][ T5914] usb 5-1: Manufacturer: syz [ 516.108790][ T9] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 516.128655][ T5914] usb 5-1: SerialNumber: syz [ 516.139451][ T9] usb 2-1: media controller created [ 516.151051][T11109] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 516.160208][ T5177] Dev loop5: unable to read RDB block 7 [ 516.176939][ T5177] loop5: AHDI p1 [ 516.199298][ T5177] loop5: partition table partially beyond EOD, truncated [ 516.218608][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 516.288005][ T5177] Dev loop5: unable to read RDB block 7 [ 516.333243][ T29] audit: type=1400 audit(1770907707.151:513): avc: denied { write } for pid=11133 comm="syz.5.1419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 516.353465][ T5177] loop5: AHDI p1 [ 516.357122][ T5177] loop5: partition table partially beyond EOD, truncated [ 516.622830][T11135] IPVS: Unknown mcast interface: vcan0 [ 516.669126][T11135] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1419'. [ 516.771346][ T5819] usb 5-1: USB disconnect, device number 48 [ 516.870870][ T9] dvb-usb: bulk message failed: -71 (6/0) [ 516.879763][ T9] dvb-usb: bulk message failed: -71 (6/0) [ 516.887284][ T9] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 517.011274][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input67 [ 517.018846][T11143] netlink: 'syz.4.1420': attribute type 11 has an invalid length. [ 517.106610][T11143] netlink: 448 bytes leftover after parsing attributes in process `syz.4.1420'. [ 517.125187][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 517.161406][T11140] netlink: 'syz.0.1418': attribute type 1 has an invalid length. [ 517.174125][ T9] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 517.437299][ T5914] dvb-usb: bulk message failed: -71 (1/0) [ 517.455176][T11140] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1418'. [ 517.455226][ T5914] dvb-usb: error while querying for an remote control event. [ 517.475874][ T9] usb 2-1: USB disconnect, device number 47 [ 517.676058][T11155] netlink: 'syz.5.1423': attribute type 1 has an invalid length. [ 517.683829][T11155] netlink: 'syz.5.1423': attribute type 2 has an invalid length. [ 517.849266][T11155] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1423'. [ 517.942420][ T9] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 518.500591][T11165] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1426'. [ 519.480965][ T5819] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 519.566233][ T9] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 519.696120][ T5819] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 519.710353][ T5819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.721453][ T5819] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 519.737259][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 519.744387][ T29] audit: type=1400 audit(1770907710.369:514): avc: denied { setopt } for pid=11177 comm="syz.0.1431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 519.758016][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 519.764668][ T5819] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0a16, bcdDevice= 0.00 [ 519.783258][ T5819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.839051][ T5819] usb 2-1: config 0 descriptor?? [ 519.840380][ T9] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 519.865358][ T9] usb 3-1: config 0 has no interface number 0 [ 519.880926][ T9] usb 3-1: config 0 interface 88 altsetting 8 has an endpoint descriptor with address 0x2C, changing to 0xC [ 519.979124][ T9] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0xC has an invalid bInterval 128, changing to 7 [ 520.007027][ T9] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0xC has invalid maxpacket 8367, setting to 1024 [ 520.030075][ T9] usb 3-1: config 0 interface 88 has no altsetting 0 [ 520.045388][ T9] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 520.172290][ T9] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 