last executing test programs: 8.166575081s ago: executing program 2 (id=983): add_key$user(&(0x7f0000000000), 0x0, &(0x7f0000000240), 0x0, 0xfffffffffffffffe) r0 = add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x420000, 0x30) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r3, &(0x7f00000003c0)={[{0x2b, 'rdma'}]}, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x30, 0x1, 0x4, 0x101, 0x0, 0x1000000, {0x3, 0x0, 0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x17b}, @NFULA_CFG_MODE={0xa, 0x2, {0x1, 0x3}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) 8.126977553s ago: executing program 2 (id=984): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x40000032, r3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r4, 0x0, r3, 0x0, 0x7ffff000, 0x1) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000080)=0x3, 0x12) 7.523146944s ago: executing program 4 (id=986): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', 0xffffffffffffffff, 0x0, 0x1e0000}, 0x18) keyctl$instantiate(0xc, 0x0, 0x0, 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x4000084) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0xffffffff, 0x34325241, 0x3, 0x0, [{0x8, 0xf}, {0x8, 0x29f6ebcd}, {0xd, 0x8}, {0x5, 0x8}, {0x2, 0x3}, {0x1ff, 0x3}, {0x6, 0x409}, {0x10001, 0x1800000}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}}) read$FUSE(0xffffffffffffffff, &(0x7f00000009c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={0x64, r6, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20044001}, 0x10) quotactl_fd$Q_GETQUOTA(r4, 0xffffffff80000702, r5, &(0x7f00000004c0)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r8, @ANYBLOB='\a'], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map, 0x7, 0x0, 0x8, &(0x7f0000000180)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)={0x64, 0x0, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xfbfb}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040800}, 0x40000) 7.160801007s ago: executing program 2 (id=987): renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f0000000080)={0xfffffffffffffe6a, 0x0, 0x1, 0x0, 0x0, 0x7}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x404042, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x7f, 0x1, 0x4, 0x0, 0x7}) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008a}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, &(0x7f0000000300)={0x2c, &(0x7f00000003c0)={0x40, 0x11, 0x86, {0x86, 0x2, "54595fe527c6887f63ee0a1a4394ff8083ae91ce74edf0ffd211fe9184696ac03e3cb7baac5f9a33c883cc2a3b054b7b458a9c186f39089ab7fad39ee0f4ca039a2fb69eada44c6157152ced2798498cfd063067aef461613ff5ff4bdc6a425fab5c92404ac372e3dc6fe17b2d2427ef297880f883dcedf7fcc0d98c9ad19c2985cf482c"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80a}}, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe5, 0x60, 0x6, 0x7, "37dfb35f", "a49dbba5"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x80, 0xa, 0x9, 0x2, 0x8, 0x1ff}}}, &(0x7f0000000b00)={0x84, &(0x7f0000000680)={0x20, 0xe, 0xf8, "81fba33e3676e318ea0b47124e76d3b4fe9cb4c9726c916d7657f90f7d680adf378fe12393f44502eab4e07e153915ec1d2f8e9330ef14e0ba0c123ff688ea03448db3a4e3fc2947f55ce8d190c78c5f16fea304ec1dec415c8a9feffb501d555d1e52322d9c6068ab453f2c1482478d0e70f29718b777f960d781bac76383b282f782dfc225c878ac7e3cd6d704c440902f2c8de16f742b7a52ca81ade8df92f456ad48142ceb306b2f293115463e51b6027bfdf90493f64c0f97f56434257d8298582c8e8ef1a252061e7741f4ca18bc44831dec53eb3e5d5cacb381ed9a0d2f41ebca8ed7ec4c92b1ca67339a3b7cd879b3ef991e1f15"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000800)={0x20, 