last executing test programs: 1m45.068468687s ago: executing program 3 (id=1156): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x204, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x8, 0x4, r0, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1m45.000190001s ago: executing program 3 (id=1157): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x100}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) 1m44.993391648s ago: executing program 3 (id=1158): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x23a, &(0x7f00000004c0)={0x0, 0x1c2a, 0x10100, 0x2, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, 0x0) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = inotify_init1(0x0) read(r5, 0x0, 0x0) 1m44.048213772s ago: executing program 3 (id=1162): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000080)='./bus\x00', 0x1, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) 1m40.663238318s ago: executing program 3 (id=1177): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000010800164000000004"], 0x6c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x38}}, 0x4048000) 1m39.827966128s ago: executing program 3 (id=1180): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m39.521126176s ago: executing program 32 (id=1180): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 38.306202735s ago: executing program 5 (id=1483): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x1, 0x0) vmsplice(r3, &(0x7f0000001280)=[{&(0x7f0000001180)}], 0x1, 0x0) vmsplice(r4, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) 37.428422147s ago: executing program 5 (id=1487): rseq(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88306, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000240)={0xf0003, 0x0, [0x680, 0x3, 0x7, 0x0, 0x0, 0x0, 0x2b, 0x40000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf2519000000180001801400020064756d6d793000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x5, 0x0, 0x0, &(0x7f0000eee000/0x1000)=nil, 0x1000, 0xfea2}) socket$inet6(0xa, 0x80001, 0x0) 36.566899955s ago: executing program 5 (id=1492): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x34, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}}, 0x80) 36.318772737s ago: executing program 5 (id=1493): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000080)='./bus\x00', 0x1, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) dup2(r2, r0) 36.06920366s ago: executing program 5 (id=1495): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r3 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0x40f9, 0x217, 0xa5, 0x0, 0xf5) 35.624361858s ago: executing program 5 (id=1496): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/3, 0x1e000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000000c0)=0x100, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) r3 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679a, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x2400c0c7, 0x1}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 35.240213779s ago: executing program 33 (id=1496): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/3, 0x1e000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000000c0)=0x100, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) r3 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679a, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x2400c0c7, 0x1}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 5.973282893s ago: executing program 4 (id=1648): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff", 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xff}) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r2, r2, r2}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 5.891320549s ago: executing program 6 (id=1649): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000003c0)={0x20, 0xc, 0x1, "bc"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 4.928585184s ago: executing program 4 (id=1660): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r1, &(0x7f00000000c0)={0x18}, 0x18) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r2, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x206e) write$FUSE_LK(r1, &(0x7f0000000340)={0x28, 0x0, r3, {{0x2, 0x0, 0x1}}}, 0x28) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$FUSE_IOCTL(r4, &(0x7f0000000180)={0x20, 0x0, 0x0, {0x6, 0x0, 0x8e4, 0x3}}, 0x20) 4.80416645s ago: executing program 2 (id=1661): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000300)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000040), 0x2, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f0000000440)=[r2], &(0x7f00000000c0)=[0x2], &(0x7f0000000280)=[r3, r3], &(0x7f0000000040)=[0x0]}) 4.743388263s ago: executing program 1 (id=1662): unshare(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x27) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {0x0}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) 4.660323827s ago: executing program 2 (id=1663): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0xc004004) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) fanotify_init(0xa00, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendfile(r0, r0, 0x0, 0x4800000009) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\/A\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) 3.988353385s ago: executing program 4 (id=1666): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x14, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) 3.762897879s ago: executing program 1 (id=1668): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x3, 0x0, 0x1, 0xff, 0x9}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x169, 0x0) fcntl$setlease(r6, 0x400, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') close(r6) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r2, &(0x7f0000000a40)={'syz1\x00', {}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffff], [0xffffffff, 0x3, 0x3, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x81, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1ff]}, 0x45c) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000400)) msgget$private(0x0, 0x4a0) 3.72108703s ago: executing program 2 (id=1669): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14}}, 0x90}}, 0x4000040) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x18}, 0x15, 0x3, 'none\x00', 0x19, 0x4, 0x10072}, 0x2c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000140)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x2, 0x7, 0x37}, {@remote, 0x4e23, 0x10000, 0xc3, 0x12d5c, 0x12d58}}, 0x44) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @random="429e82211cf8", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x7, 0x28, 0x67, 0x0, 0x9, 0x1, 0x0, @remote, @remote}, @timestamp={0xd, 0x0, 0x0, 0x3, 0x9c, 0x229, 0x4, 0x6}}}}}, 0x0) 3.710542956s ago: executing program 0 (id=1670): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = socket(0x2b, 0x80801, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}, r3}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, r3}}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@uncond, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7fff, 0x9, 0x7, 'syz0\x00', {0x719}}}}, {{@ipv6={@private0, @private2, [0xff, 0x0, 0xffffff00, 0xff], [0xff, 0xffffff00, 0xffffff00, 0xffffff00], 'tunl0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x4, 0x9456fff08070a538, 0x70}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x82b, 0x0, 0x0, 'syz0\x00', 'syz0\x00', {0x8000800000000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x0, 0x0, 0x0, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000570000/0x4000)=nil, 0x4000, 0x9) 3.618474727s ago: executing program 2 (id=1671): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) close(0xffffffffffffffff) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x78, 0x0, 0x400, {0x410000006, 0x50, 0x0, {0x0, 0x7fffffffffffffff, 0x10000000, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000005c0)=ANY=[@ANYRES64=r0, @ANYRES8=r2, @ANYBLOB=',rootmode=0000000000000000010000', @ANYRESDEC=0x0, @ANYBLOB="01020000000000000000f846da9316e0c77503b6e7f439983a9dff6f780b972312c315ac1e2262c4059645b0", @ANYRESOCT=r1]) read$FUSE(r2, &(0x7f0000004180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000500)={0x50, 0xfffffffffffffffe, r3, {0x7, 0x1f, 0x1000000, 0xfc1b2d1c5df073ab, 0x8, 0x441, 0xfc, 0x400008, 0x0, 0x0, 0x80, 0xb66}}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x2001c0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, 0x0) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="0f00000004000000040000000200020000000000", @ANYRES32=0x1, @ANYBLOB="fdffffff00"/20, @ANYBLOB="000000000400"/28], 0x48) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) 3.305387052s ago: executing program 2 (id=1672): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0x5e51, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x4000007, 0x9, 0x7, 0x4, 0x0, 0x5, 0x5}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.2002498s ago: executing program 4 (id=1673): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0xb4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0xfffe, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3f0000}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xffffffff}]}}]}, 0xb4}, 0x1, 0x7a00}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c583, 0x4, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x705, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0x10, 0x8}, {0x4, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c88b}, 0x0) 2.944275506s ago: executing program 4 (id=1674): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x7, 0x10, 0x0, 0x0, 0xb47, 0x9, 0x8, 0xffffeffc, 0x3}, 0x0) r2 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r2, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000002c0)="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", 0xfc) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000080)='\x00', 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000000)={0x8001, 0x5, 0xde, 0xffff}, 0x8) sendto$inet6(r5, &(0x7f00000001c0)="ad", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) 2.686108269s ago: executing program 6 (id=1675): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x3, 0xe}}}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x7, 0xd}, {}, {0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xd, 0x3, '.,\x03\x00\\{t\xca\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x55b, 0x2, 0x10000000, 0xfa0, 0x932}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x94}}, 0x801) socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.478539511s ago: executing program 6 (id=1676): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r3, &(0x7f0000002300)={0x2020}, 0x206e) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$FUSE_IOCTL(r4, &(0x7f0000000180)={0x20, 0x0, 0x0, {0x6, 0x0, 0x8e4, 0x3}}, 0x20) 2.257868786s ago: executing program 2 (id=1677): close(0xffffffffffffffff) r0 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) read$char_usb(r1, &(0x7f00000002c0)=""/151, 0x97) syz_usb_disconnect(r0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000004d80), 0xffffffffffffffff) 2.239765952s ago: executing program 0 (id=1678): unshare(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x27) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {0x0}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) 2.070306261s ago: executing program 1 (id=1679): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000002060b0100000000000000000000000005000100070000000900020073797a30000000000c00078008000640000000000500050002000000050004000000000016000300686173683a6e6574"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x48, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) read(r2, &(0x7f0000000140)=""/87, 0x57) 1.841266286s ago: executing program 1 (id=1680): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0xc004004) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) fanotify_init(0xa00, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendfile(r0, r0, 0x0, 0x4800000009) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\/A\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) 1.444599867s ago: executing program 4 (id=1681): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x13, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000040)='\x00', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) write$uinput_user_dev(r0, &(0x7f0000000980)={'syz0\x00', {0x9, 0x6, 0x9}, 0x5, [0x1, 0x400, 0x6, 0xfffffffb, 0x7, 0x7, 0x5, 0xd, 0x800, 0x4, 0xffffffff, 0x2, 0x10, 0x200, 0x8, 0x3, 0x2, 0x4, 0x6, 0x7, 0x2, 0x6, 0x7, 0x5, 0x101, 0x6, 0x401, 0x4, 0x15, 0x10000, 0x1ff, 0x0, 0x0, 0x6af, 0xc6, 0x5, 0x81, 0x7, 0x9, 0x0, 0x80000001, 0x81, 0x5d89, 0x2, 0x2, 0x2, 0x699, 0x180, 0x7ffffffe, 0x6, 0xb5b5, 0x7, 0x1, 0x8000, 0x3, 0x5b, 0x7ff, 0x8001, 0x3, 0x1, 0x3, 0x6, 0x481b, 0x10001], [0x9, 0xffffffff, 0x5f8, 0x1, 0x2, 0x4ec, 0x5, 0xfffffff7, 0x1, 0x385, 0x3, 0xfffffffe, 0x8, 0x2, 0xffffffff, 0x0, 0x4, 0x6, 0x4, 0x7, 0x7, 0xe, 0x4, 0x9, 0x72ed, 0x4, 0x4, 0x7865484d, 0x0, 0xe5, 0x0, 0x4, 0x8, 0x8, 0x0, 0x6, 0x6, 0x9, 0xffffffbc, 0x15b4, 0xffffffff, 0xa08, 0xcf, 0x0, 0x8001, 0xc, 0x1, 0xb7, 0x40, 0xc, 0x7fff, 0x8, 0xfffffffd, 0x80000001, 0x1, 0x1, 0x5, 0x7, 0x0, 0x1ff, 0x0, 0x0, 0x1, 0x8], [0x10, 0x0, 0x4, 0x2, 0x8, 0x2, 0xfffff001, 0x3, 0x0, 0x7386, 0xb, 0x5, 0x80000001, 0x5fef, 0x2000d, 0xe, 0x3, 0x104, 0x100, 0x42c1, 0x3, 0x7ffe, 0x3, 0x6, 0x1, 0xa4, 0x1, 0xffffff00, 0xfffffff9, 0xd94, 0x46de873e, 0x3ff, 0x3, 0x1, 0xd1, 0x5, 0x3, 0x400, 0x10000, 0x7ff, 0x8, 0x3, 0x6, 0x6, 0x2, 0x8, 0x8, 0x4, 0x970, 0x1, 0x1, 0x7f, 0x9, 0x200, 0x26d, 0x6, 0x400, 0x1ff, 0x3, 0x3, 0x2, 0x101, 0x1, 0x401], [0x19f3, 0x2, 0x4, 0x9, 0x6, 0x5, 0x4429, 0xf, 0x2, 0x7, 0x100, 0x0, 0x8, 0x100, 0x10001, 0x4, 0xfffd, 0x7, 0x1000, 0x8, 0x6, 0x7f, 0x100, 0x5, 0xff, 0x8, 0x40, 0x5, 0x3, 0x7, 0xf00000, 0x3, 0x7, 0xfffffffd, 0x7, 0x0, 0x8, 0x2, 0x9f4d, 0x9, 0x5, 0x7fff, 0x3, 0x401, 0x11e9, 0x800, 0xc5, 0x4, 0x1, 0x2, 0xfffffff9, 0x0, 0x0, 0x7, 0x4, 0x8, 0x4, 0x3af, 0xdc, 0x8, 0xfe19, 0x4, 0x7, 0x9]}, 0x45c) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/64, 0x328000, 0x800}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000340)='westwood\x00', 0x38) shutdown(r1, 0x1) pwrite64(r0, 0x0, 0x44, 0x0) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x5, @private1, 0x594}], 0x1c) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1.316093714s ago: executing program 6 (id=1682): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000102000", @ANYRES32=r1, @ANYBLOB="da"], 0x50) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a000000020000", 0x7) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="8f064ab6bf7c", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x10, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[@hopopts={0x0, 0x0, '\x00', [@ra, @generic]}]}}}}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r6, 0xfffffffc) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000000100)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x40}}, @in={0x2, 0x4e22, @private=0xa010102}, @in6={0xa, 0x4e23, 0x7, @remote, 0x7ff}, @in6={0xa, 0x4e24, 0xee, @local, 0x2375}, @in6={0xa, 0x4e21, 0xfff, @dev={0xfe, 0x80, '\x00', 0x37}, 0x3}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e21, 0x7, @remote, 0x3}], 0xa0) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1.198642698s ago: executing program 0 (id=1683): ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 1.172566889s ago: executing program 0 (id=1684): ioctl$IOMMU_VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6ee89000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x3000) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/172) 1.141014754s ago: executing program 6 (id=1685): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = socket(0x2b, 0x80801, 0x1) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}, r4}}, 0x48) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@uncond, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7fff, 0x9, 0x7, 'syz0\x00', {0x719}}}}, {{@ipv6={@private0, @private2, [0xff, 0x0, 0xffffff00, 0xff], [0xff, 0xffffff00, 0xffffff00, 0xffffff00], 'tunl0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x4, 0x9456fff08070a538, 0x70}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x82b, 0x0, 0x0, 'syz0\x00', 'syz0\x00', {0x8000800000000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x0, 0x0, 0x0, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000570000/0x4000)=nil, 0x4000, 0x9) 817.063577ms ago: executing program 1 (id=1686): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000000)={0x0, 0x300}) 332.291093ms ago: executing program 1 (id=1687): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$audio(0xffffffffffffff9c, 0x0, 0xa002, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000280)={0x80000001}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x9}, 0x3, 0x0, 0x1}) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0xf, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x21, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0x5e51, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x4000007, 0x9, 0x7, 0x4, 0x0, 0x5, 0x5}, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 133.796614ms ago: executing program 0 (id=1688): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080008000000000000000000000500010006"], 0x1c}}, 0x0) read(r0, &(0x7f0000000140)=""/87, 0x57) 48.640454ms ago: executing program 0 (id=1689): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$netlink(0x10, 0x3, 0xf) getsockopt$netlink(r3, 0x10e, 0xb, 0x0, &(0x7f0000001100)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f, 0x1}}, 0x20) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020}, 0x2020) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002900)=[{{&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) close_range(r2, r0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r5, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000500)={0x28, 0x6, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x80000001}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r5}) r6 = syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205647, &(0x7f0000000100)={0xf030000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f907, 0x0, '\x00', @p_u32=0x0}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) 0s ago: executing program 6 (id=1690): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r1 = socket(0x2, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x100000000) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0) kernel console output (not intermixed with test programs): ptor?? [ 234.880265][ T1206] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 235.889433][ T795] usb 5-1: Failed to submit usb control message: -110 [ 235.898083][ T795] usb 5-1: unable to send the bmi data to the device: -110 [ 235.910426][ T795] usb 5-1: unable to get target info from device [ 235.976841][ T795] usb 5-1: could not get target info (-110) [ 236.037212][ T795] usb 5-1: could not probe fw (-110) [ 236.225193][ T9220] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1061'. [ 236.853275][ T1206] usb 1-1: USB disconnect, device number 24 [ 236.909143][ T5959] usb 5-1: USB disconnect, device number 31 [ 237.246955][ T9241] binder: 9239:9241 ioctl c0306201 200000000080 returned -14 [ 237.787879][ T5959] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 237.966213][ T5959] usb 5-1: device descriptor read/64, error -71 [ 238.437727][ T5959] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 238.612304][ T5959] usb 5-1: device descriptor read/64, error -71 [ 238.664273][ T9257] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1072'. [ 238.739206][ T5959] usb usb5-port1: attempt power cycle [ 239.419139][ T5959] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 239.441585][ T5959] usb 5-1: device descriptor read/8, error -71 [ 239.767762][ T5979] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 240.034798][ T5959] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 240.082455][ T5959] usb 5-1: device descriptor read/8, error -71 [ 240.197744][ T5979] usb 3-1: Using ep0 maxpacket: 8 [ 240.274942][ T5959] usb usb5-port1: unable to enumerate USB device [ 240.282446][ T5979] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 240.298667][ T5979] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 240.316604][ T5979] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 240.352718][ T5979] usb 3-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 240.410208][ T5979] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 240.479175][ T5979] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 240.497098][ T5979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.523635][ T5979] usbtmc 3-1:16.0: bulk endpoints not found [ 241.420834][ T1206] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 241.618337][ T1206] usb 1-1: Using ep0 maxpacket: 16 [ 241.625231][ T1206] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.636622][ T1206] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.649507][ T1206] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 241.764078][ T1206] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 241.792125][ T1206] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.811730][ T1206] usb 1-1: config 0 descriptor?? [ 242.388097][ T1206] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 242.427381][ T1206] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 242.475063][ T1206] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 242.478286][ T5928] usb 3-1: USB disconnect, device number 29 [ 242.517874][ T1206] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 242.540348][ T1206] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 242.572859][ T1206] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 242.597742][ T1206] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 242.635247][ T1206] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 242.677691][ T1206] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 242.698534][ T1206] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 242.918268][ T1206] microsoft 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 242.977704][ T1206] microsoft 0003:045E:07DA.0006: no inputs found [ 243.007789][ T1206] microsoft 0003:045E:07DA.0006: could not initialize ff, continuing anyway [ 243.070640][ T1206] usb 1-1: USB disconnect, device number 25 [ 243.275794][ T9326] fido_id[9326]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0006/report_descriptor': No such file or directory [ 243.408301][ T5900] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 243.630669][ T9336] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 243.649346][ T5900] usb 5-1: device descriptor read/64, error -71 [ 243.887951][ T5979] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 243.903092][ T5900] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 244.052207][ T5979] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 244.067979][ T5900] usb 5-1: device descriptor read/64, error -71 [ 244.110630][ T5979] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 244.122778][ T9352] binder: 9351:9352 ioctl c0306201 200000000080 returned -14 [ 244.163821][ T5979] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 244.191656][ T5900] usb usb5-port1: attempt power cycle [ 244.209488][ T5979] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 244.232171][ T5979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.245332][ T5979] usb 2-1: Product: syz [ 244.252187][ T5979] usb 2-1: Manufacturer: syz [ 244.262168][ T5979] usb 2-1: SerialNumber: syz [ 244.295418][ T5979] hub 2-1:1.0: bad descriptor, ignoring hub [ 244.310083][ T5979] hub 2-1:1.0: probe with driver hub failed with error -5 [ 244.427889][ T5928] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 244.509687][ T5979] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 244.558189][ T5900] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 244.588699][ T5900] usb 5-1: device descriptor read/8, error -71 [ 244.597694][ T5928] usb 1-1: Using ep0 maxpacket: 32 [ 244.612526][ T5979] usb 2-1: USB disconnect, device number 32 [ 244.621074][ T5928] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 244.647753][ T1206] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 244.668804][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.692292][ T5979] usblp0: removed [ 244.737311][ T5928] usb 1-1: Product: syz [ 244.753896][ T5928] usb 1-1: Manufacturer: syz [ 244.774124][ T5928] usb 1-1: SerialNumber: syz [ 244.804258][ T5928] usb 1-1: config 0 descriptor?? [ 244.808520][ T1206] usb 3-1: Using ep0 maxpacket: 8 [ 244.820302][ T1206] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 244.828926][ T5900] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 244.831187][ T5928] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 244.839638][ T1206] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 244.862994][ T1206] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 244.874147][ T5900] usb 5-1: device descriptor read/8, error -71 [ 244.883692][ T1206] usb 3-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 244.904840][ T1206] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 244.922189][ T1206] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 244.931704][ T1206] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.988057][ T5900] usb usb5-port1: unable to enumerate USB device [ 245.005042][ T1206] usbtmc 3-1:16.0: bulk endpoints not found [ 245.115787][ T5979] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 245.290138][ T5979] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 245.308856][ T5979] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 245.321322][ T5979] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 245.340872][ T5979] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 245.359528][ T5979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.379122][ T5979] usb 2-1: Product: syz [ 245.387559][ T5979] usb 2-1: Manufacturer: syz [ 245.401810][ T5979] usb 2-1: SerialNumber: syz [ 245.424354][ T5979] hub 2-1:1.0: bad descriptor, ignoring hub [ 245.432708][ T5979] hub 2-1:1.0: probe with driver hub failed with error -5 [ 245.519623][ T5928] gspca_ov534_9: reg_w failed -71 [ 245.937752][ T5928] gspca_ov534_9: Unknown sensor 0000 [ 245.937826][ T5928] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 245.968669][ T5928] usb 1-1: USB disconnect, device number 26 [ 246.527880][ T5927] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 246.668978][ T9383] dvmrp1: entered allmulticast mode [ 246.681730][ T5927] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 246.726131][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.736980][ T5979] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 33 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 246.756446][ T5927] usb 5-1: Product: syz [ 246.765311][ T5927] usb 5-1: Manufacturer: syz [ 246.779518][ T5927] usb 5-1: SerialNumber: syz [ 246.799712][ T5979] usb 2-1: USB disconnect, device number 33 [ 246.813981][ T5979] usblp0: removed [ 246.988307][ T1206] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 246.999804][ T5927] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 247.013221][ T5927] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 247.023802][ T5927] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 247.067187][ T5927] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 247.137996][ T1206] usb 4-1: Using ep0 maxpacket: 8 [ 247.157896][ T1206] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 247.278026][ T1206] usb 4-1: config 0 has no interface number 0 [ 247.284232][ T1206] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 247.295586][ T1206] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 247.307505][ T1206] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 247.337613][ T5927] usb 3-1: USB disconnect, device number 30 [ 247.370876][ T1206] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 247.390892][ T1206] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 247.404736][ T1206] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.414907][ T1206] usb 4-1: config 0 descriptor?? [ 247.474823][ T1206] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 247.692209][ T5979] usb 4-1: USB disconnect, device number 25 [ 247.692314][ C0] ldusb 4-1:0.55: usb_submit_urb failed (-19) [ 247.719895][ T5979] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 247.892864][ T9385] ldusb: No device or device unplugged -19 [ 247.898889][ T1206] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 248.057710][ T1206] usb 1-1: Using ep0 maxpacket: 32 [ 248.065782][ T1206] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 248.075012][ T1206] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.083171][ T1206] usb 1-1: Product: syz [ 248.087419][ T1206] usb 1-1: Manufacturer: syz [ 248.092056][ T1206] usb 1-1: SerialNumber: syz [ 248.101529][ T1206] usb 1-1: config 0 descriptor?? [ 248.109626][ T1206] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 248.446737][ T9413] binder: 9412:9413 ioctl c0306201 200000000080 returned -14 [ 248.758800][ T5900] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 248.907790][ T5900] usb 4-1: Using ep0 maxpacket: 32 [ 248.924811][ T5900] usb 4-1: config 0 has an invalid interface number: 202 but max is 1 [ 248.940636][ T5900] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.958129][ T5900] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 248.977279][ T5900] usb 4-1: config 0 has no interface number 0 [ 248.983763][ T5900] usb 4-1: too many endpoints for config 0 interface 202 altsetting 87: 182, using maximum allowed: 30 [ 248.985053][ T5979] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 248.996762][ T5900] usb 4-1: config 0 interface 202 altsetting 87 endpoint 0x2 has invalid maxpacket 255, setting to 64 [ 249.014923][ T5900] usb 4-1: config 0 interface 202 altsetting 87 has 1 endpoint descriptor, different from the interface descriptor's value: 182 [ 249.033169][ T5900] usb 4-1: config 0 interface 202 has no altsetting 0 [ 249.042556][ T5900] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.2b [ 249.052458][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.060553][ T5900] usb 4-1: Product: syz [ 249.064924][ T5900] usb 4-1: Manufacturer: syz [ 249.069589][ T5900] usb 4-1: SerialNumber: syz [ 249.078130][ T5900] usb 4-1: config 0 descriptor?? [ 249.126149][ T5900] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 249.181554][ T5927] usb 5-1: USB disconnect, device number 40 [ 249.213427][ T5979] usb 2-1: Using ep0 maxpacket: 32 [ 249.222716][ T5979] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 249.250473][ T5979] usb 2-1: config 0 has no interface number 0 [ 249.259125][ T5979] usb 2-1: config 0 interface 184 has no altsetting 0 [ 249.270343][ T5979] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 249.279693][ T5979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.290973][ T5979] usb 2-1: Product: syz [ 249.295150][ T5979] usb 2-1: Manufacturer: syz [ 249.301367][ T44] usb 4-1: USB disconnect, device number 26 [ 249.311024][ T5979] usb 2-1: SerialNumber: syz [ 249.318633][ T5979] usb 2-1: config 0 descriptor?? [ 249.323823][ T6146] usb 4-1: Failed to submit usb control message: -71 [ 249.335773][ T5979] smsc75xx v1.0.0 [ 249.341345][ T6146] usb 4-1: unable to send the bmi data to the device: -71 [ 249.352327][ T6146] usb 4-1: unable to get target info from device [ 249.372461][ T6146] usb 4-1: could not get target info (-71) [ 249.378690][ T6146] usb 4-1: could not probe fw (-71) [ 249.577775][ T5927] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 249.727752][ T5927] usb 5-1: Using ep0 maxpacket: 32 [ 249.734245][ T5927] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 249.742649][ T5927] usb 5-1: config 0 has no interface number 0 [ 249.750954][ T5927] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 249.760064][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.768282][ T5927] usb 5-1: Product: syz [ 249.772464][ T5927] usb 5-1: Manufacturer: syz [ 249.777068][ T5927] usb 5-1: SerialNumber: syz [ 249.784049][ T5927] usb 5-1: config 0 descriptor?? [ 249.791220][ T5927] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 249.943664][ T5979] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 249.954542][ T5979] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 249.994252][ T1206] gspca_stk1135: reg_w 0x200 err -71 [ 250.003121][ T1206] gspca_stk1135: serial bus timeout: status=0x00 [ 250.011489][ T1206] gspca_stk1135: Sensor write failed [ 250.013310][ T5927] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 250.016890][ T1206] gspca_stk1135: serial bus timeout: status=0x00 [ 250.044632][ T1206] gspca_stk1135: Sensor write failed [ 250.052551][ T1206] gspca_stk1135: serial bus timeout: status=0x00 [ 250.060726][ T1206] gspca_stk1135: Sensor read failed [ 250.066130][ T1206] gspca_stk1135: serial bus timeout: status=0x00 [ 250.069930][ T5927] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 250.073061][ T1206] gspca_stk1135: Sensor read failed [ 250.089200][ T1206] gspca_stk1135: Detected sensor type unknown (0x0) [ 250.095916][ T1206] gspca_stk1135: serial bus timeout: status=0x00 [ 250.102943][ T1206] gspca_stk1135: Sensor read failed [ 250.174772][ T1206] gspca_stk1135: serial bus timeout: status=0x00 [ 250.189590][ T1206] gspca_stk1135: Sensor read failed [ 250.200333][ T1206] gspca_stk1135: serial bus timeout: status=0x00 [ 250.214801][ T1206] gspca_stk1135: Sensor write failed [ 250.220478][ T1206] gspca_stk1135: serial bus timeout: status=0x00 [ 250.226988][ T1206] gspca_stk1135: Sensor write failed [ 250.234555][ T1206] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 250.260075][ T1206] usb 1-1: USB disconnect, device number 27 [ 250.412382][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 250.413168][ T5900] usb 5-1: USB disconnect, device number 41 [ 250.434995][ T5900] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 250.474034][ T5900] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 250.514313][ T5900] quatech2 5-1:0.51: device disconnected [ 250.776996][ T9459] binder: 9454:9459 ioctl 4018620d 0 returned -22 [ 250.784291][ T9459] binder: 9454:9459 unknown command 0 [ 250.795435][ T9459] binder: 9454:9459 ioctl c0306201 200000000080 returned -22 [ 251.200713][ T9464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1134'. [ 252.357727][ T5928] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 252.540941][ T5928] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 252.550170][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.558228][ T5928] usb 3-1: Product: syz [ 252.562437][ T5928] usb 3-1: Manufacturer: syz [ 252.567022][ T5928] usb 3-1: SerialNumber: syz [ 252.653870][ T5979] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 252.665102][ T5979] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 252.696942][ T5979] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 252.754754][ T5979] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 252.788445][ T5928] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 252.817872][ T5928] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 252.836531][ T5979] usb 2-1: USB disconnect, device number 34 [ 252.863193][ T5928] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 252.939285][ T5928] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 253.247813][ T5928] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 253.423334][ T5928] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 253.469904][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 253.481012][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 253.490842][ T5928] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 253.911560][ T5928] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 253.921657][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.950118][ T5928] usb 1-1: config 0 descriptor?? [ 254.395399][ T5928] plantronics 0003:047F:FFFF.0007: ignoring exceeding usage max [ 254.413375][ T5928] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 254.621109][ T5928] usb 3-1: USB disconnect, device number 31 [ 254.804651][ T9511] binder: 9506:9511 ioctl 4018620d 0 returned -22 [ 254.812560][ T9511] binder: 9506:9511 unknown command 0 [ 254.830354][ T9511] binder: 9506:9511 ioctl c0306201 200000000080 returned -22 [ 254.832710][ T5857] Bluetooth: hci4: unexpected event for opcode 0x2010 [ 255.263202][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.270708][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.639838][ T5928] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 255.799769][ T5928] usb 4-1: config 1 interface 0 has no altsetting 0 [ 255.810255][ T5928] usb 4-1: New USB device found, idVendor=056a, idProduct=0069, bcdDevice= 0.40 [ 255.822422][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.831151][ T5928] usb 4-1: Product: syz [ 255.835342][ T5928] usb 4-1: Manufacturer: syz [ 255.848310][ T5928] usb 4-1: SerialNumber: syz [ 256.167755][ T5927] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 256.301070][ T5928] usbhid 4-1:1.0: can't add hid device: -71 [ 256.307076][ T5928] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 256.349796][ T5927] usb 5-1: Using ep0 maxpacket: 32 [ 256.363829][ T5927] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 256.373329][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.384265][ T5927] usb 5-1: Product: syz [ 256.391885][ T5928] usb 4-1: USB disconnect, device number 27 [ 256.404273][ T5927] usb 5-1: Manufacturer: syz [ 256.443306][ T5927] usb 5-1: SerialNumber: syz [ 256.464787][ T5927] usb 5-1: config 0 descriptor?? [ 256.598449][ T5927] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 256.828043][ T5979] usb 1-1: reset high-speed USB device number 28 using dummy_hcd [ 256.990119][ T5979] usb 1-1: device firmware changed [ 256.997579][ T44] usb 1-1: USB disconnect, device number 28 [ 257.139713][ T44] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 257.159618][ T1206] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 257.210217][ T5927] gspca_ov534_9: reg_w failed -71 [ 257.304662][ T44] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 257.316622][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.327299][ T44] usb 1-1: Product: syz [ 257.331760][ T44] usb 1-1: Manufacturer: syz [ 257.336626][ T44] usb 1-1: SerialNumber: syz [ 257.370170][ T1206] usb 3-1: Using ep0 maxpacket: 32 [ 257.392317][ T1206] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 257.415309][ T1206] usb 3-1: config 0 has no interface number 0 [ 257.433989][ T1206] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 257.451759][ T1206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.485319][ T1206] usb 3-1: Product: syz [ 257.497456][ T1206] usb 3-1: Manufacturer: syz [ 257.497770][ T5927] gspca_ov534_9: Unknown sensor 0000 [ 257.502143][ T5927] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 257.518271][ T5927] usb 5-1: USB disconnect, device number 42 [ 257.537235][ T1206] usb 3-1: SerialNumber: syz [ 257.545265][ T1206] usb 3-1: config 0 descriptor?? [ 257.553868][ T1206] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 257.566583][ T44] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 257.570234][ T1206] usb 3-1: selecting invalid altsetting 1 [ 257.581552][ T44] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 257.592061][ T1206] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 257.595656][ T44] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 257.607081][ T1206] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 257.622034][ T1206] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 257.622772][ T44] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 257.631137][ T1206] usb 3-1: media controller created [ 257.657132][ T1206] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 257.677844][ T5959] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 257.757555][ T1206] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 257.766812][ T1206] zl10353_read_register: readreg error (reg=127, ret==-71) [ 257.775780][ T1206] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 257.842401][ T1206] usb 3-1: USB disconnect, device number 32 [ 257.848737][ T5959] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 257.865540][ T5959] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 257.890119][ T5959] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 257.899497][ T5959] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 257.910646][ T5959] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 257.927875][ T5959] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 257.936948][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 257.947933][ T5959] usb 2-1: Product: syz [ 257.952103][ T5959] usb 2-1: Manufacturer: syz [ 257.967786][ T5959] cdc_wdm 2-1:1.0: skipping garbage [ 257.973008][ T5959] cdc_wdm 2-1:1.0: skipping garbage [ 257.982877][ T5959] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 257.989251][ T5959] cdc_wdm 2-1:1.0: Unknown control protocol [ 258.174106][ T30] audit: type=1400 audit(2000000043.280:415): avc: denied { read write } for pid=9554 comm="syz.1.1159" name="cdc-wdm0" dev="devtmpfs" ino=3193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 258.198367][ T30] audit: type=1400 audit(2000000043.290:416): avc: denied { open } for pid=9554 comm="syz.1.1159" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 258.305116][ T9555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.323273][ T9555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.943273][ T9575] binder: 9574:9575 ioctl c0306201 200000000080 returned -14 [ 259.220961][ T1206] usb 2-1: USB disconnect, device number 35 [ 259.475264][ T1206] usb 1-1: USB disconnect, device number 29 [ 259.497773][ T5927] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 259.736193][ T5927] usb 3-1: config 0 has no interfaces? [ 259.745945][ T5927] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 259.772157][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.824807][ T5927] usb 3-1: Product: syz [ 259.851353][ T5927] usb 3-1: Manufacturer: syz [ 259.856231][ T5927] usb 3-1: SerialNumber: syz [ 259.863561][ T5927] usb 3-1: config 0 descriptor?? [ 260.092073][ T1206] usb 3-1: USB disconnect, device number 33 [ 261.659003][ T9616] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 261.688552][ T9615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1176'. [ 262.657883][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 262.817831][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 262.836518][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 262.844818][ T9] usb 1-1: config 0 has no interface number 0 [ 262.851777][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.883892][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.921609][ T9] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 262.986866][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.041181][ T9] usb 1-1: config 0 descriptor?? [ 263.280519][ T30] audit: type=1400 audit(2000000048.390:417): avc: denied { create } for pid=9641 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 263.359725][ T30] audit: type=1400 audit(2000000048.390:418): avc: denied { ioctl } for pid=9641 comm="syz-executor" path="socket:[23390]" dev="sockfs" ino=23390 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 263.360511][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 263.385016][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.438770][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 263.450679][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 263.462287][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 263.471705][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 263.527374][ T30] audit: type=1400 audit(2000000048.600:419): avc: denied { mounton } for pid=9641 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 263.672385][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 263.679943][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 263.687132][ T9] usbhid 1-1:0.1: can't add hid device: -32 [ 263.693480][ T9] usbhid 1-1:0.1: probe with driver usbhid failed with error -32 [ 263.727586][ T9] usb 1-1: USB disconnect, device number 30 [ 263.981138][ T9641] chnl_net:caif_netlink_parms(): no params data found [ 264.283306][ T9664] fuse: Unknown parameter 'grou00000000000000000000' [ 264.332697][ T9641] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.340650][ T9641] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.347929][ T9641] bridge_slave_0: entered allmulticast mode [ 264.355332][ T9641] bridge_slave_0: entered promiscuous mode [ 264.363541][ T9641] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.371365][ T9641] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.378828][ T9641] bridge_slave_1: entered allmulticast mode [ 264.387415][ T9641] bridge_slave_1: entered promiscuous mode [ 264.505560][ T9641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.540818][ T9641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.645401][ T9641] team0: Port device team_slave_0 added [ 264.686247][ T9641] team0: Port device team_slave_1 added [ 264.714768][ T9674] dvmrp1: entered allmulticast mode [ 264.756609][ T9641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.763872][ T9641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.796410][ T9641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.070591][ T9641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.093287][ T9641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.121031][ T9641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.247853][ T5979] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 265.294046][ T9641] hsr_slave_0: entered promiscuous mode [ 265.299665][ T44] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 265.308725][ T9641] hsr_slave_1: entered promiscuous mode [ 265.319093][ T9641] debugfs: 'hsr0' already exists in 'hsr' [ 265.324829][ T9641] Cannot create hsr debugfs directory [ 265.417747][ T5979] usb 1-1: Using ep0 maxpacket: 16 [ 265.443226][ T5979] usb 1-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55 [ 265.464217][ T5979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.497128][ T44] usb 2-1: config 1 interface 0 has no altsetting 0 [ 265.504474][ T5979] usb 1-1: Product: syz [ 265.508883][ T5979] usb 1-1: Manufacturer: syz [ 265.518253][ T5979] usb 1-1: SerialNumber: syz [ 265.523963][ T44] usb 2-1: New USB device found, idVendor=056a, idProduct=0069, bcdDevice= 0.40 [ 265.533794][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.549398][ T44] usb 2-1: Product: syz [ 265.553932][ T44] usb 2-1: Manufacturer: syz [ 265.559490][ T5979] usb 1-1: config 0 descriptor?? [ 265.567737][ T44] usb 2-1: SerialNumber: syz [ 265.577086][ T5979] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704a [ 265.584180][ T5851] Bluetooth: hci2: command tx timeout [ 265.625458][ T5851] Bluetooth: hci1: Malformed LE Event: 0x0d [ 265.641725][ T6160] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.755091][ T6160] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.853139][ T6160] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.909380][ T6160] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.923841][ T9641] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 265.936306][ T9641] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 265.945727][ T9641] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 265.956552][ T9641] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 266.007368][ T44] usbhid 2-1:1.0: can't add hid device: -71 [ 266.028874][ T44] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 266.049391][ T44] usb 2-1: USB disconnect, device number 36 [ 266.108553][ T9] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 266.175620][ T6160] bridge_slave_1: left allmulticast mode [ 266.190539][ T6160] bridge_slave_1: left promiscuous mode [ 266.197415][ T6160] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.227941][ T6160] bridge_slave_0: left allmulticast mode [ 266.233721][ T6160] bridge_slave_0: left promiscuous mode [ 266.241082][ T6160] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.267812][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 266.276878][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 266.286764][ T9] usb 5-1: config 0 has no interface number 0 [ 266.295550][ T30] audit: type=1400 audit(2000000051.400:420): avc: denied { write } for pid=9699 comm="syz.2.