520.197121][T11173] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 520.198147][ T9] usb 3-1: Product: syz [ 520.233242][ T9] usb 3-1: Manufacturer: syz [ 520.243454][ T9] usb 3-1: SerialNumber: syz [ 520.258531][ T9] usb 3-1: config 0 descriptor?? [ 520.306643][T11188] o2cb: This node has not been configured. [ 520.312602][T11188] o2cb: Cluster check failed. Fix errors before retrying. [ 520.319885][T11188] (syz.4.1434,11188,1):user_dlm_register:674 ERROR: status = -22 [ 520.327680][T11188] (syz.4.1434,11188,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 520.441081][ T5819] usbhid 2-1:0.0: can't add hid device: -71 [ 520.457624][ T5819] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 520.492068][ T5819] usb 2-1: USB disconnect, device number 48 [ 520.608888][ T9] usb 3-1: USB disconnect, device number 59 [ 521.052433][ T5914] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 521.257035][ T5914] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 521.269177][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.310009][ T5914] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 521.320925][ T5914] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 521.328933][ T5914] usb 1-1: Manufacturer: syz [ 521.404314][ T5914] usb 1-1: config 0 descriptor?? [ 521.639252][T11198] netlink: 'syz.1.1436': attribute type 1 has an invalid length. [ 521.647317][T11198] netlink: 'syz.1.1436': attribute type 2 has an invalid length. [ 521.655162][T11198] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1436'. [ 521.939578][ T5914] rc_core: IR keymap rc-hauppauge not found [ 521.952873][ T5914] Registered IR keymap rc-empty [ 521.969586][ T5914] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 521.992303][ T5914] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input68 [ 522.572697][T11208] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1439'. [ 523.152342][T11186] netlink: 'syz.5.1433': attribute type 1 has an invalid length. [ 523.250973][T11215] netlink: 'syz.4.1441': attribute type 40 has an invalid length. [ 523.754421][ T29] audit: type=1400 audit(1770907714.120:515): avc: denied { create } for pid=11185 comm="syz.5.1433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 524.707862][ T5872] usb 1-1: USB disconnect, device number 38 [ 525.029411][ T5819] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 525.200667][ T5886] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 525.702648][ T5819] usb 6-1: Using ep0 maxpacket: 16 [ 525.716399][ T5819] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 525.734049][ T5819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.745394][ T5886] usb 3-1: device descriptor read/64, error -71 [ 525.755567][ T5819] usb 6-1: Product: syz [ 525.768756][ T5819] usb 6-1: Manufacturer: syz [ 525.780824][ T5819] usb 6-1: SerialNumber: syz [ 525.814457][ T5819] usb 6-1: config 0 descriptor?? [ 525.821402][ T5819] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 526.002009][ T5886] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 526.130290][ T5865] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 526.145497][ T5819] ssu100 6-1:0.0: probe with driver ssu100 failed with error -32 [ 526.717630][ T5886] usb 3-1: device descriptor read/64, error -71 [ 526.854664][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.870538][ T5886] usb usb3-port1: attempt power cycle [ 526.886068][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 527.273502][ T5865] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 527.288225][ T5865] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 527.297774][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.314811][ T5865] usb 2-1: config 0 descriptor?? [ 527.552188][ T5886] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 527.583206][T11261] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1453'. [ 528.011610][ T5914] usb 6-1: USB disconnect, device number 26 [ 528.051271][T11264] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1454'. [ 