last executing test programs: 56m47.687069088s ago: executing program 3 (id=238): open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)="f2b314", 0x3}], 0x2}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000002c0)="a39c1fb4d127f197e8e3a41c9fe5567d9137e293a21d262ad6ead1253f31493569f5737c8ed607d03401d5a3edcb", 0x2e}, {&(0x7f0000000500)="a608e5f2e2724fd7d00b71dc97e13f5a2a987046270dc61632cb51d1ec3c7912901302ff866747b05d5e18a21bc5d2d55d87d4683de5d6dc5aa63b9f6e1c4883c3fcae54300a236a", 0x48}, {&(0x7f00000006c0)="8d4fb001cf69a4e5d8cea7569c780cc8598d314562f2d2e8bf22047e364764a56d8d35000cc37feb758a43590f1bb28a3713bd28dfa24e", 0x37}, {0x0}, {&(0x7f0000000880)="bf0171aab45469f23a3e11b9c8fb004572d990a78a7a7b3b7b4a4d2def1e711b6d7fb1742ebbca750dca13be6d89a7c1ba6f2af52f77b7735ad9ec4ccb265d37075afa82a0dbb3", 0x47}, {&(0x7f0000000940)="a25473c28cca42abe4e2e2ff22c40b099dc8d1401b3d70b005a30c5dee9bb2914b8ab87826d866fa20f13f1e1ea3215b34735fd7c72736516bea3e0ec3dd8bc9164fcb7f6d46dc26d12f4a78890a9492d56ef482f6861fd3d92b5e5f40a6c7362d23a3f9f3f32d32266a8d15882a83ee2d5226afe3ef90088f5082d6c986922dbac25ddabb11695f3317", 0x8a}], 0x6}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 56m46.990693907s ago: executing program 3 (id=242): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r1, &(0x7f0000000240)='ns/cgroup\x00') ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000000fc0)=[{{&(0x7f00000000c0)={0x2, 0x4e64, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000280)="b9cbc3e6c19dc5ebea59e4b130f9da1bff8cd8dff2e9577fe33ddbef4171", 0x1e}, {&(0x7f0000000300)="a182d9f63c09e00fcf684103bb89715f266f263a8947b896258a115e9a581950", 0x20}, {&(0x7f0000000340)="56ee49ce758884389c203bf08d513618bab4d76ef716f0644ccde2bfb083cc8dba7344549683362e107dbdd541e0211ec4dbc9dbf476ff2ff5996b852be3e794203caaf7a46c5df3ed05ba20844c348a3b751c8f284a66740ceca7a2cc5763555713704d543cc5baf727a29f29bd2135b5a8fd307ab522a4edb3941c273ff8bb54cd072cfe7371b6c59a25cc44f465f5d46916caf710478b74102c33e2c50ab7d30e8a627f9126d41233a41813c42ee0fc64edffb66b0f16ea29e93ca60b684dc85cce411183a5be8d468d202d9c", 0xce}, {&(0x7f0000000440)="47834c48098dfd6673dd581b0f7b9f8e9b3a6de0e6e1db5318054ec1280e8e8eb3043669c25e25f53db5489d0190a3f48ffee1a8767da68fcabd8044c77eb4f62e8ea9dee959fe509a8b37ad926c3a1d5b8c6ecb3cc718262888cd5ad07212de10973ed001558560", 0x68}, {&(0x7f0000000700)="d2e98ab478aac7a2e8caf613b1e69474dddce6eeb2d1f5b272261235f5eeed506195ddf5c222bf60321d6367b5bc1c03b24aa41f5d7f7cbb80830d541ae05606b01991858110f8a9fe58c71cd3663e7ce8618b69b79a39b892bf51e29b70c5f176da333faa696e2ca067641d5726a0f215e145274ad9aac818928988b598fbbde2ed62ac5f9eeadc5e03c580ac849156bde330cd4e1f2efc0106a6187b3f9d504a8d75e74686f5118912bb661a4e32aade8f0cae2848578acb04b0c2b85dabf736ea5a747e6bffc05a315379bc6015fdf526d5fb4019d24d4b7a0ebb7e2ce8764b08ae3f52bc1a7902", 0xe9}, {&(0x7f00000004c0)="f82ab68bc385725e2375da6faca72c088a8b7fa96edcaa694ee8f0a70d39435940e97b5010410fc53ebf625dc872dc55ae09ffe46dceaa3cddfc9f6a3bf75fae5631df7ba198ae98a99a91b7762381b035987bcd867fd85e92a2d3133eb6b21dd1d7b697e6d13855604aeced1ffd87bcb63eeb6a5fd0f6aba66192de25f0b33fe855904a3dab646fb5", 0x89}, {&(0x7f0000000800)="7607db700afec86d4978369d3abb26fe04de4c80af5737257a032218545ccf659280a7b33340a0b995b69e859b554c2c6f72bd6bb3a10be244af8249515d51ed22d09d2f764681156fe946e0bcb2abd61cf1d8c3f65c75bebb64cb57d96c6ab52c6a473da2a59cbb085e739e570e5be4d1f0399c010b4c1613ca6b1686d508628290c101fdd583d19a3f2500fa5ee2bb568e83802190", 0x96}], 0x7, &(0x7f0000000a00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0xba000000}}, @ip_retopts={{0x98, 0x0, 0x7, {[@rr={0x7, 0x13, 0x1f, [@broadcast, @rand_addr=0x64010100, @multicast2, @rand_addr=0x64010101]}, @timestamp_addr={0x44, 0x4, 0x7, 0x1, 0x6}, @end, @generic={0x332370bea15389c2, 0xe, "92b76f29e0a414943b1228c1"}, @cipso={0x86, 0x62, 0x2, [{0x7, 0x12, "39a34ab3c94646bfa87d9b1404043725"}, {0xd234082e1e5bc4b0, 0x10, "1ba0269274282bb4da6f912d2701"}, {0xc, 0xd, "326660065ee83e0b88a329"}, {0x7, 0xa, "1972bd891b211f55"}, {0x9be21bd5327ae5ce, 0xa, "5558dc789282bc78"}, {0x2, 0x4, "86ed"}, {0x6, 0xc, "1091ba667bc369a57a8e"}, {0x2, 0x9, "2bf5c349c8b8f2"}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x34}, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9a52}}, @ip_retopts={{0x70, 0x0, 0x7, {[@lsrr={0x83, 0x23, 0xf0, [@loopback, @multicast2, @multicast2, @remote, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x2d}]}, @noop, @ssrr={0x89, 0x1f, 0x71, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2, @multicast1, @empty, @remote, @local]}, @end, @ra={0x94, 0x4, 0x1}, @end, @lsrr={0x83, 0x17, 0x14, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1e}, @rand_addr=0x64010100, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x1a0}}, {{&(0x7f0000000bc0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000f80)=[{&(0x7f0000000c00)="113dbfc7170ab27acfa8e3bc56e781a14625d1030fee6a0961126d6d22d145ef4ba788aafff428059f97ca4798528a4274f684ca550dd140e3d3fa87c03467fc85b3c5f333780c5bddbf7f02a2e41ff5a1b771b2ab66e8683802f11bc35dd1076b377f67542489fb44879f68570c9739511c817f33beba3a593d9083722dbd6372ad958c01126d5afb61008c2bcde6db0b", 0x91}, {&(0x7f0000000cc0)="084b9b5ae3f1132f5c42995e565d5aa77fca801fdd8bde62638f7f92828d48bc531694df4a994857c5ff9f1fb640286111dceaf33cdb7db99d6cce236219ba4a61cbb7b76bf3482e135460a3ebcf487a181dd80bda68c1241ff59b3d70a8c16e01c488e791d41c8730447b56a0e57160b38d92e635e6dabe91f2ec09b33193e09c26e99e3b2400c035e9693e19355385c398e0be8f4f08c4855b683ba45b3942107bb792ab19262539b2ab356185217a8e9ed68932cec7bcbbbc8f0736b27683793dd5f7d3e6755aa2ff7bc27e536a0e2f92f75da62fde414b43bf32ae5984c8b93dd2490295c27d34de1cc26543", 0xee}, {&(0x7f0000000dc0)="473845f73e58282f6655fd8a0dd2b2b48bfff33efcf898950ea3333636f0ef74edf3dc4a01dfed2fc96eabdec3529c75257f843f245211b9cb6331dae46ee81c24047237381544fbd7d168b0ed059ac497923287a89bc05ccc8c6614e5b56066671ab21b516f223c649cea319f19099e44bc2741640debcd137d96cebed2f85ecc7ae51cc0d75a9ecf8935cd01ce5f76eeb25c2a4b3993c46d0e46", 0x9b}, {&(0x7f0000000e80)="4a93505ab73d3c62ae2df9b9985f01d948311a98d9ef8647fbe30ade7868f6a6872375fa5947d1430bb85046070398eba93fb77a1fe9d7edfc1fa94ea045f5798d8e2bb8a59fb6a3cc4123a0c2e8505679fc999b5970149d011390320bda360384bde24372e1cddc5ad0be2190b9ea0e5b326c871c18f1c5185d9763dbb15001052bc0e6dcb3bdfe9b7db50444eaa8e99b565d562bdf3c1da34a00d0dae25e2ba7c1ff21c30bdf8ca91d5105b54e5b64a2a6d65f5dafc7bc8872b93a4316457906ac32f28d938835c68e43a89881a7d4bdab02c2fea42e81cc64d5c3f3478c4799d31e649ab31fc6717a4ca5ff24177a250ff3abc57e64", 0xf7}], 0x4}}], 0x2, 0x0) dup3(r2, r3, 0x0) 56m45.582898563s ago: executing program 3 (id=245): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000100)={0xf, 0x20000, 0x5, 0xcbc, 0x1, 0x4}) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$cec(&(0x7f0000001080), 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) openat$tun(0xffffff9c, 0x0, 0x80, 0x0) socket(0x28, 0x1, 0x0) timer_create(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000180)={0x0, 0xc989, 0x0, 0xffffffdf, 0x173}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r1, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 56m45.285853132s ago: executing program 3 (id=247): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x121201, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000600)=0x14) unshare(0x62040200) r1 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000000)={0x2, 0x5}) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f00000000c0)={&(0x7f0000000100)=""/168, 0xa8, 0xfffffffd, 0x7}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r2) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92143b, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x24000800) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2c, r3, 0x1, 0x0, 0x25dfdbfb, {0x26}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x2c}}, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) close(r0) 56m42.789695444s ago: executing program 3 (id=253): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0x0, 0x6}, {0x0, 0x1, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0x2, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000002140)=0x1) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@dstopts_2292={{0x70, 0x29, 0x4, {0x4, 0xb, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0xfe, 0x2b, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d41787454"}, @calipso={0x7, 0x8, {0x1, 0x0, 0x7a, 0x8001}}, @ra={0x5, 0x2, 0xbf4}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x68, 0x29, 0x36, {0x5e, 0x9, '\x00', [@pad1, @calipso={0x7, 0x30, {0x3, 0xa, 0x0, 0xfff, [0x2, 0x966, 0xfffffffffffffff7, 0x1, 0x1]}}, @generic={0x8}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x7, [0x8000]}}, @generic={0x1, 0x3, "2bdb86"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}], 0x128}}], 0x1, 0x810) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 56m42.441369954s ago: executing program 3 (id=256): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r1, &(0x7f0000000240)='ns/cgroup\x00') ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000000fc0)=[{{&(0x7f00000000c0)={0x2, 0x4e64, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000280)="b9cbc3e6c19dc5ebea59e4b130f9da1bff8cd8dff2e9577fe33ddbef4171", 0x1e}, {&(0x7f0000000300)="a182d9f63c09e00fcf684103bb89715f266f263a8947b896258a115e9a581950", 0x20}, {&(0x7f0000000340)="56ee49ce758884389c203bf08d513618bab4d76ef716f0644ccde2bfb083cc8dba7344549683362e107dbdd541e0211ec4dbc9dbf476ff2ff5996b852be3e794203caaf7a46c5df3ed05ba20844c348a3b751c8f284a66740ceca7a2cc5763555713704d543cc5baf727a29f29bd2135b5a8fd307ab522a4edb3941c273ff8bb54cd072cfe7371b6c59a25cc44f465f5d46916caf710478b74102c33e2c50ab7d30e8a627f9126d41233a41813c42ee0fc64edffb66b0f16ea29e93ca60b684dc85cce411183a5be8d468d202d9c", 0xce}, {&(0x7f0000000440)="47834c48098dfd6673dd581b0f7b9f8e9b3a6de0e6e1db5318054ec1280e8e8eb3043669c25e25f53db5489d0190a3f48ffee1a8767da68fcabd8044c77eb4f62e8ea9dee959fe509a8b37ad926c3a1d5b8c6ecb3cc718262888cd5ad07212de10973ed001558560", 0x68}, {&(0x7f0000000700)="d2e98ab478aac7a2e8caf613b1e69474dddce6eeb2d1f5b272261235f5eeed506195ddf5c222bf60321d6367b5bc1c03b24aa41f5d7f7cbb80830d541ae05606b01991858110f8a9fe58c71cd3663e7ce8618b69b79a39b892bf51e29b70c5f176da333faa696e2ca067641d5726a0f215e145274ad9aac818928988b598fbbde2ed62ac5f9eeadc5e03c580ac849156bde330cd4e1f2efc0106a6187b3f9d504a8d75e74686f5118912bb661a4e32aade8f0cae2848578acb04b0c2b85dabf736ea5a747e6bffc05a315379bc6015fdf526d5fb4019d24d4b7a0ebb7e2ce8764b08ae3f52bc1a7902", 0xe9}, {&(0x7f00000004c0)="f82ab68bc385725e2375da6faca72c088a8b7fa96edcaa694ee8f0a70d39435940e97b5010410fc53ebf625dc872dc55ae09ffe46dceaa3cddfc9f6a3bf75fae5631df7ba198ae98a99a91b7762381b035987bcd867fd85e92a2d3133eb6b21dd1d7b697e6d13855604aeced1ffd87bcb63eeb6a5fd0f6aba66192de25f0b33fe855904a3dab646fb5", 0x89}, {&(0x7f0000000800)="7607db700afec86d4978369d3abb26fe04de4c80af5737257a032218545ccf659280a7b33340a0b995b69e859b554c2c6f72bd6bb3a10be244af8249515d51ed22d09d2f764681156fe946e0bcb2abd61cf1d8c3f65c75bebb64cb57d96c6ab52c6a473da2a59cbb085e739e570e5be4d1f0399c010b4c1613ca6b1686d508628290c101fdd583d19a3f2500fa5ee2bb568e83802190", 0x96}], 0x7, &(0x7f0000000a00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0xba000000}}, @ip_retopts={{0x98, 0x0, 0x7, {[@rr={0x7, 0x13, 0x1f, [@broadcast, @rand_addr=0x64010100, @multicast2, @rand_addr=0x64010101]}, @timestamp_addr={0x44, 0x4, 0x7, 0x1, 0x6}, @end, @generic={0x332370bea15389c2, 0xe, "92b76f29e0a414943b1228c1"}, @cipso={0x86, 0x62, 0x2, [{0x7, 0x12, "39a34ab3c94646bfa87d9b1404043725"}, {0xd234082e1e5bc4b0, 0x10, "1ba0269274282bb4da6f912d2701"}, {0xc, 0xd, "326660065ee83e0b88a329"}, {0x7, 0xa, "1972bd891b211f55"}, {0x9be21bd5327ae5ce, 0xa, "5558dc789282bc78"}, {0x2, 0x4, "86ed"}, {0x6, 0xc, "1091ba667bc369a57a8e"}, {0x2, 0x9, "2bf5c349c8b8f2"}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x34}, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9a52}}, @ip_retopts={{0x70, 0x0, 0x7, {[@lsrr={0x83, 0x23, 0xf0, [@loopback, @multicast2, @multicast2, @remote, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x2d}]}, @noop, @ssrr={0x89, 0x1f, 0x71, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2, @multicast1, @empty, @remote, @local]}, @end, @ra={0x94, 0x4, 0x1}, @end, @lsrr={0x83, 0x17, 0x14, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1e}, @rand_addr=0x64010100, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x1a0}}, {{&(0x7f0000000bc0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000f80)=[{&(0x7f0000000c00)="113dbfc7170ab27acfa8e3bc56e781a14625d1030fee6a0961126d6d22d145ef4ba788aafff428059f97ca4798528a4274f684ca550dd140e3d3fa87c03467fc85b3c5f333780c5bddbf7f02a2e41ff5a1b771b2ab66e8683802f11bc35dd1076b377f67542489fb44879f68570c9739511c817f33beba3a593d9083722dbd6372ad958c01126d5afb61008c2bcde6db0b", 0x91}, {&(0x7f0000000cc0)="084b9b5ae3f1132f5c42995e565d5aa77fca801fdd8bde62638f7f92828d48bc531694df4a994857c5ff9f1fb640286111dceaf33cdb7db99d6cce236219ba4a61cbb7b76bf3482e135460a3ebcf487a181dd80bda68c1241ff59b3d70a8c16e01c488e791d41c8730447b56a0e57160b38d92e635e6dabe91f2ec09b33193e09c26e99e3b2400c035e9693e19355385c398e0be8f4f08c4855b683ba45b3942107bb792ab19262539b2ab356185217a8e9ed68932cec7bcbbbc8f0736b27683793dd5f7d3e6755aa2ff7bc27e536a0e2f92f75da62fde414b43bf32ae5984c8b93dd2490295c27d34de1cc26543", 0xee}, {&(0x7f0000000dc0)="473845f73e58282f6655fd8a0dd2b2b48bfff33efcf898950ea3333636f0ef74edf3dc4a01dfed2fc96eabdec3529c75257f843f245211b9cb6331dae46ee81c24047237381544fbd7d168b0ed059ac497923287a89bc05ccc8c6614e5b56066671ab21b516f223c649cea319f19099e44bc2741640debcd137d96cebed2f85ecc7ae51cc0d75a9ecf8935cd01ce5f76eeb25c2a4b3993c46d0e46", 0x9b}, {&(0x7f0000000e80)="4a93505ab73d3c62ae2df9b9985f01d948311a98d9ef8647fbe30ade7868f6a6872375fa5947d1430bb85046070398eba93fb77a1fe9d7edfc1fa94ea045f5798d8e2bb8a59fb6a3cc4123a0c2e8505679fc999b5970149d011390320bda360384bde24372e1cddc5ad0be2190b9ea0e5b326c871c18f1c5185d9763dbb15001052bc0e6dcb3bdfe9b7db50444eaa8e99b565d562bdf3c1da34a00d0dae25e2ba7c1ff21c30bdf8ca91d5105b54e5b64a2a6d65f5dafc7bc8872b93a4316457906ac32f28d938835c68e43a89881a7d4bdab02c2fea42e81cc64d5c3f3478c4799d31e649ab31fc6717a4ca5ff24177a250ff3abc57e64", 0xf7}], 0x4}}], 0x2, 0x0) dup3(r2, r3, 0x0) 56m41.627493323s ago: executing program 32 (id=256): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r1, &(0x7f0000000240)='ns/cgroup\x00') ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000000fc0)=[{{&(0x7f00000000c0)={0x2, 0x4e64, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000280)="b9cbc3e6c19dc5ebea59e4b130f9da1bff8cd8dff2e9577fe33ddbef4171", 0x1e}, {&(0x7f0000000300)="a182d9f63c09e00fcf684103bb89715f266f263a8947b896258a115e9a581950", 0x20}, {&(0x7f0000000340)="56ee49ce758884389c203bf08d513618bab4d76ef716f0644ccde2bfb083cc8dba7344549683362e107dbdd541e0211ec4dbc9dbf476ff2ff5996b852be3e794203caaf7a46c5df3ed05ba20844c348a3b751c8f284a66740ceca7a2cc5763555713704d543cc5baf727a29f29bd2135b5a8fd307ab522a4edb3941c273ff8bb54cd072cfe7371b6c59a25cc44f465f5d46916caf710478b74102c33e2c50ab7d30e8a627f9126d41233a41813c42ee0fc64edffb66b0f16ea29e93ca60b684dc85cce411183a5be8d468d202d9c", 0xce}, {&(0x7f0000000440)="47834c48098dfd6673dd581b0f7b9f8e9b3a6de0e6e1db5318054ec1280e8e8eb3043669c25e25f53db5489d0190a3f48ffee1a8767da68fcabd8044c77eb4f62e8ea9dee959fe509a8b37ad926c3a1d5b8c6ecb3cc718262888cd5ad07212de10973ed001558560", 0x68}, {&(0x7f0000000700)="d2e98ab478aac7a2e8caf613b1e69474dddce6eeb2d1f5b272261235f5eeed506195ddf5c222bf60321d6367b5bc1c03b24aa41f5d7f7cbb80830d541ae05606b01991858110f8a9fe58c71cd3663e7ce8618b69b79a39b892bf51e29b70c5f176da333faa696e2ca067641d5726a0f215e145274ad9aac818928988b598fbbde2ed62ac5f9eeadc5e03c580ac849156bde330cd4e1f2efc0106a6187b3f9d504a8d75e74686f5118912bb661a4e32aade8f0cae2848578acb04b0c2b85dabf736ea5a747e6bffc05a315379bc6015fdf526d5fb4019d24d4b7a0ebb7e2ce8764b08ae3f52bc1a7902", 0xe9}, {&(0x7f00000004c0)="f82ab68bc385725e2375da6faca72c088a8b7fa96edcaa694ee8f0a70d39435940e97b5010410fc53ebf625dc872dc55ae09ffe46dceaa3cddfc9f6a3bf75fae5631df7ba198ae98a99a91b7762381b035987bcd867fd85e92a2d3133eb6b21dd1d7b697e6d13855604aeced1ffd87bcb63eeb6a5fd0f6aba66192de25f0b33fe855904a3dab646fb5", 0x89}, {&(0x7f0000000800)="7607db700afec86d4978369d3abb26fe04de4c80af5737257a032218545ccf659280a7b33340a0b995b69e859b554c2c6f72bd6bb3a10be244af8249515d51ed22d09d2f764681156fe946e0bcb2abd61cf1d8c3f65c75bebb64cb57d96c6ab52c6a473da2a59cbb085e739e570e5be4d1f0399c010b4c1613ca6b1686d508628290c101fdd583d19a3f2500fa5ee2bb568e83802190", 0x96}], 0x7, &(0x7f0000000a00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0xba000000}}, @ip_retopts={{0x98, 0x0, 0x7, {[@rr={0x7, 0x13, 0x1f, [@broadcast, @rand_addr=0x64010100, @multicast2, @rand_addr=0x64010101]}, @timestamp_addr={0x44, 0x4, 0x7, 0x1, 0x6}, @end, @generic={0x332370bea15389c2, 0xe, "92b76f29e0a414943b1228c1"}, @cipso={0x86, 0x62, 0x2, [{0x7, 0x12, "39a34ab3c94646bfa87d9b1404043725"}, {0xd234082e1e5bc4b0, 0x10, "1ba0269274282bb4da6f912d2701"}, {0xc, 0xd, "326660065ee83e0b88a329"}, {0x7, 0xa, "1972bd891b211f55"}, {0x9be21bd5327ae5ce, 0xa, "5558dc789282bc78"}, {0x2, 0x4, "86ed"}, {0x6, 0xc, "1091ba667bc369a57a8e"}, {0x2, 0x9, "2bf5c349c8b8f2"}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x34}, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9a52}}, @ip_retopts={{0x70, 0x0, 0x7, {[@lsrr={0x83, 0x23, 0xf0, [@loopback, @multicast2, @multicast2, @remote, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x2d}]}, @noop, @ssrr={0x89, 0x1f, 0x71, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2, @multicast1, @empty, @remote, @local]}, @end, @ra={0x94, 0x4, 0x1}, @end, @lsrr={0x83, 0x17, 0x14, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1e}, @rand_addr=0x64010100, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x1a0}}, {{&(0x7f0000000bc0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000f80)=[{&(0x7f0000000c00)="113dbfc7170ab27acfa8e3bc56e781a14625d1030fee6a0961126d6d22d145ef4ba788aafff428059f97ca4798528a4274f684ca550dd140e3d3fa87c03467fc85b3c5f333780c5bddbf7f02a2e41ff5a1b771b2ab66e8683802f11bc35dd1076b377f67542489fb44879f68570c9739511c817f33beba3a593d9083722dbd6372ad958c01126d5afb61008c2bcde6db0b", 0x91}, {&(0x7f0000000cc0)="084b9b5ae3f1132f5c42995e565d5aa77fca801fdd8bde62638f7f92828d48bc531694df4a994857c5ff9f1fb640286111dceaf33cdb7db99d6cce236219ba4a61cbb7b76bf3482e135460a3ebcf487a181dd80bda68c1241ff59b3d70a8c16e01c488e791d41c8730447b56a0e57160b38d92e635e6dabe91f2ec09b33193e09c26e99e3b2400c035e9693e19355385c398e0be8f4f08c4855b683ba45b3942107bb792ab19262539b2ab356185217a8e9ed68932cec7bcbbbc8f0736b27683793dd5f7d3e6755aa2ff7bc27e536a0e2f92f75da62fde414b43bf32ae5984c8b93dd2490295c27d34de1cc26543", 0xee}, {&(0x7f0000000dc0)="473845f73e58282f6655fd8a0dd2b2b48bfff33efcf898950ea3333636f0ef74edf3dc4a01dfed2fc96eabdec3529c75257f843f245211b9cb6331dae46ee81c24047237381544fbd7d168b0ed059ac497923287a89bc05ccc8c6614e5b56066671ab21b516f223c649cea319f19099e44bc2741640debcd137d96cebed2f85ecc7ae51cc0d75a9ecf8935cd01ce5f76eeb25c2a4b3993c46d0e46", 0x9b}, {&(0x7f0000000e80)="4a93505ab73d3c62ae2df9b9985f01d948311a98d9ef8647fbe30ade7868f6a6872375fa5947d1430bb85046070398eba93fb77a1fe9d7edfc1fa94ea045f5798d8e2bb8a59fb6a3cc4123a0c2e8505679fc999b5970149d011390320bda360384bde24372e1cddc5ad0be2190b9ea0e5b326c871c18f1c5185d9763dbb15001052bc0e6dcb3bdfe9b7db50444eaa8e99b565d562bdf3c1da34a00d0dae25e2ba7c1ff21c30bdf8ca91d5105b54e5b64a2a6d65f5dafc7bc8872b93a4316457906ac32f28d938835c68e43a89881a7d4bdab02c2fea42e81cc64d5c3f3478c4799d31e649ab31fc6717a4ca5ff24177a250ff3abc57e64", 0xf7}], 0x4}}], 0x2, 0x0) dup3(r2, r3, 0x0) 51m53.292002709s ago: executing program 2 (id=1191): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x19) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80003, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0xc}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9}, 0x94) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000840)={{0x12, 0x1, 0x200, 0x5f, 0x5f, 0xb7, 0x40, 0x5c6, 0x9222, 0xa055, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x3, 0x3, 0x2, 0x20, 0x6, [{{0x9, 0x4, 0x3, 0x8, 0x0, 0x43, 0xe4, 0x2b, 0x8}}, {{0x9, 0x4, 0xba, 0xe, 0x0, 0xff, 0x5d, 0x81, 0xb}}, {{0x9, 0x4, 0x99, 0x10, 0x0, 0xff, 0xff, 0xff, 0x6}}]}}]}}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x8040000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0xfffc, 0x0, 0xa}, {0x800000000, 0x0, 0x4, 0x0, 0x1000000000000000, 0x0, 0x0, 0x40000000}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffff9, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in6=@empty, 0x4, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x8, 0x8, 0x90, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = gettid() sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x2a94, 0x60004}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008080) 51m50.00958215s ago: executing program 2 (id=1200): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) mq_notify(0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x80801) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0285628, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) sched_setscheduler(r2, 0x6, &(0x7f0000000200)=0x5fd) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000280)={0x80000001, 0x1, 0x2, "6ea7b2c496e0ad6e4d10ee946bbdf4389931088c86f42d3e89b1a0018fd12613", 