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 266.305305][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.327760][ T5979] gspca_sn9c20x: Write register 1001 failed -110 [ 266.363833][ T5979] gspca_sn9c20x: Device initialization failed [ 266.369029][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.390923][ T5979] gspca_sn9c20x 1-1:0.0: probe with driver gspca_sn9c20x failed with error -110 [ 266.395753][ T9] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 266.459669][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.473777][ T9] usb 5-1: config 0 descriptor?? [ 266.535321][ T5585] usb 1-1: USB disconnect, device number 31 [ 266.583841][ T6160] dvmrp1 (unregistering): left allmulticast mode [ 266.707095][ T6160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.719155][ T6160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.729469][ T6160] bond0 (unregistering): Released all slaves [ 266.897270][ T6160] tipc: Left network mode [ 266.917450][ T9641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.140626][ T9] usbhid 5-1:0.1: can't add hid device: -71 [ 267.146630][ T9] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 267.275739][ T9] usb 5-1: USB disconnect, device number 43 [ 267.313943][ T9713] netlink: 'syz.1.1203': attribute type 12 has an invalid length. [ 267.418385][ T9641] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.499289][ T9721] syz_tun: entered allmulticast mode [ 267.512379][ T795] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.519541][ T795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.552823][ T9721] dvmrp1: entered allmulticast mode [ 267.569816][ T795] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.576951][ T795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.650229][ T5851] Bluetooth: hci2: command tx timeout [ 267.663947][ T6160] hsr_slave_0: left promiscuous mode [ 267.673612][ T6160] hsr_slave_1: left promiscuous mode [ 267.687211][ T6160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.704607][ T6160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.719695][ T6160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.731665][ T6160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.944132][ T5585] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 267.973320][ T6160] veth1_macvtap: left promiscuous mode [ 267.998072][ T6160] veth0_macvtap: left promiscuous mode [ 268.007894][ T6160] veth1_vlan: left promiscuous mode [ 268.013416][ T6160] veth0_vlan: left promiscuous mode [ 268.191138][ T5585] usb 3-1: Using ep0 maxpacket: 32 [ 268.222044][ T5585] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 268.231305][ T5585] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.268957][ T5585] usb 3-1: Product: syz [ 268.281513][ T5585] usb 3-1: Manufacturer: syz [ 268.292256][ T5585] usb 3-1: SerialNumber: syz [ 268.321735][ T5585] usb 3-1: config 0 descriptor?? [ 268.343277][ T5585] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 268.771388][ T6160] team0 (unregistering): Port device team_slave_1 removed [ 268.826661][ T6160] team0 (unregistering): Port device team_slave_0 removed [ 269.268471][ T9719] syz_tun: left allmulticast mode [ 269.416767][ T9750] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 269.450278][ T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 269.637597][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 269.655054][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=0069, bcdDevice= 0.40 [ 269.684073][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.702441][ T9] usb 2-1: Product: syz [ 269.706734][ T9] usb 2-1: Manufacturer: syz [ 269.732595][ T5851] Bluetooth: hci2: command tx timeout [ 269.741562][ T9] usb 2-1: SerialNumber: syz [ 269.746937][ T9641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.752794][ T5585] gspca_stk1135: reg_w 0xf err -71 [ 269.764271][ T5585] gspca_stk1135: serial bus timeout: status=0x00 [ 269.837081][ T5585] gspca_stk1135: Sensor write failed [ 269.879139][ T5585] gspca_stk1135: serial bus timeout: status=0x00 [ 269.893883][ T5585] gspca_stk1135: Sensor write failed [ 270.059701][ T5585] gspca_stk1135: serial bus timeout: status=0x00 [ 270.120287][ T5585] gspca_stk1135: Sensor read failed [ 270.149908][ T5585] gspca_stk1135: serial bus timeout: status=0x00 [ 270.214671][ T5585] gspca_stk1135: Sensor read failed [ 270.231143][ T5585] gspca_stk1135: Detected sensor type unknown (0x0) [ 270.238720][ T5585] gspca_stk1135: serial bus timeout: status=0x00 [ 270.245186][ T5585] gspca_stk1135: Sensor read failed [ 270.257941][ T5585] gspca_stk1135: serial bus timeout: status=0x00 [ 270.265181][ T5585] gspca_stk1135: Sensor read failed [ 270.272677][ T9] usbhid 2-1:1.0: can't add hid device: -71 [ 270.278826][ T9] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 270.299933][ T9] usb 2-1: USB disconnect, device number 37 [ 270.309193][ T5585] gspca_stk1135: serial bus timeout: status=0x00 [ 270.343513][ T5585] gspca_stk1135: Sensor write failed [ 270.366952][ T5585] gspca_stk1135: serial bus timeout: status=0x00 [ 270.390954][ T5585] gspca_stk1135: Sensor write failed [ 270.406316][ T5585] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 270.422572][ T5585] usb 3-1: USB disconnect, device number 34 [ 270.656421][ T9641] veth0_vlan: entered promiscuous mode [ 270.668921][ T9641] veth1_vlan: entered promiscuous mode [ 270.890522][ T9641] veth0_macvtap: entered promiscuous mode [ 270.934218][ T9641] veth1_macvtap: entered promiscuous mode [ 271.186039][ T9641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.210665][ T9641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.279994][ T795] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.326387][ T795] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.429294][ T6153] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.482127][ T6153] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.822359][ T5851] Bluetooth: hci2: command tx timeout [ 271.853990][ T6160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.910381][ T6160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.103294][ T6160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.162458][ T6160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.203641][ T30] audit: type=1400 audit(2000000003.550:421): avc: denied { mount } for pid=9641 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 272.408999][ T30] audit: type=1400 audit(2000000003.590:422): avc: denied { mounton } for pid=9641 comm="syz-executor" path="/root/syzkaller.QCu5W7/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 272.435609][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.515783][ T9819] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1221'. [ 273.168931][ T30] audit: type=1400 audit(2000000003.620:423): avc: denied { mount } for pid=9641 comm="syz-executor" name="/" dev="gadgetfs" ino=7138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 275.392467][ T30] audit: type=1400 audit(2000000000.290:424): avc: denied { execute } for pid=9882 comm="syz.2.1236" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=26065 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 275.418538][ C1] vkms_vblank_simulate: vblank timer overrun [ 276.295441][ T30] audit: type=1400 audit(2000000001.210:425): avc: denied { connect } for pid=9904 comm="syz.1.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 276.314993][ C1] vkms_vblank_simulate: vblank timer overrun [ 276.538123][ T9913] process 'syz.1.1239' launched './file0' with NULL argv: empty string added [ 276.553506][ T9913] fuse: Unknown parameter 'root' [ 276.571575][ T30] audit: type=1400 audit(2000000001.470:426): avc: denied { execute_no_trans } for pid=9904 comm="syz.1.1239" path="/232/file0" dev="tmpfs" ino=1191 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 278.319746][ T5959] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 278.522243][ T5959] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 278.543175][ T5959] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 278.566712][ T5959] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 278.590479][ T5959] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 278.627270][ T5959] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 278.692924][ T5959] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 278.719410][ T5959] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 278.753354][ T5959] usb 3-1: Product: syz [ 278.760205][ T5959] usb 3-1: Manufacturer: syz [ 278.805781][ T5959] cdc_wdm 3-1:1.0: skipping garbage [ 278.817827][ T5959] cdc_wdm 3-1:1.0: skipping garbage [ 278.872099][ T5959] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 278.893245][ T5959] cdc_wdm 3-1:1.0: Unknown control protocol [ 279.059275][ T9944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.076919][ T9944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.968218][ T5959] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 280.300907][ T5959] usb 6-1: config 0 has no interfaces? [ 280.316949][ T5959] usb 6-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 280.336940][ T5959] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.344084][ T9984] syz_tun: entered allmulticast mode [ 280.346848][ T5959] usb 6-1: Product: syz [ 280.377559][ T5959] usb 6-1: Manufacturer: syz [ 280.386628][ T5959] usb 6-1: SerialNumber: syz [ 280.403397][ T5959] usb 6-1: config 0 descriptor?? [ 280.572494][ T9984] dvmrp1: entered allmulticast mode [ 280.649161][ T9983] syz_tun: left allmulticast mode [ 280.962721][ T9996] fuse: Bad value for 'fd' [ 281.180900][ T9] usb 3-1: USB disconnect, device number 35 [ 281.695637][T10002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1269'. [ 282.418291][ T5927] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 282.445705][ T44] usb 6-1: USB disconnect, device number 2 [ 282.515953][T10024] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 282.579384][ T5927] usb 2-1: Using ep0 maxpacket: 16 [ 282.586011][ T5927] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 282.715627][ T5927] usb 2-1: config 0 has no interface number 0 [ 282.722295][ T5927] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.734630][ T5927] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.746312][ T5927] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 282.756000][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.769577][ T5927] usb 2-1: config 0 descriptor?? [ 282.827698][ T5959] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 282.980952][ T5959] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.994250][ T5959] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 283.003351][ T5959] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 283.013985][ T5959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.025235][ T5959] usb 3-1: config 0 descriptor?? [ 283.158296][ T5585] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 283.234985][ T9] usb 3-1: USB disconnect, device number 36 [ 283.309202][ T5585] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 283.320550][ T5585] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 283.330636][ T5585] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 283.341558][ T5585] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 16786, setting to 1024 [ 283.354430][ T5585] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 283.363535][ T5585] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.371702][ T5585] usb 6-1: Product: syz [ 283.375855][ T5585] usb 6-1: Manufacturer: syz [ 283.380617][ T5585] usb 6-1: SerialNumber: syz [ 283.383438][ T5927] usbhid 2-1:0.1: can't add hid device: -71 [ 283.393545][ T5585] usb 6-1: config 0 descriptor?? [ 283.397354][ T5927] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 283.412563][ T5927] usb 2-1: USB disconnect, device number 38 [ 283.447763][ T5959] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 283.613300][ T5585] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 283.621382][ T5959] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 283.636153][ T5959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 283.647201][ T5959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 283.657016][ T5959] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 283.670055][ T5959] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 283.679118][ T5959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.689902][ T5959] usb 5-1: config 0 descriptor?? [ 284.218583][ T5959] plantronics 0003:047F:FFFF.0008: ignoring exceeding usage max [ 284.346474][ T5959] plantronics 0003:047F:FFFF.0008: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 284.433629][ T5959] usb 5-1: USB disconnect, device number 44 [ 284.525166][T10053] fido_id[10053]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 285.377895][ T5959] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 285.444137][ T9] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 285.489049][ T30] audit: type=1400 audit(2000000010.410:427): avc: denied { map } for pid=10077 comm="syz.0.1293" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 285.539698][ T30] audit: type=1400 audit(2000000010.410:428): avc: denied { execute } for pid=10077 comm="syz.0.1293" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 285.541153][ T5979] usb 6-1: USB disconnect, device number 3 [ 285.570680][ T5959] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 285.584752][ T5959] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.616836][ T5959] usb 3-1: Product: syz [ 285.621136][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 285.630085][ T9] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 285.645988][ T5959] usb 3-1: Manufacturer: syz [ 285.656843][ T9] usb 2-1: config 179 has no interface number 0 [ 285.665905][ T5959] usb 3-1: SerialNumber: syz [ 285.670665][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 285.692777][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 285.709167][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 285.753661][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 285.833326][ T9] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 285.947848][ T9] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 285.958278][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.004559][T10063] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 286.263728][ T5979] usb 2-1: USB disconnect, device number 39 [ 286.264614][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 286.280951][ C0] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 286.972659][T10116] fuse: Bad value for 'user_id' [ 286.987166][T10116] fuse: Bad value for 'user_id' [ 287.207762][ T5979] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 287.410550][ T5979] usb 5-1: Using ep0 maxpacket: 16 [ 287.451870][ T5979] usb 5-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55 [ 287.461988][ T5979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.497429][ T5979] usb 5-1: Product: syz [ 287.557179][ T5979] usb 5-1: Manufacturer: syz [ 287.583905][ T5979] usb 5-1: SerialNumber: syz [ 287.591114][ T5979] usb 5-1: config 0 descriptor?? [ 287.605187][ T5979] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704a [ 287.852723][ T5959] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPIPE [ 287.865744][ T5959] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 287.950866][ T5959] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 287.976475][ T5959] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 288.025835][ T5979] gspca_sn9c20x: Write register 1001 failed -71 [ 288.035026][ T5979] gspca_sn9c20x: Device initialization failed [ 288.049391][ T5979] gspca_sn9c20x 5-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 288.093167][ T5979] usb 5-1: USB disconnect, device number 45 [ 288.902543][ T5585] usb 3-1: USB disconnect, device number 37 [ 288.979640][ T5927] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 289.037718][ T5959] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 289.138963][ T5927] usb 5-1: config 0 has an invalid interface number: 118 but max is 0 [ 289.147181][ T5927] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.157407][ T5927] usb 5-1: config 0 has no interface number 0 [ 289.163560][ T5927] usb 5-1: config 0 interface 118 altsetting 171 has 0 endpoint descriptors, different from the interface descriptor's value: 27 [ 289.176906][ T5927] usb 5-1: config 0 interface 118 has no altsetting 0 [ 289.187954][ T5927] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 289.196992][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.205027][ T5927] usb 5-1: Product: syz [ 289.209222][ T5927] usb 5-1: Manufacturer: syz [ 289.211320][ T5959] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 289.213810][ T5927] usb 5-1: SerialNumber: syz [ 289.231094][ T5927] usb 5-1: config 0 descriptor?? [ 289.236698][ T5959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 289.238351][ T5927] usb-storage 5-1:0.118: USB Mass Storage device detected [ 289.250998][ T5959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 289.260386][ T5927] usb-storage 5-1:0.118: Quirks match for vid 04e6 pid 000b: 4 [ 289.265321][ T5959] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 289.272514][ T5927] usb-storage 5-1:0.118: This device (04e6,000b,0100 S fb P 50) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 289.272514][ T5927] Please send a copy of this message to and [ 289.313150][ T5959] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 289.323036][ T5959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.334497][ T5959] usb 1-1: config 0 descriptor?? [ 289.584327][ T5927] usb 5-1: USB disconnect, device number 46 [ 289.780785][T10184] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 289.792589][ T5959] plantronics 0003:047F:FFFF.0009: ignoring exceeding usage max [ 289.825564][ T5959] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 290.588055][ T5927] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 290.749571][ T5927] usb 