528.125209][ T3128] block nbd0: Possible stuck request ffff888027690000: control (read@0,1024B). Runtime 210 seconds [ 528.136000][ T3128] block nbd0: Possible stuck request ffff888027690200: control (read@1024,1024B). Runtime 210 seconds [ 528.148086][ T3128] block nbd0: Possible stuck request ffff888027690400: control (read@2048,1024B). Runtime 210 seconds [ 528.160243][ T3128] block nbd0: Possible stuck request ffff888027690600: control (read@3072,1024B). Runtime 210 seconds [ 528.194590][ T5865] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 528.208434][ T5865] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 528.219402][ T5865] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 528.237134][ T5865] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 528.364910][ T5821] Bluetooth: hci0: connection err: -111 [ 528.394452][T11240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1448'. [ 528.425455][T11271] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1457'. [ 528.473771][T11271] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1457'. [ 528.540524][T11277] IPVS: Unknown mcast interface: vcan0 [ 528.575677][ T5886] usb 3-1: device descriptor read/8, error -71 [ 528.590825][T11276] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1458'. [ 528.606821][T11276] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1458'. [ 528.877786][ T5865] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 529.038965][T11269] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1456'. [ 529.501502][ T30] INFO: task syz.3.937:9408 blocked for more than 143 seconds. [ 529.518791][ T30] Tainted: G L syzkaller #0 [ 529.520431][ T5865] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 529.550633][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 529.571626][ T5865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 529.597773][ T30] task:syz.3.937 state:D [ 529.597788][ T5865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 529.597820][ T30] stack:25696 pid:9408 tgid:9405 ppid:5813 task_flags:0x400140 flags:0x00080002 [ 529.646032][ T30] Call Trace: [ 529.655639][ T30] [ 529.662193][ T30] __schedule+0x1023/0x6000 [ 529.686618][ T30] ? __lock_acquire+0x4a5/0x2630 [ 529.709871][ T30] ? __pfx___schedule+0x10/0x10 [ 529.727981][ T30] ? find_held_lock+0x2b/0x80 [ 529.736424][ T5865] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 529.749478][ T30] ? schedule+0x2bf/0x390 [ 529.768690][ T30] schedule+0xdd/0x390 [ 529.783755][ T30] io_schedule+0x8a/0xf0 [ 529.793109][ T5865] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 529.802522][ T30] folio_wait_bit_common+0x414/0xa70 [ 529.880005][ T30] ? folio_wait_bit_common+0x2a0/0xa70 [ 529.886944][ T5865] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 529.903281][ T5865] usb 1-1: Manufacturer: syz [ 529.907211][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 529.926532][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 529.938962][ T30] ? __pfx___might_resched+0x10/0x10 [ 529.945896][ T5865] usb 1-1: config 0 descriptor?? [ 529.956970][ T30] ? compaction_free+0x182/0x430 [ 529.967693][ T30] migrate_pages_batch+0x1b85/0x4530 [ 529.974859][ T30] ? __pfx_compaction_alloc+0x10/0x10 [ 529.980710][ T30] ? __pfx_compaction_free+0x10/0x10 [ 529.986177][ T30] ? __pfx_migrate_pages_batch+0x10/0x10 [ 529.992258][ T30] ? __schedule+0x1035/0x6000 [ 529.997059][ T30] ? __pfx_remove_migration_pte+0x10/0x10 [ 530.003297][ T30] migrate_pages_sync+0x4db/0x880 [ 530.008421][ T30] ? __pfx_compaction_alloc+0x10/0x10 [ 530.010935][ T5886] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 530.018781][ T30] ? __pfx_compaction_free+0x10/0x10 [ 530.027496][ T30] ? __pfx_migrate_pages_sync+0x10/0x10 [ 530.033894][ T30] migrate_pages+0x1a5b/0x2810 [ 530.038831][ T30] ? __pfx_compaction_alloc+0x10/0x10 [ 530.045038][ T30] ? __pfx_compaction_free+0x10/0x10 [ 530.050784][ T30] ? __pfx_migrate_pages+0x10/0x10 [ 530.056650][ T30] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 530.063326][ T30] ? __nr_to_section+0xaa/0x100 [ 530.063377][ T5886] usb 3-1: unable to get BOS descriptor or descriptor too short [ 530.068582][ T30] ? pfn_to_online_page+0x178/0x4c0 [ 530.081861][ T5886] usb 3-1: not running at top speed; connect to a high speed hub [ 530.081929][ T30] compact_zone+0x240c/0x4320 [ 530.094805][ T30] ? __pfx_compact_zone+0x10/0x10 [ 530.100309][ T5886] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 530.100531][ T30] ? __flush_work+0xa38/0xcb0 [ 530.110483][ T5886] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 530.115392][ T30] ? __flush_work+0xa38/0xcb0 [ 530.133006][ T30] compact_node+0x17f/0x2c0 [ 530.137586][ T30] ? __pfx_compact_node+0x10/0x10 [ 530.143110][ T30] ? __lru_add_drain_all+0x43c/0x650 [ 530.148831][ T30] ? __lru_add_drain_all+0x441/0x650 [ 530.150007][ T5886] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 530.154671][ T30] sysctl_compaction_handler+0x141/0x210 [ 530.168931][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.169217][ T30] proc_sys_call_handler+0x47f/0x5a0 [ 530.184892][ T30] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 530.192677][ T5886] usb 3-1: Product: syz [ 530.196897][ T5886] usb 3-1: Manufacturer: syz [ 530.201567][ T5886] usb 3-1: SerialNumber: syz [ 530.206363][ T30] ? splice_from_pipe_next+0x1ec/0x5a0 [ 530.227017][ T30] iter_file_splice_write+0x82b/0x10a0 [ 530.240266][ T30] ? __pfx_iter_file_splice_write+0x10/0x10 [ 530.246192][ T5865] rc_core: IR keymap rc-hauppauge not found [ 530.246233][ T5865] Registered IR keymap rc-empty [ 530.246331][ T5865] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 530.264945][ T30] ? __pfx_copy_splice_read+0x10/0x10 [ 530.267533][ T5865] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 530.274940][ T30] ? __pfx_iter_file_splice_write+0x10/0x10 [ 530.284827][ T30] direct_splice_actor+0x192/0x6c0 [ 530.292134][ T5865] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 530.303871][ T30] splice_direct_to_actor+0x345/0xa30 [ 530.309259][ T30] ? __pfx_direct_splice_actor+0x10/0x10 [ 530.317150][ T30] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 530.319205][ T5865] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input70 [ 530.337817][ T30] do_splice_direct+0x174/0x240 [ 530.345809][ T30] ? __pfx_do_splice_direct+0x10/0x10 [ 530.345952][ T5865] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 530.359351][ T30] ? avc_policy_seqno+0x9/0x20 [ 530.369712][ T30] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 530.374454][ T5865] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 530.382828][ T30] ? rw_verify_area+0xce/0x6d0 [ 530.387998][ T30] do_sendfile+0xadc/0xe20 [ 530.392412][ T30] ? __pfx_do_sendfile+0x10/0x10 [ 530.404188][ T30] __x64_sys_sendfile64+0x154/0x220 [ 530.413025][ T5865] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 530.420809][ T30] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 530.426551][ T30] do_syscall_64+0x106/0xf80 [ 530.438700][ T30] ? clear_bhb_loop+0x40/0x90 [ 530.438733][ T5865] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 530.449214][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.460038][ T30] RIP: 0033:0x7f196019bf79 [ 530.492191][ T5865] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 530.494939][ T30] RSP: 002b:00007f196106c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 530.508083][ T30] RAX: ffffffffffffffda RBX: 00007f1960416180 RCX: 00007f196019bf79 [ 530.513429][ T5865] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 530.516241][ T30] RDX: 00002000000000c0 RSI: 000000000000000d RDI: 000000000000000e [ 530.540263][ T30] RBP: 00007f19602327e0 R08: 0000000000000000 R09: 0000000000000000 [ 530.561644][ T5865] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 530.592039][ T30] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000000 [ 530.599089][ T5865] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 530.613191][ T30] R13: 00007f1960416218 