0x31364d59}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001680)=ANY=[@ANYBLOB="1c0000002e00010026bdf000fcdbdf250400000008000c00", @ANYRES32=0x0, @ANYBLOB="6f36694df18bb8521befead32aa177c594f9b60ebc8e1ca78f420185512b0022a85b9292a107fa2c4d4580fb3e21b03bb7b3a4f1d76f8562cc534d5c76bd585b99190e315676b399696805372cfd09061960531ab1f798b028833522e7f821735a4e76a392f3f150416b361cc71cca2a8230c8f2f65e013a757f0de5c553716fd1ac10e7ccad337ce10babc6251302845caf768eeabc719e298f"], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000480)=@raw=[@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x41000}, 0x94) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000005c0)="7cf8e52490cce8be0659c831f25b052361d426aba550fe1e784c389240522ad1ccd8b6bab1b40efbbdf9dca9f317f7e2a90f010b1b4e5e994060c83e2535863498ec63ef778f4b56a4d69f7867379a95caf5a35e90aeef1018408d2f061f8babb1e3a681181385df6dcd0965f7ef840bab947c570dfc4a73d90aafe09f2aa54775", 0x81) 51m49.494681126s ago: executing program 2 (id=1204): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303}, "7817765dc5914c3d", "ac00b92b592a5786a6934cb6b3b18f7a7a6eaa9cbd8ef3b0fbc326100136e976", "e875f694"}, 0x38) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, 0x0, &(0x7f0000000100)) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000240)='ns/cgroup\x00') ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r4, &(0x7f0000000fc0)=[{{&(0x7f00000000c0)={0x2, 0x4e64, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000280)="b9cbc3e6c19dc5ebea59e4b130f9da1bff8cd8dff2e9577fe33ddbef4171", 0x1e}, {&(0x7f0000000300)="a182d9f63c09e00fcf684103bb89715f266f263a8947b896258a115e9a581950", 0x20}, {&(0x7f0000000340)="56ee49ce758884389c203bf08d513618bab4d76ef716f0644ccde2bfb083cc8dba7344549683362e107dbdd541e0211ec4dbc9dbf476ff2ff5996b852be3e794203caaf7a46c5df3ed05ba20844c348a3b751c8f284a66740ceca7a2cc5763555713704d543cc5baf727a29f29bd2135b5a8fd307ab522a4edb3941c273ff8bb54cd072cfe7371b6c59a25cc44f465f5d46916caf710478b74102c33e2c50ab7d30e8a627f9126d41233a41813c42ee0fc64edffb66b0f16ea29e93ca60b684dc85cce411183a5be8d468d202d9c", 0xce}, {&(0x7f0000000440)="47834c48098dfd6673dd581b0f7b9f8e9b3a6de0e6e1db5318054ec1280e8e8eb3043669c25e25f53db5489d0190a3f48ffee1a8767da68fcabd8044c77eb4f62e8ea9dee959fe509a8b37ad926c3a1d5b8c6ecb3cc718262888cd5ad07212de10973ed001558560", 0x68}, {&(0x7f0000000700)="d2e98ab478aac7a2e8caf613b1e69474dddce6eeb2d1f5b272261235f5eeed506195ddf5c222bf60321d6367b5bc1c03b24aa41f5d7f7cbb80830d541ae05606b01991858110f8a9fe58c71cd3663e7ce8618b69b79a39b892bf51e29b70c5f176da333faa696e2ca067641d5726a0f215e145274ad9aac818928988b598fbbde2ed62ac5f9eeadc5e03c580ac849156bde330cd4e1f2efc0106a6187b3f9d504a8d75e74686f5118912bb661a4e32aade8f0cae2848578acb04b0c2b85dabf736ea5a747e6bffc05a315379bc6015fdf526d5fb4019d24d4b7a0ebb7e2ce8764b08ae3f52bc1a7902", 0xe9}, {&(0x7f00000004c0)="f82ab68bc385725e2375da6faca72c088a8b7fa96edcaa694ee8f0a70d39435940e97b5010410fc53ebf625dc872dc55ae09ffe46dceaa3cddfc9f6a3bf75fae5631df7ba198ae98a99a91b7762381b035987bcd867fd85e92a2d3133eb6b21dd1d7b697e6d13855604aeced1ffd87bcb63eeb6a5fd0f6aba66192de25f0b33fe855904a3dab646fb5", 0x89}, {&(0x7f0000000800)="7607db700afec86d4978369d3abb26fe04de4c80af5737257a032218545ccf659280a7b33340a0b995b69e859b554c2c6f72bd6bb3a10be244af8249515d51ed22d09d2f764681156fe946e0bcb2abd61cf1d8c3f65c75bebb64cb57d96c6ab52c6a473da2a59cbb085e739e570e5be4d1f0399c010b4c1613ca6b1686d508628290c101fdd583d19a3f2500fa5ee2bb568e83802190", 0x96}], 0x7, &(0x7f0000000a00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0xba000000}}, @ip_retopts={{0x98, 0x0, 0x7, {[@rr={0x7, 0x13, 0x1f, [@broadcast, @rand_addr=0x64010100, @multicast2, @rand_addr=0x64010101]}, @timestamp_addr={0x44, 0x4, 0x7, 0x1, 0x6}, @end, @generic={0x332370bea15389c2, 0xe, "92b76f29e0a414943b1228c1"}, @cipso={0x86, 0x62, 0x2, [{0x7, 0x12, "39a34ab3c94646bfa87d9b1404043725"}, {0xd234082e1e5bc4b0, 0x10, "1ba0269274282bb4da6f912d2701"}, {0xc, 0xd, "326660065ee83e0b88a329"}, {0x7, 0xa, "1972bd891b211f55"}, {0x9be21bd5327ae5ce, 0xa, "5558dc789282bc78"}, {0x2, 0x4, "86ed"}, {0x6, 0xc, "1091ba667bc369a57a8e"}, {0x2, 0x9, "2bf5c349c8b8f2"}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x34}, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9a52}}, @ip_retopts={{0x70, 0x0, 0x7, {[@lsrr={0x83, 0x23, 0xf0, [@loopback, @multicast2, @multicast2, @remote, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x2d}]}, @noop, @ssrr={0x89, 0x1f, 0x71, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2, @multicast1, @empty, @remote, @local]}, @end, @ra={0x94, 0x4, 0x1}, @end, @lsrr={0x83, 0x17, 0x14, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1e}, @rand_addr=0x64010100, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x1a0}}, {{&(0x7f0000000bc0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000f80)=[{&(0x7f0000000c00)="113dbfc7170ab27acfa8e3bc56e781a14625d1030fee6a0961126d6d22d145ef4ba788aafff428059f97ca4798528a4274f684ca550dd140e3d3fa87c03467fc85b3c5f333780c5bddbf7f02a2e41ff5a1b771b2ab66e8683802f11bc35dd1076b377f67542489fb44879f68570c9739511c817f33beba3a593d9083722dbd6372ad958c01126d5afb61008c2bcde6db0b", 0x91}, {&(0x7f0000000cc0)="084b9b5ae3f1132f5c42995e565d5aa77fca801fdd8bde62638f7f92828d48bc531694df4a994857c5ff9f1fb640286111dceaf33cdb7db99d6cce236219ba4a61cbb7b76bf3482e135460a3ebcf487a181dd80bda68c1241ff59b3d70a8c16e01c488e791d41c8730447b56a0e57160b38d92e635e6dabe91f2ec09b33193e09c26e99e3b2400c035e9693e19355385c398e0be8f4f08c4855b683ba45b3942107bb792ab19262539b2ab356185217a8e9ed68932cec7bcbbbc8f0736b27683793dd5f7d3e6755aa2ff7bc27e536a0e2f92f75da62fde414b43bf32ae5984c8b93dd2490295c27d34de1cc26543", 0xee}, {&(0x7f0000000dc0)="473845f73e58282f6655fd8a0dd2b2b48bfff33efcf898950ea3333636f0ef74edf3dc4a01dfed2fc96eabdec3529c75257f843f245211b9cb6331dae46ee81c24047237381544fbd7d168b0ed059ac497923287a89bc05ccc8c6614e5b56066671ab21b516f223c649cea319f19099e44bc2741640debcd137d96cebed2f85ecc7ae51cc0d75a9ecf8935cd01ce5f76eeb25c2a4b3993c46d0e46", 0x9b}, {&(0x7f0000000e80)="4a93505ab73d3c62ae2df9b9985f01d948311a98d9ef8647fbe30ade7868f6a6872375fa5947d1430bb85046070398eba93fb77a1fe9d7edfc1fa94ea045f5798d8e2bb8a59fb6a3cc4123a0c2e8505679fc999b5970149d011390320bda360384bde24372e1cddc5ad0be2190b9ea0e5b326c871c18f1c5185d9763dbb15001052bc0e6dcb3bdfe9b7db50444eaa8e99b565d562bdf3c1da34a00d0dae25e2ba7c1ff21c30bdf8ca91d5105b54e5b64a2a6d65f5dafc7bc8872b93a4316457906ac32f28d938835c68e43a89881a7d4bdab02c2fea42e81cc64d5c3f3478c4799d31e649ab31fc6717a4ca5ff24177a250ff3abc57e64", 0xf7}], 0x4}}], 0x2, 0x0) dup3(r4, r5, 0x0) fsopen(&(0x7f0000000080)='nfsd\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x89}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) sendto$inet(r7, &(0x7f0000000580)="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", 0x157, 0x800, &(0x7f0000000100)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 51m47.684486547s ago: executing program 2 (id=1208): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020}, 0x2020) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{0x0}], 0x1) r3 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x653f, 0x10000, 0x0, 0x28e}) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x2000, 0x4, &(0x7f0000636000/0x2000)=nil) r4 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_buf(r4, 0x1, 0x21, 0x0, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffffff, &(0x7f0000000140)='./file3\x00', 0x200) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) socket$unix(0x1, 0x1, 0x0) 51m46.309173164s ago: executing program 2 (id=1213): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, 0x0, &(0x7f0000000100)) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000240)='ns/cgroup\x00') ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r4, &(0x7f0000000fc0)=[{{&(0x7f00000000c0)={0x2, 0x4e64, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000280)="b9cbc3e6c19dc5ebea59e4b130f9da1bff8cd8dff2e9577fe33ddbef4171", 0x1e}, {&(0x7f0000000300)="a182d9f63c09e00fcf684103bb89715f266f263a8947b896258a115e9a581950", 0x20}, {&(0x7f0000000340)="56ee49ce758884389c203bf08d513618bab4d76ef716f0644ccde2bfb083cc8dba7344549683362e107dbdd541e0211ec4dbc9dbf476ff2ff5996b852be3e794203caaf7a46c5df3ed05ba20844c348a3b751c8f284a66740ceca7a2cc5763555713704d543cc5baf727a29f29bd2135b5a8fd307ab522a4edb3941c273ff8bb54cd072cfe7371b6c59a25cc44f465f5d46916caf710478b74102c33e2c50ab7d30e8a627f9126d41233a41813c42ee0fc64edffb66b0f16ea29e93ca60b684dc85cce411183a5be8d468d202d9c", 0xce}, {&(0x7f0000000440)="47834c48098dfd6673dd581b0f7b9f8e9b3a6de0e6e1db5318054ec1280e8e8eb3043669c25e25f53db5489d0190a3f48ffee1a8767da68fcabd8044c77eb4f62e8ea9dee959fe509a8b37ad926c3a1d5b8c6ecb3cc718262888cd5ad07212de10973ed001558560", 0x68}, {&(0x7f0000000700)="d2e98ab478aac7a2e8caf613b1e69474dddce6eeb2d1f5b272261235f5eeed506195ddf5c222bf60321d6367b5bc1c03b24aa41f5d7f7cbb80830d541ae05606b01991858110f8a9fe58c71cd3663e7ce8618b69b79a39b892bf51e29b70c5f176da333faa696e2ca067641d5726a0f215e145274ad9aac818928988b598fbbde2ed62ac5f9eeadc5e03c580ac849156bde330cd4e1f2efc0106a6187b3f9d504a8d75e74686f5118912bb661a4e32aade8f0cae2848578acb04b0c2b85dabf736ea5a747e6bffc05a315379bc6015fdf526d5fb4019d24d4b7a0ebb7e2ce8764b08ae3f52bc1a7902", 0xe9}, {&(0x7f00000004c0)="f82ab68bc385725e2375da6faca72c088a8b7fa96edcaa694ee8f0a70d39435940e97b5010410fc53ebf625dc872dc55ae09ffe46dceaa3cddfc9f6a3bf75fae5631df7ba198ae98a99a91b7762381b035987bcd867fd85e92a2d3133eb6b21dd1d7b697e6d13855604aeced1ffd87bcb63eeb6a5fd0f6aba66192de25f0b33fe855904a3dab646fb5", 0x89}, {&(0x7f0000000800)="7607db700afec86d4978369d3abb26fe04de4c80af5737257a032218545ccf659280a7b33340a0b995b69e859b554c2c6f72bd6bb3a10be244af8249515d51ed22d09d2f764681156fe946e0bcb2abd61cf1d8c3f65c75bebb64cb57d96c6ab52c6a473da2a59cbb085e739e570e5be4d1f0399c010b4c1613ca6b1686d508628290c101fdd583d19a3f2500fa5ee2bb568e83802190", 0x96}], 0x7, &(0x7f0000000a00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0xba000000}}, @ip_retopts={{0x98, 0x0, 0x7, {[@rr={0x7, 0x13, 0x1f, [@broadcast, @rand_addr=0x64010100, @multicast2, @rand_addr=0x64010101]}, @timestamp_addr={0x44, 0x4, 0x7, 0x1, 0x6}, @end, @generic={0x332370bea15389c2, 0xe, "92b76f29e0a414943b1228c1"}, @cipso={0x86, 0x62, 0x2, [{0x7, 0x12, "39a34ab3c94646bfa87d9b1404043725"}, {0xd234082e1e5bc4b0, 0x10, "1ba0269274282bb4da6f912d2701"}, {0xc, 0xd, "326660065ee83e0b88a329"}, {0x7, 0xa, "1972bd891b211f55"}, {0x9be21bd5327ae5ce, 0xa, "5558dc789282bc78"}, {0x2, 0x4, "86ed"}, {0x6, 0xc, "1091ba667bc369a57a8e"}, {0x2, 0x9, "2bf5c349c8b8f2"}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x34}, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9a52}}, @ip_retopts={{0x70, 0x0, 0x7, {[@lsrr={0x83, 0x23, 0xf0, [@loopback, @multicast2, @multicast2, @remote, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x2d}]}, @noop, @ssrr={0x89, 0x1f, 0x71, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2, @multicast1, @empty, @remote, @local]}, @end, @ra={0x94, 0x4, 0x1}, @end, @lsrr={0x83, 0x17, 0x14, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1e}, @rand_addr=0x64010100, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x1a0}}, {{&(0x7f0000000bc0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000f80)=[{&(0x7f0000000c00)="113dbfc7170ab27acfa8e3bc56e781a14625d1030fee6a0961126d6d22d145ef4ba788aafff428059f97ca4798528a4274f684ca550dd140e3d3fa87c03467fc85b3c5f333780c5bddbf7f02a2e41ff5a1b771b2ab66e8683802f11bc35dd1076b377f67542489fb44879f68570c9739511c817f33beba3a593d9083722dbd6372ad958c01126d5afb61008c2bcde6db0b", 0x91}, {&(0x7f0000000cc0)="084b9b5ae3f1132f5c42995e565d5aa77fca801fdd8bde62638f7f92828d48bc531694df4a994857c5ff9f1fb640286111dceaf33cdb7db99d6cce236219ba4a61cbb7b76bf3482e135460a3ebcf487a181dd80bda68c1241ff59b3d70a8c16e01c488e791d41c8730447b56a0e57160b38d92e635e6dabe91f2ec09b33193e09c26e99e3b2400c035e9693e19355385c398e0be8f4f08c4855b683ba45b3942107bb792ab19262539b2ab356185217a8e9ed68932cec7bcbbbc8f0736b27683793dd5f7d3e6755aa2ff7bc27e536a0e2f92f75da62fde414b43bf32ae5984c8b93dd2490295c27d34de1cc26543", 0xee}, {&(0x7f0000000dc0)="473845f73e58282f6655fd8a0dd2b2b48bfff33efcf898950ea3333636f0ef74edf3dc4a01dfed2fc96eabdec3529c75257f843f245211b9cb6331dae46ee81c24047237381544fbd7d168b0ed059ac497923287a89bc05ccc8c6614e5b56066671ab21b516f223c649cea319f19099e44bc2741640debcd137d96cebed2f85ecc7ae51cc0d75a9ecf8935cd01ce5f76eeb25c2a4b3993c46d0e46", 0x9b}, {&(0x7f0000000e80)="4a93505ab73d3c62ae2df9b9985f01d948311a98d9ef8647fbe30ade7868f6a6872375fa5947d1430bb85046070398eba93fb77a1fe9d7edfc1fa94ea045f5798d8e2bb8a59fb6a3cc4123a0c2e8505679fc999b5970149d011390320bda360384bde24372e1cddc5ad0be2190b9ea0e5b326c871c18f1c5185d9763dbb15001052bc0e6dcb3bdfe9b7db50444eaa8e99b565d562bdf3c1da34a00d0dae25e2ba7c1ff21c30bdf8ca91d5105b54e5b64a2a6d65f5dafc7bc8872b93a4316457906ac32f28d938835c68e43a89881a7d4bdab02c2fea42e81cc64d5c3f3478c4799d31e649ab31fc6717a4ca5ff24177a250ff3abc57e64", 0xf7}], 0x4}}], 0x2, 0x0) dup3(r4, r5, 0x0) fsopen(&(0x7f0000000080)='nfsd\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x89}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) sendto$inet(r7, &(0x7f0000000580)="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", 0x157, 0x800, &(0x7f0000000100)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 51m45.252441294s ago: executing program 2 (id=1218): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x8001, 0x6, 0x1, 0x0, 0xfffffffc, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x3, 0x1, 0x8, 0x2, 0x6, 0xffffffff, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0x6a, 0x6, 0xb, 0x8, 0x400005, 0x5, 0x4, 0x10000, 0xfffffff8]}) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getroute={0x14, 0x1a, 0x0, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 51m44.521387481s ago: executing program 33 (id=1218): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x8001, 0x6, 0x1, 0x0, 0xfffffffc, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x3, 0x1, 0x8, 0x2, 0x6, 0xffffffff, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0x6a, 0x6, 0xb, 0x8, 0x400005, 0x5, 0x4, 0x10000, 0xfffffff8]}) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getroute={0x14, 0x1a, 0x0, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 18.612998431s ago: executing program 6 (id=10428): syz_open_dev$sndpcmp(&(0x7f0000000100), 0x8, 0x2000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xffffffffffffbffc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) pipe(&(0x7f0000000280)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102384, 0x18ff0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$netlink(0x10, 0x3, 0x0) fadvise64(r6, 0x2, 0x4, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r5}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtaction={0x18, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x2000a804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 14.189639165s ago: executing program 6 (id=10438): syz_open_dev$usbfs(&(0x7f0000000000), 0x800000001fe, 0x2) getpid() connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000743ab0008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001d2c0000000b0a911f1e1c000000000000070000000900010073797a30000000000c00"], 0xb0}}, 0x80c4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x27, &(0x7f0000000340)=0x9, 0x4) socket$tipc(0x1e, 0x5, 0x0) close(0xffffffffffffffff) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) syz_open_dev$hiddev(&(0x7f0000000100), 0x8000000000000001, 0x40) fsmount(0xffffffffffffffff, 0x0, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x4ba4c0, 0x0) quotactl_fd$Q_SETINFO(r2, 0xffffffff80000601, 0x0, &(0x7f0000000080)={0xa21, 0xfffffffffffffff9, 0x1, 0x3}) write$rfkill(r3, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x40040, 0x0) mkdirat(r1, &(0x7f0000000140)='./file0\x00', 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) 7.352649033s ago: executing program 6 (id=10456): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) tkill(r0, 0x13) ptrace(0x10, r0) 6.951316173s ago: executing program 6 (id=10458): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c1) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2101015, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100419, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./cgroup\x00', 0x0, 0x2001015, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x80000, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) 6.643728715s ago: executing program 6 (id=10462): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x27, 0x23, 0x0, &(0x7f0000000140)="8e5763539bb91a84c8007f5b0800f08db9b5b254c82a3dce594275b89613494af2c975", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.272784819s ago: executing program 0 (id=10468): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x40) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 5.766977172s ago: executing program 1 (id=10469): timer_create(0x9, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, &(0x7f0000000280)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan0\x00'}]}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x4c841}, 0x802) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 5.642785247s ago: executing program 0 (id=10470): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@bridge_dellink={0x20, 0x11, 0x5, 0x2000, 0x300, {0x7, 0x0, 0x0, 0x0, 0x10400, 0x1952}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 5.48436251s ago: executing program 6 (id=10472): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000400"], 0x0, 0x44, 0x0, 0x1}, 0x28) 5.43696986s ago: executing program 0 (id=10473): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) close(0xffffffffffffffff) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0) 5.127239965s ago: executing program 34 (id=10472): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000400"], 0x0, 0x44, 0x0, 0x1}, 0x28) 5.004554818s ago: executing program 1 (id=10476): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000001c0)={0x1, 0xb2, 0x2, &(0x7f0000000180)={0xb, "247f23e017bb456c5c4b7165a6d6af0b920bf00721f03300"}}) 4.07759866s ago: executing program 0 (id=10485): r0 = socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x29, 0x56f83b38373b3f76, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xffffffff, 0x0, 0xb}, {0x10000002, 0x0, 0x4, 0x2}]}, 0x94) close(0x3) r1 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000), 0x8) 4.042756778s ago: executing program 4 (id=10486): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setpriority(0x1, 0x0, 0xffffffffffff8001) 3.141460866s ago: executing program 0 (id=10489): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_CAPBSET_READ(0x59616d61, 0xffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/82, 0x52, 0x2000000fc) prctl$PR_SET_SECUREBITS(0x1c, 0x15) setuid(0xee00) fchdir(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000340)='map_files\x00') 3.070728363s ago: executing program 4 (id=10490): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r1, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 1.853440692s ago: executing program 0 (id=10491): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000021c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x2, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000080)={0xa, 0x8, 0xfffffff7, @local, 0x7a}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000029000000360000002e0000e9ffffffff130000000000000029"], 0x30}}], 0x2, 0x80) 1.853215883s ago: executing program 5 (id=10492): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB='ALTPCM \'L'], 0xf7) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 1.852853363s ago: executing program 1 (id=10493): sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16], 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x101}, 0x18) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.735032627s ago: executing program 4 (id=10494): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x1800) 1.718600403s ago: executing program 5 (id=10495): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8000001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfa}}, 0x10}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x1200, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 1.642640806s ago: executing program 1 (id=10496): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) sendmsg$sock(r0, &(0x7f0000000c40)={&(0x7f0000000b00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1, 0x2, {0xa, 0x4e20, 0x8, @local, 0x3}}}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000011c0)="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", 0x21f}], 0x1}, 0x40) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5411, 0x0) 1.525236332s ago: executing program 4 (id=10497): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x101}, 0x18) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.45349451s ago: executing program 1 (id=10498): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000000040)=""/104, 0x4d) getdents(r4, 0x0, 0x0) 1.443176684s ago: executing program 5 (id=10499): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c804) 1.337724832s ago: executing program 4 (id=10500): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 406.01053ms ago: executing program 1 (id=10501): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000280)=0x6c, 0x4) recvmmsg(r0, &(0x7f00000091c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/41, 