6-1: Using ep0 maxpacket: 8 [ 290.763732][ T5927] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 290.777121][ T5927] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.800008][ T5927] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 290.831703][ T5927] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 290.950470][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.971615][ T5927] usb 6-1: Product: syz [ 290.975797][ T5927] usb 6-1: Manufacturer: syz [ 291.003395][ T5927] usb 6-1: SerialNumber: syz [ 291.061446][ T5927] usb 6-1: config 0 descriptor?? [ 291.077985][ T5585] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 291.227733][ T5585] usb 3-1: device descriptor read/64, error -71 [ 291.283529][ T5927] usb 6-1: USB disconnect, device number 4 [ 291.490469][ T5585] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 291.671809][ T5585] usb 3-1: device descriptor read/64, error -71 [ 291.808143][ T5585] usb usb3-port1: attempt power cycle [ 291.924147][ T5959] usb 1-1: USB disconnect, device number 32 [ 292.150333][ T5585] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 292.207452][ T5585] usb 3-1: device descriptor read/8, error -71 [ 292.459207][ T5585] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 292.751854][ T5585] usb 3-1: device descriptor read/8, error -71 [ 292.916400][ T5585] usb usb3-port1: unable to enumerate USB device [ 293.046247][ T5927] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 293.222377][ T5927] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 293.232147][ T5927] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 293.249344][ T5927] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 293.266550][ T5927] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 293.276470][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.343668][ T5927] usb 6-1: Product: syz [ 293.357863][ T5927] usb 6-1: Manufacturer: syz [ 293.385427][ T5927] usb 6-1: SerialNumber: syz [ 293.447693][ T44] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 293.487258][ T5927] hub 6-1:1.0: bad descriptor, ignoring hub [ 293.511868][ T5927] hub 6-1:1.0: probe with driver hub failed with error -5 [ 293.643732][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 293.657909][ T44] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.670270][ T44] usb 1-1: config 0 has no interfaces? [ 293.686047][ T44] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.2b [ 293.695346][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.748192][ T44] usb 1-1: Product: syz [ 293.765092][ T44] usb 1-1: Manufacturer: syz [ 293.781287][ T44] usb 1-1: SerialNumber: syz [ 293.798790][ T5927] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 293.831348][ T44] usb 1-1: config 0 descriptor?? [ 293.997804][ T30] audit: type=1400 audit(2000000018.900:429): avc: denied { read write } for pid=10235 comm="syz.5.1330" name="lp0" dev="devtmpfs" ino=3251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 294.053246][ T5979] usb 1-1: USB disconnect, device number 33 [ 294.067307][ T30] audit: type=1400 audit(2000000018.900:430): avc: denied { open } for pid=10235 comm="syz.5.1330" path="/dev/usb/lp0" dev="devtmpfs" ino=3251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 294.197878][ T44] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 294.398037][T10239] usb 6-1: reset high-speed USB device number 5 using dummy_hcd [ 294.411527][ T44] usb 5-1: config 0 has no interfaces? [ 294.419947][ T44] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 294.434956][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.452389][ T44] usb 5-1: Product: syz [ 294.460033][ T44] usb 5-1: Manufacturer: syz [ 294.466492][ T44] usb 5-1: SerialNumber: syz [ 294.476323][ T44] usb 5-1: config 0 descriptor?? [ 294.590138][ T30] audit: type=1400 audit(2000000019.440:431): avc: denied { getopt } for pid=10262 comm="syz.2.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 294.987704][ T5585] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 295.138483][ T5585] usb 1-1: Using ep0 maxpacket: 16 [ 295.146466][ T5585] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.159747][ T5585] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 295.174766][ T5585] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 295.193831][ T5585] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.202253][ T5585] usb 1-1: Product: syz [ 295.206418][ T5585] usb 1-1: Manufacturer: syz [ 295.211916][ T5585] usb 1-1: SerialNumber: syz [ 295.428748][ T5585] usb 1-1: 0:2 : does not exist [ 295.436969][ T5585] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 295.447808][ T5927] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 295.463433][ T5585] usb 1-1: USB disconnect, device number 34 [ 295.490610][ T7354] udevd[7354]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 295.611188][ T5927] usb 3-1: config 1 interface 0 has no altsetting 0 [ 295.619593][ T5927] usb 3-1: New USB device found, idVendor=056a, idProduct=0069, bcdDevice= 0.40 [ 295.629029][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.637016][ T5927] usb 3-1: Product: syz [ 295.641322][ T5927] usb 3-1: Manufacturer: syz [ 295.645906][ T5927] usb 3-1: SerialNumber: syz [ 295.856303][T10273] misc userio: The device must be registered before sending interrupts [ 295.877001][ T5927] usbhid 3-1:1.0: can't add hid device: -71 [ 295.887841][ T5927] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 295.900352][ T5927] usb 3-1: USB disconnect, device number 42 [ 295.939410][ T5958] usb 6-1: USB disconnect, device number 5 [ 295.966846][ T5958] usblp0: removed [ 296.253566][T10283] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 3, id = 0 [ 296.264213][ T44] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 296.337690][ T5958] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 296.419356][ T44] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 296.431157][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 296.442296][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 296.454188][ T44] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 296.471808][ T44] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 296.481154][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.493093][ T44] usb 1-1: config 0 descriptor?? [ 296.512228][ T5958] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 296.523173][ T5958] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.552900][ T5958] usb 6-1: Product: syz [ 296.557154][ T5958] usb 6-1: Manufacturer: syz [ 296.562161][ T5958] usb 6-1: SerialNumber: syz [ 296.906012][ T44] plantronics 0003:047F:FFFF.000A: ignoring exceeding usage max [ 296.908847][ T9] usb 5-1: USB disconnect, device number 47 [ 296.953374][ T44] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 296.980492][ T5958] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 296.993446][ T5958] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 297.008439][ T5958] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 297.021436][ T5958] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 297.133802][ T5927] usb 1-1: USB disconnect, device number 35 [ 297.367730][ T9] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 297.527860][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 297.534141][ T9] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 297.542421][ T9] usb 5-1: config 179 has no interface number 0 [ 297.548720][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 297.559799][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 297.571057][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 297.582223][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 297.593651][ T9] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 297.606898][ T9] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 297.616101][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.626521][T10296] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 297.714008][T10304] loop2: detected capacity change from 0 to 7 [ 297.723814][T10304] Dev loop2: unable to read RDB block 7 [ 297.731867][T10304] loop2: AHDI p1 p2 p3 [ 297.736096][T10304] loop2: partition table partially beyond EOD, truncated [ 297.745584][T10304] loop2: p1 start 1601398130 is beyond EOD, truncated [ 297.753101][T10304] loop2: p2 start 1702059890 is beyond EOD, truncated [ 297.852060][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 297.852066][ T5927] usb 5-1: USB disconnect, device number 48 [ 297.852104][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 298.347735][ T9] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 298.373594][ T30] audit: type=1400 audit(2000000023.280:432): avc: denied { read write } for pid=10311 comm="syz.2.1354" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 298.408483][T10314] fuse: Bad value for 'fd' [ 298.416591][ T30] audit: type=1400 audit(2000000023.280:433): avc: denied { open } for pid=10311 comm="syz.2.1354" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 298.439989][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.027788][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 299.351785][ T5927] usb 6-1: USB disconnect, device number 6 [ 299.362617][ T9] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 299.376054][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 299.425245][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 299.456265][ T9] usb 1-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 299.512169][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 299.575575][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 299.603986][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.624259][ T9] usbtmc 1-1:16.0: bulk endpoints not found [ 299.718422][T10332] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 299.887803][ T5959] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 300.007686][ T5927] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 300.048154][ T5959] usb 3-1: Using ep0 maxpacket: 32 [ 300.054816][ T5959] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.071016][ T5959] usb 3-1: config 0 has no interfaces? [ 300.083185][ T5959] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.2b [ 300.104063][ T5959] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.114921][ T5959] usb 3-1: Product: syz [ 300.121766][ T5959] usb 3-1: Manufacturer: syz [ 300.130091][ T5959] usb 3-1: SerialNumber: syz [ 300.144576][ T5959] usb 3-1: config 0 descriptor?? [ 300.177768][ T5927] usb 6-1: Using ep0 maxpacket: 32 [ 300.193837][ T5927] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 300.227910][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.236027][ T5927] usb 6-1: Product: syz [ 300.240761][ T5927] usb 6-1: Manufacturer: syz [ 300.245427][ T5927] usb 6-1: SerialNumber: syz [ 300.253096][ T5927] usb 6-1: config 0 descriptor?? [ 300.275512][ T5927] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 300.363088][ T5928] usb 3-1: USB disconnect, device number 43 [ 300.510808][ T5979] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 300.662926][T10348] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 300.676414][ T5979] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 300.690903][ T5979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 300.701987][ T5979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 300.711857][ T5979] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 300.725272][ T5979] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 300.734391][ T5979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.746265][ T5979] usb 2-1: config 0 descriptor?? [ 301.164196][ T5979] plantronics 0003:047F:FFFF.000B: ignoring exceeding usage max [ 301.192753][ T5979] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 301.369671][ T5928] usb 2-1: USB disconnect, device number 40 [ 301.430518][ T5979] usb 1-1: USB disconnect, device number 36 [ 301.717699][ T5927] gspca_stk1135: reg_w 0xf err -71 [ 301.726473][ T5927] gspca_stk1135: serial bus timeout: status=0x00 [ 301.737635][ T5927] gspca_stk1135: Sensor write failed [ 301.742938][ T5927] gspca_stk1135: serial bus timeout: status=0x00 [ 301.761624][ T5927] gspca_stk1135: Sensor write failed [ 301.766936][ T5927] gspca_stk1135: serial bus timeout: status=0x00 [ 301.784935][ T5927] gspca_stk1135: Sensor read failed [ 302.197744][ T5927] gspca_stk1135: serial bus timeout: status=0x00 [ 302.218315][ T5927] gspca_stk1135: Sensor read failed [ 302.223594][ T5927] gspca_stk1135: Detected sensor type unknown (0x0) [ 302.246042][ T5927] gspca_stk1135: serial bus timeout: status=0x00 [ 302.269562][ T5927] gspca_stk1135: Sensor read failed [ 302.274926][ T5927] gspca_stk1135: serial bus timeout: status=0x00 [ 302.286152][ T5927] gspca_stk1135: Sensor read failed [ 302.295806][ T5927] gspca_stk1135: serial bus timeout: status=0x00 [ 302.339064][ T5927] gspca_stk1135: Sensor write failed [ 302.407699][ T5927] gspca_stk1135: serial bus timeout: status=0x00 [ 302.450371][ T5927] gspca_stk1135: Sensor write failed [ 302.468974][ T5927] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71 [ 302.518594][ T5927] usb 6-1: USB disconnect, device number 7 [ 302.566669][T10381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1374'. [ 302.930890][ T5928] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 303.077739][ T5927] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 303.108491][ T5928] usb 5-1: Using ep0 maxpacket: 8 [ 303.135508][ T5928] usb 5-1: unable to get BOS descriptor or descriptor too short [ 303.144609][ T5928] usb 5-1: config 4 interface 0 has no altsetting 0 [ 303.155986][ T5928] usb 5-1: string descriptor 0 read error: -22 [ 303.163743][ T5928] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 303.177709][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.233399][ T5928] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 303.246599][ T5927] usb 3-1: Using ep0 maxpacket: 32 [ 303.264667][ T5927] usb 3-1: config 0 has an invalid interface number: 202 but max is 1 [ 303.408758][ T5928] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 303.426193][ T5927] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.485597][ T5927] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 303.498713][ T5928] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 303.545384][ T5928] usb 5-1: media controller created [ 303.559584][ T5927] usb 3-1: config 0 has no interface number 0 [ 303.565697][ T5927] usb 3-1: config 0 interface 202 has no altsetting 0 [ 303.673093][ T5928] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 303.707487][ T5927] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.2b [ 303.717857][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 303.732931][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.836290][ T5927] usb 3-1: Product: syz [ 303.847873][ T5928] zl10353_read_register: readreg error (reg=127, ret==0) [ 303.857134][ T5927] usb 3-1: Manufacturer: syz [ 303.869299][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 303.875211][ T5927] usb 3-1: SerialNumber: syz [ 303.876126][ T9] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 303.896597][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 303.919263][ T5927] usb 3-1: config 0 descriptor?? [ 303.927466][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 303.959757][ T9] usb 6-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 303.974300][ T5927] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 303.983909][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 304.007202][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 304.016191][ T5928] usb 5-1: USB disconnect, device number 49 [ 304.114876][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.154521][ T6153] usb 3-1: Failed to submit usb control message: -71 [ 304.154771][ T5585] usb 3-1: USB disconnect, device number 44 [ 304.170007][ T6153] usb 3-1: unable to send the bmi data to the device: -71 [ 304.197507][ T6153] usb 3-1: unable to get target info from device [ 304.220475][ T6153] usb 3-1: could not get target info (-71) [ 304.231092][ T9] usbtmc 6-1:16.0: bulk endpoints not found [ 304.237579][ T6153] usb 3-1: could not probe fw (-71) [ 304.427261][T10418] tipc: Failed to remove unknown binding: 66,1,1/0:842890/842892 [ 304.435327][T10418] tipc: Failed to remove unknown binding: 66,1,1/0:842890/842892 [ 304.568644][T10420] fuse: Unknown parameter 'group_id00000000000000000000' [ 305.302129][T10435] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 305.769198][T10447] netlink: 'syz.4.1391': attribute type 29 has an invalid length. [ 305.777159][T10447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1391'. [ 306.290214][ T5928] usb 