R14: 00007f1960416180 R15: 00007fffc9641c68 [ 530.620948][ T5865] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 530.632272][ T30] [ 530.639241][ T5914] usb 2-1: USB disconnect, device number 49 [ 530.644077][ T5865] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 530.659945][ T30] [ 530.659945][ T30] Showing all locks held in the system: [ 530.715036][ T30] 1 lock held by khungtaskd/30: [ 530.725571][ T30] #0: ffffffff8e7e7220 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 530.742848][ T5865] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 530.752153][ T30] 2 locks held by getty/5565: [ 530.761304][ T30] #0: ffff888032e700a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 530.761577][ T5865] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 530.779660][ T30] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 530.799006][ T30] 4 locks held by udevd/5795: [ 530.815352][ T30] #0: ffff88804c194d58 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 530.834435][ T30] #1: ffff8880b843afa0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 530.834728][ T5865] usb 1-1: USB disconnect, device number 39 [ 530.844563][ T30] #2: ffff8880b8524648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2b92/0x6000 [ 530.874573][ T30] #3: ffff8880b8524648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2b92/0x6000 [ 530.883518][ T30] 1 lock held by udevd/5797: [ 530.888176][ T30] #0: ffff888027525358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 530.898944][ T30] 7 locks held by kworker/1:4/5865: [ 530.904141][ T30] #0: ffff888022ebd548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 530.915414][ T30] #1: ffffc90004e07d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 530.931275][ T30] #2: ffff88802a936198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 530.940188][ T30] #3: ffff888056b85198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9a0 [ 530.949477][ T30] #4: ffff8880745d6160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xaa/0x600 [ 530.960186][ T30] #5: ffffffff8fe09388 (input_mutex){+.+.}-{4:4}, at: __input_unregister_device+0x184/0x4d0 [ 530.971156][ T30] #6: ffffffff8e7f2e38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 530.983471][ T30] 4 locks held by kworker/1:6/5886: [ 530.988710][ T30] #0: ffff888022ebd548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 530.999662][ T30] #1: ffffc90004f57d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 531.012296][ T30] #2: ffff88802a9ee198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 531.021249][ T30] #3: ffff888056b86198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 531.030798][ T30] 2 locks held by kworker/u8:8/5931: [ 531.036082][ T30] #0: ffff88813fe94948 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 531.047267][ T30] #1: ffffc90005077d08 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 531.059690][ T30] 4 locks held by udevd/5981: [ 531.064356][ T30] #0: ffff8880755bee80 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 531.073243][ T30] #1: ffff8880780f5c88 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 531.083413][ T30] #2: ffff88804717f0f8 (kn->active#26){.+.+}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 531.094409][ T30] #3: ffff888056b86198 (&dev->mutex){....}-{4:4}, at: serial_show+0x26/0xa0 [ 531.103278][ T30] 1 lock held by syz.3.937/9408: [ 531.108308][ T30] #0: ffff88803382e420 (sb_writers#3){.+.