0x29}, 0x8}], 0x1, 0x40002000, 0x0) 232.194815ms ago: executing program 4 (id=10502): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmmsg$unix(r0, 0x0, 0x0, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000180)={{{@in=@private=0xa010102, @in6=@mcast1, 0x4e20, 0x0, 0x4e20, 0x0, 0x2, 0xa0, 0x20, 0x73, 0x0, 0xee00}, {0x8, 0x9, 0x81, 0x3a4, 0x4, 0x8, 0x6, 0x1}, {0x0, 0xff7fffffffff98c9, 0x3ff, 0xffff}, 0x0, 0x6e6bc0, 0x2, 0x0, 0x6, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, 0x4d3, 0x32}, 0x2, @in=@broadcast, 0x3500, 0x2, 0x1, 0x6, 0x0, 0x1, 0x5}}, 0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000000000000000000000400000000000000000000000200002000a00000000000000fc"], 0x6c}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r3, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, 0x0, 0x0, 0x700, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "7563928c1287aee0", "7a1dc8b556b44e6b447e7676310cf765", "b911e897", "7da2d95e1f2e9631"}, 0x28) setsockopt$inet6_tcp_int(r6, 0x11a, 0x4, &(0x7f00000000c0)=0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) 230.845482ms ago: executing program 5 (id=10503): syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x4a602) socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') fcntl$setstatus(r0, 0x4, 0x2400) 175.036597ms ago: executing program 5 (id=10504): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ioprio_set$uid(0x3, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r1, r0, 0x0, 0x7ffffffd) 0s ago: executing program 5 (id=10505): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r0, r0) setpgid(0x0, r0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1f00, 0x12) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40100, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) fsopen(&(0x7f0000000080)='nilfs2\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) kernel console output (not intermixed with test programs): as an invalid length. [ 3300.123242][T11855] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 3300.136259][T11855] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 3300.142209][T11855] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 3300.215018][T11855] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 3300.262880][T11855] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 3300.290794][T11855] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 3300.320346][T11855] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 3300.340256][T11855] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 3301.148764][ T3106] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 3301.167598][ T5816] Bluetooth: hci3: command 0x0406 tx timeout [ 3301.394158][ T3106] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 3301.395093][ T3106] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3301.395115][ T3106] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3301.395151][ T3106] usb 7-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3301.395175][ T3106] usb 7-1: config 0 interface 0 has no altsetting 0 [ 3301.395994][ T3106] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3301.396014][ T3106] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3301.396049][ T3106] usb 7-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3301.396072][ T3106] usb 7-1: config 0 interface 0 has no altsetting 0 [ 3301.396998][ T3106] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3301.397018][ T3106] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3301.397053][ T3106] usb 7-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3301.397077][ T3106] usb 7-1: config 0 interface 0 has no altsetting 0 [ 3301.399266][ T3106] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3301.399278][ T3106] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3301.399297][ T3106] usb 7-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3301.399311][ T3106] usb 7-1: config 0 interface 0 has no altsetting 0 [ 3301.400244][ T3106] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3301.400257][ T3106] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3301.400277][ T3106] usb 7-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3301.400290][ T3106] usb 7-1: config 0 interface 0 has no altsetting 0 [ 3301.401044][ T3106] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3301.401056][ T3106] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3301.401075][ T3106] usb 7-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3301.401098][ T3106] usb 7-1: config 0 interface 0 has no altsetting 0 [ 3301.401891][ T3106] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3301.401905][ T3106] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3301.401924][ T3106] usb 7-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3301.401938][ T3106] usb 7-1: config 0 interface 0 has no altsetting 0 [ 3301.402665][ T3106] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3301.402678][ T3106] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3301.402697][ T3106] usb 7-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3301.402712][ T3106] usb 7-1: config 0 interface 0 has no altsetting 0 [ 3301.414069][ T3106] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 3301.414088][ T3106] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 3301.414107][ T3106] usb 7-1: Product: syz [ 3301.414150][ T3106] usb 7-1: Manufacturer: syz [ 3301.414164][ T3106] usb 7-1: SerialNumber: syz [ 3301.415885][ T3106] usb 7-1: config 0 descriptor?? [ 3301.419830][ T3106] yurex 7-1:0.0: Could not find endpoints [ 3301.848557][ T5927] usb 7-1: USB disconnect, device number 44 [ 3302.164359][ T5816] Bluetooth: hci5: command 0x0406 tx timeout [ 3302.164363][T11876] Bluetooth: hci4: command 0x0c1a tx timeout [ 3302.343714][T11876] Bluetooth: hci0: command 0x0406 tx timeout [ 3302.343829][T11876] Bluetooth: hci2: command 0x0405 tx timeout [ 3302.749224][T11876] Bluetooth: hci4: unexpected event for opcode 0x1004 [ 3302.762544][ T30] audit: type=1400 audit(1767132012.414:1576): avc: denied { write } for pid=11902 comm="syz.0.9826" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 3302.793735][ T30] audit: type=1400 audit(1767132012.414:1577): avc: denied { open } for pid=11902 comm="syz.0.9826" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 3302.819782][T11906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9826'. [ 3302.894213][T11908] netlink: 'syz.1.9827': attribute type 21 has an invalid length. [ 3303.428452][T11915] fuse: Unknown parameter '0x0000000000000003' [ 3304.395484][T11876] Bluetooth: hci5: command 0x0406 tx timeout [ 3304.410491][T11876] Bluetooth: hci0: command 0x0406 tx timeout [ 3304.416521][T11876] Bluetooth: hci2: command 0x0405 tx timeout [ 3306.807248][ T5816] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 3306.823631][ T5816] Bluetooth: hci4: Injecting HCI hardware error event [ 3306.845719][ T5816] Bluetooth: hci4: hardware error 0x00 [ 3308.973516][ T5816] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 3311.123513][ T30] audit: type=1326 audit(1767132020.784:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12015 comm="syz.6.9854" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f477b78f749 code=0x0 [ 3312.524003][T12034] fuse: Unknown parameter '0x0000000000000003' [ 3314.903596][ T6025] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 3315.934782][ T6025] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3316.414108][ T6025] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3316.493353][ T6025] usb 6-1: string descriptor 0 read error: -71 [ 3316.569737][ T6025] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3316.592985][ T6025] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 3316.644573][ T6025] usb 6-1: config 0 descriptor?? [ 3316.659647][ T6025] usb 6-1: can't set config #0, error -71 [ 3316.718186][ T6025] usb 6-1: USB disconnect, device number 60 [ 3320.033480][ T6025] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 3320.273480][ T6025] usb 6-1: Using ep0 maxpacket: 8 [ 3320.279929][ T6025] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 3320.301428][ T6025] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 3320.376927][ T6025] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3320.403564][ T6025] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3320.651966][ T6025] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3321.037143][ T6025] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3321.554820][ T6025] usb 6-1: GET_CAPABILITIES returned 0 [ 3321.560338][ T6025] usbtmc 6-1:16.0: can't read capabilities [ 3321.918114][ T5927] usb 6-1: USB disconnect, device number 61 [ 3322.584214][ T2107] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 3323.655006][ T2107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3323.667411][ T2107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3323.680360][ T2107] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3323.680386][ T2107] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 3323.680404][ T2107] usb 1-1: Manufacturer: syz [ 3323.682819][ T2107] usb 1-1: config 0 descriptor?? [ 3325.637459][ T2107] uclogic 0003:256C:006D.0081: failed retrieving string descriptor #200: -71 [ 3325.857067][ T2107] uclogic 0003:256C:006D.0081: failed retrieving pen parameters: -71 [ 3325.873861][ T2107] uclogic 0003:256C:006D.0081: failed probing pen v2 parameters: -71 [ 3325.892791][ T2107] uclogic 0003:256C:006D.0081: failed probing parameters: -71 [ 3326.473485][ T2107] uclogic 0003:256C:006D.0081: probe with driver uclogic failed with error -71 [ 3326.490622][T12170] nfs: Unknown parameter '&[#' [ 3326.521909][ T2107] usb 1-1: USB disconnect, device number 47 [ 3326.743627][ T5927] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 3326.804028][T28371] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 3326.853697][ T6243] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 3326.993564][T28371] usb 5-1: Using ep0 maxpacket: 16 [ 3327.126436][T12157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3327.197037][T12157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3327.216657][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 3327.260953][T28371] usb 5-1: unable to get BOS descriptor or descriptor too short [ 3327.275113][T28371] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 3327.282848][T28371] usb 5-1: can't read configurations, error -71 [ 3327.289274][ T6243] usb 7-1: Using ep0 maxpacket: 8 [ 3327.303495][ T6243] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 3327.320512][ T6243] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 3327.347593][ T6243] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3327.360572][ T6243] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3327.382637][ T6243] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3327.393654][ T6243] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3327.632102][ T6243] usb 7-1: GET_CAPABILITIES returned 0 [ 3327.637820][ T6243] usbtmc 7-1:16.0: can't read capabilities [ 3327.915540][T12731] usb 7-1: USB disconnect, device number 45 [ 3328.310852][ T5927] usb 6-1: unable to get BOS descriptor or descriptor too short [ 3328.333469][ T5927] usb 6-1: too many configurations: 238, using maximum allowed: 8 [ 3328.364704][T28371] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 3328.386328][ T5927] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 3328.400658][ T5927] usb 6-1: can't read configurations, error -71 [ 3328.553521][T28371] usb 5-1: Using ep0 maxpacket: 16 [ 3329.223499][ T5927] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 3329.250522][T28371] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3329.312001][T28371] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3329.318706][T28371] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 3329.336159][T28371] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3329.357633][T28371] usb 5-1: config 0 descriptor?? [ 3329.443383][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3329.708056][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3329.739776][ T5927] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3329.767060][ T5927] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 3329.796878][ T5927] usb 6-1: Manufacturer: syz [ 3329.809901][ T5927] usb 6-1: config 0 descriptor?? [ 3329.966943][T28371] nzxt-smart2 0003:1E71:2009.0082: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 3330.157878][T12205] Bluetooth: MGMT ver 1.23 [ 3330.345852][T12249] IPVS: persistence engine module ip_vs_pe_ not found [ 3330.367259][T12249] nfs: Unknown parameter '&[#' [ 3330.429584][T26222] usb 5-1: USB disconnect, device number 55 [ 3332.084143][T28371] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 3332.137238][ T5927] usbhid 6-1:0.0: can't add hid device: -71 [ 3332.285949][ T5927] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 3332.363615][T28371] usb 1-1: Using ep0 maxpacket: 16 [ 3332.557648][ T5927] usb 6-1: USB disconnect, device number 63 [ 3332.901416][T28371] usb 1-1: unable to get BOS descriptor or descriptor too short [ 3332.943780][T28371] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 3333.409895][T28371] usb 1-1: can't read configurations, error -71 [ 3333.703545][T12277] dvmrp0: entered allmulticast mode [ 3333.743502][T27379] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 3333.926954][T27379] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3333.992046][T27379] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3334.032009][T27379] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3334.091270][T27379] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 3334.105913][T27379] usb 2-1: Manufacturer: syz [ 3334.139169][T27379] usb 2-1: config 0 descriptor?? [ 3336.607949][T27379] usbhid 2-1:0.0: can't add hid device: -71 [ 3336.628270][T27379] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 3336.705526][T27379] usb 2-1: USB disconnect, device number 79 [ 3338.435562][T12331] dvmrp0: entered allmulticast mode [ 3338.460542][T12330] netlink: 'syz.1.9926': attribute type 13 has an invalid length. [ 3338.704758][T27379] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 3338.966288][T27379] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 3339.005765][T27379] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3339.140663][T27379] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3339.549393][T27379] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3339.565767][T27379] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3339.589268][T27379] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3339.609848][T27379] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3339.645654][T27379] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3339.696391][T27379] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3339.743035][T27379] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3339.822540][T27379] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3339.857672][T27379] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3339.931290][T27379] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3339.956877][T27379] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3341.103826][T27379] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3341.116682][T27379] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3341.117487][T27379] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3341.117510][T27379] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3341.117524][T27379] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3341.118295][T27379] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3341.118317][T27379] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3341.118332][T27379] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3341.119023][T27379] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3341.119049][T27379] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3341.119063][T27379] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3341.122049][T27379] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 3341.122071][T27379] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 3341.122083][T27379] usb 2-1: Product: syz [ 3341.122091][T27379] usb 2-1: Manufacturer: syz [ 3341.122099][T27379] usb 2-1: SerialNumber: syz [ 3341.124311][T27379] usb 2-1: config 0 descriptor?? [ 3341.147251][T27379] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 3341.436143][T27379] usb 2-1: USB disconnect, device number 80 [ 3341.469281][T27379] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 3342.371964][T12360] netlink: 'syz.6.9935': attribute type 13 has an invalid length. [ 3342.607674][T12366] fuse: Unknown parameter 'use00000000000000000000' [ 3342.713695][ T2107] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 3343.107261][ T2107] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 3343.127583][ T2107] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3343.140828][ T2107] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3343.456885][ T2107] usb 7-1: config 0 interface 0 has no altsetting 0 [ 3343.467974][ T2107] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3343.483440][ T2107] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3343.495110][ T2107] usb 7-1: config 0 interface 0 has no altsetting 0 [ 3343.511694][ T2107] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3343.521231][ T2107] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3343.534294][ T2107] usb 7-1: config 0 interface 0 has no altsetting 0 [ 3343.638667][ T2107] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3343.648000][ T2107] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3343.675073][ T2107] usb 7-1: config 0 interface 0 has no altsetting 0 [ 3343.691982][ T2107] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3343.716765][ T2107] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3343.763893][ T2107] usb 7-1: config 0 interface 0 has no altsetting 0 [ 3343.814829][ T2107] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3343.984537][ T2107] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3344.382068][ T2107] usb 7-1: config 0 interface 0 has no altsetting 0 [ 3344.402926][ T2107] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3344.447454][ T2107] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3344.573900][ T2107] usb 7-1: config 0 interface 0 has no altsetting 0 [ 3344.763871][ T2107] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3344.777072][ T2107] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3344.788114][ T2107] usb 7-1: config 0 interface 0 has no altsetting 0 [ 3344.800261][ T2107] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 3344.809402][ T2107] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 3344.843546][ T2107] usb 7-1: Product: syz [ 3344.851521][ T2107] usb 7-1: Manufacturer: syz [ 3344.861647][ T2107] usb 7-1: SerialNumber: syz [ 3345.793884][ T2107] usb 7-1: config 0 descriptor?? [ 3346.110351][ T2107] usb 7-1: can't set config #0, error -71 [ 3346.118045][ T2107] usb 7-1: USB disconnect, device number 46 [ 3348.676934][ T30] audit: type=1326 audit(1767132058.324:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12423 comm="syz.5.9945" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d4e98f749 code=0x0 [ 3349.653033][T12447] nfs: Unknown parameter '&[#' [ 3349.670718][T12447] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 3349.827934][T12444] IPVS: persistence engine module ip_vs_pe_ not found [ 3349.963493][T28371] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 3350.133457][T28371] usb 2-1: Using ep0 maxpacket: 16 [ 3351.447640][T28371] usb 2-1: unable to get BOS descriptor or descriptor too short [ 3351.485654][T28371] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 3351.503674][T28371] usb 2-1: can't read configurations, error -71 [ 3352.943459][T28371] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 3353.171803][T28371] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3353.193206][T28371] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3353.243448][T28371] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 3353.310538][T28371] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3353.353707][T28371] usb 2-1: config 0 descriptor?? [ 3353.374729][ T30] audit: type=1326 audit(1767132063.054:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12502 comm="syz.0.9967" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8efff8f749 code=0x0 [ 3353.381584][T28371] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 3353.691366][T12489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3353.711706][T28371] dvb-usb: bulk message failed: -22 (3/0) [ 3353.743842][T12489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3353.774505][T28371] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 3353.803817][T12489] dibusb: i2c wr: len=8192 is too big! [ 3353.803817][T12489] [ 3353.815338][T28371] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 3353.829427][T28371] usb 2-1: media controller created [ 3353.855684][T28371] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3353.884791][T28371] dvb-usb: bulk message failed: -22 (6/0) [ 3353.913515][T28371] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 