last executing test programs: 2m41.805295703s ago: executing program 2 (id=185): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r1, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000380)={&(0x7f0000000280)=""/242, 0xf2}) r3 = accept$inet6(r2, &(0x7f00000003c0), &(0x7f0000000440)=0x1c) recvmsg(r3, &(0x7f0000001880)={&(0x7f0000000480)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}}}, 0xb2, &(0x7f00000017c0)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/110, 0x6e}, {&(0x7f0000001ac0)=""/4111, 0x100f}, {&(0x7f0000001600)=""/126, 0x7e}, {&(0x7f0000001680)=""/5, 0x5}, {&(0x7f00000016c0)=""/179, 0xb3}], 0x6, &(0x7f0000001840)=""/30, 0x1e}, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) ftruncate(r2, 0xc17a) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x7, r1, r1, 0x3, 0xfffffffffffffffa, 0x3fff}) 2m41.548187496s ago: executing program 2 (id=187): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000037c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/96, 0x0, 0xffff1000}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000000, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) read$FUSE(r1, &(0x7f0000001680)={0x2020}, 0x2020) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xffffffff}) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b023e660102030109000000000904000001e3fe11000905000000000000000705936b90"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = epoll_create1(0x80000) epoll_pwait(r2, &(0x7f0000003740)=[{}, {}], 0x2, 0x10000, &(0x7f0000003780)={[0x3]}, 0x8) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dc4a) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r3 = syz_usb_connect$cdc_ecm(0x1, 0x96, &(0x7f00000021c0)=ANY=[], &(0x7f0000000800)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x110, 0x4, 0xa, 0x1, 0x0, 0x7}, 0x1d, &(0x7f0000003800)=ANY=[@ANYBLOB="050f1d0001c7dd18100a05e30f00000000050000000000f03fff0011c00000"]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000000c0), 0x12) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r7, 0xffffffffffffffff}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9}, 0xc) read$FUSE(r6, &(0x7f0000000080)={0x2020}, 0x2020) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), &(0x7f0000003840)=@v2={0x2000000, [{0x8000, 0x4b9b}, {0x10001, 0x5}]}, 0x14, 0x0) lgetxattr(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)=ANY=[@ANYRES16=r3], 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="bf000100000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2m37.977182053s ago: executing program 2 (id=204): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000), 0x0) accept4(r4, 0x0, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r6 = fsopen(&(0x7f0000000180)='ntfs3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0x9) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff2}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000800) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, 0x0, 0x0) unshare(0x68060200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setpriority(0x0, r0, 0x0) 2m36.959404593s ago: executing program 2 (id=206): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) pipe(0x0) r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000005c0)=r2, 0x12) r5 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r6}, 0x10) write$cgroup_int(r5, &(0x7f0000000040)=0x1, 0x12) 2m36.386027502s ago: executing program 2 (id=212): setgroups(0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "c4"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}}], {0x14}}, 0x98}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x3b, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$swradio(&(0x7f0000000380), 0x1, 0x2) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x7ffffffc, 0xc, 0xfffffffffffffffd, 0x59c}) setrlimit(0x8, &(0x7f0000000380)) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f00000003c0)={0x1, 0x2, 0x3}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000100)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@bridge_dellink={0x20, 0x11, 0x100, 0x70bd25, 0x25dfdbfd, {0x7, 0x0, 0x0, r5, 0x2c400, 0x2}}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) set_mempolicy_home_node(&(0x7f00004e3000/0x4000)=nil, 0x4000, 0x2, 0x0) 2m35.021722628s ago: executing program 2 (id=216): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x4, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=unix']) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff086dd1fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 2m19.468764511s ago: executing program 32 (id=216): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x4, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=unix']) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff086dd1fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 9.219622069s ago: executing program 0 (id=764): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) accept4(r4, 0x0, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0xff) r6 = fsopen(&(0x7f0000000180)='ntfs3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0x9) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff2}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000800) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, 0x0, 0x0) unshare(0x68060200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setpriority(0x0, r0, 0x0) 7.963807518s ago: executing program 1 (id=770): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x3}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)={r1, 0x9c, "dd27879f1fd685d5a4a4a5a5a154e6f98e3d10a84e672b1bb5eb5b8ef31a580f2dc1056a45eee80a72f54d62fd50c755fe542dc9d7a2caf29d8e355b3d0653e41c855b39770887957b5b5264a87cdf568a5b2a9ebe92b4be0efcec1fcd473601d263dccc89b8faaf088697bf091900db64adb27eb115935c760624c6a71330d5984f2e56ea69ef6079d4e0dcb3b0085b5e8b8b6d4d01fc4ea0a7388f"}, &(0x7f0000000180)=0xa4) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b52, &(0x7f0000000040)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x5}, 0x1c, 0x0}}], 0x1, 0x10) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300), 0x8) 7.457090852s ago: executing program 1 (id=772): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r3, 0x101, 0x7, &(0x7f0000000040)=0x2, 0x4) 6.41866293s ago: executing program 3 (id=776): socket(0x10, 0x3, 0x0) io_submit(0x0, 0x1, &(0x7f0000000780)=[0x0]) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0x40000000015, 0x805, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1805b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)}], 0x1}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x81, 0xcc, 0xaf, 0x20, 0x1df7, 0x2500, 0x505d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x56, 0x0, 0xf0, 0x5, [{{0x9, 0x4, 0xc4, 0x1, 0x0, 0x54, 0x21, 0x81, 0xff}}]}}]}}, &(0x7f0000000b40)={0x4c, 0x0, 0x0, 0x0, 0x8}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, 0x0, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYRES8], 0x54}}, 0x0) 6.3743552s ago: executing program 0 (id=777): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xd, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0x98}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r5, 0x6430) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a14"], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="dc2000003d0007010000000000000000017c0000040000000c00018006000600800a0000b8200280b1200680d80001"], 0x20dc}}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000063c0)=ANY=[@ANYBLOB="200000002c00010026bd7000fcdbdf25040000000800170002"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 5.91680273s ago: executing program 1 (id=778): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a0000000200", 0x6) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) 5.844755975s ago: executing program 1 (id=780): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xff}, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000015c0)={0x1c, &(0x7f0000000380)=ANY=[], 0x0, 0x0}) 5.351717082s ago: executing program 4 (id=781): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x48) r1 = gettid() r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r2, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) write$rfkill(r2, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(r1, 0x6, &(0x7f0000000240)=0x5) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x2) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x100c000, 0x83e, 0x0, 0x3}, 0x20) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) r7 = socket$pppoe(0x18, 0x1, 0x0) close(r7) 5.284258424s ago: executing program 0 (id=782): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x103b02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r6, &(0x7f00000003c0)=[{{&(0x7f00000002c0)=@isdn, 0x80, &(0x7f0000000380)=[{&(0x7f0000001b40)=""/66, 0x42}, {0x0}], 0x2}, 0x8}, {{&(0x7f0000001c80)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000001ec0), 0x0, &(0x7f00000004c0)=""/4100, 0x1004}, 0x8}], 0x2, 0x100, &(0x7f0000002fc0)={0x0, 0x3938700}) io_uring_setup(0xd6c, &(0x7f0000000080)={0x0, 0xf6fe, 0x800, 0x3, 0x23a}) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 4.457190306s ago: executing program 4 (id=783): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xff}, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000015c0)={0x1c, &(0x7f0000000380)=ANY=[], 0x0, 0x0}) 3.940393049s ago: executing program 0 (id=784): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x24040800) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000040)=""/170, 0x47}], 0x1, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r2, 0x107, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000000080012"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x2, 0xa, 0x4) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) fcntl$setpipe(r5, 0x407, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, 0x0) mknodat$null(r1, &(0x7f0000000000)='./file0\x00', 0x4, 0x103) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) fcntl$getownex(r1, 0x10, &(0x7f0000000100)) 3.538687464s ago: executing program 0 (id=786): ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x40184810, &(0x7f00000000c0)={0x2, 0xffffffff, 0x7, 0x1}) (fail_nth: 3) 3.334875261s ago: executing program 3 (id=788): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r3, 0x101, 0x7, 0x0, 0x0) 3.224147713s ago: executing program 5 (id=789): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x0, 0x0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYRES64=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000280)="ca1c808bb35bdabb", 0x8) write$qrtrtun(r0, &(0x7f0000000c00)="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", 0x1a2) write$UHID_INPUT(r0, &(0x7f0000001300)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff77, 0x0, 0x0}, &(0x7f0000000000)=0x40) 3.209904901s ago: executing program 1 (id=790): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x103b02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{&(0x7f00000002c0)=@isdn, 0x80, &(0x7f0000000380)=[{&(0x7f0000001b40)=""/66, 0x42}, {0x0}], 0x2}, 0x8}, {{&(0x7f0000001c80)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000001ec0), 0x0, &(0x7f00000004c0)=""/4100, 0x1004}, 0x8}], 0x2, 0x100, &(0x7f0000002fc0)={0x0, 0x3938700}) io_uring_setup(0xd6c, &(0x7f0000000080)={0x0, 0xf6fe, 0x800, 0x3, 0x23a}) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 3.073052126s ago: executing program 5 (id=791): syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x4695c8b54b4dd25d, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x80e96000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000300), 0x302, 0x0) pwritev2(r5, &(0x7f00000000c0)=[{&(0x7f00000003c0)='\t', 0x1}], 0x1, 0x40, 0x9d, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x21, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 2.285237527s ago: executing program 4 (id=792): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1}}]}, 0xa0}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.076722098s ago: executing program 5 (id=793): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 2.017066552s ago: executing program 3 (id=794): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) 1.987897302s ago: executing program 3 (id=795): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) 1.263836557s ago: executing program 3 (id=796): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x24040800) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000040)=""/170, 0x47}], 0x1, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r2, 0x107, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000000080012"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x2, 0xa, 0x4) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) fcntl$setpipe(r5, 0x407, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, 0x0) mknodat$null(r1, &(0x7f0000000000)='./file0\x00', 0x4, 0x103) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) fcntl$getownex(r1, 0x10, &(0x7f0000000100)) 888.094155ms ago: executing program 5 (id=797): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) pipe(&(0x7f0000000040)) r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000005c0)=r2, 0x12) r5 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r6}, 0x10) write$cgroup_int(r5, &(0x7f0000000040)=0x1, 0x12) 666.362047ms ago: executing program 0 (id=798): socket(0x10, 0x3, 0x0) io_submit(0x0, 0x1, &(0x7f0000000780)=[0x0]) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0x40000000015, 0x805, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1805b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a0000000900010073797a30000000003c000000160a010100000000000000000a000000080007400000000108000380040003800900010073797a30000000000900020073797a3100000000140000001100010000000000000000000000000a45b917bb46d9aa0a8daf28dcd40d9d4985760a2448018d66981c78674f1f416796669e722635f0c7ff3689310214ee55eb5e189d4cf0d18af779ffe8bb85900d9c1bf2e6937232fc656dc69fc190fd0f8d1a5e82eb541016b14dc4674434506de1c72d9e4cedf13690d444822722f7a980e2"], 0x84}}, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='veno\x00', 0x5) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) syz_usb_connect(0x3, 0x24, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x81, 0xcc, 0xaf, 0x20, 0x1df7, 0x2500, 0x505d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x56, 0x0, 0xf0, 0x5, [{{0x9, 0x4, 0xc4, 0x1, 0x0, 0x54, 0x21, 0x81, 0xff}}]}}]}}, &(0x7f0000000b40)={0x4c, 0x0, 0x0, 0x0, 0x8}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x30000, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x0, 0x0, {0x2a}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYRES8], 0x54}}, 0x0) 665.709126ms ago: executing program 3 (id=799): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000015c0)={0x1c, &(0x7f0000000380)=ANY=[], 0x0, 0x0}) 652.536531ms ago: executing program 4 (id=800): socket$inet6(0xa, 0x80002, 0x88) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x800000000000002, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x11, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 580.515418ms ago: executing program 5 (id=801): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x3}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)={r1, 0x9c, "dd27879f1fd685d5a4a4a5a5a154e6f98e3d10a84e672b1bb5eb5b8ef31a580f2dc1056a45eee80a72f54d62fd50c755fe542dc9d7a2caf29d8e355b3d0653e41c855b39770887957b5b5264a87cdf568a5b2a9ebe92b4be0efcec1fcd473601d263dccc89b8faaf088697bf091900db64adb27eb115935c760624c6a71330d5984f2e56ea69ef6079d4e0dcb3b0085b5e8b8b6d4d01fc4ea0a7388f"}, &(0x7f0000000180)=0xa4) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b52, &(0x7f0000000040)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x5}, 0x1c, 0x0}}], 0x1, 0x10) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300), 0x8) 527.008422ms ago: executing program 1 (id=802): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x48) r1 = gettid() r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r2, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) write$rfkill(r2, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(r1, 0x6, &(0x7f0000000240)=0x5) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x2) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x100c000, 0x83e, 0x0, 0x3}, 0x20) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) r7 = socket$pppoe(0x18, 0x1, 0x0) close(r7) 108.846479ms ago: executing program 4 (id=803): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/config\x00') read$msr(r0, &(0x7f0000000240)=""/94, 0x5e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x80000001, 0x408000) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x10, 0x800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000001200)=[{{0x0, 0x8dff, &(0x7f0000000440)=[{&(0x7f00000003c0)="ba", 0x1}, {&(0x7f00000005c0)='0', 0xcea40}], 0x2}}], 0x1, 0x0) 428.643µs ago: executing program 4 (id=804): syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x4695c8b54b4dd25d, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x80e96000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000300), 0x302, 0x0) pwritev2(r5, &(0x7f00000000c0)=[{&(0x7f00000003c0)='\t', 0x1}], 0x1, 0x40, 0x9d, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x21, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 0s ago: executing program 5 (id=805): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r3, 0x101, 0x7, 0x0, 0x0) kernel console output (not intermixed with test programs): cept } for pid=6826 comm="syz.0.231" lport=34502 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 123.512581][ T5899] usb 4-1: Using ep0 maxpacket: 32 [ 123.525228][ T5899] usb 4-1: unable to get BOS descriptor or descriptor too short [ 123.527467][ T30] audit: type=1400 audit(1742389223.970:369): avc: denied { write } for pid=6826 comm="syz.0.231" lport=34502 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 123.558475][ T5899] usb 4-1: config 86 has an invalid interface number: 196 but max is 0 [ 123.561318][ T30] audit: type=1400 audit(1742389223.970:370): avc: denied { setopt } for pid=6826 comm="syz.0.231" lport=34502 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 123.604157][ T30] audit: type=1400 audit(1742389224.420:371): avc: denied { nlmsg_write } for pid=6830 comm="syz.1.