+}-{0:0}, at: splice_direct_to_actor+0x345/0xa30 [ 531.119545][ T30] 1 lock held by poweroff/10379: [ 531.124522][ T30] #0: ffff888027525358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 531.134138][ T30] [ 531.136527][ T30] ============================================= [ 531.136527][ T30] [ 531.145415][ T30] NMI backtrace for cpu 0 [ 531.145431][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 531.145453][ T30] Tainted: [L]=SOFTLOCKUP [ 531.145459][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 531.145468][ T30] Call Trace: [ 531.145474][ T30] [ 531.145480][ T30] dump_stack_lvl+0x100/0x190 [ 531.145510][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 531.145537][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 531.145561][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 531.145585][ T30] sys_info+0x141/0x190 [ 531.145604][ T30] watchdog+0xcc3/0xfe0 [ 531.145628][ T30] ? __pfx_watchdog+0x10/0x10 [ 531.145646][ T30] ? __kthread_parkme+0x18c/0x230 [ 531.145669][ T30] ? kthread+0x13a/0x450 [ 531.145689][ T30] ? __pfx_watchdog+0x10/0x10 [ 531.145705][ T30] kthread+0x370/0x450 [ 531.145725][ T30] ? __pfx_kthread+0x10/0x10 [ 531.145748][ T30] ret_from_fork+0x754/0xd80 [ 531.145773][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 531.145798][ T30] ? __switch_to+0x7b4/0x10c0 [ 531.145816][ T30] ? __pfx_kthread+0x10/0x10 [ 531.145839][ T30] ret_from_fork_asm+0x1a/0x30 [ 531.145870][ T30] [ 531.145877][ T30] Sending NMI from CPU 0 to CPUs 1: [ 531.271588][ C1] NMI backtrace for cpu 1 [ 531.271605][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 531.271624][ C1] Tainted: [L]=SOFTLOCKUP [ 531.271629][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 531.271637][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 531.271661][ C1] Code: 0e 94 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 ed 2e 00 fb f4 bc 33 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 531.271673][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000246 [ 531.271687][ C1] RAX: 00000000029bf8eb RBX: ffff88801e6aa480 RCX: ffffffff8b7cac75 [ 531.271696][ C1] RDX: 0000000000000000 RSI: ffffffff8de5c77c RDI: ffffffff8c1a9520 [ 531.271704][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed10170a6755 [ 531.271712][ C1] R10: ffff8880b8533aab R11: 0000000000000000 R12: ffffed1003cd5490 [ 531.271720][ C1] R13: 0000000000000001 R14: ffffffff90d823d0 R15: 0000000000000000 [ 531.271728][ C1] FS: 0000000000000000(0000) GS:ffff8881244a8000(0000) knlGS:0000000000000000 [ 531.271742][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 531.271750][ C1] CR2: 000000110c37df5f CR3: 000000005f512000 CR4: 00000000003526f0 [ 531.271758][ C1] Call Trace: [ 531.271763][ C1] [ 531.271768][ C1] default_idle+0x9/0x10 [ 531.271782][ C1] default_idle_call+0x6c/0xb0 [ 531.271795][ C1] do_idle+0x35b/0x4b0 [ 531.271811][ C1] ? __pfx_do_idle+0x10/0x10 [ 531.271826][ C1] cpu_startup_entry+0x4f/0x60 [ 531.271839][ C1] start_secondary+0x21d/0x2d0 [ 531.271857][ C1] ? __pfx_start_secondary+0x10/0x10 [ 531.271875][ C1] common_startup_64+0x13e/0x148 [ 531.271893][ C1] [ 531.443220][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 531.450081][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 531.460760][ T30] Tainted: [L]=SOFTLOCKUP [ 531.465074][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 531.475122][ T30] Call Trace: [ 531.478388][ T30] [ 531.481301][ T30] dump_stack_lvl+0x100/0x190 [ 531.485970][ T30] vpanic+0x20d/0x630 [ 531.489936][ T30] panic+0xd1/0xd1 [ 531.493636][ T30] ? __pfx_panic+0x10/0x10 [ 531.498033][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 531.504172][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 531.510308][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 531.516446][ T30] ? watchdog.cold+0x198/0x1ca [ 531.521192][ T30] ? watchdog+0xcd3/0xfe0 [ 531.525507][ T30] watchdog.cold+0x1a9/0x1ca [ 531.530087][ T30] ? __pfx_watchdog+0x10/0x10 [ 531.534744][ T30] ? __kthread_parkme+0x18c/0x230 [ 531.539757][ T30] ? kthread+0x13a/0x450 [ 531.543985][ T30] ? __pfx_watchdog+0x10/0x10 [ 531.548642][ T30] kthread+0x370/0x450 [ 531.552703][ T30] ? __pfx_kthread+0x10/0x10 [ 531.557283][ T30] ret_from_fork+0x754/0xd80 [ 531.561868][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 531.566973][ T30] ? __switch_to+0x7b4/0x10c0 [ 531.571647][ T30] ? __pfx_kthread+0x10/0x10 [ 531.576224][ T30] ret_from_fork_asm+0x1a/0x30 [ 531.580981][ T30] [ 531.584277][ T30] Kernel Offset: disabled [ 531.588582][ T30] Rebooting in 86400 seconds..