3354.013708][T28371] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input227 [ 3354.013817][T10684] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 3354.052993][T28371] dvb-usb: schedule remote query interval to 150 msecs. [ 3354.147303][T12514] fuse: Unknown parameter 'use00000000000000000000' [ 3354.181411][T28371] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 3354.214072][T10684] usb 6-1: Using ep0 maxpacket: 8 [ 3354.229633][T10684] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 3354.244731][T10684] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 3354.276245][T28371] usb 2-1: USB disconnect, device number 83 [ 3354.543862][T10684] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3354.573509][T10684] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3354.608248][T10684] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3354.637653][T10684] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3354.647531][T28371] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 3355.946813][T10684] usb 6-1: usb_control_msg returned -71 [ 3355.952414][T10684] usbtmc 6-1:16.0: can't read capabilities [ 3356.013625][T10684] usb 6-1: USB disconnect, device number 64 [ 3358.003511][T29067] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 3358.194940][T29067] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3358.218475][T29067] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3359.112963][T29067] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 3359.141358][T29067] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3359.171530][T29067] usb 2-1: config 0 descriptor?? [ 3359.196888][T12556] fuse: Unknown parameter 'use00000000000000000000' [ 3359.554689][T29067] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 3359.569550][T29067] dvb-usb: bulk message failed: -22 (3/0) [ 3359.595599][T29067] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 3359.613873][T29067] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 3359.649235][T29067] usb 2-1: media controller created [ 3359.670611][T12562] fuse: Unknown parameter 'use00000000000000000000' [ 3359.670695][T29067] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3359.745068][T12544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3359.774343][T12544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3359.838366][T29067] dvb-usb: bulk message failed: -22 (6/0) [ 3359.921849][T12544] dibusb: i2c wr: len=8192 is too big! [ 3359.921849][T12544] [ 3360.043493][T29067] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 3360.075500][T29067] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input228 [ 3360.207938][T29067] dvb-usb: schedule remote query interval to 150 msecs. [ 3360.223456][T29067] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 3360.387197][T12731] dvb-usb: bulk message failed: -22 (1/0) [ 3360.395703][T12731] dvb-usb: error while querying for an remote control event. [ 3360.803795][T29067] usb 2-1: USB disconnect, device number 84 [ 3360.836288][T12581] fuse: Bad value for 'group_id' [ 3360.841316][T12581] fuse: Bad value for 'group_id' [ 3361.157798][T29067] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 3361.213711][T28371] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 3361.503438][T28371] usb 6-1: Using ep0 maxpacket: 8 [ 3361.987780][T28371] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 3362.024811][T28371] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 3362.044974][T28371] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3362.069333][T28371] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3362.126009][T28371] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3362.385854][T28371] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3363.574508][T28371] usb 6-1: usb_control_msg returned -71 [ 3363.580112][T28371] usbtmc 6-1:16.0: can't read capabilities [ 3363.632579][T28371] usb 6-1: USB disconnect, device number 65 [ 3364.225359][T29067] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 3364.319593][T12625] fuse: Bad value for 'group_id' [ 3364.330865][T12625] fuse: Bad value for 'group_id' [ 3364.387410][T29067] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3364.406888][T29067] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3364.426649][T29067] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 3364.438817][T29067] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3364.455381][T29067] usb 1-1: config 0 descriptor?? [ 3364.519469][T29067] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 3364.856031][T12620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3364.893830][T12620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3364.931923][T29067] dvb-usb: bulk message failed: -22 (3/0) [ 3365.114203][T29067] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 3365.154251][T29067] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 3365.176397][T29067] usb 1-1: media controller created [ 3365.182826][T29067] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3365.374978][T29067] dvb-usb: bulk message failed: -22 (6/0) [ 3365.380778][T29067] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 3365.406252][T29067] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input229 [ 3365.468872][T29067] dvb-usb: schedule remote query interval to 150 msecs. [ 3365.553438][T29067] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 3365.715672][ T2107] dvb-usb: bulk message failed: -22 (1/0) [ 3365.863466][ T2107] dvb-usb: error while querying for an remote control event. [ 3365.873777][T29067] usb 1-1: USB disconnect, device number 50 [ 3365.952298][T29067] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 3367.247843][T12656] IPVS: persistence engine module ip_vs_pe_ not found [ 3367.366349][T12656] nfs: Unknown parameter '&[#' [ 3367.689595][T12656] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 3367.871310][T12668] fuse: Unknown parameter 'use00000000000000000000' [ 3368.173904][T10684] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 3368.373849][T10684] usb 5-1: Using ep0 maxpacket: 16 [ 3368.463932][ T3106] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 3369.579283][ T3106] usb 7-1: Using ep0 maxpacket: 8 [ 3369.598020][T12684] fuse: Unknown parameter 'use00000000000000000000' [ 3369.607769][ T3106] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 3369.685536][ T3106] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 3369.903659][ T3106] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3369.953512][ T3106] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3369.991340][T10684] usb 5-1: unable to get BOS descriptor or descriptor too short [ 3369.994126][ T3106] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3370.019005][T10684] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 3370.023406][ T3106] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3370.043785][T10684] usb 5-1: can't read configurations, error -71 [ 3370.277825][ T3106] usb 7-1: GET_CAPABILITIES returned 0 [ 3370.284908][ T3106] usbtmc 7-1:16.0: can't read capabilities [ 3370.532059][ T3106] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 3370.535434][ T5927] usb 7-1: USB disconnect, device number 47 [ 3371.033703][ T3106] usb 6-1: Using ep0 maxpacket: 16 [ 3371.040252][ T3106] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3371.051506][ T3106] usb 6-1: config 0 interface 0 has no altsetting 0 [ 3371.064412][ T3106] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 3371.073900][ T3106] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3371.117654][ T3106] usb 6-1: config 0 descriptor?? [ 3371.856710][T12717] nfs: Unknown parameter '&[#' [ 3371.924522][ T3106] nzxt-smart2 0003:1E71:2009.0083: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 3372.174139][T10684] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 3372.643578][T10684] usb 2-1: Using ep0 maxpacket: 16 [ 3372.828000][T10684] usb 2-1: unable to get BOS descriptor or descriptor too short [ 3372.844533][T10684] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 3372.882575][T10684] usb 2-1: can't read configurations, error -71 [ 3372.909370][ T3106] usb 6-1: USB disconnect, device number 66 [ 3373.264706][ T6025] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 3373.451432][ T6025] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3373.462384][ T6025] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3373.484066][ T6025] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 3373.503958][ T6025] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3373.643793][ T6025] usb 5-1: config 0 descriptor?? [ 3373.711600][ T6025] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 3373.721373][ T6025] dvb-usb: bulk message failed: -22 (3/0) [ 3373.739087][ T6025] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 3373.794740][ T6025] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 3373.795039][ T6025] usb 5-1: media controller created [ 3373.797534][ T6025] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3374.073502][ T6025] dvb-usb: bulk message failed: -22 (6/0) [ 3374.076117][T12738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3374.079932][ T6025] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 3374.098147][ T6025] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input230 [ 3374.111730][ T6025] dvb-usb: schedule remote query interval to 150 msecs. [ 3374.119612][ T6025] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 3374.146273][T12738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3374.277921][ T6025] dvb-usb: bulk message failed: -22 (1/0) [ 3374.283837][ T6025] dvb-usb: error while querying for an remote control event. [ 3374.361882][T12738] dibusb: i2c wr: len=8192 is too big! [ 3374.361882][T12738] [ 3375.346531][ T6025] dvb-usb: bulk message failed: -22 (1/0) [ 3375.386615][ T6025] dvb-usb: error while querying for an remote control event. [ 3375.395019][T19395] usb 5-1: USB disconnect, device number 58 [ 3375.912180][T19395] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 3377.278783][T12778] nfs: Unknown parameter '&[#' [ 3377.573478][T29067] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 3377.753619][T29067] usb 2-1: Using ep0 maxpacket: 16 [ 3377.779563][T29067] usb 2-1: unable to get BOS descriptor or descriptor too short [ 3377.806424][T29067] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 3377.835602][T29067] usb 2-1: can't read configurations, error -71 [ 3378.575831][T19395] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 3378.863478][T19395] usb 6-1: Using ep0 maxpacket: 8 [ 3378.972427][T19395] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 3378.995070][T19395] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 3379.175115][T19395] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3379.215035][T19395] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3379.263265][T19395] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3379.297229][T19395] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3379.543882][T19395] usb 6-1: GET_CAPABILITIES returned 0 [ 3379.552530][T19395] usbtmc 6-1:16.0: can't read capabilities [ 3379.665078][T10684] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 3380.094844][T26222] usb 6-1: USB disconnect, device number 67 [ 3380.102045][T10684] usb 5-1: Using ep0 maxpacket: 8 [ 3380.117123][T10684] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 3380.144289][T10684] usb 5-1: config 179 has no interface number 0 [ 3380.150548][T10684] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 3380.203053][T10684] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 3380.277596][T10684] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3380.292816][T10684] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 3380.304900][T10684] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 3380.318755][T10684] usb 5-1: config 179 interface 65 has no altsetting 0 [ 3380.326391][T10684] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 3380.337291][T10684] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3380.356487][T10684] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input231 [ 3380.899393][T19395] usb 5-1: USB disconnect, device number 59 [ 3380.899468][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 3382.101609][T12838] IPVS: persistence engine module ip_vs_pe_ not found [ 3382.188029][T12838] nfs: Unknown parameter '&[#' [ 3382.274872][T12838] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 3384.716718][T12865] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 3384.723624][T12865] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 3384.729950][T12865] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 3384.736285][T12865] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 3385.923474][ T5816] Bluetooth: hci3: command 0x0406 tx timeout [ 3386.542569][ T5872] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 3386.723435][ T5872] usb 2-1: Using ep0 maxpacket: 8 [ 3386.732203][ T5872] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 3386.747697][ T5872] usb 2-1: config 179 has no interface number 0 [ 3386.763252][ T5872] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 3386.803475][ T5816] Bluetooth: hci0: command 0x0406 tx timeout [ 3386.804373][T11876] Bluetooth: hci2: command 0x0405 tx timeout [ 3386.809667][ T5816] Bluetooth: hci5: command 0x0406 tx timeout [ 3386.818954][ T5872] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 3386.866026][ T5872] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3386.883524][ T5872] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 3386.894950][ T5872] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 3386.914705][ T5872] usb 2-1: config 179 interface 65 has no altsetting 0 [ 3386.923862][ T5872] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 3386.933905][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3386.959116][ T5872] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input232 [ 3387.135812][T12917] trusted_key: encrypted_key: insufficient parameters specified [ 3387.213356][T12921] nfs: Unknown parameter '&[#' [ 3387.577304][ T6025] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 3388.325201][ T3106] usb 2-1: USB disconnect, device number 89 [ 3388.325274][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 3388.499898][ T6025] usb 5-1: Using ep0 maxpacket: 16 [ 3388.527609][ T6025] usb 5-1: unable to get BOS descriptor or descriptor too short [ 3388.538457][ T6025] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 3388.546964][ T6025] usb 5-1: can't read configurations, error -71 [ 3388.656217][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 3390.459780][T12952] nfs: Unknown parameter '&[#' [ 3390.479614][T12946] IPVS: persistence engine module ip_vs_pe_ not found [ 3390.481070][T12952] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 3391.055890][ T3106] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 3391.233809][ T3106] usb 6-1: Using ep0 maxpacket: 16 [ 3391.383551][T27379] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 3391.553478][T27379] usb 7-1: Using ep0 maxpacket: 8 [ 3391.578526][T27379] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 3391.594911][T27379] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 3391.631484][T27379] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3391.644043][T27379] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3391.763299][T27379] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3391.797176][T27379] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3392.051286][T27379] usb 7-1: GET_CAPABILITIES returned 0 [ 3392.078211][T27379] usbtmc 7-1:16.0: can't read capabilities [ 3392.188075][ T3106] usb 6-1: unable to get BOS descriptor or descriptor too short [ 3392.201013][ T3106] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 3392.210200][ T3106] usb 6-1: can't read configurations, error -71 [ 3392.295927][ T5872] usb 7-1: USB disconnect, device number 48 [ 3393.121738][T12987] nfs: Unknown parameter '&[#' [ 3393.603437][ T5872] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 3393.764898][ T5872] usb 7-1: Using ep0 maxpacket: 16 [ 3393.790344][ T5872] usb 7-1: unable to get BOS descriptor or descriptor too short [ 3393.820859][ T5872] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 3393.841733][ T5872] usb 7-1: can't read configurations, error -71 [ 3395.502618][T13023] IPVS: persistence engine module ip_vs_pe_ not found [ 3395.524928][T13023] nfs: Unknown parameter '&[#' [ 3395.559856][T13023] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 3395.893482][T27379] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 3395.914587][T19395] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 3395.987405][T13034] dvmrp0: entered allmulticast mode [ 3396.060092][T13036] fuse: Unknown parameter 'use00000000000000000000' [ 3396.068568][T27379] usb 7-1: Using ep0 maxpacket: 16 [ 3396.073751][T19395] usb 6-1: Using ep0 maxpacket: 8 [ 3396.094656][T19395] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 3396.133476][T19395] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 3396.156558][T27379] usb 7-1: unable to get BOS descriptor or descriptor too short [ 3396.186842][T27379] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 3396.194914][T19395] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3396.219086][T27379] usb 7-1: can't read configurations, error -71 [ 3396.230083][T19395] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3396.262216][T19395] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3396.271952][T19395] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3396.532439][T19395] usb 6-1: GET_CAPABILITIES returned 0 [ 3396.538433][T19395] usbtmc 6-1:16.0: can't read capabilities [ 3398.850878][ T9644] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 3398.866181][T10684] usb 6-1: USB disconnect, device number 70 [ 3399.008824][T13058] nfs: Unknown parameter '&[#' [ 3399.257945][ T9644] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3399.280916][ T9644] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3399.302053][ T9644] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3399.321493][ T9644] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 3399.343446][ T9644] usb 1-1: Manufacturer: syz [ 3399.364302][ T9644] usb 1-1: config 0 descriptor?? [ 3399.513451][T19395] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 3399.765653][T19395] usb 5-1: Using ep0 maxpacket: 16 [ 3399.792031][T19395] usb 5-1: unable to get BOS descriptor or descriptor too short [ 3399.826125][T19395] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 3399.853682][T19395] usb 5-1: can't read configurations, error -71 [ 3400.313028][T13063] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 3400.331415][T13063] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 3400.342454][T13063] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 3400.734890][T13063] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 3400.810656][ T9644] usbhid 1-1:0.0: can't add hid device: -71 [ 3400.820692][ T9644] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 3400.838214][ T9644] usb 1-1: USB disconnect, device number 51 [ 3402.463507][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 3402.463528][T12912] Bluetooth: hci2: command 0x0405 tx timeout [ 3402.463536][ T5816] Bluetooth: hci5: command 0x0406 tx timeout [ 3402.803637][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 3403.393839][ T30] audit: type=1326 audit(1767132113.074:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13103 comm="syz.1.10118" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb75078f749 code=0x0 [ 3403.473983][ T2107] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 3403.634573][ T2107] usb 7-1: Using ep0 maxpacket: 32 [ 3403.654198][ T2107] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3403.688616][ T2107] usb 7-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 3403.703138][ T2107] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3404.902349][ T2107] usb 7-1: config 0 descriptor?? [ 3404.917223][ T2107] usbtouchscreen 7-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 3405.172322][ T2107] usb 7-1: USB disconnect, device number 53 [ 3405.243566][ T3106] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 3405.405111][ T3106] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3405.433505][ T3106] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3405.450914][ T3106] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 3405.472113][ T3106] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3405.505672][ T3106] usb 1-1: config 0 descriptor?? [ 3405.514444][ T3106] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 3405.584067][T13122] nfs: Unknown parameter '&[#' [ 3405.629765][ T3106] dvb-usb: bulk message failed: -22 (3/0) [ 3405.825363][ T3106] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 3405.834800][T13114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3405.834811][ T3106] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 3405.851019][ T3106] usb 1-1: media controller created [ 3405.857567][ T3106] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3405.873531][T13114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3405.905878][ T3106] dvb-usb: bulk message