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 123.624589][ T5899] usb 4-1: config 86 has no interface number 0 [ 123.624622][ T5899] usb 4-1: config 86 interface 196 has no altsetting 0 [ 123.661677][ T5899] usb 4-1: string descriptor 0 read error: -22 [ 123.668025][ T5899] usb 4-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=50.5d [ 123.691576][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.919594][ T6835] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 124.107238][ T5899] msi2500 4-1:86.196: Registered as swradio24 [ 124.120505][ T5899] msi2500 4-1:86.196: SDR API is still slightly experimental and functionality changes may follow [ 124.196935][ T26] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 124.197754][ T6845] FAULT_INJECTION: forcing a failure. [ 124.197754][ T6845] name failslab, interval 1, probability 0, space 0, times 0 [ 124.217287][ T6845] CPU: 0 UID: 0 PID: 6845 Comm: syz.0.236 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 124.217308][ T6845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 124.217318][ T6845] Call Trace: [ 124.217324][ T6845] [ 124.217331][ T6845] dump_stack_lvl+0x16c/0x1f0 [ 124.217360][ T6845] should_fail_ex+0x50a/0x650 [ 124.217383][ T6845] ? fs_reclaim_acquire+0xae/0x150 [ 124.217407][ T6845] ? cgroup_bpf_link_attach+0x157/0x3e0 [ 124.217430][ T6845] should_failslab+0xc2/0x120 [ 124.217449][ T6845] __kmalloc_cache_noprof+0x68/0x410 [ 124.217475][ T6845] ? cgroup_v1v2_get_from_fd+0xce/0x110 [ 124.217497][ T6845] cgroup_bpf_link_attach+0x157/0x3e0 [ 124.217521][ T6845] ? __pfx_cgroup_bpf_link_attach+0x10/0x10 [ 124.217549][ T6845] ? fput+0x67/0x440 [ 124.217565][ T6845] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 124.217597][ T6845] __sys_bpf+0x31a2/0x49c0 [ 124.217615][ T6845] ? __pfx_lock_release+0x10/0x10 [ 124.217641][ T6845] ? __pfx___sys_bpf+0x10/0x10 [ 124.217658][ T6845] ? vfs_write+0x306/0x1150 [ 124.217688][ T6845] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 124.217726][ T6845] ? fput+0x67/0x440 [ 124.217745][ T6845] ? ksys_write+0x1ba/0x250 [ 124.217760][ T6845] ? __pfx_ksys_write+0x10/0x10 [ 124.217780][ T6845] __x64_sys_bpf+0x78/0xc0 [ 124.217797][ T6845] ? lockdep_hardirqs_on+0x7c/0x110 [ 124.217818][ T6845] do_syscall_64+0xcd/0x250 [ 124.217841][ T6845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.217862][ T6845] RIP: 0033:0x7f4c00f8d169 [ 124.217874][ T6845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.217890][ T6845] RSP: 002b:00007f4bfedf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 124.217905][ T6845] RAX: ffffffffffffffda RBX: 00007f4c011a6080 RCX: 00007f4c00f8d169 [ 124.217916][ T6845] RDX: 0000000000000050 RSI: 0000400000000400 RDI: 000000000000001c [ 124.217926][ T6845] RBP: 00007f4bfedf6090 R08: 0000000000000000 R09: 0000000000000000 [ 124.217942][ T6845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.217952][ T6845] R13: 0000000000000001 R14: 00007f4c011a6080 R15: 00007ffeda519318 [ 124.217974][ T6845] [ 124.902583][ T26] usb 2-1: Using ep0 maxpacket: 8 [ 124.912870][ T26] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 124.921105][ T26] usb 2-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 124.931382][ T26] usb 2-1: config 179 has no interface number 0 [ 125.522559][ T26] usb 2-1: config 179 interface 65 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 125.536977][ T26] usb 2-1: config 179 interface 65 has no altsetting 0 [ 125.547053][ T26] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 125.556296][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.558858][ T974] usb 4-1: USB disconnect, device number 10 [ 125.577263][ T45] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 125.762575][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 125.926255][ T45] usb 5-1: unable to get BOS descriptor or descriptor too short [ 125.940569][ T45] usb 5-1: config 86 has an invalid interface number: 196 but max is 0 [ 125.952023][ T45] usb 5-1: config 86 has no interface number 0 [ 125.979601][ T45] usb 5-1: config 86 interface 196 has no altsetting 0 [ 126.001064][ T45] usb 5-1: string descriptor 0 read error: -22 [ 126.006525][ T6865] 9pnet_fd: Insufficient options for proto=fd [ 126.013368][ T30] audit: type=1400 audit(1742389226.820:372): avc: denied { read } for pid=6864 comm="syz.0.243" name="sg0" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 126.021981][ T45] usb 5-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=50.5d [ 126.052165][ T26] usb 2-1: USB disconnect, device number 10 [ 126.100329][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.157227][ T45] msi2500 5-1:86.196: Registered as swradio24 [ 126.164759][ T45] msi2500 5-1:86.196: SDR API is still slightly experimental and functionality changes may follow [ 126.645562][ T5867] usb 5-1: USB disconnect, device number 14 [ 127.020714][ T6884] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 127.355243][ T5911] kernel write not supported for file /167/oom_adj (pid: 5911 comm: kworker/1:4) [ 127.452962][ T26] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 127.582518][ T45] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 127.612440][ T26] usb 1-1: Using ep0 maxpacket: 32 [ 127.667815][ T26] usb 1-1: unable to get BOS descriptor or descriptor too short [ 127.676503][ T26] usb 1-1: config 86 has an invalid interface number: 196 but max is 0 [ 127.684768][ T26] usb 1-1: config 86 has no interface number 0 [ 127.690952][ T26] usb 1-1: config 86 interface 196 has no altsetting 0 [ 127.700037][ T26] usb 1-1: string descriptor 0 read error: -22 [ 127.706284][ T26] usb 1-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=50.5d [ 127.715611][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.723678][ T45] usb 5-1: device descriptor read/64, error -71 [ 127.729955][ T971] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 127.757231][ T26] msi2500 1-1:86.196: Registered as swradio24 [ 127.763350][ T26] msi2500 1-1:86.196: SDR API is still slightly experimental and functionality changes may follow [ 127.885332][ T971] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 127.897686][ T971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 127.909244][ T971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 127.920390][ T971] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 127.933266][ T971] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.942457][ T971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.954089][ T971] usb 2-1: config 0 descriptor?? [ 127.959928][ T5867] usb 1-1: USB disconnect, device number 7 [ 127.962398][ T45] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 127.966368][ T6891] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 128.108057][ T45] usb 5-1: device descriptor read/64, error -71 [ 128.203751][ T30] audit: type=1400 audit(1742389229.030:373): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 128.227671][ T45] usb usb5-port1: attempt power cycle [ 128.291410][ T30] audit: type=1400 audit(1742389229.110:374): avc: denied { getopt } for pid=6898 comm="syz.3.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 128.459963][ T971] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 128.518695][ T971] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 128.592703][ T45] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 128.683605][ T45] usb 5-1: device descriptor read/8, error -71 [ 128.703351][ T971] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 128.762969][ T971] usb 2-1: USB disconnect, device number 11 [ 129.348410][ T45] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 129.412774][ T45] usb 5-1: device descriptor read/8, error -71 [ 129.522584][ T45] usb usb5-port1: unable to enumerate USB device [ 130.576248][ T30] audit: type=1400 audit(1742389231.400:375): avc: denied { mount } for pid=6926 comm="syz.4.262" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 130.662380][ T5911] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 130.802420][ T5911] usb 1-1: device descriptor read/64, error -71 [ 131.042376][ T5911] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 131.261104][ T5911] usb 1-1: device descriptor read/64, error -71 [ 131.994742][ T5911] usb usb1-port1: attempt power cycle [ 132.394286][ T5911] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 132.412797][ T5911] usb 1-1: device descriptor read/8, error -71 [ 132.506116][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.515749][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.854156][ T5911] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 133.000172][ T5911] usb 1-1: device descriptor read/8, error -71 [ 133.061450][ T6954] sp0: Synchronizing with TNC [ 133.126680][ T6954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.269'. [ 133.164563][ T6954] netlink: 12 bytes leftover after parsing attributes in process `syz.4.269'. [ 133.192664][ T5911] usb usb1-port1: unable to enumerate USB device [ 133.199157][ T6954] netlink: 'syz.4.269': attribute type 15 has an invalid length. [ 135.579475][ T5132] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 135.589527][ T5132] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 135.610159][ T5132] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 135.620260][ T5132] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 135.628912][ T5132] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 135.637136][ T5132] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 135.679905][ T5818] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 135.687300][ T5818] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 135.694540][ T5818] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 135.707246][ T5818] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 135.715455][ T5818] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 135.723813][ T5818] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 135.735097][ T30] audit: type=1400 audit(1742389236.560:376): avc: denied { mounton } for pid=6973 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 136.813360][ T6983] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4017050179 (64272802864 ns) > initial count (43813986880 ns). Using initial count to start timer. [ 136.947953][ T30] audit: type=1400 audit(1742389237.750:377): avc: denied { listen } for pid=7032 comm="syz.4.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 137.086646][ T30] audit: type=1400 audit(1742389237.770:378): avc: denied { read } for pid=7032 comm="syz.4.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 137.143848][ T6973] chnl_net:caif_netlink_parms(): no params data found [ 137.835743][ T5132] Bluetooth: hci5: command tx timeout [ 138.293943][ T6973] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.301094][ T6973] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.313048][ T6973] bridge_slave_0: entered allmulticast mode [ 138.326936][ T6973] bridge_slave_0: entered promiscuous mode [ 138.341854][ T6973] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.412908][ T6973] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.452666][ T6973] bridge_slave_1: entered allmulticast mode [ 138.459400][ T6973] bridge_slave_1: entered promiscuous mode [ 138.568333][ T6973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.694241][ T6973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.742475][ T26] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 138.828896][ T7077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.287'. [ 138.837822][ T7077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.287'. [ 138.846867][ T7077] netlink: 'syz.4.287': attribute type 15 has an invalid length. [ 139.376524][ T26] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.388907][ T6973] team0: Port device team_slave_0 added [ 139.397554][ T26] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 139.460064][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.499632][ T6973] team0: Port device team_slave_1 added [ 139.552537][ T26] usb 4-1: config 0 descriptor?? [ 139.599583][ T26] pwc: Askey VC010 type 2 USB webcam detected. [ 139.758567][ T7083] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 139.862446][ T5132] Bluetooth: hci5: command tx timeout [ 139.862510][ T6973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.893900][ T5867] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 139.897674][ T6973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.935139][ T6973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.950950][ T6973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.958105][ T6973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.984442][ T6973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.035932][ T26] pwc: recv_control_msg error -32 req 02 val 2b00 [ 140.053570][ T26] pwc: recv_control_msg error -32 req 02 val 2700 [ 140.060784][ T26] pwc: recv_control_msg error -32 req 02 val 2c00 [ 140.068378][ T26] pwc: recv_control_msg error -32 req 04 val 1000 [ 140.075952][ T26] pwc: recv_control_msg error -32 req 04 val 1300 [ 140.083406][ T26] pwc: recv_control_msg error -32 req 04 val 1400 [ 140.090671][ T26] pwc: recv_control_msg error -32 req 02 val 2000 [ 140.092348][ T5867] usb 2-1: Using ep0 maxpacket: 32 [ 140.097840][ T26] pwc: recv_control_msg error -32 req 02 val 2100 [ 140.116331][ T5867] usb 2-1: unable to get BOS descriptor or descriptor too short [ 140.121569][ T26] pwc: recv_control_msg error -32 req 04 val 1500 [ 140.131130][ T5867] usb 2-1: config 86 has an invalid interface number: 196 but max is 0 [ 140.131720][ T26] pwc: recv_control_msg error -32 req 02 val 2500 [ 140.143272][ T5867] usb 2-1: config 86 has no interface number 0 [ 140.152171][ T5867] usb 2-1: config 86 interface 196 has no altsetting 0 [ 140.326717][ T7087] sp0: Synchronizing with TNC [ 140.329116][ T6973] hsr_slave_0: entered promiscuous mode [ 140.363491][ T5867] usb 2-1: string descriptor 0 read error: -22 [ 140.372141][ T5867] usb 2-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=50.5d [ 140.392926][ T6973] hsr_slave_1: entered promiscuous mode [ 140.402467][ T6973] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.410024][ T6973] Cannot create hsr debugfs directory [ 140.419706][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.617742][ T5867] msi2500 2-1:86.196: Registered as swradio24 [ 140.624429][ T5867] msi2500 2-1:86.196: SDR API is still slightly experimental and functionality changes may follow [ 140.746074][ T26] pwc: recv_control_msg error -71 req 02 val 2600 [ 140.762703][ T26] pwc: recv_control_msg error -71 req 02 val 2900 [ 140.772409][ T26] pwc: recv_control_msg error -71 req 02 val 2800 [ 140.782392][ T26] pwc: recv_control_msg error -71 req 04 val 1100 [ 140.792370][ T26] pwc: recv_control_msg error -71 req 04 val 1200 [ 140.798823][ T26] videodev: could not get a free minor [ 140.880787][ T26] pwc: Failed to register as video device (-23). [ 140.888890][ T26] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -23 [ 141.505410][ T26] usb 4-1: USB disconnect, device number 11 [ 141.645110][ T6973] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 141.669414][ T6973] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 141.695053][ T6973] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 141.716087][ T6973] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 141.842574][ T5911] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 141.944916][ T5132] Bluetooth: hci5: command tx timeout [ 142.151823][ T5911] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.189289][ T5911] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 142.215730][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.254138][ T5911] usb 1-1: config 0 descriptor?? [ 142.305499][ T6973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.573723][ T5911] pwc: Askey VC010 type 2 USB webcam detected. [ 142.604981][ T45] usb 2-1: USB disconnect, device number 12 [ 142.621404][ T6973] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.646165][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.653319][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.688052][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.695123][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.733225][ T6973] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 142.821738][ T5911] pwc: recv_control_msg error -32 req 02 val 2b00 [ 142.837405][ T5911] pwc: recv_control_msg error -32 req 02 val 2700 [ 142.929074][ T5911] pwc: recv_control_msg error -32 req 02 val 2c00 [ 142.941070][ T5911] pwc: recv_control_msg error -32 req 04 val 1000 [ 142.948921][ T5911] pwc: recv_control_msg error -32 req 04 val 1300 [ 142.956410][ T5911] pwc: recv_control_msg error -32 req 04 val 1400 [ 142.963540][ T5911] pwc: recv_control_msg error -32 req 02 val 2000 [ 142.972988][ T5911] pwc: recv_control_msg error -32 req 02 val 2100 [ 143.646090][ T5911] pwc: recv_control_msg error -71 req 02 val 2500 [ 143.652903][ T5911] pwc: recv_control_msg error -71 req 02 val 2400 [ 143.672807][ T5911] pwc: recv_control_msg error -71 req 02 val 2600 [ 143.691744][ T5911] pwc: recv_control_msg error -71 req 02 val 2900 [ 143.711674][ T5911] pwc: recv_control_msg error -71 req 02 val 2800 [ 143.758373][ T5911] pwc: recv_control_msg error -71 req 04 val 1100 [ 143.957244][ T5911] pwc: recv_control_msg error -71 req 04 val 1200 [ 144.032461][ T5132] Bluetooth: hci5: command tx timeout [ 144.037003][ T5911] pwc: Registered as video103. [ 144.056393][ T5911] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input22 [ 144.078733][ T30] audit: type=1400 audit(1742389244.900:379): avc: denied { open } for pid=7131 comm="syz.1.299" path="/54/file0" dev="tmpfs" ino=310 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 144.130171][ T5911] usb 1-1: USB disconnect, device number 12 [ 144.145105][ T6973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.439343][ T30] audit: type=1400 audit(1742389245.260:380): avc: denied { execute } for pid=7144 comm="syz.4.303" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=12839 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 145.933717][ T6973] veth0_vlan: entered promiscuous mode [ 145.957908][ T6973] veth1_vlan: entered promiscuous mode [ 146.131106][ T6973] veth0_macvtap: entered promiscuous mode [ 146.142202][ T6973] veth1_macvtap: entered promiscuous mode [ 146.154950][ T6973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.737500][ T6973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.747930][ T6973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.929626][ T6973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.982544][ T6973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.064762][ T6973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.077590][ T6973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.090312][ T6973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.107655][ T6973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.119713][ T6973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.132091][ T6973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.178423][ T7171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.300'. [ 147.192052][ T6973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.198558][ T7171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.300'. [ 147.211559][ T6973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.224209][ T6973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.354590][ T6973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.570542][ T6973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.622392][ T6973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.654399][ T7171] netlink: 'syz.1.300': attribute type 15 has an invalid length. [ 147.654530][ T6973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.375217][ T7164] sp0: Synchronizing with TNC [ 148.418615][ T6973] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.468172][ T6973] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.478094][ T6973] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.489097][ T6973] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.752680][ T5911] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 148.989133][ T5911] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.056755][ T5911] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 149.132418][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.152237][ T5911] usb 4-1: config 0 descriptor?? [ 149.174779][ T5911] pwc: Askey VC010 type 2 USB webcam detected. [ 149.212644][ T6108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.223852][ T6108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.268128][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.284188][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.327029][ T30] audit: type=1400 audit(1742389250.140:381): avc: denied { mount } for pid=6973 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 149.349003][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.383798][ T30] audit: type=1400 audit(1742389250.150:382): avc: denied { mounton } for pid=6973 comm="syz-executor" path="/root/syzkaller.NEeAbD/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 149.431558][ T30] audit: type=1400 audit(1742389250.200:383): avc: denied { mount } for pid=6973 comm="syz-executor" name="/" dev="gadgetfs" ino=7321 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 149.453914][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.632223][ T5911] pwc: recv_control_msg error -32 req 02 val 2b00 [ 149.642658][ T5911] pwc: recv_control_msg error -32 req 02 val 2700 [ 149.681388][ T5911] pwc: recv_control_msg error -32 req 02 val 2c00 [ 149.690064][ T5911] pwc: recv_control_msg error -32 req 04 val 1000 [ 149.701760][ T5911] pwc: recv_control_msg error -32 req 04 val 1300 [ 149.712878][ T5911] pwc: recv_control_msg error -32 req 04 val 1400 [ 149.722897][ T5911] pwc: recv_control_msg error -32 req 02 val 2000 [ 149.774082][ T5911] pwc: recv_control_msg error -32 req 02 val 2100 [ 149.782917][ T5911] pwc: recv_control_msg error -71 req 04 val 1500 [ 149.802558][ T5911] pwc: recv_control_msg error -71 req 02 val 2500 [ 149.809249][ T5911] pwc: recv_control_msg error -71 req 02 val 2400 [ 149.816243][ T5911] pwc: recv_control_msg error -71 req 02 val 2600 [ 149.828268][ T5911] pwc: recv_control_msg error -71 req 02 val 2900 [ 149.842663][ T5911] pwc: recv_control_msg error -71 req 02 val 2800 [ 149.849485][ T5911] pwc: recv_control_msg error -71 req 04 val 1100 [ 149.873199][ T5911] pwc: recv_control_msg error -71 req 04 val 1200 [ 150.322677][ T5911] pwc: Registered as video103. [ 150.445554][ T5899] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 150.557036][ T5911] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input26 [ 150.582041][ T5911] usb 4-1: USB disconnect, device number 12 [ 150.623357][ T5899] usb 2-1: device descriptor read/64, error -71 [ 151.082427][ T5899] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 151.398959][ T5899] usb 2-1: device descriptor read/64, error -71 [ 151.487143][ T30] audit: type=1400 audit(1742389252.080:384): avc: denied { unmount } for pid=7192 comm="syz.4.315" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 151.612857][ T5899] usb usb2-port1: attempt power cycle [ 152.122474][ T5899] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 152.183314][ T5899] usb 2-1: device descriptor read/8, error -71 [ 152.498101][ T5899] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 152.590838][ T5899] usb 2-1: device descriptor read/8, error -71 [ 152.820013][ T5899] usb usb2-port1: unable to enumerate USB device [ 153.574818][ T7249] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 153.952460][ T5899] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 154.132372][ T5899] usb 2-1: Using ep0 maxpacket: 32 [ 154.830142][ T5899] usb 2-1: unable to get BOS descriptor or descriptor too short [ 154.839917][ T5899] usb 2-1: config 86 has an invalid interface number: 196 but max is 0 [ 154.852536][ T5899] usb 2-1: config 86 has no interface number 0 [ 154.858822][ T5899] usb 2-1: config 86 interface 196 has no altsetting 0 [ 154.879010][ T5899] usb 2-1: string descriptor 0 read error: -22 [ 154.885261][ T5899] usb 2-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=50.5d [ 154.894957][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.952361][ T974] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 154.966126][ T7267] sp0: Synchronizing with TNC [ 154.973761][ T7267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.329'. [ 154.992391][ T7267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.329'. [ 155.220521][ T974] usb 1-1: no configurations [ 155.243221][ T974] usb 1-1: can't read configurations, error -22 [ 155.268256][ T7267] netlink: 'syz.3.329': attribute type 15 has an invalid length. [ 155.402747][ T5899] msi2500 2-1:86.196: Registered as swradio24 [ 155.409020][ T974] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 155.422227][ T5899] msi2500 2-1:86.196: SDR API is still slightly experimental and functionality changes may follow [ 155.477913][ T971] usb 2-1: USB disconnect, device number 17 [ 156.007713][ T974] usb 1-1: no configurations [ 156.042937][ T974] usb 1-1: can't read configurations, error -22 [ 156.057955][ T974] usb usb1-port1: attempt power cycle [ 156.355199][ T7283] SELinux: syz.4.341 (7283) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 156.492456][ T974] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 156.548849][ T974] usb 1-1: no configurations [ 156.576875][ T974] usb 1-1: can't read configurations, error -22 [ 156.763551][ T974] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 156.783676][ T974] usb 1-1: no configurations [ 156.792344][ T974] usb 1-1: can't read configurations, error -22 [ 156.801996][ T974] usb usb1-port1: unable to enumerate USB device [ 156.938955][ T7300] fuse: Unknown parameter 'grou00000000000000000000' [ 157.507743][ T7307] 9pnet: Could not find request transport: fd0x0000000000000003 [ 157.632375][ T974] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 157.812486][ T974] usb 1-1: Using ep0 maxpacket: 8 [ 157.818927][ T974] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 157.842355][ T974] usb 1-1: config 179 has no interface number 0 [ 157.939055][ T974] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 157.962566][ T974] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 158.009153][ T974] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 158.543806][ T974] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 158.554374][ T974] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 158.569321][ T974] usb 1-1: config 179 interface 65 has no altsetting 0 [ 158.576422][ T974] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 158.585836][ T974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.641979][ T974] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input28 [ 159.085587][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 159.655726][ T974] usb 1-1: USB disconnect, device number 17 [ 159.662449][ T974] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 159.977786][ T7342] sctp: [Deprecated]: syz.1.362 (pid 7342) Use of int in max_burst socket option. [ 159.977786][ T7342] Use struct sctp_assoc_value instead [ 159.997205][ T7335] syzkaller0: entered promiscuous mode [ 160.012459][ T7335] syzkaller0: entered allmulticast mode [ 160.175314][ T7330] kvm_intel: kvm [7329]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x802 [ 160.235289][ T7338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.359'. [ 162.644364][ T7378] 9pnet_fd: Insufficient options for proto=fd [ 163.502374][ T971] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 163.673531][ T971] usb 1-1: Using ep0 maxpacket: 8 [ 163.693289][ T971] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 163.713943][ T971] usb 1-1: config 179 has no interface number 0 [ 163.720221][ T971] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 163.764892][ T7404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.387'. [ 163.782402][ T971] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 163.807321][ T971] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 163.829154][ T971] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 163.873194][ T971] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 163.896501][ T7404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.387'. [ 163.932417][ T971] usb 1-1: config 179 interface 65 has no altsetting 0 [ 163.939298][ T971] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 163.962846][ T971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.016611][ T971] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input29 [ 164.452403][ T5911] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 164.606336][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 164.615025][ T45] usb 1-1: USB disconnect, device number 18 [ 164.667821][ T45] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 164.800065][ T5911] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.981550][ T5911] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 165.002372][ T974] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 165.023592][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.053329][ T5911] usb 5-1: config 0 descriptor?? [ 165.061773][ T5911] pwc: Askey VC010 type 2 USB webcam detected. [ 165.508781][ T974] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.518957][ T974] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 165.528941][ T974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.534826][ T5911] pwc: recv_control_msg error -32 req 02 val 2b00 [ 165.545959][ T974] usb 4-1: config 0 descriptor?? [ 165.572021][ T974] pwc: Askey VC010 type 2 USB webcam detected. [ 165.581023][ T5911] pwc: recv_control_msg error -32 req 02 val 2700 [ 165.600496][ T5911] pwc: recv_control_msg error -32 req 02 val 2c00 [ 165.621356][ T5911] pwc: recv_control_msg error -32 req 04 val 1000 [ 165.822028][ T5911] pwc: recv_control_msg error -32 req 04 val 1300 [ 165.831198][ T5911] pwc: recv_control_msg error -32 req 04 val 1400 [ 165.838853][ T5911] pwc: recv_control_msg error -32 req 02 val 2000 [ 165.846738][ T5911] pwc: recv_control_msg error -32 req 02 val 2100 [ 166.025248][ T974] pwc: recv_control_msg error -32 req 02 val 2b00 [ 166.076272][ T5911] pwc: recv_control_msg error -71 req 02 val 2500 [ 166.101644][ T5911] pwc: recv_control_msg error -71 req 02 val 2400 [ 166.103785][ T5911] pwc: recv_control_msg error -71 req 02 val 2600 [ 166.105125][ T5911] pwc: recv_control_msg error -71 req 02 val 2900 [ 166.106300][ T5911] pwc: recv_control_msg error -71 req 02 val 2800 [ 166.107403][ T5911] pwc: recv_control_msg error -71 req 04 val 1100 [ 166.108067][ T5911] pwc: recv_control_msg error -71 req 04 val 1200 [ 166.123385][ T5911] pwc: Registered as video103. [ 166.126624][ T5911] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input30 [ 166.150972][ T974] pwc: recv_control_msg error -32 req 02 val 2700 [ 166.398739][ T5911] usb 5-1: USB disconnect, device number 19 [ 166.518679][ T974] pwc: recv_control_msg error -32 req 02 val 2c00 [ 166.519056][ T7436] SELinux: syz.1.395 (7436) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 166.532031][ T974] pwc: recv_control_msg error -32 req 04 val 1000 [ 166.627240][ T974] pwc: recv_control_msg error -32 req 04 val 1300 [ 166.652421][ T974] pwc: recv_control_msg error -32 req 04 val 1400 [ 166.662519][ T974] pwc: recv_control_msg error -32 req 02 val 2000 [ 166.669810][ T974] pwc: recv_control_msg error -32 req 02 val 2100 [ 166.677258][ T974] pwc: recv_control_msg error -32 req 04 val 1500 [ 166.914687][ T974] pwc: recv_control_msg error -71 req 02 val 2400 [ 166.923416][ T974] pwc: recv_control_msg error -71 req 02 val 2600 [ 166.932398][ T974] pwc: recv_control_msg error -71 req 02 val 2900 [ 166.945496][ T974] pwc: recv_control_msg error -71 req 02 val 2800 [ 166.968606][ T974] pwc: recv_control_msg error -71 req 04 val 1100 [ 166.985876][ T974] pwc: recv_control_msg error -71 req 04 val 1200 [ 166.996743][ T974] pwc: Registered as video103. [ 167.002581][ T974] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input31 [ 167.029535][ T974] usb 4-1: USB disconnect, device number 13 [ 167.232562][ T5899] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 167.472564][ T5899] usb 5-1: Using ep0 maxpacket: 8 [ 167.560761][ T5899] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 167.611534][ T5899] usb 5-1: config 179 has no interface number 0 [ 167.633934][ T5899] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 167.662544][ T5899] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 167.677983][ T5899] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 167.696663][ T5899] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 167.722334][ T5899] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 167.756992][ T5899] usb 5-1: config 179 interface 65 has no altsetting 0 [ 167.772368][ T5899] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 167.791638][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.817236][ T5899] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input32 [ 168.107196][ T7455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.401'. [ 168.143983][ T7455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.401'. [ 168.743460][ T30] audit: type=1400 audit(1742389269.560:385): avc: denied { read } for pid=7461 comm="syz.1.403" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 168.821047][ T30] audit: type=1400 audit(1742389269.570:386): avc: denied { open } for pid=7461 comm="syz.1.403" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 168.982581][ T971] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 169.162468][ T971] usb 2-1: Using ep0 maxpacket: 16 [ 169.181991][ T971] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.208921][ T971] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 169.269912][ T971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.426563][ T971] usb 2-1: config 0 descriptor?? [ 169.444952][ T971] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input34 [ 169.724094][ T30] audit: type=1400 audit(1742389270.540:387): avc: denied { load_policy } for pid=7461 comm="syz.1.403" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 169.740933][ T7463] SELinux: failed to load policy [ 170.677304][ T7463] 9pnet_fd: Insufficient options for proto=fd [ 170.685625][ T30] audit: type=1400 audit(1742389271.420:388): avc: denied { read } for pid=7461 comm="syz.1.403" dev="sockfs" ino=15394 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 170.747773][ T45] usb 5-1: USB disconnect, device number 20 [ 170.747854][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 170.760059][ T5178] bcm5974 2-1:0.0: could not read from device [ 170.794630][ T45] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 170.833771][ T5178] bcm5974 2-1:0.0: could not read from device [ 170.871293][ T971] bcm5974 2-1:0.0: could not read from device [ 170.907668][ T971] input: failed to attach handler mousedev to device input34, error: -5 [ 171.076127][ T971] usb 2-1: USB disconnect, device number 18 [ 171.244747][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.414'. [ 171.253612][ T7500] netlink: 12 bytes leftover after parsing attributes in process `syz.0.414'. [ 171.262595][ T7500] netlink: 'syz.0.414': attribute type 15 has an invalid length. [ 171.882955][ T45] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 172.057627][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.161553][ T45] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 172.363939][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.431951][ T45] usb 5-1: config 0 descriptor?? [ 172.505554][ T45] pwc: Askey VC010 type 2 USB webcam detected. [ 173.295732][ T45] pwc: recv_control_msg error -32 req 02 val 2b00 [ 173.318706][ T45] pwc: recv_control_msg error -32 req 02 val 2700 [ 173.381519][ T45] pwc: recv_control_msg error -32 req 02 val 2c00 [ 173.391160][ T45] pwc: recv_control_msg error -32 req 04 val 1000 [ 173.427893][ T45] pwc: recv_control_msg error -32 req 04 val 1300 [ 173.435573][ T45] pwc: recv_control_msg error -32 req 04 val 1400 [ 173.443395][ T45] pwc: recv_control_msg error -32 req 02 val 2000 [ 173.456195][ T45] pwc: recv_control_msg error -32 req 02 val 2100 [ 173.496575][ T45] pwc: recv_control_msg error -71 req 04 val 1500 [ 173.505081][ T45] pwc: recv_control_msg error -71 req 02 val 2500 [ 173.512184][ T45] pwc: recv_control_msg error -71 req 02 val 2400 [ 173.520424][ T45] pwc: recv_control_msg error -71 req 02 val 2600 [ 173.527815][ T45] pwc: recv_control_msg error -71 req 02 val 2900 [ 173.536144][ T45] pwc: recv_control_msg error -71 req 02 val 2800 [ 173.546558][ T45] pwc: recv_control_msg error -71 req 04 val 1100 [ 173.554782][ T45] pwc: recv_control_msg error -71 req 04 val 1200 [ 173.585295][ T45] pwc: Registered as video103. [ 173.591172][ T45] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input35 [ 173.625169][ T45] usb 5-1: USB disconnect, device number 21 [ 173.627675][ T974] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 173.923882][ T974] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.480394][ T974] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 174.489532][ T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.498974][ T974] usb 2-1: config 0 descriptor?? [ 174.506317][ T974] pwc: Askey VC010 type 2 USB webcam detected. [ 175.425997][ T974] pwc: recv_control_msg error -32 req 02 val 2b00 [ 175.434319][ T974] pwc: recv_control_msg error -32 req 02 val 2700 [ 175.441406][ T974] pwc: recv_control_msg error -32 req 02 val 2c00 [ 175.450204][ T974] pwc: recv_control_msg error -32 req 04 val 1000 [ 175.463708][ T974] pwc: recv_control_msg error -32 req 04 val 1300 [ 175.486338][ T974] pwc: recv_control_msg error -32 req 04 val 1400 [ 175.495195][ T974] pwc: recv_control_msg error -32 req 02 val 2000 [ 175.508980][ T974] pwc: recv_control_msg error -32 req 02 val 2100 [ 175.526567][ T974] pwc: recv_control_msg error -32 req 04 val 1500 [ 175.535342][ T974] pwc: recv_control_msg error -32 req 02 val 2500 [ 175.562510][ T5869] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 175.729874][ T5869] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.741063][ T5869] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 175.832629][ T5899] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 175.844383][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.944593][ T974] pwc: recv_control_msg error -71 req 02 val 2600 [ 175.962980][ T974] pwc: recv_control_msg error -71 req 02 val 2900 [ 176.022406][ T5869] usb 1-1: config 0 descriptor?? [ 176.034827][ T974] pwc: recv_control_msg error -71 req 02 val 2800 [ 176.062732][ T5869] pwc: Askey VC010 type 2 USB webcam detected. [ 176.069244][ T974] pwc: recv_control_msg error -71 req 04 val 1100 [ 176.082839][ T974] pwc: recv_control_msg error -71 req 04 val 1200 [ 176.089876][ T974] pwc: Registered as video103. [ 176.102936][ T974] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input37 [ 176.132652][ T974] usb 2-1: USB disconnect, device number 19 [ 176.177535][ T5899] usb 4-1: Using ep0 maxpacket: 16 [ 176.185677][ T5899] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.206076][ T5899] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 176.215112][ T5899] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 176.226031][ T5899] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 176.240403][ T5899] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 176.254019][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.262065][ T5899] usb 4-1: Product: syz [ 176.266820][ T5899] usb 4-1: Manufacturer: syz [ 176.271456][ T5899] usb 4-1: SerialNumber: syz [ 176.318485][ T7555] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 176.324611][ T7555] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 176.454958][ T5869] pwc: recv_control_msg error -32 req 02 val 2b00 [ 176.461895][ T5869] pwc: recv_control_msg error -32 req 02 val 2700 [ 176.468958][ T5869] pwc: recv_control_msg error -32 req 02 val 2c00 [ 176.475879][ T5869] pwc: recv_control_msg error -32 req 04 val 1000 [ 176.503694][ T5899] usb 4-1: 0:2 : does not exist [ 176.511653][ T5869] pwc: recv_control_msg error -32 req 04 val 1300 [ 176.523549][ T5869] pwc: recv_control_msg error -32 req 04 val 1400 [ 176.530585][ T5899] usb 4-1: USB disconnect, device number 14 [ 176.536585][ T5869] pwc: recv_control_msg error -32 req 02 val 2000 [ 176.751893][ T5869] pwc: recv_control_msg error -71 req 04 val 1500 [ 176.817579][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 176.846698][ T5869] pwc: recv_control_msg error -71 req 02 val 2500 [ 176.856240][ T5869] pwc: recv_control_msg error -71 req 02 val 2400 [ 176.863222][ T5869] pwc: recv_control_msg error -71 req 02 val 2600 [ 176.870099][ T5869] pwc: recv_control_msg error -71 req 02 val 2900 [ 176.876865][ T5869] pwc: recv_control_msg error -71 req 02 val 2800 [ 176.883948][ T5869] pwc: recv_control_msg error -71 req 04 val 1100 [ 176.890629][ T5869] pwc: recv_control_msg error -71 req 04 val 1200 [ 176.899461][ T5869] pwc: Registered as video103. [ 176.911394][ T5869] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input38 [ 176.934409][ T5869] usb 1-1: USB disconnect, device number 19 [ 178.070894][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.440'. [ 178.081282][ T7576] netlink: 12 bytes leftover after parsing attributes in process `syz.0.440'. [ 178.090218][ T7576] netlink: 'syz.0.440': attribute type 15 has an invalid length. [ 178.238289][ T7580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.439'. [ 179.631222][ T7597] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4017050179 (64272802864 ns) > initial count (43813986880 ns). Using initial count to start timer. [ 179.797089][ T7601] sp0: Synchronizing with TNC [ 179.937518][ T7601] netlink: 8 bytes leftover after parsing attributes in process `syz.5.442'. [ 179.957749][ T7601] netlink: 12 bytes leftover after parsing attributes in process `syz.5.442'. [ 180.003148][ T5899] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 180.058411][ T7601] netlink: 'syz.5.442': attribute type 15 has an invalid length. [ 180.198256][ T5899] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 180.210513][ T5899] usb 5-1: config 7 has 0 interfaces, different from the descriptor's value: 2 [ 180.307653][ T5899] usb 5-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 180.335235][ T5869] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 180.343008][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.351003][ T5899] usb 5-1: Product: syz [ 180.372423][ T5899] usb 5-1: Manufacturer: syz [ 180.377169][ T5899] usb 5-1: SerialNumber: syz [ 180.513878][ T5869] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.533728][ T5869] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 180.548029][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.558511][ T5869] usb 4-1: config 0 descriptor?? [ 180.566688][ T5869] pwc: Askey VC010 type 2 USB webcam detected. [ 180.594539][ T5911] usb 5-1: USB disconnect, device number 22 [ 180.702496][ T5899] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 180.872491][ T5899] usb 1-1: Using ep0 maxpacket: 8 [ 180.879447][ T5899] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 180.887847][ T5899] usb 1-1: config 179 has no interface number 0 [ 180.894361][ T5899] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 180.905820][ T5899] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 180.917289][ T5899] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 180.928655][ T5899] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 180.938785][ T5899] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 180.952314][ T5899] usb 1-1: config 179 interface 65 has no altsetting 0 [ 180.959195][ T5899] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 180.968475][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.977573][ T5869] pwc: recv_control_msg error -32 req 02 val 2b00 [ 180.989670][ T5869] pwc: recv_control_msg error -32 req 02 val 2700 [ 180.996695][ T5869] pwc: recv_control_msg error -32 req 02 val 2c00 [ 181.003935][ T5869] pwc: recv_control_msg error -32 req 04 val 1000 [ 181.011025][ T5869] pwc: recv_control_msg error -32 req 04 val 1300 [ 181.017969][ T5869] pwc: recv_control_msg error -32 req 04 val 1400 [ 181.025449][ T5869] pwc: recv_control_msg error -32 req 02 val 2000 [ 181.033982][ T5899] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input39 [ 181.046675][ T5869] pwc: recv_control_msg error -32 req 02 val 2100 [ 181.054081][ T5869] pwc: recv_control_msg error -32 req 04 val 1500 [ 181.350407][ T5869] pwc: recv_control_msg error -71 req 02 val 2400 [ 181.357942][ T5869] pwc: recv_control_msg error -71 req 02 val 2600 [ 181.368734][ T5869] pwc: recv_control_msg error -71 req 02 val 2900 [ 181.383724][ T5869] pwc: recv_control_msg error -71 req 02 val 2800 [ 181.396187][ T5869] pwc: recv_control_msg error -71 req 04 val 1100 [ 181.849091][ T5869] pwc: recv_control_msg error -71 req 04 val 1200 [ 182.367442][ T5869] pwc: Registered as video103. [ 182.377652][ T5869] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input40 [ 182.395413][ T45] usb 1-1: USB disconnect, device number 20 [ 182.395564][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 182.629031][ T45] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 182.654861][ T5869] usb 4-1: USB disconnect, device number 15 [ 183.157129][ T7641] sp0: Synchronizing with TNC [ 183.164235][ T7641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.458'. [ 183.173043][ T7641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.458'. [ 183.181890][ T7641] netlink: 'syz.1.458': attribute type 15 has an invalid length. [ 184.973321][ T5869] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 185.223858][ T5869] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.339944][ T5869] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 185.352363][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.365668][ T5869] usb 5-1: config 0 descriptor?? [ 185.376711][ T5869] pwc: Askey VC010 type 2 USB webcam detected. [ 186.308930][ T5869] pwc: recv_control_msg error -32 req 02 val 2b00 [ 186.322789][ T5869] pwc: recv_control_msg error -32 req 02 val 2700 [ 186.342453][ T5869] pwc: recv_control_msg error -32 req 02 val 2c00 [ 186.362652][ T5869] pwc: recv_control_msg error -32 req 04 val 1000 [ 186.369617][ T5869] pwc: recv_control_msg error -32 req 04 val 1300 [ 186.379307][ T5869] pwc: recv_control_msg error -32 req 04 val 1400 [ 186.390086][ T5869] pwc: recv_control_msg error -32 req 02 val 2000 [ 186.939863][ T5869] pwc: recv_control_msg error -32 req 02 val 2100 [ 186.958446][ T5869] pwc: recv_control_msg error -32 req 04 val 1500 [ 186.968418][ T5869] pwc: recv_control_msg error -32 req 02 val 2500 [ 187.703400][ T5869] pwc: recv_control_msg error -71 req 02 val 2600 [ 187.711945][ T5869] pwc: recv_control_msg error -71 req 02 val 2900 [ 187.718922][ T5869] pwc: recv_control_msg error -71 req 02 val 2800 [ 187.730923][ T5869] pwc: recv_control_msg error -71 req 04 val 1100 [ 187.738125][ T5869] pwc: recv_control_msg error -71 req 04 val 1200 [ 187.749651][ T5869] pwc: Registered as video103. [ 187.755958][ T5869] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input41 [ 187.771865][ T5869] usb 5-1: USB disconnect, device number 23 [ 189.092436][ T26] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 189.275169][ T7715] fuse: Bad value for 'fd' [ 189.305673][ T26] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.352473][ T971] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 189.947324][ T26] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 189.981784][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.996679][ T26] usb 4-1: config 0 descriptor?? [ 190.004635][ T26] pwc: Askey VC010 type 2 USB webcam detected. [ 190.113678][ T971] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.123974][ T971] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 190.140204][ T971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.173576][ T971] usb 5-1: config 0 descriptor?? [ 190.192875][ T971] pwc: Askey VC010 type 2 USB webcam detected. [ 190.903720][ T26] pwc: recv_control_msg error -32 req 02 val 2b00 [ 190.965994][ T26] pwc: recv_control_msg error -32 req 02 val 2700 [ 191.029599][ T26] pwc: recv_control_msg error -32 req 02 val 2c00 [ 191.050455][ T971] pwc: recv_control_msg error -32 req 02 val 2b00 [ 191.052457][ T971] pwc: recv_control_msg error -32 req 02 val 2700 [ 191.056052][ T971] pwc: recv_control_msg error -32 req 02 val 2c00 [ 191.077307][ T971] pwc: recv_control_msg error -32 req 04 val 1000 [ 191.197508][ T26] pwc: recv_control_msg error -32 req 04 val 1000 [ 191.298098][ T26] pwc: recv_control_msg error -32 req 04 val 1300 [ 191.312832][ T26] pwc: recv_control_msg error -32 req 04 val 1400 [ 191.351356][ T971] pwc: recv_control_msg error -32 req 04 val 1300 [ 191.360868][ T26] pwc: recv_control_msg error -32 req 02 val 2000 [ 191.372376][ T971] pwc: recv_control_msg error -32 req 04 val 1400 [ 191.381945][ T26] pwc: recv_control_msg error -32 req 02 val 2100 [ 191.392451][ T971] pwc: recv_control_msg error -32 req 02 val 2000 [ 191.592143][ T26] pwc: recv_control_msg error -71 req 02 val 2500 [ 191.599020][ T26] pwc: recv_control_msg error -71 req 02 val 2400 [ 191.607772][ T971] pwc: recv_control_msg error -71 req 04 val 1500 [ 191.616357][ T26] pwc: recv_control_msg error -71 req 02 val 2600 [ 191.632429][ T971] pwc: recv_control_msg error -71 req 02 val 2500 [ 191.639209][ T26] pwc: recv_control_msg error -71 req 02 val 2900 [ 191.645894][ T971] pwc: recv_control_msg error -71 req 02 val 2400 [ 191.657015][ T26] pwc: recv_control_msg error -71 req 02 val 2800 [ 191.665738][ T971] pwc: recv_control_msg error -71 req 02 val 2600 [ 191.682741][ T26] pwc: recv_control_msg error -71 req 04 val 1100 [ 191.689293][ T971] pwc: recv_control_msg error -71 req 02 val 2900 [ 191.697176][ T26] pwc: recv_control_msg error -71 req 04 val 1200 [ 191.705963][ T971] pwc: recv_control_msg error -71 req 02 val 2800 [ 191.720050][ T26] pwc: Registered as video103. [ 191.729634][ T971] pwc: recv_control_msg error -71 req 04 val 1100 [ 191.736859][ T26] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input43 [ 191.750209][ T971] pwc: recv_control_msg error -71 req 04 val 1200 [ 191.756918][ T971] videodev: could not get a free minor [ 191.765922][ T26] usb 4-1: USB disconnect, device number 16 [ 191.772456][ T971] pwc: Failed to register as video device (-23). [ 191.784554][ T971] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -23 [ 191.801988][ T971] usb 5-1: USB disconnect, device number 24 [ 192.102464][ T5869] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 192.965153][ T5869] usb 2-1: Using ep0 maxpacket: 8 [ 192.981097][ T5869] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 192.999382][ T5869] usb 2-1: config 179 has no interface number 0 [ 193.047987][ T5869] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 193.064020][ T5869] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 193.080516][ T5869] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 193.095913][ T5869] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 193.179595][ T5869] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 