6-1: USB disconnect, device number 8 [ 306.527793][ T5927] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 306.691125][ T5927] usb 5-1: config index 0 descriptor too short (expected 63186, got 210) [ 306.729592][ T5927] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 306.794869][ T5927] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.843932][ T5927] usb 5-1: config 0 has no interface number 0 [ 306.941428][ T5927] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 306.969657][ T5927] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 306.991910][ T5927] usb 5-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 307.021185][ T5927] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 307.045422][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.085681][ T5927] usb 5-1: config 0 descriptor?? [ 307.097797][ T5585] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 307.123330][ T5927] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 307.247724][ T5979] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 307.334722][ T5585] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 307.398935][ T5585] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 307.401011][ T5979] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 307.437495][ T5585] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 307.453123][ T5979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.484445][ T5585] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 307.526485][ T5979] usb 3-1: Product: syz [ 307.534875][ T5979] usb 3-1: Manufacturer: syz [ 307.558482][T10480] netlink: 'syz.5.1402': attribute type 12 has an invalid length. [ 307.613358][ T5585] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 307.623010][ T5979] usb 3-1: SerialNumber: syz [ 307.632669][ T5585] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.742058][ T5585] usb 1-1: config 0 descriptor?? [ 308.133573][ T6146] usb 5-1: Failed to submit usb control message: -110 [ 308.149556][ T6146] usb 5-1: unable to send the bmi data to the device: -110 [ 308.179797][ T6146] usb 5-1: unable to get target info from device [ 308.187205][ T5585] plantronics 0003:047F:FFFF.000C: ignoring exceeding usage max [ 308.269283][ T6146] usb 5-1: could not get target info (-110) [ 308.295651][ T5585] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 308.318369][ T6146] usb 5-1: could not probe fw (-110) [ 308.392688][ T5585] usb 1-1: USB disconnect, device number 37 [ 308.731290][ T5585] usb 5-1: USB disconnect, device number 50 [ 308.968994][ T5979] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 308.981043][ T5979] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 309.062346][T10502] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 309.070790][T10502] team0: Port device batadv1 added [ 309.081288][ T5979] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 309.459085][ T5979] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 309.467731][ T5585] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 309.637947][ T5585] usb 5-1: Using ep0 maxpacket: 32 [ 309.648611][ T5585] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 309.659466][ T5585] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.672784][ T5585] usb 5-1: Product: syz [ 309.680598][ T5585] usb 5-1: Manufacturer: syz [ 309.688273][ T5585] usb 5-1: SerialNumber: syz [ 309.700978][ T5585] usb 5-1: config 0 descriptor?? [ 309.714449][ T5585] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 309.912231][T10512] fuse: Invalid rootmode [ 310.012134][ T5979] usb 3-1: USB disconnect, device number 45 [ 310.397908][ T44] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 310.419515][ T5979] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 310.468597][T10523] loop2: detected capacity change from 0 to 7 [ 310.481319][T10241] Dev loop2: unable to read RDB block 7 [ 310.487027][T10241] loop2: AHDI p1 p2 p3 [ 310.491928][T10241] loop2: partition table partially beyond EOD, truncated [ 310.501085][T10241] loop2: p1 start 1601398130 is beyond EOD, truncated [ 310.508572][T10241] loop2: p2 start 1702059890 is beyond EOD, truncated [ 310.516726][T10523] Dev loop2: unable to read RDB block 7 [ 310.525383][T10523] loop2: AHDI p1 p2 p3 [ 310.533146][T10523] loop2: partition table partially beyond EOD, truncated [ 310.552173][T10523] loop2: p1 start 1601398130 is beyond EOD, truncated [ 310.564678][ T44] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 310.575177][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.586066][ T5979] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 310.595496][ T5979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.604535][ T44] usb 2-1: config 0 descriptor?? [ 310.609142][T10523] loop2: p2 start 1702059890 is beyond EOD, truncated [ 310.612273][ T5979] usb 3-1: config 0 descriptor?? [ 310.629586][ T44] cp210x 2-1:0.0: cp210x converter detected [ 310.861191][ T5979] usb 3-1: USB disconnect, device number 46 [ 311.126393][ T5585] gspca_stk1135: reg_w 0xf err -71 [ 311.134464][ T5585] gspca_stk1135: serial bus timeout: status=0x00 [ 311.144569][ T5585] gspca_stk1135: Sensor write failed [ 311.151298][ T5585] gspca_stk1135: serial bus timeout: status=0x00 [ 311.170202][ T5585] gspca_stk1135: Sensor write failed [ 311.196492][ T5585] gspca_stk1135: serial bus timeout: status=0x00 [ 311.217703][ T5585] gspca_stk1135: Sensor read failed [ 311.237759][ T5585] gspca_stk1135: serial bus timeout: status=0x00 [ 311.268436][ T5585] gspca_stk1135: Sensor read failed [ 311.276552][ T5585] gspca_stk1135: Detected sensor type unknown (0x0) [ 311.289735][ T5585] gspca_stk1135: serial bus timeout: status=0x00 [ 311.312192][ T5585] gspca_stk1135: Sensor read failed [ 311.322510][ T5585] gspca_stk1135: serial bus timeout: status=0x00 [ 311.333146][ T5585] gspca_stk1135: Sensor read failed [ 311.345443][ T5585] gspca_stk1135: serial bus timeout: status=0x00 [ 311.399201][ T5585] gspca_stk1135: Sensor write failed [ 311.455696][ T5585] gspca_stk1135: serial bus timeout: status=0x00 [ 311.528693][ T5585] gspca_stk1135: Sensor write failed [ 311.548348][ T5585] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 311.629313][ T5585] usb 5-1: USB disconnect, device number 51 [ 313.051906][ T44] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 313.061308][ T44] cp210x 2-1:0.0: querying part number failed [ 313.072812][ T44] usb 2-1: cp210x converter now attached to ttyUSB0 [ 313.090629][ T44] usb 2-1: USB disconnect, device number 41 [ 313.116201][ T44] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 313.244478][ T44] cp210x 2-1:0.0: device disconnected [ 313.295514][T10565] fuse: Invalid rootmode [ 313.912463][T10581] fuse: Bad value for 'fd' [ 314.126056][T10591] netlink: 'syz.2.1431': attribute type 12 has an invalid length. [ 314.217896][ T5959] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 314.448130][ T5959] usb 2-1: device descriptor read/64, error -71 [ 314.687726][ T5959] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 314.897692][ T5959] usb 2-1: device descriptor read/64, error -71 [ 315.027690][ T5959] usb usb2-port1: attempt power cycle [ 315.388444][ T5959] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 315.449989][ T5959] usb 2-1: device descriptor read/8, error -71 [ 315.728215][ T5959] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 315.749947][ T5959] usb 2-1: device descriptor read/8, error -71 [ 315.858835][ T5959] usb usb2-port1: unable to enumerate USB device [ 316.147887][ T9] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 316.319323][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.349816][ T9] usb 1-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 316.440949][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 316.500640][ T9] usb 1-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 316.521298][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.552319][ T9] usb 1-1: config 0 descriptor?? [ 316.701168][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.707516][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.867861][ T9] IPVS: starting estimator thread 0... [ 316.988560][ T9] usb 1-1: USB disconnect, device number 38 [ 317.001389][T10640] IPVS: using max 76 ests per chain, 182400 per kthread [ 317.276372][T10653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1454'. [ 317.642534][ T9] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 317.861784][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 317.876465][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.905708][ T9] usb 2-1: Product: syz [ 317.912917][ T9] usb 2-1: Manufacturer: syz [ 317.922252][ T9] usb 2-1: SerialNumber: syz [ 318.252540][T10658] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 318.802085][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 318.831875][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 318.862539][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 318.895263][ T9] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 319.003363][ T9] usb 2-1: USB disconnect, device number 46 [ 320.235627][T10691] fuse: Bad value for 'fd' [ 320.253691][T10690] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 320.897644][ T5928] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 321.094289][ T5928] usb 5-1: device descriptor read/64, error -71 [ 321.164147][T10710] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 321.397976][ T5928] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 321.577670][ T5928] usb 5-1: device descriptor read/64, error -71 [ 321.618078][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 321.687892][ T5928] usb usb5-port1: attempt power cycle [ 321.795723][T10723] tipc: Started in network mode [ 321.801175][T10723] tipc: Node identity 322416f2a81e, cluster identity 4711 [ 321.819559][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 321.825665][T10723] tipc: Enabled bearer , priority 0 [ 321.835425][ T9] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 321.844685][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.846785][T10727] syzkaller0: entered promiscuous mode [ 321.858452][T10727] syzkaller0: entered allmulticast mode [ 321.867528][ T9] usb 6-1: Product: syz [ 321.870073][T10727] tipc: Resetting bearer [ 321.871979][ T9] usb 6-1: Manufacturer: syz [ 321.894193][ T9] usb 6-1: SerialNumber: syz [ 321.905750][ T9] usb 6-1: config 0 descriptor?? [ 321.915494][T10729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1476'. [ 321.979304][ T9] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 322.028169][ T5928] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 322.085611][ T5928] usb 5-1: device descriptor read/8, error -71 [ 322.332682][ T5928] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 322.358412][ T5928] usb 5-1: device descriptor read/8, error -71 [ 322.478804][ T5928] usb usb5-port1: unable to enumerate USB device [ 322.564384][T10721] tipc: Resetting bearer [ 322.582195][T10721] tipc: Disabling bearer [ 322.582745][ T9] gspca_ov534_9: reg_w failed -71 [ 322.710730][T10736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1478'. [ 322.767875][ T30] audit: type=1400 audit(2000000009.460:434): avc: denied { getopt } for pid=10730 comm="syz.1.1477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 322.943460][ T9] gspca_ov534_9: Unknown sensor 0000 [ 322.943515][ T9] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 322.972416][ T9] usb 6-1: USB disconnect, device number 9 [ 323.823698][T10737] syz.1.1477 (10737): drop_caches: 2 [ 324.055075][T10756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1482'. [ 324.357775][ T5928] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 324.507667][ T5928] usb 1-1: Using ep0 maxpacket: 32 [ 324.520263][ T5928] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 324.529281][ T5928] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 324.538697][ T5928] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 324.549979][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 324.627867][ T5928] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 324.648127][ T5928] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 324.667920][ T5928] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 324.677981][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.699698][ T5928] usb 1-1: config 0 descriptor?? [ 325.197677][ T9] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 325.413240][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 325.423983][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.480291][ T9] usb 3-1: Product: syz [ 325.512864][ T9] usb 3-1: Manufacturer: syz [ 325.533580][ T9] usb 3-1: SerialNumber: syz [ 326.054010][T10784] loop2: detected capacity change from 0 to 7 [ 326.062882][T10241] Dev loop2: unable to read RDB block 7 [ 326.087977][T10241] loop2: AHDI p1 p2 p3 [ 326.099877][T10241] loop2: partition table partially beyond EOD, truncated [ 326.208653][T10241] loop2: p1 start 1601398130 is beyond EOD, truncated [ 326.251393][T10241] loop2: p2 start 1702059890 is beyond EOD, truncated [ 326.330806][T10784] Dev loop2: unable to read RDB block 7 [ 326.336616][T10784] loop2: AHDI p1 p2 p3 [ 326.341075][T10784] loop2: partition table partially beyond EOD, truncated [ 326.350097][T10784] loop2: p1 start 1601398130 is beyond EOD, truncated [ 326.365385][T10784] loop2: p2 start 1702059890 is beyond EOD, truncated [ 326.608843][ T5936] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.766749][ T5936] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.880540][ T5936] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.995522][ T5936] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.023101][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 327.142848][T10792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1498'. [ 327.240962][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001000. ret = -EPROTO [ 327.264698][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 327.285512][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 327.295299][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 327.330533][ T9] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 327.355224][ T5928] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 39 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 327.411347][ T9] usb 3-1: USB disconnect, device number 47 [ 327.438025][ T5928] usb 1-1: USB disconnect, device number 39 [ 327.593503][ T5928] usblp0: removed [ 327.605229][T10798] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 327.772476][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 327.783350][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 327.793214][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 327.802357][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 327.810989][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 327.915312][ T5936] bridge_slave_1: left allmulticast mode [ 327.929964][ T5936] bridge_slave_1: left promiscuous mode [ 327.940814][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.085531][ T5936] bridge_slave_0: left allmulticast mode [ 328.097183][ T5936] bridge_slave_0: left promiscuous mode [ 328.107099][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.053908][ T5936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.133705][ T5936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.162232][ T5936] bond0 (unregistering): Released all slaves [ 329.888004][ T5857] Bluetooth: hci2: command tx timeout [ 330.423451][ T5936] hsr_slave_0: left promiscuous mode [ 330.431882][ T5936] hsr_slave_1: left promiscuous mode [ 330.446527][ T5936] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.506784][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.709232][ T5936] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.751780][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.875377][ T5936] veth1_macvtap: left promiscuous mode [ 330.941973][ T5936] veth0_macvtap: left promiscuous mode [ 330.965784][ T5936] veth1_vlan: left promiscuous mode [ 330.975787][ T30] audit: type=1400 audit(2000000017.710:435): avc: denied { open } for pid=10863 comm="syz.4.1512" path="/dev/ptyqd" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 331.042123][ T5936] veth0_vlan: left promiscuous mode [ 331.052527][ T30] audit: type=1400 audit(2000000017.710:436): avc: denied { ioctl } for pid=10863 comm="syz.4.1512" path="/dev/ttyqd" dev="devtmpfs" ino=388 ioctlcmd=0x541d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 331.520889][T10897] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 331.764082][ T5936] team0 (unregistering): Port device team_slave_1 removed [ 331.792473][ T5936] team0 (unregistering): Port