failed: -22 (6/0) [ 3405.911668][ T3106] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 3405.938321][ T3106] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input234 [ 3405.967338][T13114] dibusb: i2c wr: len=8192 is too big! [ 3405.967338][T13114] [ 3405.996117][ T3106] dvb-usb: schedule remote query interval to 150 msecs. [ 3406.014459][ T3106] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 3406.030011][ T3106] usb 1-1: USB disconnect, device number 52 [ 3406.053462][ T6803] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 3406.202833][ T3106] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 3406.343729][ T6803] usb 2-1: Using ep0 maxpacket: 16 [ 3406.415452][ T6803] usb 2-1: unable to get BOS descriptor or descriptor too short [ 3406.437136][ T6803] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 3406.465341][ T6803] usb 2-1: can't read configurations, error -71 [ 3407.013440][T13137] IPVS: persistence engine module ip_vs_pe_ not found [ 3407.029221][T13139] nfs: Unknown parameter '&[#' [ 3407.134839][T13137] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 3407.486400][ T3849] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 3407.543430][ T6803] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 3407.847133][ T3849] usb 1-1: Using ep0 maxpacket: 16 [ 3407.865159][ T6803] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3407.886971][ T6803] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3407.913521][ T6803] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 3408.018136][ T6803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3408.107020][ T6803] usb 2-1: config 0 descriptor?? [ 3408.116216][ T3849] usb 1-1: unable to get BOS descriptor or descriptor too short [ 3408.130666][ T6803] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 3408.139143][ T6803] dvb-usb: bulk message failed: -22 (3/0) [ 3408.150590][ T3849] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 3408.182918][ T3849] usb 1-1: can't read configurations, error -71 [ 3408.199138][ T6803] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 3408.211675][ T6803] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 3408.218752][ T6803] usb 2-1: media controller created [ 3408.224601][ T6803] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3408.235388][ T6803] dvb-usb: bulk message failed: -22 (6/0) [ 3408.386303][T13141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3408.437876][ T6803] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 3408.445339][T13141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3408.484208][T13141] dibusb: i2c wr: len=8192 is too big! [ 3408.484208][T13141] [ 3408.493620][ T6803] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input235 [ 3408.521700][ T6803] dvb-usb: schedule remote query interval to 150 msecs. [ 3408.528836][ T6803] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 3408.539256][ T6803] usb 2-1: USB disconnect, device number 91 [ 3408.553999][ T6803] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 3412.352292][ T3849] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 3412.388954][T13203] fuse: Unknown parameter 'use00000000000000000000' [ 3412.403486][ T3106] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 3412.543436][ T3849] usb 7-1: Using ep0 maxpacket: 8 [ 3412.550300][ T3849] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 3412.562316][ T3849] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 3412.573272][ T3849] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3412.583918][ T3106] usb 6-1: Using ep0 maxpacket: 16 [ 3412.591741][ T3106] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3412.606504][ T3106] usb 6-1: config 0 interface 0 has no altsetting 0 [ 3412.630210][ T3849] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3412.649180][ T3106] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 3412.664592][ T3106] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3412.677878][ T3849] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3412.739754][ T3106] usb 6-1: config 0 descriptor?? [ 3412.748750][ T3849] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3413.375321][ T3106] nzxt-smart2 0003:1E71:2009.0084: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 3413.403423][ T6803] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 3413.584338][ T3849] usb 7-1: GET_CAPABILITIES returned 0 [ 3413.589874][ T3849] usbtmc 7-1:16.0: can't read capabilities [ 3414.431461][ T9263] usb 6-1: USB disconnect, device number 71 [ 3414.547503][T10684] usb 7-1: USB disconnect, device number 54 [ 3414.654602][ T2107] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 3414.805492][ T2107] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3414.828817][ T2107] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3414.844854][ T2107] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 3414.864569][ T2107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3414.886028][ T2107] usb 2-1: config 0 descriptor?? [ 3414.900736][ T2107] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 3414.913654][ T2107] dvb-usb: bulk message failed: -22 (3/0) [ 3414.931747][ T2107] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 3414.961641][ T2107] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 3414.990681][ T2107] usb 2-1: media controller created [ 3414.998188][ T2107] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3415.037137][ T2107] dvb-usb: bulk message failed: -22 (6/0) [ 3415.053773][ T2107] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 3415.075862][ T2107] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input236 [ 3416.210975][ T2107] dvb-usb: schedule remote query interval to 150 msecs. [ 3416.218166][ T2107] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 3416.222981][T13228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3416.294531][ T6803] usb 1-1: unable to get BOS descriptor or descriptor too short [ 3416.294654][T13228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3416.302216][ T6803] usb 1-1: too many configurations: 238, using maximum allowed: 8 [ 3416.374367][ T2107] dvb-usb: bulk message failed: -22 (1/0) [ 3416.380136][ T2107] dvb-usb: error while querying for an remote control event. [ 3416.384050][ T6803] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 3416.404559][ T30] audit: type=1326 audit(1767132126.084:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13243 comm="syz.6.10155" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f477b78f749 code=0x0 [ 3416.423420][ T6803] usb 1-1: can't read configurations, error -71 [ 3416.470161][T13228] dibusb: i2c wr: len=8192 is too big! [ 3416.470161][T13228] [ 3416.484480][T10684] usb 2-1: USB disconnect, device number 92 [ 3416.598509][T10684] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 3418.274832][ T6803] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 3418.873475][ T6803] usb 7-1: Using ep0 maxpacket: 8 [ 3418.879728][ T6803] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 3418.918629][ T6803] usb 7-1: config 179 has no interface number 0 [ 3418.945734][ T6803] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 3418.973624][ T6803] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 3419.044170][ T6803] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3419.063672][ T9263] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 3419.091408][ T6803] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 3419.097643][ T30] audit: type=1326 audit(1767132128.774:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13281 comm="syz.1.10161" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb75078f749 code=0x0 [ 3419.111740][ T6803] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 3419.203650][ T6803] usb 7-1: config 179 interface 65 has no altsetting 0 [ 3419.233428][ T6803] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 3419.242480][ T6803] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3419.245567][ T9263] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3419.283619][ T9263] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3419.328924][ T9263] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3419.329244][ T6803] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input237 [ 3419.338830][ T9263] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 3419.464827][ T9263] usb 1-1: Manufacturer: syz [ 3419.901230][ T9263] usb 1-1: config 0 descriptor?? [ 3420.440533][T18641] usb 7-1: USB disconnect, device number 55 [ 3420.440616][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 3421.112165][T13306] dvmrp0: entered allmulticast mode [ 3421.316335][T18641] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 3421.483552][T18641] usb 5-1: Using ep0 maxpacket: 8 [ 3421.488730][ T2107] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 3421.498900][T18641] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 3421.516876][T18641] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 3421.528700][T18641] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3421.545069][T18641] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3421.566964][T18641] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3421.583140][T18641] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3421.683593][ T2107] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3421.707708][ T2107] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3421.723265][ T2107] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 3421.732400][ T2107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3421.742206][ T2107] usb 2-1: config 0 descriptor?? [ 3421.752483][ T2107] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 3421.763653][ T2107] dvb-usb: bulk message failed: -22 (3/0) [ 3421.778600][ T2107] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 3421.788049][ T2107] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 3421.796953][ T2107] usb 2-1: media controller created [ 3421.807003][ T2107] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3421.836878][ T2107] dvb-usb: bulk message failed: -22 (6/0) [ 3421.849336][ T2107] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 3421.870040][ T2107] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input238 [ 3421.882135][T18641] usb 5-1: GET_CAPABILITIES returned 0 [ 3421.887762][T18641] usbtmc 5-1:16.0: can't read capabilities [ 3421.914591][ T2107] dvb-usb: schedule remote query interval to 150 msecs. [ 3421.931796][ T2107] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 3422.038598][ T9263] uclogic 0003:256C:006D.0085: failed retrieving string descriptor #200: -71 [ 3422.051731][ T9263] uclogic 0003:256C:006D.0085: failed retrieving pen parameters: -71 [ 3422.063765][ T9263] uclogic 0003:256C:006D.0085: failed probing pen v2 parameters: -71 [ 3422.072450][T13308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3422.086269][ T9263] uclogic 0003:256C:006D.0085: failed probing parameters: -71 [ 3422.093949][ T2107] dvb-usb: bulk message failed: -22 (1/0) [ 3422.104965][ T9263] uclogic 0003:256C:006D.0085: probe with driver uclogic failed with error -71 [ 3422.114447][ T2107] dvb-usb: error while querying for an remote control event. [ 3422.122285][T13308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3422.135388][ T9263] usb 1-1: USB disconnect, device number 57 [ 3422.186491][ T3849] usb 5-1: USB disconnect, device number 64 [ 3422.197865][T13308] dibusb: i2c wr: len=8192 is too big! [ 3422.197865][T13308] [ 3422.215275][ T6803] usb 2-1: USB disconnect, device number 93 [ 3422.238329][ T6803] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 3423.332316][T13328] fuse: Unknown parameter 'group_id00000000000000000000' [ 3424.693479][T18641] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 3424.993864][T12912] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3425.002848][T12912] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3425.011652][T12912] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3425.019431][T12912] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3425.041622][T12912] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3425.114458][T18641] usb 2-1: config 0 has an invalid interface number: 139 but max is 0 [ 3425.173418][T18641] usb 2-1: config 0 has no interface number 0 [ 3425.208710][T18641] usb 2-1: config 0 interface 139 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3425.244396][T18641] usb 2-1: config 0 interface 139 altsetting 0 has an endpoint descriptor with address 0xBD, changing to 0x8D [ 3425.483457][T18641] usb 2-1: config 0 interface 139 altsetting 0 endpoint 0x8D has invalid maxpacket 14158, setting to 64 [ 3425.531873][T18641] usb 2-1: config 0 interface 139 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 3425.642149][T18641] usb 2-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=fd.d6 [ 3425.681583][T18641] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3425.732140][T18641] usb 2-1: Product: syz [ 3425.751773][T13357] chnl_net:caif_netlink_parms(): no params data found [ 3425.758639][T18641] usb 2-1: Manufacturer: syz [ 3425.763207][T18641] usb 2-1: SerialNumber: syz [ 3425.773547][ T3849] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 3425.805969][T18641] usb 2-1: config 0 descriptor?? [ 3425.828501][T13350] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3425.845867][T13350] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3426.076454][ T36] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3426.124300][ T3849] usb 5-1: Using ep0 maxpacket: 32 [ 3426.150438][ T3849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3426.178756][T13357] bridge0: port 1(bridge_slave_0) entered blocking state [ 3426.193467][ T3849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3426.193712][T13357] bridge0: port 1(bridge_slave_0) entered disabled state [ 3426.203248][ T3849] usb 5-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 3426.210605][T13357] bridge_slave_0: entered allmulticast mode [ 3426.256304][T13357] bridge_slave_0: entered promiscuous mode [ 3426.275914][T13357] bridge0: port 2(bridge_slave_1) entered blocking state [ 3426.292862][ T3849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3426.301052][T13357] bridge0: port 2(bridge_slave_1) entered disabled state [ 3426.313043][T13357] bridge_slave_1: entered allmulticast mode [ 3426.334070][T13357] bridge_slave_1: entered promiscuous mode [ 3426.360054][ T3849] usb 5-1: config 0 descriptor?? [ 3426.435527][ T36] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3426.538339][T13357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3426.577334][ T36] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3426.610557][T13357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3426.704812][ T36] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3426.795724][ T3849] glorious 0003:22D4:1503.0086: unknown main item tag 0x7 [ 3426.810003][T13357] team0: Port device team_slave_0 added [ 3426.818627][ T3849] glorious 0003:22D4:1503.0086: hidraw0: USB HID v0.00 Device [Glorious Model I] on usb-dummy_hcd.4-1/input0 [ 3426.827818][T13357] team0: Port device team_slave_1 added [ 3426.844391][ T6803] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 3426.915233][T13357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3426.930515][T13357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3426.979987][T13357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3426.999964][T13357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3427.003447][ T6803] usb 6-1: Using ep0 maxpacket: 8 [ 3427.007384][T13357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3427.039534][ T6803] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 3427.048228][ T6803] usb 6-1: config 179 has no interface number 0 [ 3427.054704][T13357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3427.083575][ T6803] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 3427.103493][ T6803] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 3427.123520][ T51] Bluetooth: hci1: command tx timeout [ 3427.130583][ T6803] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3427.161914][ T6803] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 3427.182326][ T6803] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 3427.204548][ T6803] usb 6-1: config 179 interface 65 has no altsetting 0 [ 3427.212653][ T6803] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 3427.221852][ T6803] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3427.246136][ T6803] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input239 [ 3427.259778][ T36] bridge_slave_1: left allmulticast mode [ 3427.266982][ T36] bridge_slave_1: left promiscuous mode [ 3427.274498][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 3427.317223][ T36] bridge_slave_0: left allmulticast mode [ 3427.322889][ T36] bridge_slave_0: left promiscuous mode [ 3427.362759][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 3427.397062][T18641] mct_u232 2-1:0.139: MCT U232 converter detected [ 3427.441445][T18641] usb 2-1: MCT U232 converter now attached to ttyUSB0 [ 3427.573080][T18641] usb 2-1: USB disconnect, device number 94 [ 3427.655386][T18641] mct_u232 ttyUSB0: MCT U232 converter now disconnected from ttyUSB0 [ 3427.683123][T18641] mct_u232 2-1:0.139: device disconnected [ 3427.708556][ T3406] usb 6-1: USB disconnect, device number 72 [ 3427.708634][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 3428.879710][T11137] usb 5-1: USB disconnect, device number 65 [ 3429.203711][ T51] Bluetooth: hci1: command tx timeout [ 3429.213936][T13394] [U]  [ 3429.262663][ T36] dvmrp3 (unregistering): left allmulticast mode [ 3429.313695][ T36] dvmrp0 (unregistering): left allmulticast mode [ 3429.393542][ T9263] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 3429.403067][T13401] fuse: Bad value for 'user_id' [ 3429.410467][T13401] fuse: Bad value for 'user_id' [ 3429.586759][ T9263] usb 1-1: Using ep0 maxpacket: 8 [ 3429.625382][ T9263] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 3429.671595][ T9263] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 3429.711851][ T9263] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3429.746209][ T9263] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3429.789849][ T9263] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3429.803394][ T9263] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3430.108656][ T9263] usb 1-1: GET_CAPABILITIES returned 0 [ 3430.116579][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3430.116615][ T9263] usbtmc 1-1:16.0: can't read capabilities [ 3430.194335][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3430.235208][ T36] bond0 (unregistering): Released all slaves [ 3430.383512][ T36] tipc: Left network mode [ 3430.444779][T13357] hsr_slave_0: entered promiscuous mode [ 3430.471291][T13357] hsr_slave_1: entered promiscuous mode [ 3430.489590][T13357] debugfs: 'hsr0' already exists in 'hsr' [ 3430.503016][T13357] Cannot create hsr debugfs directory [ 3430.928762][ T36] hsr_slave_0: left promiscuous mode [ 3430.967697][ T36] hsr_slave_1: left promiscuous mode [ 3430.989124][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3431.011986][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3431.033656][T13409] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 3431.045383][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3431.077090][T13409] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 3431.077593][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3431.156940][T13409] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 3431.201939][T13409] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 3431.229746][T13409] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 3431.232023][ T36] veth1_macvtap: left promiscuous mode [ 3431.242404][ T36] veth0_macvtap: left promiscuous mode [ 3431.285910][ T36] veth1_vlan: left promiscuous mode [ 3431.303755][ T36] veth0_vlan: left promiscuous mode [ 3431.327625][T13409] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 3432.487824][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 3432.817929][T13456] fuse: Bad value for 'user_id' [ 3432.853424][T13456] fuse: Bad value for 'user_id' [ 3433.123466][ T51] Bluetooth: hci2: command 0x0405 tx timeout [ 3433.207846][ T51] Bluetooth: hci1: command 0x0419 tx timeout [ 3433.213938][T12912] Bluetooth: hci0: command 0x0406 tx timeout [ 3433.432210][ T36] team0 (unregistering): Port device team_slave_1 removed [ 3433.523298][ T36] team0 (unregistering): Port device team_slave_0 removed [ 3435.137840][T13435] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 3435.193618][ T3849] usb 1-1: USB disconnect, device number 58 [ 3435.293751][T12912] Bluetooth: hci1: command 0x0419 tx timeout [ 3435.494556][T13473] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 3435.546378][T13473] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 3435.583001][T13473] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 3435.601501][T13473] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 3436.374839][T13357] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 3436.418235][T13509] fuse: Bad value for 'user_id' [ 3436.428114][T13357] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 3436.440135][T13509] fuse: Bad value for 'user_id' [ 3436.486319][T13357] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 3436.536569][T13357] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 3437.363768][T12912] Bluetooth: hci5: command 0x0406 tx timeout [ 3437.584173][T18641] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 3437.608682][T12912] Bluetooth: hci0: command 0x0406 tx timeout [ 3437.608694][ T51] Bluetooth: hci2: command 0x0405 tx timeout [ 3437.681397][T13357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3437.694003][T12912] Bluetooth: hci1: command 0x0419 tx timeout [ 3437.755218][T18641] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3437.807655][T18641] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3437.826700][T13357] 8021q: adding VLAN 0 to HW filter on device team0 [ 3437.849628][ T1689] bridge0: port 1(bridge_slave_0) entered blocking state [ 3437.856890][ T1689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3438.323977][T18641] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3438.333056][T18641] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 3438.343379][ T1689] bridge0: port 2(bridge_slave_1) entered blocking state [ 3438.350478][ T1689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3438.370393][T18641] usb 5-1: Manufacturer: syz [ 3438.381420][T18641] usb 5-1: config 0 descriptor?? [ 3439.766426][T12912] Bluetooth: hci1: command 0x0419 tx timeout [ 3439.806664][T13357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3440.191557][T13357] veth0_vlan: entered promiscuous mode [ 3440.217240][T13357] veth1_vlan: entered promiscuous mode [ 3440.271479][T13357] veth0_macvtap: entered promiscuous mode [ 3440.302140][T13357] veth1_macvtap: entered promiscuous mode [ 3440.361505][T13357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3440.399440][T13357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3440.429492][T12471] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3440.460955][T18641] uclogic 0003:256C:006D.0087: failed retrieving Huion firmware version: -71 [ 3440.491614][T18641] uclogic 0003:256C:006D.0087: failed probing parameters: -71 [ 3440.535653][T12471] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3440.546716][T18641] uclogic 0003:256C:006D.0087: probe with driver uclogic failed with error -71 [ 3440.591290][T12471] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3440.622849][T18641] usb 5-1: USB disconnect, device number 66 [ 3440.623478][ T3849] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 3440.664167][T12471] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3440.813442][ T3849] usb 2-1: Using ep0 maxpacket: 8 [ 3440.836956][T12471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3440.850215][T12471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3440.859737][ T3849] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 3440.974044][ T3849] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 3441.011404][ T3849] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3441.713441][ T3849] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3441.766955][T12471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3441.796879][ T3849] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3441.847359][ T3849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3441.972295][T12471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3441.992882][T13575] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 3442.515659][T13575] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 3443.381022][T12912] Bluetooth: hci5: command 0x0406 tx timeout [ 3443.452787][T13575] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 3443.482040][ T3849] usb 2-1: can't set config #16, error -71 [ 3443.491044][ T3849] usb 2-1: USB disconnect, device number 95 [ 3443.529363][T13575] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 3444.606133][T12912] Bluetooth: hci2: command 0x0405 tx timeout [ 3445.544283][T12912] Bluetooth: hci0: command 0x0406 tx timeout [ 3445.603459][T12912] Bluetooth: hci1: command 0x0419 tx timeout [ 3446.021241][T13645] bridge0: port 3(team0) entered disabled state [ 3446.027851][T13645] bridge0: port 2(bridge_slave_1) entered disabled state [ 3446.035085][T13645] bridge0: port 1(bridge_slave_0) entered disabled state [ 3446.623814][T13645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3446.638131][T13645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3446.875059][T10845] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3446.908654][T10845] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3446.952238][T10845] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3447.079222][T10845] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3448.404585][ T9644] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 3448.615361][ T9644] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3448.632339][ T9644] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3448.647885][ T9644] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3448.664525][ T9644] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 3448.674894][ T9644] usb 1-1: Manufacturer: syz [ 3448.684950][ T9644] usb 1-1: config 0 descriptor?? [ 3449.375643][T13683] vxcan1 speed is unknown, defaulting to 1000 [ 3449.403552][T13683] vxcan1 speed is unknown, defaulting to 1000 [ 3449.419790][T13683] vxcan1 speed is unknown, defaulting to 1000 [ 3449.767036][T13683] infiniband syz2: set active [ 3449.771864][T13683] infiniband syz2: added vxcan1 [ 3449.780947][ T6025] vxcan1 speed is unknown, defaulting to 1000 [ 3449.805322][T13683] RDS/IB: syz2: added [ 3449.810289][T13683] smc: adding ib device syz2 with port count 1 [ 3449.816586][T13683] smc: ib device syz2 port 1 has no pnetid [ 3449.824071][T13683] vxcan1 speed is unknown, defaulting to 1000 [ 3449.835577][ T3849] vxcan1 speed is unknown, defaulting to 1000 [ 3449.975040][T13683] vxcan1 speed is unknown, defaulting to 1000 [ 3450.066592][T13683] vxcan1 speed is unknown, defaulting to 1000 [ 3450.087593][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 3450.164555][T13683] vxcan1 speed is unknown, defaulting to 1000 [ 3450.256002][T13683] vxcan1 speed is unknown, defaulting to 1000 [ 3450.348098][T13683] vxcan1 speed is unknown, defaulting to 1000 [ 3450.439728][T13683] vxcan1 speed is unknown, defaulting to 1000 [ 3450.530366][T13683] vxcan1 speed is unknown, defaulting to 1000 [ 3450.668908][T12912] Bluetooth: hci5: command 0x0406 tx timeout [ 3450.675487][T13672] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 3450.928683][ T9644] uclogic 0003:256C:006D.0088: failed retrieving string descriptor #200: -71 [ 3450.995638][T13676] netlink: 1192 bytes leftover after parsing attributes in process `syz.4.10231'. [ 3451.005711][ T9644] uclogic 0003:256C:006D.0088: failed retrieving pen parameters: -71 [ 3451.031960][T13672] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 3451.052504][ T9644] uclogic 0003:256C:006D.0088: failed probing pen v2 parameters: -71 [ 3451.165969][T13672] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 3451.166067][ T9644] uclogic 0003:256C:006D.0088: failed probing parameters: -71 [ 3451.179549][ T9644] uclogic 0003:256C:006D.0088: probe with driver uclogic failed with error -71 [ 3451.201389][ T9644] usb 1-1: USB disconnect, device number 59 [ 3451.203997][T13672] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 3451.965493][ T3849] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 3452.425425][T13706] comedi comedi3: comedi_config --init_data is deprecated [ 3452.484923][ T9644] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 3452.737802][ T9644] usb 1-1: Using ep0 maxpacket: 8 [ 3452.738974][T12912] Bluetooth: hci2: command 0x0405 tx timeout [ 3452.843703][ T9644] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 3452.859885][ T9644] usb 1-1: config 179 has no interface number 0 [ 3452.866662][ T9644] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 3452.901353][ T9644] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 3452.919220][ T9644] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3452.932577][ T9644] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 3452.945253][ T9644] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 3452.959608][ T9644] usb 1-1: config 179 interface 65 has no altsetting 0 [ 3452.971796][ T9644] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 3452.986193][ T9644] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3453.009798][ T9644] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input240 [ 3453.203436][T12912] Bluetooth: hci0: command 0x0406 tx timeout [ 3453.313428][T12912] Bluetooth: hci1: command 0x0419 tx timeout [ 3454.472777][ T3106] usb 1-1: USB disconnect, device number 60 [ 3454.472813][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 3455.393513][ T6803] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 3456.702522][T13734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3456.711742][T13734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3456.757107][T13749] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10249'. [ 3458.380111][ T6803] usb 7-1: unable to get BOS descriptor or descriptor too short [ 3458.403250][ T6803] usb 7-1: too many configurations: 238, using maximum allowed: 8 [ 3458.442916][ T6803] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 3458.450715][ T6803] usb 7-1: can't read configurations, error -71 [ 3458.472448][T13764] tipc: Started in network mode [ 3458.478236][T13764] tipc: Node identity ac14140f, cluster identity 4711 [ 3458.485419][T13764] tipc: New replicast peer: 255.255.255.83 [ 3458.491543][T13764] tipc: Enabled bearer , priority 10 [ 3459.233450][ T3406] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 3459.465697][ T3406] usb 5-1: Using ep0 maxpacket: 16 [ 3459.518297][ T3406] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3459.689484][T11137] tipc: Node number set to 2886997007 [ 3460.365799][ T3406] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3460.376926][ T3406] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 3460.397573][T18641] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 3460.415789][ T3406] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3460.730671][T18641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3460.752245][ T3406] usb 5-1: config 0 descriptor?? [ 3460.767746][T18641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3460.788762][T18641] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3460.799904][T18641] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 3460.813844][T18641] usb 1-1: Manufacturer: syz [ 3460.829665][T18641] usb 1-1: config 0 descriptor?? [ 3461.417142][ T3406] nzxt-smart2 0003:1E71:2009.008A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 3461.617169][T13814] random: crng reseeded on system resumption [ 3463.191715][T18641] uclogic 0003:256C:006D.0089: failed retrieving string descriptor #200: -71 [ 3463.245899][T18641] uclogic 0003:256C:006D.0089: failed retrieving pen parameters: -71 [ 3463.292433][ T3406] usb 5-1: USB disconnect, device number 67 [ 3463.336976][T18641] uclogic 0003:256C:006D.0089: failed probing pen v2 parameters: -71 [ 3463.372707][T18641] uclogic 0003:256C:006D.0089: failed probing parameters: -71 [ 3463.393890][T18641] uclogic 0003:256C:006D.0089: probe with driver uclogic failed with error -71 [ 3463.524472][T13823] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 3463.525234][T18641] usb 1-1: USB disconnect, device number 61 [ 3463.844780][ T30] audit: type=1400 audit(1767132173.464:1584): avc: denied { setopt } for pid=13822 comm="syz.6.10270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 3464.132030][T13831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10271'. [ 3464.224272][T13831] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10271'. [ 3464.330053][T13835] FAULT_INJECTION: forcing a failure. [ 3464.330053][T13835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3464.343198][T13835] CPU: 0 UID: 0 PID: 13835 Comm: syz.5.10272 Tainted: G L syzkaller #0 PREEMPT(full) [ 3464.343224][T13835] Tainted: [L]=SOFTLOCKUP [ 3464.343231][T13835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 3464.343246][T13835] Call Trace: [ 3464.343253][T13835] [ 3464.343260][T13835] dump_stack_lvl+0x16c/0x1f0 [ 3464.343286][T13835] should_fail_ex+0x512/0x640 [ 3464.343316][T13835] strncpy_from_user+0x3b/0x2e0 [ 3464.343345][T13835] getname_flags.part.0+0x8f/0x550 [ 3464.343367][T13835] getname_flags+0x93/0xf0 [ 3464.343387][T13835] do_mq_open+0x17f/0x9e0 [ 3464.343403][T13835] ? __might_fault+0xe3/0x190 [ 3464.343419][T13835] ? __might_fault+0x13b/0x190 [ 3464.343435][T13835] ? __pfx_do_mq_open+0x10/0x10 [ 3464.343458][T13835] __x64_sys_mq_open+0x155/0x1e0 [ 3464.343476][T13835] ? __pfx___x64_sys_mq_open+0x10/0x10 [ 3464.343492][T13835] ? fput+0x70/0xf0 [ 3464.343516][T13835] do_syscall_64+0xcd/0xf80 [ 3464.343539][T13835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3464.343556][T13835] RIP: 0033:0x7f0d4e98f749 [ 3464.343570][T13835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3464.343586][T13835] RSP: 002b:00007f0d4f850038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 3464.343603][T13835] RAX: ffffffffffffffda RBX: 00007f0d4ebe6180 RCX: 00007f0d4e98f749 [ 3464.343615][T13835] RDX: 0000000000000196 RSI: 6e93ebbbcc0884f2 RDI: 0000200000000480 [ 3464.343625][T13835] RBP: 00007f0d4f850090 R08: 0000000000000000 R09: 0000000000000000 [ 3464.343636][T13835] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001 [ 3464.343646][T13835] R13: 00007f0d4ebe6218 R14: 00007f0d4ebe6180 R15: 00007ffda74b9978 [ 3464.343670][T13835] [ 3464.555661][T13829] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 3464.670543][T13829] bond1 (unregistering): Released all slaves [ 3464.893017][T13836] netlink: 'syz.4.10271': attribute type 3 has an invalid length. [ 3464.926519][T13836] netlink: 'syz.4.10271': attribute type 3 has an invalid length. [ 3465.903716][T13836] netlink: 'syz.4.10271': attribute type 3 has an invalid length. [ 3466.123488][T13836] netlink: 'syz.4.10271': attribute type 3 has an invalid length. [ 3466.384775][T13836] netlink: 'syz.4.10271': attribute type 3 has an invalid length. [ 3466.421563][T13836] netlink: 'syz.4.10271': attribute type 3 has an invalid length. [ 3466.475585][T13836] netlink: 'syz.4.10271': attribute type 3 has an invalid length. [ 3466.506647][T13836] netlink: 'syz.4.10271': attribute type 3 has an invalid length. [ 3466.549579][T13836] netlink: 'syz.4.10271': attribute type 3 has an invalid length. [ 3466.607871][T13836] netlink: 'syz.4.10271': attribute type 3 has an invalid length. [ 3467.108991][ T30] audit: type=1400 audit(1767132176.784:1585): avc: denied { write } for pid=13856 comm="syz.0.10277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 3468.036961][T13878] fuse: Bad value for 'fd' [ 3468.707487][T13873] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 3468.713761][T13873] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 3468.720596][T13873] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 3468.791837][T13873] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 3470.313970][T13900] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 3470.327219][T13900] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 3470.333627][T13900] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 3470.340201][T13900] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 3470.683794][ T6803] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 3470.813425][ T6025] usb 6-1: new low-speed USB device number 73 using dummy_hcd [ 3470.833872][ T6803] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 3470.849795][ T6803] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3470.873068][ T6803] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3470.890893][ T6803] usb 7-1: config 0 interface 0 has no altsetting 0 [ 3470.912690][ T6803] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3470.928360][ T6803] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3470.954610][ T6803] usb 7-1: config 0 interface 0 has no altsetting 0 [ 3470.970118][ T6803] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3470.979465][ T6803] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3470.991483][ T6803] usb 7-1: config 0 interface 0 has no altsetting 0 [ 3471.000028][ T6025] usb 6-1: unable to get BOS descriptor or descriptor too short [ 3471.011150][ T6803] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3471.020555][ T6025] usb 6-1: config 64 has an invalid interface number: 227 but max is 0 [ 3471.028872][ T6803] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3471.039899][ T6025] usb 6-1: config 64 has no interface number 0 [ 3471.049755][ T6025] usb 6-1: config 64 interface 227 altsetting 9 endpoint 0x4 is Bulk; changing to Interrupt [ 3471.060078][ T6803] usb 7-1: config 0 interface 0 has no altsetting 0 [ 3471.067282][ T6025] usb 6-1: config 64 interface 227 altsetting 9 endpoint 0x4 has invalid wMaxPacketSize 0 [ 3471.079308][ T6803] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3471.088662][ T6803] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3471.099760][ T6025] usb 6-1: config 64 interface 227 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 3471.114833][ T6803] usb 7-1: config 0 interface 0 has no altsetting 0 [ 3471.146309][ T6803] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3471.155331][ T6025] usb 6-1: config 64 interface 227 has no altsetting 0 [ 3471.162538][ T6803] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3471.174325][ T6803] usb 7-1: config 0 interface 0 has no altsetting 0 [ 3471.187879][ T6025] usb 6-1: string descriptor 0 read error: -22 [ 3471.194620][ T6025] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=cc.bf [ 3471.205070][ T6025] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3471.216172][ T6803] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3471.225583][ T6803] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3471.863622][T12912] Bluetooth: hci5: command 0x0406 tx timeout [ 3472.117312][ T6025] imon_raw 6-1:64.227: IR endpoint missing [ 3472.126795][ T6803] usb 7-1: config 0 interface 0 has no altsetting 0 [ 3472.149126][ T6803] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3472.176211][ T6803] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3472.189280][ T6803] usb 7-1: config 0 interface 0 has no altsetting 0 [ 3472.198185][ T6803] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 3472.209139][ T6803] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 3472.218201][ T6803] usb 7-1: Product: syz [ 3472.318734][T29067] usb 6-1: USB disconnect, device number 73 [ 3472.339086][ T6803] usb 7-1: Manufacturer: syz [ 3472.344483][ T6803] usb 7-1: SerialNumber: syz [ 3472.413463][T12912] Bluetooth: hci1: command 0x0419 tx timeout [ 3472.421127][T12912] Bluetooth: hci0: command 0x0406 tx timeout [ 3472.430390][T12912] Bluetooth: hci2: command 0x0405 tx timeout [ 3472.740286][ T6803] usb 7-1: config 0 descriptor?? [ 3472.746196][ T6803] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 3473.026123][T13921] FAULT_INJECTION: forcing a failure. [ 3473.026123][T13921] name failslab, interval 1, probability 0, space 0, times 0 [ 3473.039185][T13921] CPU: 0 UID: 0 PID: 13921 Comm: syz.6.10291 Tainted: G L syzkaller #0 PREEMPT(full) [ 3473.039210][T13921] Tainted: [L]=SOFTLOCKUP [ 3473.039216][T13921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 3473.039225][T13921] Call Trace: [ 3473.039231][T13921] [ 3473.039238][T13921] dump_stack_lvl+0x16c/0x1f0 [ 3473.039260][T13921] should_fail_ex+0x512/0x640 [ 3473.039282][T13921] ? kmem_cache_alloc_noprof+0x62/0x770 [ 3473.039301][T13921] should_failslab+0xc2/0x120 [ 3473.039322][T13921] kmem_cache_alloc_noprof+0x83/0x770 [ 3473.039337][T13921] ? getname_flags.part.0+0x4c/0x550 [ 3473.039357][T13921] ? getname_flags.part.0+0x4c/0x550 [ 3473.039366][T13921] getname_flags.part.0+0x4c/0x550 [ 3473.039379][T13921] getname_flags+0x93/0xf0 [ 3473.039392][T13921] do_sys_openat2+0xb9/0x290 [ 3473.039407][T13921] ? __pfx_do_sys_openat2+0x10/0x10 [ 3473.039422][T13921] ? __fget_files+0x20e/0x3c0 [ 3473.039448][T13921] __x64_sys_openat+0x174/0x210 [ 3473.039463][T13921] ? __pfx___x64_sys_openat+0x10/0x10 [ 3473.039487][T13921] do_syscall_64+0xcd/0xf80 [ 3473.039506][T13921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3473.039517][T13921] RIP: 0033:0x7fd66098df90 [ 3473.039526][T13921] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 3473.039537][T13921] RSP: 002b:00007fd6617fdb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3473.039547][T13921] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fd66098df90 [ 3473.039554][T13921] RDX: 0000000000000002 RSI: 00007fd6617fdc10 RDI: 00000000ffffff9c [ 3473.039560][T13921] RBP: 00007fd6617fdc10 R08: 0000000000000000 R09: 00007fd6617fd987 [ 3473.039570][T13921] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 3473.039579][T13921] R13: 00007fd660be6038 R14: 00007fd660be5fa0 R15: 00007ffc89ee7a38 [ 3473.039602][T13921] [ 3473.631640][ T5927] usb 7-1: USB disconnect, device number 59 [ 3473.706728][ T5927] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 3476.433858][T12912] Bluetooth: hci5: command 0x0406 tx timeout [ 3476.485535][T13958] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 3476.596472][T13958] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 3476.620952][T13958] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 3476.672459][T13958] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 3478.106554][T14009] FAULT_INJECTION: forcing a failure. [ 3478.106554][T14009] name failslab, interval 1, probability 0, space 0, times 0 [ 3478.153446][T14009] CPU: 0 UID: 0 PID: 14009 Comm: syz.5.10312 Tainted: G L syzkaller #0 PREEMPT(full) [ 3478.153473][T14009] Tainted: [L]=SOFTLOCKUP [ 3478.153479][T14009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 3478.153489][T14009] Call Trace: [ 3478.153495][T14009] [ 3478.153502][T14009] dump_stack_lvl+0x16c/0x1f0 [ 3478.153527][T14009] should_fail_ex+0x512/0x640 [ 3478.153550][T14009] ? __kmalloc_cache_noprof+0x5f/0x800 [ 3478.153578][T14009] should_failslab+0xc2/0x120 [ 3478.153599][T14009] __kmalloc_cache_noprof+0x80/0x800 [ 3478.153617][T14009] ? rcu_is_watching+0x12/0xc0 [ 3478.153628][T14009] ? vhost_task_create+0xe5/0x370 [ 3478.153643][T14009] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 3478.153661][T14009] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 3478.153677][T14009] ? vhost_task_create+0xe5/0x370 [ 3478.153689][T14009] vhost_task_create+0xe5/0x370 [ 3478.153704][T14009] ? __pfx_vhost_task_create+0x10/0x10 [ 3478.153722][T14009] ? __pfx_vhost_task_fn+0x10/0x10 [ 3478.153738][T14009] ? __pfx___mutex_lock+0x10/0x10 [ 3478.153755][T14009] kvm_mmu_post_init_vm+0x1b7/0x380 [ 3478.153770][T14009] kvm_arch_vcpu_ioctl_run+0x66/0x1860 [ 3478.153784][T14009] ? kvm_vcpu_ioctl+0x14f8/0x16d0 [ 3478.153803][T14009] kvm_vcpu_ioctl+0x76d/0x16d0 [ 3478.153820][T14009] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 3478.153836][T14009] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 3478.153850][T14009] ? do_vfs_ioctl+0x128/0x14f0 [ 3478.153862][T14009] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 3478.153874][T14009] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 3478.153894][T14009] ? hook_file_ioctl_common+0x144/0x410 [ 3478.153914][T14009] ? selinux_file_ioctl+0x180/0x270 [ 3478.153927][T14009] ? selinux_file_ioctl+0xb4/0x270 [ 3478.153941][T14009] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 3478.153957][T14009] __x64_sys_ioctl+0x18e/0x210 [ 3478.153970][T14009] do_syscall_64+0xcd/0xf80 [ 3478.153985][T14009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3478.153996][T14009] RIP: 0033:0x7f0d4e98f749 [ 3478.154005][T14009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3478.154015][T14009] RSP: 002b:00007f0d4f892038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3478.154029][T14009] RAX: ffffffffffffffda RBX: 00007f0d4ebe5fa0 RCX: 00007f0d4e98f749 [ 3478.154035][T14009] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 3478.154041][T14009] RBP: 00007f0d4f892090 R08: 0000000000000000 R09: 0000000000000000 [ 3478.154047][T14009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3478.154053][T14009] R13: 00007f0d4ebe6038 R14: 00007f0d4ebe5fa0 R15: 00007ffda74b9978 [ 3478.154068][T14009] [ 3478.715252][T12912] Bluetooth: hci0: command 0x0406 tx timeout [ 3478.753472][ T51] Bluetooth: hci2: command 0x0405 tx timeout [ 3478.763430][ T5816] Bluetooth: hci1: command 0x0419 tx timeout [ 3478.846908][T14019] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 3478.851103][T14020] syz2: rxe_newlink: already configured on vxcan1 [ 3479.264818][ T9644] usb 6-1: new full-speed USB device number 74 using dummy_hcd [ 3479.734944][ T9644] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3479.745144][ T9644] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3479.763659][T11137] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 3480.016877][ T9644] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 3480.056339][ T9644] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3480.093942][ T9644] usb 6-1: config 0 descriptor?? [ 3480.115444][ T9644] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 3480.127751][ T9644] dvb-usb: bulk message failed: -22 (3/0) [ 3480.147986][ T9644] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 3480.164515][ T9644] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 3480.181733][ T9644] usb 6-1: media controller created [ 3480.193066][ T9644] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3480.250405][ T9644] dvb-usb: bulk message failed: -22 (6/0) [ 3480.280980][ T9644] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 3480.310265][ T9644] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input241 [ 3480.340019][T14026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3480.356174][T14028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3480.357450][T14026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3480.383488][ T9644] dvb-usb: schedule remote query interval to 150 msecs. [ 3480.397603][ T9644] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 3480.434845][T14026] dibusb: i2c wr: len=8192 is too big! [ 3480.434845][T14026] [ 3480.449676][T14028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3480.488333][ T9644] usb 6-1: USB disconnect, device number 74 [ 3480.531698][ T9644] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 3481.365159][ T9644] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 3481.764458][ T9644] usb 5-1: Using ep0 maxpacket: 8 [ 3481.772779][ T9644] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 3481.794820][ T9644] usb 5-1: config 179 has no interface number 0 [ 3481.801497][ T9644] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 3481.812781][T10684] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 3481.813387][T24570] usb 6-1: new full-speed USB device number 75 using dummy_hcd [ 3481.820827][ T9644] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 3481.840601][ T9644] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3481.852550][ T9644] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 3481.866765][ T9644] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 3481.880608][ T9644] usb 5-1: config 179 interface 65 has no altsetting 0 [ 3481.887744][ T9644] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 3481.896859][T29067] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 3481.906292][ T9644] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3481.935990][ T9644] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input242 [ 3481.994334][T24570] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3482.022126][T24570] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3482.025667][T11137] usb 2-1: unable to get BOS descriptor or descriptor too short [ 3482.043677][T24570] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 3482.053421][T29067] usb 1-1: Using ep0 maxpacket: 16 [ 3482.064735][T29067] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3482.080536][T29067] usb 1-1: config 0 interface 0 has no altsetting 0 [ 3482.111746][T29067] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 3482.121860][T24570] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3482.143068][T11137] usb 2-1: too many configurations: 238, using maximum allowed: 8 [ 3482.180097][T29067] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3482.186053][T11137] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 3482.193895][T29067] usb 1-1: config 0 descriptor?? [ 3482.202188][T24570] usb 6-1: config 0 descriptor?? [ 3482.212998][T14064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3482.264083][T14064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3482.265675][T24570] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 3482.279374][T11137] usb 2-1: can't read configurations, error -71 [ 3482.316238][T24570] dvb-usb: bulk message failed: -22 (3/0) [ 3482.335791][T24570] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 3482.371145][T24570] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 3482.388331][T24570] usb 6-1: media controller created [ 3482.404631][T24570] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3482.432531][T24570] dvb-usb: bulk message failed: -22 (6/0) [ 3482.453458][T24570] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 3482.478006][T24570] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input243 [ 3482.503773][T14072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3482.528863][T14072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3482.545679][T24570] dvb-usb: schedule remote query interval to 150 msecs. [ 3482.552608][T24570] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 3482.742108][T24570] dvb-usb: bulk message failed: -22 (1/0) [ 3482.770475][T24570] dvb-usb: error while querying for an remote control event. [ 3482.775672][T29067] nzxt-smart2 0003:1E71:2009.008B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 3482.928434][T14072] dibusb: i2c wr: len=8192 is too big! [ 3482.928434][T14072] [ 3482.940533][ T9644] usb 6-1: USB disconnect, device number 75 [ 3482.943399][T24570] dvb-usb: bulk message failed: -22 (1/0) [ 3482.973520][T24570] dvb-usb: error while querying for an remote control event. [ 3483.053161][ T9644] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 3483.053735][T24570] usb 5-1: USB disconnect, device number 68 [ 3483.061623][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 3483.170848][T14098] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 3483.248490][ T5872] usb 1-1: USB disconnect, device number 62 [ 3484.216271][T10684] usb 7-1: unable to get BOS descriptor or descriptor too short [ 3484.227185][T10684] usb 7-1: too many configurations: 238, using maximum allowed: 8 [ 3484.238054][T10684] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 3484.252159][T10684] usb 7-1: can't read configurations, error -71 [ 3484.598582][T10684] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 3484.813416][T10684] usb 7-1: Using ep0 maxpacket: 8 [ 3484.826363][T10684] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 3484.841387][T10684] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 3484.854742][T10684] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3484.869828][T10684] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3484.886296][T10684] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3484.931020][T10684] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3485.156224][T10684] usb 7-1: GET_CAPABILITIES returned 0 [ 3485.162236][T10684] usbtmc 7-1:16.0: can't read capabilities [ 3485.215285][T14133] fuse: Bad value for 'fd' [ 3485.362287][T10684] usb 7-1: USB disconnect, device number 61 [ 3485.490659][T14117] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 3485.496994][T14117] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 3485.503149][T14117] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 3485.509324][T14117] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 3486.104513][T14149] nfs: Unknown parameter '&[#' [ 3486.111164][T14149] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 3486.474940][T14144] IPVS: persistence engine module ip_vs_pe_ not found [ 3486.503964][T11137] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 3486.709881][T14163] fuse: Unknown parameter 'use00000000000000000000' [ 3486.753458][T11137] usb 1-1: Using ep0 maxpacket: 16 [ 3486.864054][ T5816] Bluetooth: hci5: command 0x0406 tx timeout [ 3487.015759][T14166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3487.015805][T14166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3487.748002][ T5816] Bluetooth: hci0: command 0x0406 tx timeout [ 3487.748035][ T5816] Bluetooth: hci1: command 0x0419 tx timeout [ 3487.748080][ T5816] Bluetooth: hci2: command 0x0405 tx timeout [ 3487.788688][T14166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3487.877165][T14166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3488.055237][T11137] usb 1-1: unable to get BOS descriptor or descriptor too short [ 3488.107513][T11137] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 3488.125905][T11137] usb 1-1: can't read configurations, error -71 [ 3489.779498][T14189] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 3489.793703][T14189] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 3489.800569][T14189] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 3489.820324][T14189] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 3490.813704][T11137] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 3491.880929][T12912] Bluetooth: hci5: command 0x0406 tx timeout [ 3491.880986][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 3491.887466][T12912] Bluetooth: hci2: command 0x0405 tx timeout [ 3491.893633][ T5816] Bluetooth: hci1: command 0x0419 tx timeout [ 3492.023459][T11137] usb 7-1: Using ep0 maxpacket: 8 [ 3492.059190][T11137] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 3492.071479][T11137] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 3492.373423][T11137] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3492.393997][T11137] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3492.416322][T11137] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3492.439032][T11137] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3492.803559][ T9644] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 3493.025831][T11137] usb 7-1: GET_CAPABILITIES returned 0 [ 3493.031319][T11137] usbtmc 7-1:16.0: can't read capabilities [ 3493.232851][T11137] usb 7-1: USB disconnect, device number 62 [ 3493.311478][T14225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3493.420624][T14225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3493.813419][T11137] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 3493.909147][T14251] dvmrp0: entered allmulticast mode [ 3493.975850][T11137] usb 2-1: config 0 has an invalid interface number: 15 but max is 0 [ 3493.984114][T11137] usb 2-1: config 0 has no interface number 0 [ 3493.992327][T11137] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=47.a2 [ 3494.002989][T11137] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3494.012234][T11137] usb 2-1: Product: syz [ 3494.016800][T11137] usb 2-1: Manufacturer: syz [ 3494.044858][T11137] usb 2-1: SerialNumber: syz [ 3494.073318][T11137] usb 2-1: config 0 descriptor?? [ 3494.114094][T11137] usb 2-1: disable ehci-hcd to run US-144 [ 3494.414778][T28371] usb 2-1: USB disconnect, device number 98 [ 3494.840701][ T9644] usb 5-1: unable to get BOS descriptor or descriptor too short [ 3494.848449][ T9644] usb 5-1: too many configurations: 238, using maximum allowed: 8 [ 3494.887380][ T9644] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 3494.919942][ T9644] usb 5-1: can't read configurations, error -71 [ 3495.626978][ T9644] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 3495.905347][ T9644] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3495.915589][ T9644] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3495.935785][ T9644] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 3496.073380][ T9644] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3496.225894][ T9644] usb 5-1: config 0 descriptor?? [ 3496.273549][T28371] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 3496.453467][T28371] usb 7-1: Using ep0 maxpacket: 8 [ 3496.453582][ T9644] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 3496.460291][T28371] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 3496.487008][ T9644] dvb-usb: bulk message failed: -22 (3/0) [ 3496.497083][T28371] usb 7-1: config 179 has no interface number 0 [ 3496.519083][ T9644] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 3496.524263][T28371] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 3496.554869][T28371] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 3496.588468][T28371] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3496.606221][ T9644] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 3496.630946][T28371] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 3496.630960][ T9644] usb 5-1: media controller created [ 3496.631009][T28371] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 3496.670911][T14277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3496.691047][T14277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3496.720822][T14277] dibusb: i2c wr: len=8192 is too big! [ 3496.720822][T14277] [ 3496.729240][T28371] usb 7-1: config 179 interface 65 has no altsetting 0 [ 3496.746935][T28371] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 3496.774125][T28371] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3496.793155][ T9644] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3496.848086][ T9644] dvb-usb: bulk message failed: -22 (6/0) [ 3496.869001][ T9644] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 3496.886299][T28371] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input244 [ 3496.958860][ T9644] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input245 [ 3498.102989][ T9644] dvb-usb: schedule remote query interval to 150 msecs. [ 3498.118752][ T9644] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 3498.132175][ T9644] usb 5-1: USB disconnect, device number 70 [ 3498.247511][ T9644] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 3498.531816][T28371] usb 7-1: USB disconnect, device number 63 [ 3498.531872][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 3499.409194][ T30] audit: type=1326 audit(1767132209.074:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14313 comm="syz.1.10380" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb75078f749 code=0x0 [ 3507.445615][T14393] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 3507.452305][T14393] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 3507.674869][T14393] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 3507.675314][T14393] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 3507.970693][T14406] binder: 14403:14406 ioctl c0306201 200000000280 returned -14 [ 3507.992237][ T30] audit: type=1400 audit(1767132217.664:1587): avc: denied { getopt } for pid=14403 comm="syz.5.10403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 3508.253445][ T5816] Bluetooth: hci5: command 0x0406 tx timeout [ 3509.529215][ T5816] Bluetooth: hci2: command 0x0405 tx timeout [ 3509.763423][T11876] Bluetooth: hci1: command 0x0419 tx timeout [ 3509.772274][ T5816] Bluetooth: hci0: command 0x0406 tx timeout [ 3511.527003][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 3511.793870][T14459] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 3515.230791][T14473] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 3515.231099][T14473] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 3515.231248][T14473] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 3515.231346][T14473] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 3515.285180][T14493] validate_nla: 43 callbacks suppressed [ 3515.285191][T14493] netlink: 'syz.5.10422': attribute type 10 has an invalid length. [ 3515.302045][T14493] syz_tun: entered promiscuous mode [ 3515.307551][T14493] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 3515.603411][T29067] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 3515.903558][ T5816] Bluetooth: hci5: command 0x0406 tx timeout [ 3516.025284][T29067] usb 5-1: Using ep0 maxpacket: 8 [ 3516.214948][T14512] fuse: Unknown parameter 'user_i00000000000000000000' [ 3516.227930][T29067] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 3516.263366][T29067] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 3516.307325][T29067] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3516.396139][T29067] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3516.503495][T29067] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3516.540930][T29067] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3516.794041][T29067] usb 5-1: GET_CAPABILITIES returned 0 [ 3517.283783][ T5816] Bluetooth: hci1: command 0x0419 tx timeout [ 3517.283801][T14224] Bluetooth: hci2: command 0x0405 tx timeout [ 3517.303394][T11876] Bluetooth: hci0: command 0x0406 tx timeout [ 3517.309704][T29067] usbtmc 5-1:16.0: can't read capabilities [ 3517.347767][T29067] usb 5-1: USB disconnect, device number 71 [ 3521.007768][T14555] fuse: Unknown parameter 'user_i00000000000000000000' [ 3521.203414][ T30] audit: type=1400 audit(1767132230.814:1588): avc: denied { ioctl } for pid=14551 comm="syz.0.10430" path="socket:[199382]" dev="sockfs" ino=199382 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 3521.363547][T14556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10430'. [ 3521.651736][T14568] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 3521.821599][ T30] audit: type=1400 audit(1767132231.154:1589): avc: denied { setopt } for pid=14562 comm="syz.1.10439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 3522.594978][ T30] audit: type=1400 audit(1767132231.154:1590): avc: denied { setopt } for pid=14562 comm="syz.1.10439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 3522.595022][ T30] audit: type=1400 audit(1767132231.324:1591): avc: denied { remount } for pid=14551 comm="syz.0.10430" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 3522.712017][T14582] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10443'. [ 3522.946383][T14569] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 