193.226324][ T7774] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 193.462378][ T5869] usb 2-1: config 179 interface 65 has no altsetting 0 [ 193.469426][ T5869] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 193.502736][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.649368][ T5869] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input44 [ 193.696234][ T5899] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 193.996056][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 194.007719][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.014089][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.062400][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 194.431848][ T5899] usb 5-1: unable to get BOS descriptor or descriptor too short [ 194.454533][ T5869] usb 2-1: USB disconnect, device number 20 [ 194.467196][ T5899] usb 5-1: config 86 has an invalid interface number: 196 but max is 0 [ 194.476116][ T5869] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 194.486388][ T5899] usb 5-1: config 86 has no interface number 0 [ 194.493586][ T5899] usb 5-1: config 86 interface 196 has no altsetting 0 [ 194.510880][ T5899] usb 5-1: string descriptor 0 read error: -22 [ 194.517234][ T5899] usb 5-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=50.5d [ 194.526647][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.625590][ T7787] netlink: 12 bytes leftover after parsing attributes in process `syz.5.496'. [ 194.649191][ T5899] msi2500 5-1:86.196: Registered as swradio24 [ 194.658282][ T5899] msi2500 5-1:86.196: SDR API is still slightly experimental and functionality changes may follow [ 195.639545][ T7796] syzkaller0: entered promiscuous mode [ 195.645283][ T7796] syzkaller0: entered allmulticast mode [ 195.914465][ T7798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.500'. [ 196.252366][ T5899] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 196.450331][ T5899] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.471782][ T5899] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 196.485575][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.501625][ T5899] usb 4-1: config 0 descriptor?? [ 196.517839][ T5899] pwc: Askey VC010 type 2 USB webcam detected. [ 196.666620][ T5911] usb 5-1: USB disconnect, device number 25 [ 196.922118][ T5899] pwc: recv_control_msg error -32 req 02 val 2b00 [ 196.996146][ T5899] pwc: recv_control_msg error -32 req 02 val 2700 [ 197.022621][ T5911] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 197.030848][ T5899] pwc: recv_control_msg error -32 req 02 val 2c00 [ 197.069111][ T5899] pwc: recv_control_msg error -32 req 04 val 1000 [ 197.083344][ T5899] pwc: recv_control_msg error -32 req 04 val 1300 [ 197.091460][ T5899] pwc: recv_control_msg error -32 req 04 val 1400 [ 197.100467][ T5899] pwc: recv_control_msg error -32 req 02 val 2000 [ 197.109203][ T5899] pwc: recv_control_msg error -32 req 02 val 2100 [ 197.178375][ T7809] netlink: 'syz.0.504': attribute type 25 has an invalid length. [ 197.203602][ T5911] usb 5-1: Using ep0 maxpacket: 16 [ 197.274023][ T5911] usb 5-1: config 1 has an invalid interface number: 255 but max is 2 [ 197.282200][ T5911] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.309695][ T5911] usb 5-1: config 1 has no interface number 2 [ 197.325228][ T5899] pwc: recv_control_msg error -71 req 02 val 2500 [ 197.326173][ T5911] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 197.335499][ T5899] pwc: recv_control_msg error -71 req 02 val 2400 [ 197.347367][ T5911] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 197.362670][ T5899] pwc: recv_control_msg error -71 req 02 val 2600 [ 197.369037][ T5911] usb 5-1: too many endpoints for config 1 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 197.379641][ T5899] pwc: recv_control_msg error -71 req 02 val 2900 [ 197.381014][ T5911] usb 5-1: config 1 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 197.389516][ T5899] pwc: recv_control_msg error -71 req 02 val 2800 [ 197.410579][ T5899] pwc: recv_control_msg error -71 req 04 val 1100 [ 197.411302][ T5911] usb 5-1: config 1 interface 255 has no altsetting 0 [ 197.418274][ T5899] pwc: recv_control_msg error -71 req 04 val 1200 [ 197.425825][ T5911] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 197.439820][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.439948][ T5899] pwc: Registered as video103. [ 197.455251][ T5911] usb 5-1: Product: syz [ 197.459489][ T5911] usb 5-1: Manufacturer: syz [ 197.520764][ T7817] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 197.548173][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 197.591647][ T5911] usb 5-1: SerialNumber: syz [ 197.816982][ T5899] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input45 [ 197.833525][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.844043][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 197.856634][ T5899] usb 4-1: USB disconnect, device number 17 [ 197.864481][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.880284][ T5911] usb 5-1: 0:2 : does not exist [ 197.908166][ T9] usb 2-1: config 0 descriptor?? [ 197.922820][ T5869] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 197.932796][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 197.936303][ T5911] usb 5-1: USB disconnect, device number 26 [ 198.066466][ T7820] 8021q: adding VLAN 0 to HW filter on device ipvlan6 [ 198.294995][ T5869] usb 1-1: Using ep0 maxpacket: 32 [ 198.319366][ T5869] usb 1-1: unable to get BOS descriptor or descriptor too short [ 198.329796][ T5817] udevd[5817]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 198.349820][ T5869] usb 1-1: config 86 has an invalid interface number: 196 but max is 0 [ 198.359630][ T5869] usb 1-1: config 86 has no interface number 0 [ 198.366375][ T5869] usb 1-1: config 86 interface 196 has no altsetting 0 [ 198.375988][ T5869] usb 1-1: string descriptor 0 read error: -22 [ 198.382250][ T5869] usb 1-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=50.5d [ 198.391376][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.420574][ T5869] msi2500 1-1:86.196: Registered as swradio24 [ 198.426896][ T5869] msi2500 1-1:86.196: SDR API is still slightly experimental and functionality changes may follow [ 198.476395][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 198.483303][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 198.490071][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 198.497102][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 198.504225][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 198.511071][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 198.518324][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 198.525357][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 198.532253][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 198.539347][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 198.562430][ T5899] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 198.578082][ T7824] netlink: 12 bytes leftover after parsing attributes in process `syz.5.509'. [ 198.712492][ T5899] usb 4-1: Using ep0 maxpacket: 32 [ 198.961467][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 198.971978][ T5899] usb 4-1: unable to get BOS descriptor or descriptor too short [ 198.981449][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 198.988619][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 198.995471][ T5899] usb 4-1: config 86 has an invalid interface number: 196 but max is 0 [ 199.004258][ T5899] usb 4-1: config 86 has no interface number 0 [ 199.010832][ T5899] usb 4-1: config 86 interface 196 has no altsetting 0 [ 199.018081][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 199.029631][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 199.037297][ T9] videodev: could not get a free minor [ 199.043867][ T5899] usb 4-1: string descriptor 0 read error: -22 [ 199.050249][ T5899] usb 4-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=50.5d [ 199.059337][ T9] pwc: Failed to register as video device (-23). [ 199.072353][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.094136][ T9] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -23 [ 199.150191][ T9] usb 2-1: USB disconnect, device number 21 [ 199.223147][ T5899] videodev: could not get a free minor [ 199.230908][ T5899] msi2500 4-1:86.196: Failed to register as video device (-23) [ 199.251805][ T5899] msi2500 4-1:86.196: probe with driver msi2500 failed with error -23 [ 199.873661][ T7847] SELinux: syz.4.514 (7847) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 200.011562][ T7840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.515'. [ 200.500778][ T971] usb 1-1: USB disconnect, device number 21 [ 201.078059][ T5869] usb 4-1: USB disconnect, device number 18 [ 201.255301][ T7861] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4017050179 (64272802864 ns) > initial count (43813986880 ns). Using initial count to start timer. [ 201.332746][ T7860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.518'. [ 203.950875][ T5899] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 204.379562][ T5899] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.399938][ T5899] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 204.421715][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.440983][ T7904] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4017050179 (64272802864 ns) > initial count (43813986880 ns). Using initial count to start timer. [ 204.512875][ T5899] usb 2-1: config 0 descriptor?? [ 204.543797][ T5899] pwc: Askey VC010 type 2 USB webcam detected. [ 204.752844][ T5869] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 204.959345][ T5899] pwc: recv_control_msg error -32 req 02 val 2b00 [ 205.719695][ T5899] pwc: recv_control_msg error -32 req 02 val 2700 [ 205.727175][ T5899] pwc: recv_control_msg error -32 req 02 val 2c00 [ 205.733679][ T5869] usb 1-1: Using ep0 maxpacket: 8 [ 205.740256][ T5899] pwc: recv_control_msg error -32 req 04 val 1000 [ 205.747262][ T5869] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 205.755720][ T5869] usb 1-1: config 179 has no interface number 0 [ 205.762513][ T5869] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 205.773816][ T5899] pwc: recv_control_msg error -32 req 04 val 1300 [ 205.780431][ T5869] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 205.792386][ T5899] pwc: recv_control_msg error -32 req 04 val 1400 [ 205.799076][ T5869] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 205.810387][ T5869] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 205.820554][ T5899] pwc: recv_control_msg error -32 req 02 val 2000 [ 205.827000][ T5869] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 205.840449][ T5869] usb 1-1: config 179 interface 65 has no altsetting 0 [ 205.847413][ T5869] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 205.856487][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.864667][ T5899] pwc: recv_control_msg error -32 req 02 val 2100 [ 205.879436][ T5869] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input47 [ 206.593764][ T5911] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 206.797771][ T5899] pwc: recv_control_msg error -71 req 02 val 2500 [ 206.805371][ T5899] pwc: recv_control_msg error -71 req 02 val 2400 [ 206.821086][ T5899] pwc: recv_control_msg error -71 req 02 val 2600 [ 206.842699][ T5899] pwc: recv_control_msg error -71 req 02 val 2900 [ 206.855407][ T5899] pwc: recv_control_msg error -71 req 02 val 2800 [ 206.862631][ T5899] pwc: recv_control_msg error -71 req 04 val 1100 [ 206.869402][ T5899] pwc: recv_control_msg error -71 req 04 val 1200 [ 206.882158][ T5899] pwc: Registered as video103. [ 206.889063][ T5899] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input48 [ 206.917140][ T5911] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.923646][ T5899] usb 2-1: USB disconnect, device number 22 [ 206.928841][ T5911] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 206.956093][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.007218][ T5911] usb 5-1: config 0 descriptor?? [ 207.082489][ T5911] pwc: Askey VC010 type 2 USB webcam detected. [ 207.522774][ T5911] pwc: recv_control_msg error -32 req 02 val 2b00 [ 207.531517][ T5911] pwc: recv_control_msg error -32 req 02 val 2700 [ 207.538919][ T5911] pwc: recv_control_msg error -32 req 02 val 2c00 [ 207.546372][ T5911] pwc: recv_control_msg error -32 req 04 val 1000 [ 207.570224][ T5911] pwc: recv_control_msg error -32 req 04 val 1300 [ 207.588501][ T5911] pwc: recv_control_msg error -32 req 04 val 1400 [ 207.603103][ T5911] pwc: recv_control_msg error -32 req 02 val 2000 [ 207.627339][ T5911] pwc: recv_control_msg error -32 req 02 val 2100 [ 208.245685][ T5911] pwc: recv_control_msg error -71 req 02 val 2500 [ 208.342888][ T5899] usb 1-1: USB disconnect, device number 22 [ 208.348824][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 208.440851][ T5911] pwc: recv_control_msg error -71 req 02 val 2400 [ 208.441855][ T5899] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 208.472025][ T5911] pwc: recv_control_msg error -71 req 02 val 2600 [ 208.498851][ T5911] pwc: recv_control_msg error -71 req 02 val 2900 [ 208.520299][ T5911] pwc: recv_control_msg error -71 req 02 val 2800 [ 208.531935][ T5911] pwc: recv_control_msg error -71 req 04 val 1100 [ 208.576538][ T5911] pwc: recv_control_msg error -71 req 04 val 1200 [ 208.681272][ T5911] pwc: Registered as video103. [ 208.697305][ T5911] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input50 [ 208.723921][ T5911] usb 5-1: USB disconnect, device number 27 [ 209.812474][ T5911] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 210.095994][ T5911] usb 5-1: config 7 descriptor has 1 excess byte, ignoring [ 210.127415][ T5911] usb 5-1: config 7 has 0 interfaces, different from the descriptor's value: 2 [ 210.179840][ T5911] usb 5-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 210.195166][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.204423][ T5911] usb 5-1: Product: syz [ 210.208657][ T5911] usb 5-1: Manufacturer: syz [ 210.214032][ T5911] usb 5-1: SerialNumber: syz [ 211.150495][ T5899] usb 5-1: USB disconnect, device number 28 [ 211.976298][ T7989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.562'. [ 212.162769][ T5911] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 212.377928][ T5911] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.423050][ T5911] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 212.453342][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.493795][ T5911] usb 4-1: config 0 descriptor?? [ 212.502072][ T5911] pwc: Askey VC010 type 2 USB webcam detected. [ 212.908863][ T5911] pwc: recv_control_msg error -32 req 02 val 2b00 [ 212.921348][ T5911] pwc: recv_control_msg error -32 req 02 val 2700 [ 213.105812][ T5911] pwc: recv_control_msg error -32 req 02 val 2c00 [ 213.273999][ T5911] pwc: recv_control_msg error -32 req 04 val 1000 [ 213.342252][ T5911] pwc: recv_control_msg error -32 req 04 val 1300 [ 213.349776][ T5911] pwc: recv_control_msg error -32 req 04 val 1400 [ 213.373987][ T5911] pwc: recv_control_msg error -32 req 02 val 2000 [ 213.381981][ T5911] pwc: recv_control_msg error -32 req 02 val 2100 [ 213.397447][ T8008] kvm: kvm [8007]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100 [ 213.406710][ T8008] kvm: kvm [8007]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x188 [ 213.418921][ T8008] kvm: kvm [8007]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x2a4 [ 213.434883][ T8008] kvm: kvm [8007]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xa4a [ 213.448182][ T8008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.569'. [ 213.529055][ T8020] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4017050179 (64272802864 ns) > initial count (43813986880 ns). Using initial count to start timer. [ 213.606974][ T5911] pwc: recv_control_msg error -71 req 02 val 2500 [ 213.614130][ T5911] pwc: recv_control_msg error -71 req 02 val 2400 [ 213.624885][ T5911] pwc: recv_control_msg error -71 req 02 val 2600 [ 213.643185][ T5911] pwc: recv_control_msg error -71 req 02 val 2900 [ 213.650033][ T5911] pwc: recv_control_msg error -71 req 02 val 2800 [ 213.662172][ T5911] pwc: recv_control_msg error -71 req 04 val 1100 [ 213.670082][ T5911] pwc: recv_control_msg error -71 req 04 val 1200 [ 213.680234][ T5911] pwc: Registered as video103. [ 213.686887][ T5911] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input51 [ 213.700557][ T5911] usb 4-1: USB disconnect, device number 19 [ 213.790311][ T5899] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 214.533700][ T5899] usb 5-1: Using ep0 maxpacket: 8 [ 214.548177][ T5899] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 214.585598][ T5899] usb 5-1: config 179 has no interface number 0 [ 214.585634][ T5899] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 214.585661][ T5899] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 214.585687][ T5899] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 214.585711][ T5899] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 214.585733][ T5899] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 214.585758][ T5899] usb 5-1: config 179 interface 65 has no altsetting 0 [ 214.585795][ T5899] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 214.585817][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.095446][ T5899] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input52 [ 215.257449][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 215.257454][ T26] usb 5-1: USB disconnect, device number 29 [ 215.271678][ T26] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 216.125968][ T5899] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 216.414589][ T5899] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.443749][ T5899] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 216.466584][ T5899] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 216.506913][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.625184][ T5899] usb 4-1: config 0 descriptor?? [ 217.378594][ T8059] kvm: kvm [8057]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100 [ 217.404401][ T8059] kvm: kvm [8057]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x188 [ 217.453551][ T8059] kvm: kvm [8057]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x9f8 [ 217.472888][ T8060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.584'. [ 218.554894][ T5899] usb 4-1: USB disconnect, device number 20 [ 218.902369][ T26] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 219.826047][ T26] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.854455][ T26] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 219.872513][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.890948][ T26] usb 1-1: config 0 descriptor?? [ 219.893263][ T8105] sp0: Synchronizing with TNC [ 219.913999][ T26] pwc: Askey VC010 type 2 USB webcam detected. [ 219.942490][ T8105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.596'. [ 219.961565][ T8105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.596'. [ 220.011703][ T8105] netlink: 'syz.4.596': attribute type 15 has an invalid length. [ 220.258894][ T8109] netlink: 20 bytes leftover after parsing attributes in process `syz.1.598'. [ 220.402917][ T26] pwc: recv_control_msg error -32 req 02 val 2b00 [ 220.432379][ T26] pwc: recv_control_msg error -32 req 02 val 2700 [ 220.458062][ T26] pwc: recv_control_msg error -32 req 02 val 2c00 [ 220.498693][ T26] pwc: recv_control_msg error -32 req 04 val 1000 [ 220.523193][ T26] pwc: recv_control_msg error -32 req 04 val 1300 [ 220.541606][ T26] pwc: recv_control_msg error -32 req 04 val 1400 [ 220.549034][ T26] pwc: recv_control_msg error -32 req 02 val 2000 [ 220.741116][ T8120] SELinux: syz.5.597 (8120) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 220.769934][ T26] pwc: recv_control_msg error -71 req 04 val 1500 [ 220.786014][ T26] pwc: recv_control_msg error -71 req 02 val 2500 [ 220.823287][ T26] pwc: recv_control_msg error -71 req 02 val 2400 [ 220.839968][ T26] pwc: recv_control_msg error -71 req 02 val 2600 [ 220.856673][ T26] pwc: recv_control_msg error -71 req 02 val 2900 [ 220.927651][ T26] pwc: recv_control_msg error -71 req 02 val 2800 [ 220.948133][ T26] pwc: recv_control_msg error -71 req 04 val 1100 [ 220.970887][ T26] pwc: recv_control_msg error -71 req 04 val 1200 [ 220.996748][ T26] pwc: Registered as video103. [ 221.018941][ T26] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input55 [ 221.088077][ T26] usb 1-1: USB disconnect, device number 23 [ 222.712457][ T5899] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 222.912130][ T8144] netlink: 20 bytes leftover after parsing attributes in process `syz.0.609'. [ 222.940584][ T5899] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.971094][ T5899] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 222.990085][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.009842][ T5899] usb 4-1: config 0 descriptor?? [ 223.020750][ T5899] pwc: Askey VC010 type 2 USB webcam detected. [ 223.274219][ T26] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 223.436650][ T5899] pwc: recv_control_msg error -32 req 02 val 2b00 [ 223.453591][ T5899] pwc: recv_control_msg error -32 req 02 val 2700 [ 223.473463][ T5899] pwc: recv_control_msg error -32 req 02 val 2c00 [ 223.490398][ T5899] pwc: recv_control_msg error -32 req 04 val 1000 [ 223.499755][ T5899] pwc: recv_control_msg error -32 req 04 val 1300 [ 223.514522][ T5899] pwc: recv_control_msg error -32 req 04 val 1400 [ 223.530390][ T5899] pwc: recv_control_msg error -32 req 02 val 2000 [ 223.547435][ T5899] pwc: recv_control_msg error -32 req 02 val 2100 [ 223.569940][ T5899] pwc: recv_control_msg error -71 req 04 val 1500 [ 223.584659][ T5899] pwc: recv_control_msg error -71 req 02 val 2500 [ 223.602804][ T5899] pwc: recv_control_msg error -71 req 02 val 2400 [ 223.613252][ T5899] pwc: recv_control_msg error -71 req 02 val 2600 [ 223.651255][ T5899] pwc: recv_control_msg error -71 req 02 val 2900 [ 223.697457][ T5899] pwc: recv_control_msg error -71 req 02 val 2800 [ 223.715967][ T5899] pwc: recv_control_msg error -71 req 04 val 1100 [ 223.716102][ T26] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.728462][ T5899] pwc: recv_control_msg error -71 req 04 val 1200 [ 223.742357][ T26] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 223.746022][ T5899] pwc: Registered as video103. [ 223.759018][ T5899] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input56 [ 223.761870][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.775042][ T5899] usb 4-1: USB disconnect, device number 21 [ 223.809771][ T26] usb 5-1: config 0 descriptor?? [ 223.825946][ T26] pwc: Askey VC010 type 2 USB webcam detected. [ 224.254551][ T26] pwc: recv_control_msg error -32 req 02 val 2b00 [ 224.320019][ T26] pwc: recv_control_msg error -32 req 02 val 2700 [ 224.390370][ T26] pwc: recv_control_msg error -32 req 02 val 2c00 [ 224.425618][ T26] pwc: recv_control_msg error -32 req 04 val 1000 [ 224.441626][ T26] pwc: recv_control_msg error -32 req 04 val 1300 [ 224.452209][ T26] pwc: recv_control_msg error -32 req 04 val 1400 [ 224.503139][ T26] pwc: recv_control_msg error -32 req 02 val 2000 [ 224.520287][ T26] pwc: recv_control_msg error -32 req 02 val 2100 [ 224.665420][ T8164] sp0: Synchronizing with TNC [ 224.672572][ T8164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.616'. [ 224.681348][ T8164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.616'. [ 224.690239][ T8164] netlink: 'syz.1.616': attribute type 15 has an invalid length. [ 224.728079][ T26] pwc: recv_control_msg error -71 req 02 val 2500 [ 224.736700][ T26] pwc: recv_control_msg error -71 req 02 val 2400 [ 224.752803][ T26] pwc: recv_control_msg error -71 req 02 val 2600 [ 224.759721][ T26] pwc: recv_control_msg error -71 req 02 val 2900 [ 224.770138][ T26] pwc: recv_control_msg error -71 req 02 val 2800 [ 224.777438][ T26] pwc: recv_control_msg error -71 req 04 val 1100 [ 224.784190][ T26] pwc: recv_control_msg error -71 req 04 val 1200 [ 224.791289][ T26] pwc: Registered as video103. [ 224.800214][ T26] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input57 [ 224.816329][ T26] usb 5-1: USB disconnect, device number 30 [ 225.064882][ T8172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.618'. [ 225.073757][ T8172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.618'. [ 225.082890][ T8172] netlink: 'syz.3.618': attribute type 15 has an invalid length. [ 225.711679][ T8184] netlink: 20 bytes leftover after parsing attributes in process `syz.4.621'. [ 227.072423][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 227.095933][ T8205] sp0: Synchronizing with TNC [ 227.104138][ T8205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.630'. [ 227.114277][ T8205] netlink: 12 bytes leftover after parsing attributes in process `syz.4.630'. [ 227.123181][ T8205] netlink: 'syz.4.630': attribute type 15 has an invalid length. [ 227.236070][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.246536][ T9] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 227.256974][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.270170][ T9] usb 1-1: config 0 descriptor?? [ 227.423996][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 228.431473][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 228.472359][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 228.522592][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 228.613411][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 228.664413][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 228.695748][ T8222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.634'. [ 228.704663][ T8222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.634'. [ 228.713539][ T8222] netlink: 'syz.3.634': attribute type 15 has an invalid length. [ 228.888849][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 228.896781][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 229.120132][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 229.159856][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 229.187903][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 229.206961][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 229.229547][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 229.412488][ T26] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 229.451671][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 229.635198][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 229.664610][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 229.689293][ T9] pwc: Registered as video103. [ 229.755235][ T26] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.773780][ T26] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 229.782928][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.808388][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input60 [ 230.328912][ T26] usb 4-1: config 0 descriptor?? [ 230.342144][ T26] pwc: Askey VC010 type 2 USB webcam detected. [ 230.356037][ T9] usb 1-1: USB disconnect, device number 24 [ 231.410582][ T26] pwc: recv_control_msg error -32 req 02 val 2b00 [ 231.447822][ T26] pwc: recv_control_msg error -32 req 02 val 2700 [ 231.739145][ T26] pwc: recv_control_msg error -32 req 02 val 2c00 [ 231.749635][ T26] pwc: recv_control_msg error -32 req 04 val 1000 [ 231.872650][ T26] pwc: recv_control_msg error -32 req 04 val 1300 [ 232.862755][ T26] pwc: recv_control_msg error -32 req 04 val 1400 [ 232.885425][ T26] pwc: recv_control_msg error -32 req 02 val 2000 [ 233.740027][ T26] pwc: recv_control_msg error -71 req 02 val 2100 [ 233.759776][ T26] pwc: recv_control_msg error -71 req 04 val 1500 [ 233.766593][ T26] pwc: recv_control_msg error -71 req 02 val 2500 [ 233.776491][ T26] pwc: recv_control_msg error -71 req 02 val 2400 [ 233.789935][ T26] pwc: recv_control_msg error -71 req 02 val 2600 [ 233.796650][ T26] pwc: recv_control_msg error -71 req 02 val 2900 [ 233.803423][ T26] pwc: recv_control_msg error -71 req 02 val 2800 [ 233.810141][ T26] pwc: recv_control_msg error -71 req 04 val 1100 [ 233.817007][ T26] pwc: recv_control_msg error -71 req 04 val 1200 [ 233.824989][ T26] pwc: Registered as video103. [ 233.831165][ T26] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input62 [ 233.857659][ T26] usb 4-1: USB disconnect, device number 22 [ 234.646789][ T8282] sp0: Synchronizing with TNC [ 234.653268][ T8281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.652'. [ 234.662052][ T8281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.652'. [ 234.670983][ T8281] netlink: 'syz.0.652': attribute type 15 has an invalid length. [ 235.092419][ T26] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 235.832107][ T8302] 8021q: adding VLAN 0 to HW filter on device ipvlan5 [ 236.035033][ T26] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.081863][ T26] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 236.101162][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.111774][ T26] usb 4-1: config 0 descriptor?? [ 236.133493][ T26] pwc: Askey VC010 type 2 USB webcam detected. [ 236.263573][ T5867] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 236.682338][ T5867] usb 2-1: Using ep0 maxpacket: 32 [ 236.702736][ T8312] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 236.787204][ T5867] usb 2-1: unable to get BOS descriptor or descriptor too short [ 236.805319][ T5867] usb 2-1: config 86 has an invalid interface number: 196 but max is 0 [ 236.822334][ T5867] usb 2-1: config 86 has no interface number 0 [ 236.836314][ T5867] usb 2-1: config 86 interface 196 has no altsetting 0 [ 236.964110][ T26] pwc: recv_control_msg error -32 req 02 val 2b00 [ 236.976314][ T26] pwc: recv_control_msg error -32 req 02 val 2700 [ 236.998387][ T26] pwc: recv_control_msg error -32 req 02 val 2c00 [ 236.999419][ T5867] usb 2-1: string descriptor 0 read error: -22 [ 237.005516][ T26] pwc: recv_control_msg error -32 req 04 val 1000 [ 237.018010][ T5867] usb 2-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=50.5d [ 237.018400][ T26] pwc: recv_control_msg error -32 req 04 val 1300 [ 237.030923][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.036802][ T26] pwc: recv_control_msg error -32 req 04 val 1400 [ 237.048831][ T26] pwc: recv_control_msg error -32 req 02 val 2000 [ 237.056411][ T26] pwc: recv_control_msg error -32 req 02 val 2100 [ 237.069020][ T26] pwc: recv_control_msg error -32 req 04 val 1500 [ 237.096549][ T5867] msi2500 2-1:86.196: Registered as swradio24 [ 237.106893][ T5867] msi2500 2-1:86.196: SDR API is still slightly experimental and functionality changes may follow [ 237.222449][ T5914] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 237.281535][ T26] pwc: recv_control_msg error -71 req 02 val 2400 [ 237.288537][ T26] pwc: recv_control_msg error -71 req 02 val 2600 [ 237.296384][ T26] pwc: recv_control_msg error -71 req 02 val 2900 [ 237.304253][ T26] pwc: recv_control_msg error -71 req 02 val 2800 [ 237.312084][ T26] pwc: recv_control_msg error -71 req 04 val 1100 [ 237.319726][ T26] pwc: recv_control_msg error -71 req 04 val 1200 [ 237.326280][ T26] videodev: could not get a free minor [ 237.331790][ T26] pwc: Failed to register as video device (-23). [ 237.339363][ T26] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -23 [ 237.356939][ T26] usb 4-1: USB disconnect, device number 23 [ 237.372593][ T5914] usb 1-1: Using ep0 maxpacket: 32 [ 237.381331][ T5914] usb 1-1: unable to get BOS descriptor or descriptor too short [ 237.390233][ T5914] usb 1-1: config 86 has an invalid interface number: 196 but max is 0 [ 237.398640][ T5914] usb 1-1: config 86 has no interface number 0 [ 237.405356][ T5914] usb 1-1: config 86 interface 196 has no altsetting 0 [ 237.414920][ T5914] usb 1-1: string descriptor 0 read error: -22 [ 237.421196][ T5914] usb 1-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=50.5d [ 237.430603][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.462345][ T5914] videodev: could not get a free minor [ 237.468002][ T5914] msi2500 1-1:86.196: Failed to register as video device (-23) [ 237.476660][ T5914] msi2500 1-1:86.196: probe with driver msi2500 failed with error -23 [ 237.698125][ T5869] usb 1-1: USB disconnect, device number 25 [ 237.960666][ T8322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.664'. [ 238.735239][ T8340] 8021q: adding VLAN 0 to HW filter on device ipvlan5 [ 238.814040][ T5867] usb 2-1: USB disconnect, device number 23 [ 238.852403][ T5869] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 239.305696][ T5869] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.331556][ T5869] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 239.345580][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.355341][ T5869] usb 1-1: config 0 descriptor?? [ 239.363453][ T5869] pwc: Askey VC010 type 2 USB webcam detected. [ 239.793289][ T5869] pwc: recv_control_msg error -32 req 02 val 2b00 [ 239.804799][ T5869] pwc: recv_control_msg error -32 req 02 val 2700 [ 239.819061][ T5869] pwc: recv_control_msg error -32 req 02 val 2c00 [ 239.837525][ T5869] pwc: recv_control_msg error -32 req 04 val 1000 [ 239.847905][ T5869] pwc: recv_control_msg error -32 req 04 val 1300 [ 239.861229][ T5869] pwc: recv_control_msg error -32 req 04 val 1400 [ 239.873579][ T5869] pwc: recv_control_msg error -32 req 02 val 2000 [ 240.133392][ T5869] pwc: recv_control_msg error -71 req 04 val 1500 [ 240.146898][ T5869] pwc: recv_control_msg error -71 req 02 val 2500 [ 240.162344][ T5869] pwc: recv_control_msg error -71 req 02 val 2400 [ 240.169123][ T5869] pwc: recv_control_msg error -71 req 02 val 2600 [ 240.172385][ T26] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 240.182324][ T5869] pwc: recv_control_msg error -71 req 02 val 2900 [ 240.333748][ T26] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.368134][ T26] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 240.408265][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.437346][ T26] usb 4-1: config 0 descriptor?? [ 240.453652][ T5869] pwc: recv_control_msg error -71 req 02 val 2800 [ 240.460762][ T5869] pwc: recv_control_msg error -71 req 04 val 1100 [ 240.463317][ T26] pwc: Askey VC010 type 2 USB webcam detected. [ 240.472333][ T5869] pwc: recv_control_msg error -71 req 04 val 1200 [ 240.480662][ T5869] pwc: Registered as video103. [ 240.486592][ T5869] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input63 [ 240.501695][ T5869] usb 1-1: USB disconnect, device number 26 [ 240.513799][ T8366] kvm: kvm [8365]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x117 [ 240.525937][ T8366] kvm: kvm [8365]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x96d [ 240.544600][ T8366] kvm: kvm [8365]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x998 [ 240.559549][ T8366] kvm: kvm [8365]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x3e2 [ 240.569287][ T8369] netlink: 4 bytes leftover after parsing attributes in process `syz.5.678'. [ 240.622443][ T5914] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 240.786416][ T5914] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.849025][ T5914] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 240.883036][ T26] pwc: recv_control_msg error -32 req 02 val 2b00 [ 240.904964][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.924766][ T26] pwc: recv_control_msg error -32 req 02 val 2700 [ 241.722525][ T26] pwc: recv_control_msg error -32 req 02 val 2c00 [ 241.731268][ T5914] usb 2-1: config 0 descriptor?? [ 241.742457][ T26] pwc: recv_control_msg error -32 req 04 val 1000 [ 241.749743][ T26] pwc: recv_control_msg error -32 req 04 val 1300 [ 241.758897][ T5914] pwc: Askey VC010 type 2 USB webcam detected. [ 241.777416][ T26] pwc: recv_control_msg error -32 req 04 val 1400 [ 241.785012][ T26] pwc: recv_control_msg error -32 req 02 val 2000 [ 241.841402][ T26] pwc: recv_control_msg error -32 req 02 val 2100 [ 241.849922][ T26] pwc: recv_control_msg error -32 req 04 val 1500 [ 241.973374][ T8385] 8021q: adding VLAN 0 to HW filter on device ipvlan6 [ 242.061692][ T26] pwc: recv_control_msg error -71 req 02 val 2400 [ 242.084077][ T26] pwc: recv_control_msg error -71 req 02 val 2600 [ 242.091931][ T26] pwc: recv_control_msg error -71 req 02 val 2900 [ 242.100782][ T26] pwc: recv_control_msg error -71 req 02 val 2800 [ 242.117074][ T26] pwc: recv_control_msg error -71 req 04 val 1100 [ 242.127019][ T26] pwc: recv_control_msg error -71 req 04 val 1200 [ 242.151363][ T26] pwc: Registered as video103. [ 242.173271][ T26] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input64 [ 242.193314][ T5914] pwc: recv_control_msg error -32 req 02 val 2b00 [ 242.244048][ T5914] pwc: recv_control_msg error -32 req 02 val 2700 [ 242.273594][ T26] usb 4-1: USB disconnect, device number 24 [ 242.324629][ T5914] pwc: recv_control_msg error -32 req 02 val 2c00 [ 242.363040][ T5914] pwc: recv_control_msg error -32 req 04 val 1000 [ 242.384403][ T5914] pwc: recv_control_msg error -32 req 04 val 1300 [ 242.391638][ T5914] pwc: recv_control_msg error -32 req 04 val 1400 [ 242.404748][ T5914] pwc: recv_control_msg error -32 req 02 val 2000 [ 242.411827][ T5914] pwc: recv_control_msg error -32 req 02 val 2100 [ 242.620868][ T5914] pwc: recv_control_msg error -71 req 02 val 2500 [ 242.631191][ T5914] pwc: recv_control_msg error -71 req 02 val 2400 [ 242.642233][ T5914] pwc: recv_control_msg error -71 req 02 val 2600 [ 242.649016][ T5914] pwc: recv_control_msg error -71 req 02 val 2900 [ 242.660006][ T5914] pwc: recv_control_msg error -71 req 02 val 2800 [ 242.666792][ T5914] pwc: recv_control_msg error -71 req 04 val 1100 [ 242.749254][ T5914] pwc: recv_control_msg error -71 req 04 val 1200 [ 242.757389][ T5914] pwc: Registered as video103. [ 242.767041][ T5914] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input65 [ 242.796757][ T5914] usb 2-1: USB disconnect, device number 24 [ 243.052499][ T5867] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 243.134795][ T8400] 8021q: adding VLAN 0 to HW filter on device ipvlan7 [ 243.387482][ T5867] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.412356][ T5867] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 243.431029][ T5914] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 243.438704][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.692791][ T5867] usb 4-1: config 0 descriptor?? [ 243.744858][ T5867] pwc: Askey VC010 type 2 USB webcam detected. [ 243.821935][ T5914] usb 5-1: Using ep0 maxpacket: 32 [ 243.829538][ T5914] usb 5-1: unable to get BOS descriptor or descriptor too short [ 243.850381][ T5914] usb 5-1: config 86 has an invalid interface number: 196 but max is 0 [ 243.859636][ T5914] usb 5-1: config 86 has no interface number 0 [ 243.866440][ T5914] usb 5-1: config 86 interface 196 has no altsetting 0 [ 243.884706][ T5914] usb 5-1: string descriptor 0 read error: -22 [ 243.891108][ T5914] usb 5-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=50.5d [ 243.896943][ T8406] kvm: kvm [8404]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xf7c4 [ 243.900573][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.917065][ T8406] kvm: kvm [8404]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x83f [ 243.937082][ T8406] kvm: kvm [8404]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x879 [ 243.957932][ T8407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.691'. [ 244.009957][ T5914] msi2500 5-1:86.196: Registered as swradio24 [ 244.026044][ T5914] msi2500 5-1:86.196: SDR API is still slightly experimental and functionality changes may follow [ 244.162389][ T5867] pwc: recv_control_msg error -32 req 02 val 2b00 [ 244.199766][ T5867] pwc: recv_control_msg error -32 req 02 val 2700 [ 244.217516][ T5867] pwc: recv_control_msg error -32 req 02 val 2c00 [ 244.242896][ T5867] pwc: recv_control_msg error -32 req 04 val 1000 [ 244.250025][ T5867] pwc: recv_control_msg error -32 req 04 val 1300 [ 244.257690][ T5867] pwc: recv_control_msg error -32 req 04 val 1400 [ 244.596611][ T5867] pwc: recv_control_msg error -32 req 02 val 2000 [ 244.604372][ T5867] pwc: recv_control_msg error -32 req 02 val 2100 [ 244.616833][ T5867] pwc: recv_control_msg error -32 req 04 val 1500 [ 244.698336][ T5869] usb 5-1: USB disconnect, device number 31 [ 244.709902][ T5867] pwc: recv_control_msg error -32 req 02 val 2500 [ 244.927273][ T5867] pwc: recv_control_msg error -71 req 02 val 2600 [ 244.962343][ T5867] pwc: recv_control_msg error -71 req 02 val 2900 [ 244.969772][ T5867] pwc: recv_control_msg error -71 req 02 val 2800 [ 245.046052][ T8424] 8021q: adding VLAN 0 to HW filter on device ipvlan5 [ 245.063565][ T5867] pwc: recv_control_msg error -71 req 04 val 1100 [ 245.187404][ T5867] pwc: recv_control_msg error -71 req 04 val 1200 [ 245.195219][ T5867] pwc: Registered as video103. [ 245.254568][ T5867] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input66 [ 245.285664][ T5867] usb 4-1: USB disconnect, device number 25 [ 245.432585][ T5869] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 245.588622][ T8437] 8021q: adding VLAN 0 to HW filter on device ipvlan6 [ 245.822328][ T5869] usb 1-1: Using ep0 maxpacket: 32 [ 245.830805][ T5869] usb 1-1: unable to get BOS descriptor or descriptor too short [ 245.852802][ T5869] usb 1-1: config 86 has an invalid interface number: 196 but max is 0 [ 245.881441][ T5869] usb 1-1: config 86 has no interface number 0 [ 245.895744][ T5869] usb 1-1: config 86 interface 196 has no altsetting 0 [ 245.914828][ T5869] usb 1-1: string descriptor 0 read error: -22 [ 245.925313][ T5869] usb 1-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=50.5d [ 245.935093][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.982466][ T5899] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 246.331962][ T5869] msi2500 1-1:86.196: Registered as swradio24 [ 246.338610][ T5869] msi2500 1-1:86.196: SDR API is still slightly experimental and functionality changes may follow [ 246.356884][ T5869] usb 1-1: USB disconnect, device number 27 [ 246.413331][ T5899] usb 2-1: Using ep0 maxpacket: 32 [ 246.457478][ T5899] usb 2-1: unable to get BOS descriptor or descriptor too short [ 246.467431][ T5899] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 246.475460][ T5899] usb 2-1: can't read configurations, error -71 [ 246.600364][ T5867] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 247.253661][ T5867] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.263915][ T5867] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 247.273520][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.282956][ T5867] usb 4-1: config 0 descriptor?? [ 247.289574][ T5867] pwc: Askey VC010 type 2 USB webcam detected. [ 247.756135][ T5867] pwc: recv_control_msg error -32 req 02 val 2b00 [ 247.807010][ T5867] pwc: recv_control_msg error -32 req 02 val 2700 [ 248.477303][ T5867] pwc: recv_control_msg error -32 req 02 val 2c00 [ 249.146329][ T5867] pwc: recv_control_msg error -32 req 04 val 1000 [ 249.217231][ T5867] pwc: recv_control_msg error -32 req 04 val 1300 [ 249.273127][ T5867] pwc: recv_control_msg error -32 req 04 val 1400 [ 249.284743][ T5867] pwc: recv_control_msg error -32 req 02 val 2000 [ 249.298850][ T5867] pwc: recv_control_msg error -32 req 02 val 2100 [ 249.309963][ T5867] pwc: recv_control_msg error -71 req 04 val 1500 [ 249.322555][ T5867] pwc: recv_control_msg error -71 req 02 val 2500 [ 249.337534][ T5867] pwc: recv_control_msg error -71 req 02 val 2400 [ 249.347090][ T5867] pwc: recv_control_msg error -71 req 02 val 2600 [ 249.359638][ T5867] pwc: recv_control_msg error -71 req 02 val 2900 [ 249.368108][ T5867] pwc: recv_control_msg error -71 req 02 val 2800 [ 249.375573][ T5867] pwc: recv_control_msg error -71 req 04 val 1100 [ 249.382493][ T5867] pwc: recv_control_msg error -71 req 04 val 1200 [ 249.389744][ T5867] pwc: Registered as video103. [ 249.395836][ T30] audit: type=1400 audit(1742389350.220:389): avc: denied { create } for pid=8480 comm="syz.4.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 249.415102][ C0] vkms_vblank_simulate: vblank timer overrun [ 249.421528][ T5867] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input67 [ 249.435764][ T5867] usb 4-1: USB disconnect, device number 26 [ 249.445097][ T30] audit: type=1400 audit(1742389350.250:390): avc: denied { setopt } for pid=8480 comm="syz.4.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 249.464356][ C0] vkms_vblank_simulate: vblank timer overrun [ 250.770057][ T8501] FAULT_INJECTION: forcing a failure. [ 250.770057][ T8501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.797028][ T8501] CPU: 1 UID: 0 PID: 8501 Comm: syz.1.718 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 250.797053][ T8501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 250.797063][ T8501] Call Trace: [ 250.797068][ T8501] [ 250.797074][ T8501] dump_stack_lvl+0x16c/0x1f0 [ 250.797102][ T8501] should_fail_ex+0x50a/0x650 [ 250.797133][ T8501] _copy_to_user+0x32/0xd0 [ 250.797154][ T8501] simple_read_from_buffer+0xd0/0x160 [ 250.797181][ T8501] proc_fail_nth_read+0x198/0x270 [ 250.797205][ T8501] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 250.797230][ T8501] ? rw_verify_area+0xcf/0x680 [ 250.797253][ T8501] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 250.797277][ T8501] vfs_read+0x1df/0xbf0 [ 250.797302][ T8501] ? __fget_files+0x1fc/0x3a0 [ 250.797320][ T8501] ? __pfx___mutex_lock+0x10/0x10 [ 250.797351][ T8501] ? __pfx_vfs_read+0x10/0x10 [ 250.797385][ T8501] ? __fget_files+0x206/0x3a0 [ 250.797409][ T8501] ksys_read+0x12b/0x250 [ 250.797434][ T8501] ? __pfx_ksys_read+0x10/0x10 [ 250.797468][ T8501] do_syscall_64+0xcd/0x250 [ 250.797493][ T8501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.797516][ T8501] RIP: 0033:0x7f6957d8bb7c [ 250.797530][ T8501] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 250.797550][ T8501] RSP: 002b:00007f6958b8a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 250.797565][ T8501] RAX: ffffffffffffffda RBX: 00007f6957fa5fa0 RCX: 00007f6957d8bb7c [ 250.797577][ T8501] RDX: 000000000000000f RSI: 00007f6958b8a0a0 RDI: 0000000000000004 [ 250.797587][ T8501] RBP: 00007f6958b8a090 R08: 0000000000000000 R09: 0000000000000000 [ 250.797597][ T8501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.797607][ T8501] R13: 0000000000000000 R14: 00007f6957fa5fa0 R15: 00007fffa3b17d98 [ 250.797631][ T8501] [ 251.698049][ T8502] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 251.903517][ T8513] 8021q: adding VLAN 0 to HW filter on device ipvlan8 [ 253.872415][ T5867] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 254.022637][ T5867] usb 5-1: Using ep0 maxpacket: 32 [ 254.164584][ T5867] usb 5-1: unable to get BOS descriptor or descriptor too short [ 254.251476][ T5867] usb 5-1: config 86 has an invalid interface number: 196 but max is 0 [ 254.261957][ T5867] usb 5-1: config 86 has no interface number 0 [ 254.268632][ T5867] usb 5-1: config 86 interface 196 has no altsetting 0 [ 254.280382][ T5867] usb 5-1: string descriptor 0 read error: -22 [ 254.288925][ T5867] usb 5-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=50.5d [ 254.302160][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.756282][ T5867] usb 5-1: can't set config #86, error -71 [ 254.776580][ T5867] usb 5-1: USB disconnect, device number 32 [ 255.493586][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.500003][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.454050][ T8557] 8021q: adding VLAN 0 to HW filter on device ipvlan7 [ 257.772622][ T5867] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 258.072403][ T5867] usb 4-1: Using ep0 maxpacket: 32 [ 258.088236][ T5867] usb 4-1: unable to get BOS descriptor or descriptor too short [ 258.100853][ T5867] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 258.121678][ T5867] usb 4-1: can't read configurations, error -71 [ 258.346078][ T8580] 8021q: adding VLAN 0 to HW filter on device ipvlan7 [ 258.732375][ T5869] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 258.894715][ T5869] usb 2-1: Using ep0 maxpacket: 32 [ 258.907965][ T5869] usb 2-1: unable to get BOS descriptor or descriptor too short [ 258.919961][ T5869] usb 2-1: config 86 has an invalid interface number: 196 but max is 0 [ 258.936434][ T5869] usb 2-1: config 86 has no interface number 0 [ 258.952404][ T5869] usb 2-1: config 86 interface 196 has no altsetting 0 [ 258.965755][ T5869] usb 2-1: string descriptor 0 read error: -22 [ 258.972150][ T5869] usb 2-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=50.5d [ 258.994144][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.129066][ T5869] msi2500 2-1:86.196: Registered as swradio24 [ 259.138797][ T5869] msi2500 2-1:86.196: SDR API is still slightly experimental and functionality changes may follow [ 259.262116][ T5869] usb 2-1: USB disconnect, device number 27 [ 261.182800][ T8609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.749'. [ 261.684722][ T8624] 8021q: adding VLAN 0 to HW filter on device ipvlan8 [ 262.042518][ T26] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 262.302338][ T26] usb 2-1: Using ep0 maxpacket: 32 [ 262.316780][ T45] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 262.326152][ T26] usb 2-1: unable to get BOS descriptor or descriptor too short [ 262.343811][ T26] usb 2-1: config 86 has an invalid interface number: 196 but max is 0 [ 262.470316][ T26] usb 2-1: config 86 has no interface number 0 [ 262.494530][ T45] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.510461][ T26] usb 2-1: config 86 interface 196 has no altsetting 0 [ 262.624359][ T45] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 262.634501][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.644457][ T26] usb 2-1: string descriptor 0 read error: -22 [ 262.650653][ T26] usb 2-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=50.5d [ 262.660446][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.668878][ T45] usb 4-1: config 0 descriptor?? [ 262.689351][ T45] pwc: Askey VC010 type 2 USB webcam detected. [ 263.268573][ T26] msi2500 2-1:86.196: Registered as swradio24 [ 263.284253][ T26] msi2500 2-1:86.196: SDR API is still slightly experimental and functionality changes may follow [ 263.435223][ T45] pwc: recv_control_msg error -32 req 02 val 2b00 [ 263.445251][ T45] pwc: recv_control_msg error -32 req 02 val 2700 [ 263.682139][ T26] usb 2-1: USB disconnect, device number 28 [ 263.693938][ T45] pwc: recv_control_msg error -32 req 02 val 2c00 [ 263.708322][ T45] pwc: recv_control_msg error -32 req 04 val 1000 [ 263.718090][ T45] pwc: recv_control_msg error -32 req 04 val 1300 [ 263.742791][ T45] pwc: recv_control_msg error -32 req 04 val 1400 [ 263.763342][ T45] pwc: recv_control_msg error -32 req 02 val 2000 [ 263.780254][ T45] pwc: recv_control_msg error -32 req 02 val 2100 [ 263.947562][ T8654] sp0: Synchronizing with TNC [ 263.961362][ T8654] netlink: 8 bytes leftover after parsing attributes in process `syz.5.762'. [ 263.970290][ T8654] netlink: 12 bytes leftover after parsing attributes in process `syz.5.762'. [ 263.979254][ T8654] netlink: 'syz.5.762': attribute type 15 has an invalid length. [ 264.106455][ T45] pwc: recv_control_msg error -71 req 02 val 2500 [ 264.786032][ T45] pwc: recv_control_msg error -71 req 02 val 2400 [ 264.795563][ T45] pwc: recv_control_msg error -71 req 02 val 2600 [ 264.802175][ T45] pwc: recv_control_msg error -71 req 02 val 2900 [ 264.811549][ T45] pwc: recv_control_msg error -71 req 02 val 2800 [ 264.821189][ T45] pwc: recv_control_msg error -71 req 04 val 1100 [ 264.839182][ T45] pwc: recv_control_msg error -71 req 04 val 1200 [ 264.921175][ T45] pwc: Registered as video103. [ 264.933970][ T45] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input69 [ 264.951210][ T45] usb 4-1: USB disconnect, device number 29 [ 265.965001][ T8681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.764'. [ 266.039692][ T8681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.764'. [ 266.176762][ T8681] netlink: 'syz.0.764': attribute type 15 has an invalid length. [ 267.418814][ T8701] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 267.776466][ T8704] 8021q: adding VLAN 0 to HW filter on device ipvlan8 [ 268.042438][ T5869] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 268.222368][ T5869] usb 4-1: Using ep0 maxpacket: 32 [ 268.238949][ T5869] usb 4-1: unable to get BOS descriptor or descriptor too short [ 268.251673][ T5869] usb 4-1: config 86 has an invalid interface number: 196 but max is 0 [ 268.269013][ T5869] usb 4-1: config 86 has no interface number 0 [ 268.289961][ T5869] usb 4-1: config 86 interface 196 has no altsetting 0 [ 268.309303][ T8706] kvm: kvm [8705]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xf7c4 [ 268.512488][ T5914] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 268.608610][ T8706] kvm: kvm [8705]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x837 [ 268.619604][ T5869] usb 4-1: string descriptor 0 read error: -22 [ 268.622877][ T8707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.777'. [ 268.629444][ T5869] usb 4-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=50.5d [ 268.677853][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.738288][ T5869] msi2500 4-1:86.196: Registered as swradio24 [ 268.744806][ T5869] msi2500 4-1:86.196: SDR API is still slightly experimental and functionality changes may follow [ 268.803735][ T5914] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.819099][ T5914] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 268.829787][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.851737][ T5914] usb 2-1: config 0 descriptor?? [ 268.865811][ T5914] pwc: Askey VC010 type 2 USB webcam detected. [ 269.777173][ T5914] pwc: recv_control_msg error -32 req 02 val 2b00 [ 269.784300][ T5914] pwc: recv_control_msg error -32 req 02 val 2700 [ 269.791236][ T5914] pwc: recv_control_msg error -32 req 02 val 2c00 [ 269.799077][ T5914] pwc: recv_control_msg error -32 req 04 val 1000 [ 269.806126][ T5914] pwc: recv_control_msg error -32 req 04 val 1300 [ 269.814724][ T5914] pwc: recv_control_msg error -32 req 04 val 1400 [ 269.821711][ T5914] pwc: recv_control_msg error -32 req 02 val 2000 [ 269.828769][ T5914] pwc: recv_control_msg error -32 req 02 val 2100 [ 269.835735][ T5914] pwc: recv_control_msg error -32 req 04 val 1500 [ 269.872344][ T5869] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 270.023690][ T5869] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.034008][ T5869] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 270.043435][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.052762][ T5914] pwc: recv_control_msg error -71 req 02 val 2400 [ 270.060160][ T5869] usb 5-1: config 0 descriptor?? [ 270.065618][ T5914] pwc: recv_control_msg error -71 req 02 val 2600 [ 270.074066][ T5914] pwc: recv_control_msg error -71 req 02 val 2900 [ 270.080752][ T5914] pwc: recv_control_msg error -71 req 02 val 2800 [ 270.091871][ T5914] pwc: recv_control_msg error -71 req 04 val 1100 [ 270.130038][ T5869] pwc: Askey VC010 type 2 USB webcam detected. [ 270.138722][ T5914] pwc: recv_control_msg error -71 req 04 val 1200 [ 270.157466][ T5914] videodev: could not get a free minor [ 270.165825][ T5914] pwc: Failed to register as video device (-23). [ 270.464617][ T5914] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -23 [ 270.503834][ T5914] usb 2-1: USB disconnect, device number 29 [ 270.665204][ T5869] pwc: recv_control_msg error -32 req 02 val 2b00 [ 270.677725][ T5869] pwc: recv_control_msg error -32 req 02 val 2700 [ 270.685213][ T5869] pwc: recv_control_msg error -32 req 02 val 2c00 [ 270.692375][ T5869] pwc: recv_control_msg error -32 req 04 val 1000 [ 270.701262][ T5869] pwc: recv_control_msg error -32 req 04 val 1300 [ 270.716619][ T5914] usb 4-1: USB disconnect, device number 30 [ 270.717281][ T5869] pwc: recv_control_msg error -32 req 04 val 1400 [ 270.741668][ T5869] pwc: recv_control_msg error -32 req 02 val 2000 [ 270.751139][ T5869] pwc: recv_control_msg error -32 req 02 val 2100 [ 270.852443][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 271.095112][ T5869] pwc: recv_control_msg error -71 req 02 val 2500 [ 271.102225][ T30] audit: type=1400 audit(1742389371.750:391): avc: denied { map } for pid=8742 comm="syz.5.789" path="socket:[21886]" dev="sockfs" ino=21886 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 271.125891][ T5869] pwc: recv_control_msg error -71 req 02 val 2400 [ 271.150948][ T5869] pwc: recv_control_msg error -71 req 02 val 2600 [ 271.158362][ T5869] pwc: recv_control_msg error -71 req 02 val 2900 [ 271.165225][ T5869] pwc: recv_control_msg error -71 req 02 val 2800 [ 271.172174][ T5869] pwc: recv_control_msg error -71 req 04 val 1100 [ 271.178954][ T5869] pwc: recv_control_msg error -71 req 04 val 1200 [ 271.187190][ T5869] pwc: Registered as video103. [ 271.202780][ T5869] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input70 [ 271.219544][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 271.264841][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 271.341337][ T5869] usb 5-1: USB disconnect, device number 33 [ 271.372527][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 271.453255][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 271.529282][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 271.554263][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.579692][ T9] usb 1-1: config 0 descriptor?? [ 271.585296][ T8736] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 272.244939][ T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 272.258380][ T9] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 272.272721][ T9] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 272.358713][ T8736] FAULT_INJECTION: forcing a failure. [ 272.358713][ T8736] name failslab, interval 1, probability 0, space 0, times 0 [ 272.546161][ T8736] CPU: 1 UID: 0 PID: 8736 Comm: syz.0.786 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 272.546187][ T8736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 272.546197][ T8736] Call Trace: [ 272.546202][ T8736] [ 272.546209][ T8736] dump_stack_lvl+0x16c/0x1f0 [ 272.546238][ T8736] should_fail_ex+0x50a/0x650 [ 272.546264][ T8736] ? fs_reclaim_acquire+0xae/0x150 [ 272.546291][ T8736] ? hiddev_ioctl_usage.isra.0+0xba/0x1650 [ 272.546323][ T8736] should_failslab+0xc2/0x120 [ 272.546343][ T8736] __kmalloc_cache_noprof+0x68/0x410 [ 272.546376][ T8736] hiddev_ioctl_usage.isra.0+0xba/0x1650 [ 272.546401][ T8736] ? irqentry_exit+0x3b/0x90 [ 272.546423][ T8736] ? lockdep_hardirqs_on+0x7c/0x110 [ 272.546449][ T8736] ? __pfx_hiddev_ioctl_usage.isra.0+0x10/0x10 [ 272.546477][ T8736] ? usbhid_init_reports+0x1aa/0x390 [ 272.546504][ T8736] hiddev_ioctl+0x641/0x15b0 [ 272.546531][ T8736] ? __pfx_hiddev_ioctl+0x10/0x10 [ 272.546556][ T8736] ? lockdep_hardirqs_on+0x7c/0x110 [ 272.546589][ T8736] ? selinux_file_ioctl+0x180/0x270 [ 272.546615][ T8736] ? selinux_file_ioctl+0xb4/0x270 [ 272.546642][ T8736] ? __pfx_hiddev_ioctl+0x10/0x10 [ 272.546668][ T8736] __x64_sys_ioctl+0x190/0x200 [ 272.546694][ T8736] do_syscall_64+0xcd/0x250 [ 272.546719][ T8736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.546742][ T8736] RIP: 0033:0x7f4c00f8d169 [ 272.546757][ T8736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.546773][ T8736] RSP: 002b:00007f4c01d17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 272.546790][ T8736] RAX: ffffffffffffffda RBX: 00007f4c011a5fa0 RCX: 00007f4c00f8d169 [ 272.546801][ T8736] RDX: 00004000000000c0 RSI: 0000000040184810 RDI: 0000000000000004 [ 272.546814][ T8736] RBP: 00007f4c01d17090 R08: 0000000000000000 R09: 0000000000000000 [ 272.546824][ T8736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.546834][ T8736] R13: 0000000000000000 R14: 00007f4c011a5fa0 R15: 00007ffeda519318 [ 272.546859][ T8736] [ 272.686218][ T5867] usb 1-1: USB disconnect, device number 28 [ 273.727438][ T8782] 8021q: adding VLAN 0 to HW filter on device ipvlan6 [ 273.742528][ T26] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 273.908970][ T26] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.909174][ T26] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 273.909239][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.932749][ T26] usb 4-1: config 0 descriptor?? [ 273.936406][ T26] pwc: Askey VC010 type 2 USB webcam detected. [ 274.232433][ T45] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 274.592445][ T31] INFO: task syz.2.216:6778 blocked for more than 143 seconds. [ 274.600405][ T31] Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 274.617805][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 274.638107][ T31] task:syz.2.216 state:D stack:26704 pid:6778 tgid:6777 ppid:5815 task_flags:0x400740 flags:0x00000006 [ 274.653553][ T31] Call Trace: [ 274.658088][ T26] pwc: recv_control_msg error -32 req 02 val 2b00 [ 274.666330][ T31] [ 274.670519][ T31] __schedule+0xf43/0x5890 [ 274.677539][ T26] pwc: recv_control_msg error -32 req 02 val 2700 [ 274.680562][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 274.689701][ T31] ? __pfx_lockdep_lock+0x10/0x10 [ 274.698332][ T26] pwc: recv_control_msg error -32 req 02 val 2c00 [ 274.706909][ T31] ? __pfx___schedule+0x10/0x10 [ 274.712035][ T31] ? schedule+0x298/0x350 [ 274.717027][ T26] pwc: recv_control_msg error -32 req 04 val 1000 [ 274.718118][ T31] ? __pfx_lock_release+0x10/0x10 [ 274.728805][ T26] pwc: recv_control_msg error -32 req 04 val 1300 [ 274.729354][ T31] ? lock_acquire+0x2f/0xb0 [ 274.740364][ T26] pwc: recv_control_msg error -32 req 04 val 1400 [ 274.740716][ T31] ? schedule+0x1fd/0x350 [ 274.746910][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 274.752110][ T31] schedule+0xe7/0x350 [ 274.762221][ T26] pwc: recv_control_msg error -32 req 02 val 2000 [ 274.769923][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 274.790463][ T31] schedule_timeout+0x244/0x280 [ 274.801678][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 274.819654][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 274.851492][ T31] __wait_for_common+0x3e1/0x600 [ 274.860813][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 274.870487][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 274.877202][ T31] ? __pfx_try_to_wake_up+0x10/0x10 [ 274.886356][ T31] wait_for_completion_state+0x1c/0x40 [ 274.892057][ T31] do_coredump+0x86f/0x4410 [ 274.898357][ T31] ? unwind_get_return_address+0x59/0xa0 [ 274.908169][ T31] ? __pfx_do_coredump+0x10/0x10 [ 274.935870][ T31] ? stack_trace_save+0x95/0xd0 [ 274.949081][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 274.974955][ T31] ? hlock_class+0x4e/0x130 [ 274.985098][ T31] ? stack_depot_save_flags+0x28/0x9c0 [ 275.000445][ T31] ? kasan_save_stack+0x42/0x60 [ 275.018991][ T31] ? kasan_save_stack+0x33/0x60 [ 275.029528][ T31] ? kasan_save_track+0x14/0x30 [ 275.046698][ T31] ? kasan_save_free_info+0x3b/0x60 [ 275.056356][ T31] ? __kasan_slab_free+0x51/0x70 [ 275.076752][ T31] ? kmem_cache_free+0x2e2/0x4d0 [ 275.090627][ T26] pwc: recv_control_msg error -71 req 04 val 1500 [ 275.090925][ T31] ? __sigqueue_free+0xba/0x2a0 [ 275.097404][ T45] usb 1-1: config 86 has an invalid interface number: 196 but max is 0 [ 275.108435][ T31] ? get_signal+0xcbc/0x26c0 [ 275.121250][ T31] ? arch_do_signal_or_restart+0x90/0x7e0 [ 275.122363][ T26] pwc: recv_control_msg error -71 req 02 val 2500 [ 275.127324][ T31] ? syscall_exit_to_user_mode+0x150/0x2a0 [ 275.133393][ T45] usb 1-1: config 86 has no interface number 0 [ 275.133421][ T45] usb 1-1: config 86 interface 196 has no altsetting 0 [ 275.135829][ T45] usb 1-1: string descriptor 0 read error: -22 [ 275.143067][ T31] ? find_held_lock+0x2d/0x110 [ 275.152421][ T45] usb 1-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=50.5d [ 275.162316][ T31] ? proc_coredump_connector+0x2d2/0x4f0 [ 275.163210][ T26] pwc: recv_control_msg error -71 req 02 val 2400 [ 275.172490][ T31] ? __pfx_proc_coredump_connector+0x10/0x10 [ 275.192343][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.200916][ T31] get_signal+0x230b/0x26c0 [ 275.202324][ T26] pwc: recv_control_msg error -71 req 02 val 2600 [ 275.206433][ T31] ? __pfx_get_signal+0x10/0x10 [ 275.220792][ T31] ? rcu_is_watching+0x12/0xc0 [ 275.222432][ T26] pwc: recv_control_msg error -71 req 02 val 2900 [ 275.231215][ T31] ? __local_bh_enable_ip+0xa4/0x120 [ 275.242599][ T26] pwc: recv_control_msg error -71 req 02 val 2800 [ 275.252330][ T26] pwc: recv_control_msg error -71 req 04 val 1100 [ 275.255542][ T31] arch_do_signal_or_restart+0x90/0x7e0 [ 275.267440][ T26] pwc: recv_control_msg error -71 req 04 val 1200 [ 275.271232][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 275.275803][ T45] msi2500 1-1:86.196: Registered as swradio24 [ 275.280341][ T31] ? rcu_is_watching+0x12/0xc0 [ 275.295709][ T31] syscall_exit_to_user_mode+0x150/0x2a0 [ 275.299199][ T26] videodev: could not get a free minor [ 275.305511][ T31] do_syscall_64+0xda/0x250 [ 275.306975][ T45] msi2500 1-1:86.196: SDR API is still slightly experimental and functionality changes may follow [ 275.311542][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.322192][ T26] pwc: Failed to register as video device (-23). [ 275.337363][ T26] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -23 [ 275.356817][ T26] usb 4-1: USB disconnect, device number 31 [ 275.359749][ T31] RIP: 0033:0x7f6fa7a4e750 [ 275.370057][ T31] RSP: 002b:00007f6fa8abe3f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 275.382355][ T31] RAX: 0000000000000000 RBX: 00007f6fa7da5fa8 RCX: 00007f6fa7b8d169 [ 275.390420][ T31] RDX: 00007f6fa8abe400 RSI: 00007f6fa8abe530 RDI: 000000000000000b [ 275.398589][ T31] RBP: 00007f6fa7da5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 275.406770][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6fa7da5fac [ 275.445303][ T31] R13: 0000000000000000 R14: 00007ffe4c1a3310 R15: 00007ffe4c1a33f8 [ 275.472336][ T31] [ 275.475503][ T31] [ 275.475503][ T31] Showing all locks held in the system: [ 275.486811][ T31] 3 locks held by kworker/1:0/26: [ 275.491845][ T31] #0: ffff888020af0948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 275.503893][ T31] #1: ffffc90000a0fd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 275.515239][ T31] #2: ffff888145b11190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c1/0x4e10 [ 275.524245][ T31] 1 lock held by khungtaskd/31: [ 275.529106][ T31] #0: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 275.539018][ T31] 2 locks held by getty/5588: [ 275.544062][ T31] #0: ffff88814d5340a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 275.553839][ T31] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 275.564071][ T31] 4 locks held by kworker/u8:15/7024: [ 275.569433][ T31] #0: ffff8880b863ec18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 275.579385][ T31] #1: ffff8880b8628a88 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2c1/0x8e0 [ 275.590845][ T31] #2: ffff8880b862a518 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x12f/0x1e0 [ 275.601241][ T31] #3: ffffffff9ab4f8a8 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x149/0x4a0 [ 275.616033][ T31] 1 lock held by syz.3.799/8777: [ 275.621030][ T31] [ 275.626906][ T31] ============================================= [ 275.626906][ T31] [ 275.639576][ T31] NMI backtrace for cpu 1 [ 275.639587][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 275.639605][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 275.639613][ T31] Call Trace: [ 275.639618][ T31] [ 275.639624][ T31] dump_stack_lvl+0x116/0x1f0 [ 275.639650][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 275.639669][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 275.639691][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 275.639710][ T31] watchdog+0xf62/0x12b0 [ 275.639738][ T31] ? __pfx_watchdog+0x10/0x10 [ 275.639760][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 275.639783][ T31] ? __kthread_parkme+0x148/0x220 [ 275.639801][ T31] ? __pfx_watchdog+0x10/0x10 [ 275.639825][ T31] kthread+0x3af/0x750 [ 275.639845][ T31] ? __pfx_kthread+0x10/0x10 [ 275.639868][ T31] ? __pfx_kthread+0x10/0x10 [ 275.639889][ T31] ret_from_fork+0x45/0x80 [ 275.639910][ T31] ? __pfx_kthread+0x10/0x10 [ 275.639929][ T31] ret_from_fork_asm+0x1a/0x30 [ 275.639958][ T31] [ 275.639964][ T31] Sending NMI from CPU 1 to CPUs 0: [ 275.751327][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x1a/0x20 [ 275.752783][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 275.752794][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 275.752811][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 275.752820][ T31] Call Trace: [ 275.752825][ T31] [ 275.752831][ T31] dump_stack_lvl+0x3d/0x1f0 [ 275.752855][ T31] panic+0x71d/0x800 [ 275.752873][ T31] ? __pfx_panic+0x10/0x10 [ 275.752888][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 275.752911][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 275.752931][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 275.752951][ T31] ? watchdog+0xdcc/0x12b0 [ 275.752974][ T31] ? watchdog+0xdbf/0x12b0 [ 275.752997][ T31] watchdog+0xddd/0x12b0 [ 275.753023][ T31] ? __pfx_watchdog+0x10/0x10 [ 275.753043][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 275.753063][ T31] ? __kthread_parkme+0x148/0x220 [ 275.753079][ T31] ? __pfx_watchdog+0x10/0x10 [ 275.753101][ T31] kthread+0x3af/0x750 [ 275.753119][ T31] ? __pfx_kthread+0x10/0x10 [ 275.753141][ T31] ? __pfx_kthread+0x10/0x10 [ 275.753159][ T31] ret_from_fork+0x45/0x80 [ 275.753178][ T31] ? __pfx_kthread+0x10/0x10 [ 275.753196][ T31] ret_from_fork_asm+0x1a/0x30 [ 275.753220][ T31] [ 275.885489][ T31] Kernel Offset: disabled [ 275.889793][ T31] Rebooting in 86400 seconds..