device team_slave_0 removed [ 331.900935][ T5928] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 331.970257][ T5857] Bluetooth: hci2: command tx timeout [ 332.055754][T10870] tipc: Enabling of bearer rejected, failed to enable media [ 332.067254][ T5928] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 332.089077][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.098997][T10800] chnl_net:caif_netlink_parms(): no params data found [ 332.114110][ T5928] usb 3-1: config 0 descriptor?? [ 332.306882][T10800] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.325732][T10800] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.333662][T10800] bridge_slave_0: entered allmulticast mode [ 332.344497][T10800] bridge_slave_0: entered promiscuous mode [ 332.363660][T10800] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.376648][T10800] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.408856][T10800] bridge_slave_1: entered allmulticast mode [ 332.417210][ T5928] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 332.431707][T10800] bridge_slave_1: entered promiscuous mode [ 332.452954][T10912] fuse: Bad value for 'rootmode' [ 332.572863][T10916] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 332.580783][T10916] team0: Port device batadv1 added [ 332.631285][ T5928] [drm:udl_init] *ERROR* Selecting channel failed [ 332.644949][ T5928] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 332.652921][ T5928] [drm] Initialized udl on minor 2 [ 332.686526][ T5928] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 332.689311][T10800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.712042][ T5928] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 332.773145][T10800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.773505][ T5980] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 332.819248][ T5980] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 332.833804][ T5928] usb 3-1: USB disconnect, device number 48 [ 332.973444][T10800] team0: Port device team_slave_0 added [ 333.029745][T10800] team0: Port device team_slave_1 added [ 333.126968][T10800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.165783][T10800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.272658][T10800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.288014][ T5958] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 333.324265][T10800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.425506][T10800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.451462][ C1] vkms_vblank_simulate: vblank timer overrun [ 333.477774][ T5958] usb 1-1: Using ep0 maxpacket: 8 [ 333.493140][ T5958] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 333.553083][ T5958] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 333.562496][T10800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.566575][ T5958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.605115][ T5958] usb 1-1: Product: syz [ 333.630555][ T5958] usb 1-1: Manufacturer: syz [ 333.635287][T10800] hsr_slave_0: entered promiscuous mode [ 333.641382][ T5958] usb 1-1: SerialNumber: syz [ 333.645870][T10800] hsr_slave_1: entered promiscuous mode [ 333.682160][ T5958] usb 1-1: config 0 descriptor?? [ 333.683072][T10800] debugfs: 'hsr0' already exists in 'hsr' [ 333.797736][ T5958] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 333.805031][T10800] Cannot create hsr debugfs directory [ 333.930933][ T5958] usb 1-1: setting power ON [ 333.979502][ T5958] dvb-usb: bulk message failed: -22 (2/0) [ 334.014853][T10942] netlink: 'syz.4.1526': attribute type 12 has an invalid length. [ 334.025379][ T5958] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 334.054458][ T5857] Bluetooth: hci2: command tx timeout [ 334.211032][ T5958] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 334.236117][ T5958] usb 1-1: media controller created [ 334.305197][ T5958] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 334.353418][ T5958] usb 1-1: selecting invalid altsetting 6 [ 334.377237][ T5958] usb 1-1: digital interface selection failed (-22) [ 334.485472][ T5958] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 334.517169][ T5958] usb 1-1: setting power OFF [ 334.544601][ T5958] dvb-usb: bulk message failed: -22 (2/0) [ 334.577756][ T5958] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 334.947825][ T5958] (NULL device *): no alternate interface [ 335.020852][ T5958] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 335.271307][ T5958] usb 1-1: USB disconnect, device number 40 [ 335.326413][T10800] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 335.413164][T10800] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 335.488557][T10800] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 335.504487][T10800] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 335.737969][T10800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.822250][T10988] misc userio: Invalid payload size [ 335.843172][T10988] misc userio: No port type given on /dev/userio [ 335.930278][T10800] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.972807][ T6160] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.979957][ T6160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.057082][ T6160] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.064191][ T6160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.113131][ T5958] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 336.127729][ T5857] Bluetooth: hci2: command tx timeout [ 336.291186][ T5958] usb 2-1: unable to get BOS descriptor or descriptor too short [ 336.367062][ T5958] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 336.395381][ T5958] usb 2-1: can't read configurations, error -71 [ 336.686371][T10800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.036318][T11012] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 337.270987][T10800] veth0_vlan: entered promiscuous mode [ 337.342638][T10800] veth1_vlan: entered promiscuous mode [ 337.392946][T10800] veth0_macvtap: entered promiscuous mode [ 337.427388][T10800] veth1_macvtap: entered promiscuous mode [ 337.450036][T10800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.463862][T10800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.475866][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.490686][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.507189][ T5936] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.516643][ T5936] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.558848][ T5958] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 337.605427][T11026] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 337.660912][ T5980] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 337.685221][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.700637][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.738171][ T5958] usb 2-1: Using ep0 maxpacket: 8 [ 337.744780][ T5958] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 337.755579][ T5958] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 337.770884][ T6146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.780447][ T5958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.797227][ T6146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.805145][ T5958] usb 2-1: Product: syz [ 337.813089][ T5958] usb 2-1: Manufacturer: syz [ 337.823550][ T5980] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 337.827047][ T5958] usb 2-1: SerialNumber: syz [ 337.835976][ T5980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.930907][ T5980] usb 1-1: Product: syz [ 337.937104][ T5980] usb 1-1: Manufacturer: syz [ 337.942359][ T5980] usb 1-1: SerialNumber: syz [ 337.962646][ T5958] usb 2-1: config 0 descriptor?? [ 337.987091][ T5958] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 337.996264][ T5958] usb 2-1: setting power ON [ 338.003480][ T5958] dvb-usb: bulk message failed: -22 (2/0) [ 338.046198][ T5958] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 338.116911][ T5958] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 338.178601][ T5958] usb 2-1: media controller created [ 338.225715][ T5958] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 338.357066][ T5958] usb 2-1: selecting invalid altsetting 6 [ 338.362952][ T5958] usb 2-1: digital interface selection failed (-22) [ 338.375122][ T5958] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 338.384796][ T5958] usb 2-1: setting power OFF [ 338.390625][ T5958] dvb-usb: bulk message failed: -22 (2/0) [ 338.400614][ T5958] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 338.422058][ T5958] (NULL device *): no alternate interface [ 338.472879][ T5958] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 338.522200][ T5958] usb 2-1: USB disconnect, device number 48 [ 339.021572][ T5980] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 339.040163][ T5980] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 339.071253][ T5980] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 339.113322][ T5980] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 339.126065][ T5980] usb 1-1: USB disconnect, device number 41 [ 340.294796][T11070] bridge0: port 3(syz_tun) entered blocking state [ 340.308164][T11070] bridge0: port 3(syz_tun) entered disabled state [ 340.335335][T11070] syz_tun: entered allmulticast mode [ 340.353548][T11070] syz_tun: entered promiscuous mode [ 340.361730][T11070] bridge0: port 3(syz_tun) entered blocking state [ 340.369165][T11070] bridge0: port 3(syz_tun) entered forwarding state [ 340.446822][ T30] audit: type=1400 audit(2000000027.180:437): avc: denied { mount } for pid=11072 comm="syz.6.1553" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 340.468983][ C0] vkms_vblank_simulate: vblank timer overrun [ 340.608144][ T30] audit: type=1400 audit(2000000027.220:438): avc: denied { remount } for pid=11072 comm="syz.6.1553" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 340.688907][ T30] audit: type=1400 audit(2000000027.350:439): avc: denied { unmount } for pid=10800 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 340.917715][ T5980] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 341.077794][ T5980] usb 3-1: Using ep0 maxpacket: 32 [ 341.085030][ T5980] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 341.094286][ T5980] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 341.103347][ T5980] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 341.114647][ T5980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 341.137473][ T5980] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 341.150365][ T5980] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 341.164263][ T5980] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 341.181907][ T5980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.194792][ T5980] usb 3-1: config 0 descriptor?? [ 342.257431][T11108] syzkaller1: entered promiscuous mode [ 342.268295][T11108] syzkaller1: entered allmulticast mode [ 342.734169][ T5900] IPVS: starting estimator thread 0... [ 342.847108][T11123] IPVS: using max 76 ests per chain, 182400 per kthread [ 343.749399][ T44] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 343.810874][ T5980] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 49 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 343.862476][ T5980] usb 3-1: USB disconnect, device number 49 [ 343.876036][ T5980] usblp0: removed [ 343.910751][T11145] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 344.030038][ T44] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 344.045567][ T44] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 344.396912][ T44] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 344.452600][ T44] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 344.466825][ T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.489148][ T44] usb 7-1: Product: syz [ 344.495619][ T44] usb 7-1: Manufacturer: syz [ 344.518768][ T44] usb 7-1: SerialNumber: syz [ 344.552904][ T44] hub 7-1:1.0: bad descriptor, ignoring hub [ 344.593009][ T44] hub 7-1:1.0: probe with driver hub failed with error -5 [ 344.778312][ T44] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 345.117681][ T44] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 345.297699][ T44] usb 1-1: Using ep0 maxpacket: 8 [ 345.303971][ T44] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 345.314826][ T44] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 345.341267][ T44] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 345.427830][ T44] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 345.452891][ T44] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 345.462436][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.677886][T11134] usb 7-1: reset high-speed USB device number 2 using dummy_hcd [ 345.694400][ T44] usb 1-1: GET_CAPABILITIES returned 0 [ 345.757438][ T44] usbtmc 1-1:16.0: can't read capabilities [ 345.993675][ T44] usb 1-1: USB disconnect, device number 42 [ 346.877688][ T44] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 347.050286][ T44] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 347.116028][ T44] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 347.117995][T11200] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1590'. [ 347.133754][ T44] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 347.145851][ T5979] usb 7-1: USB disconnect, device number 2 [ 347.163611][ T5979] usblp0: removed [ 347.199622][ T44] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 347.215581][ T44] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 347.237541][ T44] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 347.247741][ T44] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 347.256356][ T44] usb 2-1: Product: syz [ 347.263953][ T44] usb 2-1: Manufacturer: syz [ 347.279545][ T44] cdc_wdm 2-1:1.0: skipping garbage [ 347.287036][ T44] cdc_wdm 2-1:1.0: skipping garbage [ 347.302737][ T44] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 347.311860][ T44] cdc_wdm 2-1:1.0: Unknown control protocol [ 347.461593][ T30] audit: type=1326 audit(2000000034.200:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11206 comm="syz.0.1591" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9dd9f8ebe9 code=0x0 [ 347.502359][ T44] usb 2-1: USB disconnect, device number 49 [ 347.827667][ T5958] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 347.995070][ T5958] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 348.007652][ T5958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.030215][ T5958] usb 3-1: Product: syz [ 348.047299][ T5958] usb 3-1: Manufacturer: syz [ 348.083413][ T5958] usb 3-1: SerialNumber: syz [ 348.142172][T11226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1593'. [ 349.441023][T11281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1605'. [ 349.518357][ T5958] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 349.573412][T11284] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.580998][T11284] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.674269][ T9] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 349.743250][ T5958] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001000. ret = -EPROTO [ 349.758973][ T5958] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 349.773303][ T5958] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 349.783124][ T5958] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 349.796800][ T5958] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 349.815575][ T5958] usb 3-1: USB disconnect, device number 50 [ 349.843013][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 349.852527][ T9] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 349.866713][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 349.876600][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 349.894356][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 349.913003][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 349.914457][T11284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.923128][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 349.941573][ T9] usb 2-1: Product: syz [ 349.945892][ T9] usb 2-1: Manufacturer: syz [ 349.958297][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 349.963768][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 349.971344][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 349.977448][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 349.998575][T11284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.146934][ T795] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.225068][ T795] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.245839][ T5958] usb 2-1: USB disconnect, device number 50 [ 350.256928][ T795] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.341289][ T795] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.726990][T11305] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 350.758111][ T5958] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 350.887763][ T9] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 350.943560][ T5958] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 350.957063][ T5958] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 350.976556][ T5958] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 350.996452][ T5958] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 351.026233][ T5958] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 351.045955][ T5958] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.054478][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 351.061419][ T9] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 351.073619][ T9] usb 1-1: config 0 has no interface number 0 [ 351.080188][ T9] usb 1-1: config 0 interface 184 has no altsetting 0 [ 351.111611][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 351.124549][ T5959] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 351.132286][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.171285][ T5958] usb 7-1: config 0 descriptor?? [ 351.255848][ T9] usb 1-1: Product: syz [ 351.269940][ T9] usb 1-1: Manufacturer: syz [ 351.281958][ T9] usb 1-1: SerialNumber: syz [ 351.300079][ T9] usb 1-1: config 0 descriptor?? [ 351.320527][ T9] smsc75xx v1.0.0 [ 351.339297][ T5959] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 351.367633][ T5959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.401910][ T5959] usb 2-1: config 0 descriptor?? [ 351.636876][ T5959] kaweth 2-1:0.0: Firmware present in device. [ 351.827510][ T5959] kaweth 2-1:0.0: Error reading configuration (-32), no net device created [ 351.836929][ T5959] kaweth 2-1:0.0: probe with driver kaweth failed with error -5 [ 351.871311][ T5958] usbhid 7-1:0.0: can't add hid device: -71 [ 351.886735][ T5958] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 351.904519][ T5958] usb 7-1: USB disconnect, device number 3 [ 351.922810][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 351.936036][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 352.408438][T11325] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 352.754190][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 352.770916][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 352.782971][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 352.807883][ T9] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 352.907768][ T5958] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 353.087725][ T5958] usb 3-1: Using ep0 maxpacket: 16 [ 353.094713][ T5958] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.105006][ T5958] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 353.114946][ T5958] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 353.124147][ T5958] usb 3-1: New USB device strings: Mfr=225, Product=0, SerialNumber=0 [ 353.132411][ T5958] usb 3-1: Manufacturer: syz [ 353.140228][ T5958] usb 3-1: config 0 descriptor?? [ 353.788528][ T5958] usb 1-1: USB disconnect, device number 43 [ 353.857154][ T9] usb 2-1: USB disconnect, device number 51 [ 354.437675][ T5928] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 354.589152][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 354.600225][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 354.613243][ T5928] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 354.623332][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.642702][ T5928] usb 2-1: Product: syz [ 354.650256][ T5928] usb 2-1: Manufacturer: syz [ 354.654853][ T5928] usb 2-1: SerialNumber: syz [ 354.661039][ T5928] usb 2-1: config 0 descriptor?? [ 354.668595][ T5928] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -90 [ 354.871019][ T9] usb 2-1: USB disconnect, device number 52 [ 355.352158][T11372] syzkaller0: entered promiscuous mode [ 355.357744][T11372] syzkaller0: entered allmulticast mode [ 355.643867][ T5958] usb 3-1: USB disconnect, device number 51 [ 355.952333][ T30] audit: type=1400 audit(2000000001.310:441): avc: denied { bind } for pid=11393 comm="syz.2.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 356.020555][ T30] audit: type=1400 audit(2000000001.330:442): avc: denied { listen } for pid=11393 comm="syz.2.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 356.087766][ T30] audit: type=1400 audit(2000000001.340:443): avc: denied { write } for pid=11393 comm="syz.2.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 356.348646][ T5958] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 356.463379][T11409] fuse: Bad value for 'fd' [ 356.542843][ T5958] usb 3-1: config 0 has no interfaces? [ 356.550665][ T5958] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 356.572741][ T5958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.581671][ T5958] usb 3-1: Product: syz [ 356.585942][ T5958] usb 3-1: Manufacturer: syz [ 356.590734][ T5958] usb 3-1: SerialNumber: syz [ 356.599388][ T5958] usb 3-1: config 0 descriptor?? [ 356.617708][ T5585] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 356.800806][ T5585] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 356.827811][ T5585] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.842092][ T5585] usb 7-1: Product: syz [ 356.846263][ T5585] usb 7-1: Manufacturer: syz [ 356.851180][ T9] usb 3-1: USB disconnect, device number 52 [ 356.860654][ T5585] usb 7-1: SerialNumber: syz [ 357.283386][ T5585] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 357.307458][ T5585] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 357.340383][ T5585] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 357.408503][ T5585] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -32 [ 358.051833][T11452] ALSA: mixer_oss: invalid OSS volume '' [ 358.200282][T11456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1665'. [ 358.213752][T11456] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1665'. [ 358.296899][ T30] audit: type=1400 audit(2000000003.650:444): avc: denied { create } for pid=11454 comm="syz.4.1666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 358.413541][ T30] audit: type=1400 audit(2000000003.660:445): avc: denied { setopt } for pid=11454 comm="syz.4.1666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 359.454313][ T9] usb 7-1: USB disconnect, device number 4 [ 359.569984][T11491] netlink: 'syz.4.1674': attribute type 12 has an invalid length. [ 359.998675][ T30] audit: type=1400 audit(2000000005.360:446): avc: denied { mounton } for pid=11492 comm="syz.6.1676" path="/31/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 360.267678][ T5928] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 360.296212][ T30] audit: type=1400 audit(2000000005.650:447): avc: denied { read } for pid=11500 comm="syz.1.1679" path="socket:[34481]" dev="sockfs" ino=34481 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 360.437014][ T5928] usb 3-1: Using ep0 maxpacket: 8 [ 360.475122][ T5928] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 360.492005][ T5928] usb 3-1: config 0 has no interface number 0 [ 360.507687][ T5928] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 360.535711][ T5928] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 360.588531][ T5928] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 360.600772][ T5928] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 360.614947][ T5928] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 360.624307][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.642195][ T5928] usb 3-1: config 0 descriptor?? [ 360.663091][ T5928] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 360.806784][ T30] audit: type=1400 audit(2000000006.160:448): avc: denied { unmount } for pid=10800 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 360.908418][ T9] usb 3-1: USB disconnect, device number 53 [ 360.908533][ C1] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 362.331008][T11543] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 362.406588][T11539] block nbd6: Send control failed (result -32) [ 362.416365][ T5857] block nbd6: Receive control failed (result -107) [ 362.426436][T11539] block nbd6: Request send failed, requeueing [ 362.435727][ T55] block nbd6: Dead connection, failed to find a fallback [ 362.445520][ T55] block nbd6: shutting down sockets [ 362.451312][ T55] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 362.486139][T11539] ------------[ cut here ]------------ [ 362.491899][T11539] WARNING: CPU: 1 PID: 11539 at fs/buffer.c:1125 __getblk_slow+0x4cc/0x560 [ 362.500530][T11539] Modules linked in: [ 362.504507][T11539] CPU: 1 UID: 0 PID: 11539 Comm: syz.6.1690 Not tainted syzkaller #0 PREEMPT(full) [ 362.514035][T11539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 362.524208][T11539] RIP: 0010:__getblk_slow+0x4cc/0x560 [ 362.529660][T11539] Code: c0 8b 48 89 df e8 a4 cb bb ff 90 0f 0b e8 fc 1c 73 ff 48 c7 c6 e0 60 c0 8b 48 89 df e8 8d cb bb ff 90 0f 0b e8 e5 1c 73 ff 90 <0f> 0b 90 8b 74 24 0c 89 ea 48 c7 c7 40 62 c0 8b 31 db e8 8d cb 51 [ 362.549470][T11539] RSP: 0018:ffffc9000c4e77f0 EFLAGS: 00010283 [ 362.555539][T11539] RAX: 000000000000a280 RBX: 0000000000000200 RCX: ffffc90010772000 [ 362.563532][T11539] RDX: 0000000000080000 RSI: ffffffff82486f0b RDI: 0000000000000005 [ 362.571543][T11539] RBP: 0000000000000400 R08: 0000000000000005 R09: 0000000000000000 [ 362.579552][T11539] R10: 0000000000000200 R11: 0000000000000000 R12: ffff8880240e6780 [ 362.587517][T11539] R13: 0000000000000100 R14: 0000000000000200 R15: ffff8880240e6780 [ 362.595504][T11539] FS: 00007fb3ca2ce6c0(0000) GS:ffff8881247b9000(0000) knlGS:0000000000000000 [ 362.604450][T11539] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 362.611069][T11539] CR2: 00002000007a4000 CR3: 000000005220b000 CR4: 00000000003526f0 [ 362.619160][T11539] Call Trace: [ 362.622427][T11539] [ 362.625346][T11539] ? __pfx___might_resched+0x10/0x10 [ 362.630769][T11539] bdev_getblk+0xd4/0xe0 [ 362.635019][T11539] __bread_gfp+0x86/0x3c0 [ 362.639355][T11539] udf_read_tagged+0xae/0x740 [ 362.644019][T11539] udf_check_anchor_block+0x89/0x4b0 [ 362.649321][T11539] ? udf_get_last_block+0x1ce/0x2a0 [ 362.654515][T11539] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 362.660414][T11539] udf_load_vrs+0x3b8/0x1070 [ 362.664994][T11539] ? __pfx_udf_load_vrs+0x10/0x10 [ 362.670094][T11539] ? __pfx_udf_get_last_session+0x10/0x10 [ 362.675792][T11539] ? lockdep_init_map_type+0x5c/0x280 [ 362.681168][T11539] udf_fill_super+0x791/0x1df0 [ 362.685916][T11539] ? __pfx_udf_fill_super+0x10/0x10 [ 362.691204][T11539] ? do_raw_spin_lock+0x12c/0x2b0 [ 362.696205][T11539] ? find_held_lock+0x2b/0x80 [ 362.700933][T11539] ? sb_set_blocksize+0x176/0x1d0 [ 362.705947][T11539] ? setup_bdev_super+0x369/0x730 [ 362.710988][T11539] get_tree_bdev_flags+0x389/0x620 [ 362.716161][T11539] ? __pfx_udf_fill_super+0x10/0x10 [ 362.721437][T11539] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 362.727045][T11539] ? bpf_lsm_capable+0x9/0x10 [ 362.731739][T11539] ? security_capable+0x7e/0x260 [ 362.736654][T11539] vfs_get_tree+0x8e/0x340 [ 362.741073][T11539] path_mount+0x1513/0x2000 [ 362.745554][T11539] ? __pfx_path_mount+0x10/0x10 [ 362.750404][T11539] ? kmem_cache_free+0x2d1/0x4d0 [ 362.755325][T11539] ? putname+0x154/0x1a0 [ 362.759560][T11539] ? putname+0x154/0x1a0 [ 362.763780][T11539] ? __x64_sys_mount+0x28d/0x310 [ 362.769096][T11539] __x64_sys_mount+0x28d/0x310 [ 362.773852][T11539] ? __pfx___x64_sys_mount+0x10/0x10 [ 362.779243][T11539] do_syscall_64+0xcd/0x4c0 [ 362.783727][T11539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.789638][T11539] RIP: 0033:0x7fb3c938ebe9 [ 362.794027][T11539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.813641][T11539] RSP: 002b:00007fb3ca2ce038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 362.822137][T11539] RAX: ffffffffffffffda RBX: 00007fb3c95b5fa0 RCX: 00007fb3c938ebe9 [ 362.830202][T11539] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000 [ 362.838169][T11539] RBP: 00007fb3c9411e19 R08: 0000000000000000 R09: 0000000000000000 [ 362.846120][T11539] R10: 0000000002008087 R11: 0000000000000246 R12: 0000000000000000 [ 362.854126][T11539] R13: 00007fb3c95b6038 R14: 00007fb3c95b5fa0 R15: 00007fff7785f2d8 [ 362.862112][T11539] [ 362.865111][T11539] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 362.872376][T11539] CPU: 1 UID: 0 PID: 11539 Comm: syz.6.1690 Not tainted syzkaller #0 PREEMPT(full) [ 362.881714][T11539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 362.891746][T11539] Call Trace: [ 362.895008][T11539] [ 362.897922][T11539] dump_stack_lvl+0x3d/0x1f0 [ 362.902495][T11539] vpanic+0x6e8/0x7a0 [ 362.906463][T11539] ? __pfx_vpanic+0x10/0x10 [ 362.910951][T11539] ? __getblk_slow+0x4cc/0x560 [ 362.915705][T11539] panic+0xca/0xd0 [ 362.919423][T11539] ? __pfx_panic+0x10/0x10 [ 362.923848][T11539] check_panic_on_warn+0xab/0xb0 [ 362.928776][T11539] __warn+0xf6/0x3c0 [ 362.932643][T11539] ? __getblk_slow+0x4cc/0x560 [ 362.937386][T11539] report_bug+0x3c3/0x580 [ 362.941692][T11539] ? __getblk_slow+0x4cc/0x560 [ 362.946435][T11539] handle_bug+0x184/0x210 [ 362.950740][T11539] exc_invalid_op+0x17/0x50 [ 362.955220][T11539] asm_exc_invalid_op+0x1a/0x20 [ 362.960057][T11539] RIP: 0010:__getblk_slow+0x4cc/0x560 [ 362.965417][T11539] Code: c0 8b 48 89 df e8 a4 cb bb ff 90 0f 0b e8 fc 1c 73 ff 48 c7 c6 e0 60 c0 8b 48 89 df e8 8d cb bb ff 90 0f 0b e8 e5 1c 73 ff 90 <0f> 0b 90 8b 74 24 0c 89 ea 48 c7 c7 40 62 c0 8b 31 db e8 8d cb 51 [ 362.985006][T11539] RSP: 0018:ffffc9000c4e77f0 EFLAGS: 00010283 [ 362.991062][T11539] RAX: 000000000000a280 RBX: 0000000000000200 RCX: ffffc90010772000 [ 362.999007][T11539] RDX: 0000000000080000 RSI: ffffffff82486f0b RDI: 0000000000000005 [ 363.006951][T11539] RBP: 0000000000000400 R08: 0000000000000005 R09: 0000000000000000 [ 363.014895][T11539] R10: 0000000000000200 R11: 0000000000000000 R12: ffff8880240e6780 [ 363.022843][T11539] R13: 0000000000000100 R14: 0000000000000200 R15: ffff8880240e6780 [ 363.030808][T11539] ? __getblk_slow+0x4cb/0x560 [ 363.035569][T11539] ? __pfx___might_resched+0x10/0x10 [ 363.040843][T11539] bdev_getblk+0xd4/0xe0 [ 363.045076][T11539] __bread_gfp+0x86/0x3c0 [ 363.049394][T11539] udf_read_tagged+0xae/0x740 [ 363.054062][T11539] udf_check_anchor_block+0x89/0x4b0 [ 363.059330][T11539] ? udf_get_last_block+0x1ce/0x2a0 [ 363.064507][T11539] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 363.070389][T11539] udf_load_vrs+0x3b8/0x1070 [ 363.074970][T11539] ? __pfx_udf_load_vrs+0x10/0x10 [ 363.079978][T11539] ? __pfx_udf_get_last_session+0x10/0x10 [ 363.085676][T11539] ? lockdep_init_map_type+0x5c/0x280 [ 363.091028][T11539] udf_fill_super+0x791/0x1df0 [ 363.095777][T11539] ? __pfx_udf_fill_super+0x10/0x10 [ 363.100957][T11539] ? do_raw_spin_lock+0x12c/0x2b0 [ 363.105960][T11539] ? find_held_lock+0x2b/0x80 [ 363.110623][T11539] ? sb_set_blocksize+0x176/0x1d0 [ 363.115633][T11539] ? setup_bdev_super+0x369/0x730 [ 363.120646][T11539] get_tree_bdev_flags+0x389/0x620 [ 363.125736][T11539] ? __pfx_udf_fill_super+0x10/0x10 [ 363.130919][T11539] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 363.136535][T11539] ? bpf_lsm_capable+0x9/0x10 [ 363.141200][T11539] ? security_capable+0x7e/0x260 [ 363.146123][T11539] vfs_get_tree+0x8e/0x340 [ 363.150531][T11539] path_mount+0x1513/0x2000 [ 363.155021][T11539] ? __pfx_path_mount+0x10/0x10 [ 363.159857][T11539] ? kmem_cache_free+0x2d1/0x4d0 [ 363.164775][T11539] ? putname+0x154/0x1a0 [ 363.169003][T11539] ? putname+0x154/0x1a0 [ 363.173233][T11539] ? __x64_sys_mount+0x28d/0x310 [ 363.178153][T11539] __x64_sys_mount+0x28d/0x310 [ 363.182906][T11539] ? __pfx___x64_sys_mount+0x10/0x10 [ 363.188183][T11539] do_syscall_64+0xcd/0x4c0 [ 363.192669][T11539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.198540][T11539] RIP: 0033:0x7fb3c938ebe9 [ 363.202948][T11539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.222568][T11539] RSP: 002b:00007fb3ca2ce038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 363.230976][T11539] RAX: ffffffffffffffda RBX: 00007fb3c95b5fa0 RCX: 00007fb3c938ebe9 [ 363.238933][T11539] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000 [ 363.246885][T11539] RBP: 00007fb3c9411e19 R08: 0000000000000000 R09: 0000000000000000 [ 363.254835][T11539] R10: 0000000002008087 R11: 0000000000000246 R12: 0000000000000000 [ 363.262785][T11539] R13: 00007fb3c95b6038 R14: 00007fb3c95b5fa0 R15: 00007fff7785f2d8 [ 363.270748][T11539] [ 363.273946][T11539] Kernel Offset: disabled [ 363.278242][T11539] Rebooting in 86400 seconds..