3522.971272][T14585] nfs: Unknown parameter '&[#' [ 3522.988349][T14585] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 3523.087934][T14583] IPVS: persistence engine module ip_vs_pe_ not found [ 3523.107623][T14569] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 3523.114116][T14569] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 3523.131459][T14569] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 3523.790767][T31357] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 3523.983402][T31357] usb 2-1: Using ep0 maxpacket: 16 [ 3524.263917][T14597] vxcan1 speed is unknown, defaulting to 1000 [ 3524.563546][T14224] Bluetooth: hci5: command 0x0406 tx timeout [ 3525.143614][T14224] Bluetooth: hci2: command 0x0405 tx timeout [ 3525.149932][T14224] Bluetooth: hci0: command 0x0406 tx timeout [ 3525.219127][T11876] Bluetooth: hci1: command 0x0419 tx timeout [ 3525.662200][T31357] usb 2-1: unable to get BOS descriptor or descriptor too short [ 3525.674845][T31357] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 3525.684221][T31357] usb 2-1: can't read configurations, error -71 [ 3525.753237][T14620] fuse: Unknown parameter 'user_i00000000000000000000' [ 3525.983440][T28371] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 3526.275823][T14617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3526.367019][T14617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3528.339156][T28371] usb 1-1: unable to get BOS descriptor or descriptor too short [ 3528.356799][T28371] usb 1-1: too many configurations: 238, using maximum allowed: 8 [ 3528.415983][T28371] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 3528.452685][T28371] usb 1-1: can't read configurations, error -71 [ 3528.816683][T14670] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3528.854124][ T30] audit: type=1400 audit(1767132238.534:1592): avc: denied { watch_reads } for pid=14671 comm="syz.1.10466" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 3529.467379][T30261] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3529.601162][T30261] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3529.719599][T30261] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3529.998828][T30261] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3530.084302][ T9644] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 3530.243711][ T9644] usb 1-1: Using ep0 maxpacket: 16 [ 3530.257884][T30261] bridge_slave_1: left allmulticast mode [ 3530.264643][ T9644] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 3530.279648][T30261] bridge_slave_1: left promiscuous mode [ 3530.289566][ T9644] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3530.306183][T30261] bridge0: port 2(bridge_slave_1) entered disabled state [ 3530.334488][ T9644] usb 1-1: config 0 descriptor?? [ 3530.350735][ T9644] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 3530.360114][T30261] bridge_slave_0: left allmulticast mode [ 3530.368858][T14224] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3530.378697][T30261] bridge_slave_0: left promiscuous mode [ 3530.386469][T14224] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3530.399375][T14224] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3530.404863][T30261] bridge0: port 1(bridge_slave_0) entered disabled state [ 3530.415491][T14224] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3530.470835][T14224] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3530.493496][ T6243] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 3530.551985][ T9644] usb 1-1: Detected FT232A [ 3530.561388][ T9644] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 3530.605902][ T9644] usb 1-1: USB disconnect, device number 67 [ 3530.625869][ T9644] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 3530.656205][ T9644] ftdi_sio 1-1:0.0: device disconnected [ 3530.665651][ T6243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3530.692499][ T6243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3530.739674][ T6243] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 3530.757591][ T6243] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3530.793255][ T6243] usb 2-1: config 0 descriptor?? [ 3530.980290][T30261] dvmrp0 (unregistering): left allmulticast mode [ 3531.149578][ T30] audit: type=1400 audit(1767132240.824:1593): avc: denied { name_bind } for pid=14730 comm="syz.0.10485" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 3531.179972][ T30] audit: type=1400 audit(1767132240.824:1594): avc: denied { name_connect } for pid=14730 comm="syz.0.10485" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 3531.264902][T30261] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3531.276276][T30261] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3531.288593][T30261] bond0 (unregistering): Released all slaves [ 3531.307390][T14719] netlink: 1044 bytes leftover after parsing attributes in process `syz.5.10481'. [ 3531.331259][ T6243] cp2112 0003:10C4:EA90.008C: unknown main item tag 0x0 [ 3531.351807][ T6243] cp2112 0003:10C4:EA90.008C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 3531.497902][ T6243] cp2112 0003:10C4:EA90.008C: Part Number: 0x82 Device Version: 0xFE [ 3531.807666][T30261] tipc: Disabling bearer [ 3531.823927][T30261] tipc: Left network mode [ 3531.823951][T14702] vxcan1 speed is unknown, defaulting to 1000 [ 3532.098328][T14697] cp2112 0003:10C4:EA90.008C: Error starting transaction: -38 [ 3533.238079][T11876] Bluetooth: hci1: command tx timeout [ 3533.294277][ T6243] cp2112 0003:10C4:EA90.008C: error reading lock byte: -71 [ 3533.351343][ T6243] usb 2-1: USB disconnect, device number 101 [ 3533.544734][T14764] loop2: detected capacity change from 0 to 7 [ 3533.576693][T14590] loop2: [ 3533.588454][T14590] loop2: partition table partially beyond EOD, truncated [ 3533.610217][T14764] loop2: [ 3533.613170][T14764] loop2: partition table partially beyond EOD, truncated [ 3534.899930][T30261] hsr_slave_0: left promiscuous mode [ 3534.914605][T30261] hsr_slave_1: left promiscuous mode [ 3534.924483][T30261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3534.931852][T30261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3534.964292][T30261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3534.971679][T30261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3535.049933][T30261] veth1_macvtap: left promiscuous mode [ 3535.139677][T30261] veth0_macvtap: left promiscuous mode [ 3535.152966][T30261] veth1_vlan: left promiscuous mode [ 3535.164760][T30261] veth0_vlan: left promiscuous mode [ 3535.293426][T11876] Bluetooth: hci1: command tx timeout [ 3535.362568][T14791] [ 3535.364918][T14791] ====================================================== [ 3535.371918][T14791] WARNING: possible circular locking dependency detected [ 3535.378909][T14791] syzkaller #0 Tainted: G L [ 3535.384855][T14791] ------------------------------------------------------ [ 3535.391840][T14791] syz.5.10505/14791 is trying to acquire lock: [ 3535.397957][T14791] ffff888075b6a148 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4a6/0xd60 [ 3535.407675][T14791] [ 3535.407675][T14791] but task is already holding lock: [ 3535.415008][T14791] ffff88805b2f6088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 3535.424281][T14791] [ 3535.424281][T14791] which lock already depends on the new lock. [ 3535.424281][T14791] [ 3535.434648][T14791] [ 3535.434648][T14791] the existing dependency chain (in reverse order) is: [ 3535.443629][T14791] [ 3535.443629][T14791] -> #2 (&of->mutex){+.+.}-{4:4}: [ 3535.450803][T14791] __mutex_lock+0x1aa/0x1ca0 [ 3535.455891][T14791] kernfs_fop_write_iter+0x28f/0x570 [ 3535.461672][T14791] iter_file_splice_write+0xa24/0x12b0 [ 3535.467622][T14791] do_splice+0x1478/0x1fc0 [ 3535.472530][T14791] __do_splice+0x32a/0x360 [ 3535.477439][T14791] __x64_sys_splice+0x187/0x250 [ 3535.482784][T14791] do_syscall_64+0xcd/0xf80 [ 3535.487782][T14791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3535.494167][T14791] [ 3535.494167][T14791] -> #1 (&pipe->mutex){+.+.}-{4:4}: [ 3535.501514][T14791] __mutex_lock+0x1aa/0x1ca0 [ 3535.506608][T14791] anon_pipe_write+0x15d/0x1bd0 [ 3535.511974][T14791] __kernel_write_iter+0x720/0xb10 [ 3535.517577][T14791] __kernel_write+0xf5/0x140 [ 3535.522665][T14791] autofs_notify_daemon+0x4db/0xd60 [ 3535.528355][T14791] autofs_wait+0x10f3/0x1ac0 [ 3535.533434][T14791] autofs_mount_wait+0x132/0x3c0 [ 3535.538861][T14791] autofs_d_automount+0x4b2/0x960 [ 3535.544373][T14791] __traverse_mounts+0x1b9/0x830 [ 3535.549806][T14791] step_into_slowpath+0x772/0xf50 [ 3535.555320][T14791] path_lookupat+0x627/0xc40 [ 3535.560403][T14791] filename_lookup+0x224/0x5f0 [ 3535.565659][T14791] user_path_at+0x3a/0x60 [ 3535.570478][T14791] __x64_sys_mount+0x1fb/0x310 [ 3535.575729][T14791] do_syscall_64+0xcd/0xf80 [ 3535.580725][T14791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3535.587106][T14791] [ 3535.587106][T14791] -> #0 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 3535.594797][T14791] __lock_acquire+0x1669/0x2890 [ 3535.600139][T14791] lock_acquire+0x179/0x330 [ 3535.605132][T14791] __mutex_lock+0x1aa/0x1ca0 [ 3535.610217][T14791] autofs_notify_daemon+0x4a6/0xd60 [ 3535.617376][T14791] autofs_wait+0x10f3/0x1ac0 [ 3535.622462][T14791] autofs_mount_wait+0x132/0x3c0 [ 3535.627888][T14791] autofs_d_automount+0x4b2/0x960 [ 3535.633404][T14791] __traverse_mounts+0x1b9/0x830 [ 3535.638851][T14791] step_into_slowpath+0x772/0xf50 [ 3535.644369][T14791] path_lookupat+0x627/0xc40 [ 3535.649455][T14791] filename_lookup+0x224/0x5f0 [ 3535.654712][T14791] kern_path+0x35/0x50 [ 3535.659277][T14791] lookup_bdev+0xd8/0x280 [ 3535.664101][T14791] resume_store+0x1d6/0x490 [ 3535.669102][T14791] kobj_attr_store+0x58/0x80 [ 3535.674182][T14791] sysfs_kf_write+0xf2/0x150 [ 3535.679262][T14791] kernfs_fop_write_iter+0x3af/0x570 [ 3535.685046][T14791] vfs_write+0x7d3/0x11d0 [ 3535.689865][T14791] ksys_write+0x12a/0x250 [ 3535.694685][T14791] do_syscall_64+0xcd/0xf80 [ 3535.699678][T14791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3535.706059][T14791] [ 3535.706059][T14791] other info that might help us debug this: [ 3535.706059][T14791] [ 3535.716254][T14791] Chain exists of: [ 3535.716254][T14791] &sbi->pipe_mutex --> &pipe->mutex --> &of->mutex [ 3535.716254][T14791] [ 3535.728640][T14791] Possible unsafe locking scenario: [ 3535.728640][T14791] [ 3535.736055][T14791] CPU0 CPU1 [ 3535.741386][T14791] ---- ---- [ 3535.746726][T14791] lock(&of->mutex); [ 3535.750676][T14791] lock(&pipe->mutex); [ 3535.757329][T14791] lock(&of->mutex); [ 3535.763820][T14791] lock(&sbi->pipe_mutex); [ 3535.768297][T14791] [ 3535.768297][T14791] *** DEADLOCK *** [ 3535.768297][T14791] [ 3535.776406][T14791] 4 locks held by syz.5.10505/14791: [ 3535.781670][T14791] #0: ffff888029d53438 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 3535.790725][T14791] #1: ffff888035db6420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 3535.799697][T14791] #2: ffff88805b2f6088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 3535.809441][T14791] #3: ffff88801d2a04b8 (kn->active#74){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 3535.819448][T14791] [ 3535.819448][T14791] stack backtrace: [ 3535.825326][T14791] CPU: 0 UID: 0 PID: 14791 Comm: syz.5.10505 Tainted: G L syzkaller #0 PREEMPT(full) [ 3535.825353][T14791] Tainted: [L]=SOFTLOCKUP [ 3535.825359][T14791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 3535.825369][T14791] Call Trace: [ 3535.825374][T14791] [ 3535.825381][T14791] dump_stack_lvl+0x116/0x1f0 [ 3535.825405][T14791] print_circular_bug+0x275/0x340 [ 3535.825425][T14791] check_noncircular+0x146/0x160 [ 3535.825446][T14791] __lock_acquire+0x1669/0x2890 [ 3535.825466][T14791] lock_acquire+0x179/0x330 [ 3535.825481][T14791] ? autofs_notify_daemon+0x4a6/0xd60 [ 3535.825499][T14791] ? __pfx___might_resched+0x10/0x10 [ 3535.825513][T14791] ? __lock_acquire+0x12c2/0x2890 [ 3535.825531][T14791] __mutex_lock+0x1aa/0x1ca0 [ 3535.825551][T14791] ? autofs_notify_daemon+0x4a6/0xd60 [ 3535.825569][T14791] ? __kernel_text_address+0xd/0x40 [ 3535.825591][T14791] ? find_held_lock+0x2b/0x80 [ 3535.825615][T14791] ? autofs_notify_daemon+0x4a6/0xd60 [ 3535.825634][T14791] ? autofs_notify_daemon+0x45a/0xd60 [ 3535.825653][T14791] ? __pfx___mutex_lock+0x10/0x10 [ 3535.825674][T14791] ? __mutex_unlock_slowpath+0x161/0x790 [ 3535.825698][T14791] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3535.825721][T14791] ? from_kgid_munged+0xab/0x130 [ 3535.825744][T14791] ? autofs_notify_daemon+0x4a6/0xd60 [ 3535.825762][T14791] autofs_notify_daemon+0x4a6/0xd60 [ 3535.825782][T14791] ? __pfx_autofs_notify_daemon+0x10/0x10 [ 3535.825806][T14791] ? kernfs_fop_write_iter+0x3af/0x570 [ 3535.825830][T14791] ? vfs_write+0x7d3/0x11d0 [ 3535.825849][T14791] ? ksys_write+0x12a/0x250 [ 3535.825878][T14791] ? lockdep_init_map_type+0x5c/0x270 [ 3535.825899][T14791] ? lockdep_init_map_type+0x5c/0x270 [ 3535.825921][T14791] autofs_wait+0x10f3/0x1ac0 [ 3535.825939][T14791] ? __pfx_autofs_wait+0x10/0x10 [ 3535.825954][T14791] ? __pfx_path_check_mount+0x10/0x10 [ 3535.825970][T14791] ? find_held_lock+0x2b/0x80 [ 3535.825993][T14791] ? path_has_submounts+0xcf/0x120 [ 3535.826013][T14791] ? do_raw_spin_unlock+0x172/0x230 [ 3535.826035][T14791] ? find_held_lock+0x2b/0x80 [ 3535.826059][T14791] autofs_mount_wait+0x132/0x3c0 [ 3535.826077][T14791] autofs_d_automount+0x4b2/0x960 [ 3535.826097][T14791] __traverse_mounts+0x1b9/0x830 [ 3535.826126][T14791] step_into_slowpath+0x772/0xf50 [ 3535.826147][T14791] ? __up_read+0x2d1/0x700 [ 3535.826167][T14791] ? __pfx_step_into_slowpath+0x10/0x10 [ 3535.826185][T14791] ? __lookup_slow+0x430/0x460 [ 3535.826204][T14791] path_lookupat+0x627/0xc40 [ 3535.826225][T14791] filename_lookup+0x224/0x5f0 [ 3535.826246][T14791] ? __pfx_filename_lookup+0x10/0x10 [ 3535.826275][T14791] ? getname_kernel+0x52/0x370 [ 3535.826301][T14791] ? __asan_memcpy+0x3c/0x60 [ 3535.826319][T14791] kern_path+0x35/0x50 [ 3535.826339][T14791] lookup_bdev+0xd8/0x280 [ 3535.826360][T14791] ? __pfx_lookup_bdev+0x10/0x10 [ 3535.826382][T14791] ? __asan_memcpy+0x3c/0x60 [ 3535.826399][T14791] resume_store+0x1d6/0x490 [ 3535.826422][T14791] ? __pfx_resume_store+0x10/0x10 [ 3535.826447][T14791] ? find_held_lock+0x2b/0x80 [ 3535.826472][T14791] ? __pfx_resume_store+0x10/0x10 [ 3535.826494][T14791] kobj_attr_store+0x58/0x80 [ 3535.826513][T14791] ? __pfx_kobj_attr_store+0x10/0x10 [ 3535.826534][T14791] sysfs_kf_write+0xf2/0x150 [ 3535.826552][T14791] kernfs_fop_write_iter+0x3af/0x570 [ 3535.826575][T14791] ? __pfx_sysfs_kf_write+0x10/0x10 [ 3535.826593][T14791] vfs_write+0x7d3/0x11d0 [ 3535.826613][T14791] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 3535.826639][T14791] ? __pfx_vfs_write+0x10/0x10 [ 3535.826666][T14791] ksys_write+0x12a/0x250 [ 3535.826686][T14791] ? __pfx_ksys_write+0x10/0x10 [ 3535.826710][T14791] do_syscall_64+0xcd/0xf80 [ 3535.826731][T14791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3535.826749][T14791] RIP: 0033:0x7f0d4e98f749 [ 3535.826765][T14791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3535.826781][T14791] RSP: 002b:00007f0d4f892038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 3535.826802][T14791] RAX: ffffffffffffffda RBX: 00007f0d4ebe5fa0 RCX: 00007f0d4e98f749 [ 3535.826813][T14791] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000003 [ 3535.826823][T14791] RBP: 00007f0d4ea13f91 R08: 0000000000000000 R09: 0000000000000000 [ 3535.826834][T14791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3535.826843][T14791] R13: 00007f0d4ebe6038 R14: 00007f0d4ebe5fa0 R15: 00007ffda74b9978 [ 3535.826859][T14791] [ 3536.257083][ T30] audit: type=1400 audit(1767132245.934:1595): avc: denied { write } for pid=5801 comm="syz-executor" path="pipe:[5308]" dev="pipefs" ino=5308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 3536.314665][T14791] PM: Image not found (code -22) [ 3536.955834][T30261] team0 (unregistering): Port device team_slave_1 removed [ 3536.982656][T30261] team0 (unregistering): Port device team_slave_0 removed [ 3537.229817][T10409] bond0: (slave syz_tun): Releasing backup interface [ 3537.363943][T11876] Bluetooth: hci1: command tx timeout [ 3537.605205][T30261] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3537.676972][T30261] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3537.739408][T30261] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3537.785788][T30261] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3537.922665][T30261] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3537.964695][T30261] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3538.019595][T30261] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3538.064920][T30261] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3538.161269][T30261] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3538.198844][T30261] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3538.252347][T30261] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3538.299071][T30261] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3538.376862][T30261] bridge_slave_1: left allmulticast mode [ 3538.385069][T30261] bridge_slave_1: left promiscuous mode [ 3538.390928][T30261] bridge0: port 2(bridge_slave_1) entered disabled state [ 3538.398976][T30261] bridge_slave_0: left allmulticast mode [ 3538.408026][T30261] bridge_slave_0: left promiscuous mode [ 3538.413765][T30261] bridge0: port 1(bridge_slave_0) entered disabled state [ 3538.422349][T30261] bridge_slave_1: left allmulticast mode [ 3538.428315][T30261] bridge_slave_1: left promiscuous mode [ 3538.433959][T30261] bridge0: port 2(bridge_slave_1) entered disabled state [ 3538.441868][T30261] bridge_slave_0: left allmulticast mode [ 3538.448108][T30261] bridge_slave_0: left promiscuous mode [ 3538.453805][T30261] bridge0: port 1(bridge_slave_0) entered disabled state [ 3538.462341][T30261] bridge_slave_1: left allmulticast mode [ 3538.468050][T30261] bridge_slave_1: left promiscuous mode [ 3538.474654][T30261] bridge0: port 2(bridge_slave_1) entered disabled state [ 3538.482558][T30261] bridge_slave_0: left allmulticast mode [ 3538.489208][T30261] bridge_slave_0: left promiscuous mode [ 3538.495284][T30261] bridge0: port 1(bridge_slave_0) entered disabled state [ 3538.561798][T30261] dvmrp0 (unregistering): left allmulticast mode [ 3538.636402][T30261] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3538.645849][T30261] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3538.656183][T30261] bond0 (unregistering): Released all slaves [ 3538.680361][T30261] dvmrp0 (unregistering): left allmulticast mode [ 3538.736755][T30261] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3538.746465][T30261] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3538.755637][T30261] bond0 (unregistering): Released all slaves [ 3538.806864][T30261] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3538.816221][T30261] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3538.825456][T30261] bond0 (unregistering): Released all slaves [ 3539.388863][T30261] hsr_slave_0: left promiscuous mode [ 3539.401688][T30261] hsr_slave_1: left promiscuous mode [ 3539.410486][T30261] hsr_slave_0: left promiscuous mode [ 3539.417807][T30261] hsr_slave_1: left promiscuous mode [ 3539.424420][T30261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3539.431787][T30261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3539.439684][T30261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3539.447644][T30261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3539.457226][T30261] hsr_slave_0: left promiscuous mode [ 3539.462853][T30261] hsr_slave_1: left promiscuous mode [ 3539.468721][T30261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3539.478925][T30261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3539.486545][T30261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3539.493943][T30261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3539.505618][T30261] veth1_macvtap: left promiscuous mode [ 3539.511075][T30261] veth0_macvtap: left promiscuous mode [ 3539.516630][T30261] veth1_vlan: left promiscuous mode [ 3539.521833][T30261] veth0_vlan: left promiscuous mode [ 3539.528365][T30261] veth1_macvtap: left promiscuous mode [ 3539.533841][T30261] veth0_macvtap: left promiscuous mode [ 3539.539315][T30261] veth1_vlan: left promiscuous mode [ 3539.544888][T30261] veth0_vlan: left promiscuous mode [ 3539.550487][T30261] veth1_macvtap: left promiscuous mode [ 3539.555985][T30261] veth0_macvtap: left promiscuous mode [ 3539.561473][T30261] veth1_vlan: left promiscuous mode [ 3539.566820][T30261] veth0_vlan: left promiscuous mode [ 3539.709899][T30261] team0 (unregistering): Port device team_slave_1 removed [ 3539.728000][T30261] team0 (unregistering): Port device team_slave_0 removed [ 3539.832673][T30261] team0 (unregistering): Port device team_slave_1 removed [ 3539.856968][T30261] team0 (unregistering): Port device team_slave_0 removed [ 3539.937000][T30261] team0 (unregistering): Port device team_slave_1 removed [ 3539.946648][T30261] team0 (unregistering): Port device team_slave_0 removed [ 3539.978032][T10919] smc: removing ib device syz2 [ 3540.030031][T26222] vxcan1 speed is unknown, defaulting to 1000 [ 3540.042606][T26222] syz2: Port: 1 Link DOWN