0x0, 0x8, {0x1c00, 0x20, [0x0]}}, &(0x7f0000000840)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0x44}, &(0x7f00000008c0)={0x40, 0xb, 0x2, "c19c"}, &(0x7f0000000900)={0x40, 0xf, 0x2, 0x101}, &(0x7f0000000940)={0x40, 0x13, 0x6, @local}, &(0x7f0000000980)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000009c0)={0x40, 0x19, 0x2, "1996"}, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000a40)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000a80)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000ac0)={0x40, 0x21, 0x1, 0x3}}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) 6.861436524s ago: executing program 0 (id=988): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r1, 0x1) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002180)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x9, 0x3400}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x0, 0x8}}}]}, 0x34}}, 0x0) connect$netrom(r2, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) connect$netrom(r2, &(0x7f0000000300)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 6.504515953s ago: executing program 4 (id=990): renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f0000000080)={0xfffffffffffffe6a, 0x0, 0x1, 0x0, 0x0, 0x7}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x404042, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x7f, 0x1, 0x4, 0x0, 0x7}) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008a}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, &(0x7f0000000300)={0x2c, &(0x7f00000003c0)={0x40, 0x11, 0x86, {0x86, 0x2, "54595fe527c6887f63ee0a1a4394ff8083ae91ce74edf0ffd211fe9184696ac03e3cb7baac5f9a33c883cc2a3b054b7b458a9c186f39089ab7fad39ee0f4ca039a2fb69eada44c6157152ced2798498cfd063067aef461613ff5ff4bdc6a425fab5c92404ac372e3dc6fe17b2d2427ef297880f883dcedf7fcc0d98c9ad19c2985cf482c"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80a}}, &(0x7f0000000bc0)=ANY=[@ANYBLOB="000f04010000050f040103141004030609bf71c85d0fb3ffeeeb458260400b0a1003001300fc011302e110033c73e250192da8860ee57ee7c05c2d6b1b209c30bbf27ad238db850a740e90fcf48224a89bce9cf5326362303cc521905ffca7d0e5fd96d2c91dfafa68444a19ab499f517bd4bd2c223671a6d8d23a0075592208de4a2997454faa78be9650341da9bd36fb0c9fd8cc919972330030d6dc7b6dba0400000079d584a61624cbe764422dc94e69d46ad6c253430ad554c493fde4eff32c359b7c6e4c1df915698848d7286dcea50d9d470bd4699589f281874080175eff8c2a313720ebd8628da7b8e7b3ecf61f53bfefb69be1be75b8b78a16282315d0e272ce740aadfd5d8d8ae1b7e604e7bc48038892fa7662e10e3faf81fa785eb3b8cf2cb5b8dbcfc5a1243d17ae09d8349b1d0c9de68a17b1ba709f08478ed0795cf7368476977e45ac062d836d3beb9b02e4b3e76bf1263a2f72ba5bb5ee799eadc559c0c6fa339c8f978be37b42c516f4d8c0bff73f0b81686648f110f3346390db12aeef01878fcd566f945e5bf8dd5a2776e88928fe"], &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe5, 0x60, 0x6, 0x7, "37dfb35f", "a49dbba5"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x80, 0xa, 0x9, 0x2, 0x8, 0x1ff}}}, &(0x7f0000000b00)={0x84, &(0x7f0000000680)={0x20, 0xe, 0xf8, "81fba33e3676e318ea0b47124e76d3b4fe9cb4c9726c916d7657f90f7d680adf378fe12393f44502eab4e07e153915ec1d2f8e9330ef14e0ba0c123ff688ea03448db3a4e3fc2947f55ce8d190c78c5f16fea304ec1dec415c8a9feffb501d555d1e52322d9c6068ab453f2c1482478d0e70f29718b777f960d781bac76383b282f782dfc225c878ac7e3cd6d704c440902f2c8de16f742b7a52ca81ade8df92f456ad48142ceb306b2f293115463e51b6027bfdf90493f64c0f97f56434257d8298582c8e8ef1a252061e7741f4ca18bc44831dec53eb3e5d5cacb381ed9a0d2f41ebca8ed7ec4c92b1ca67339a3b7cd879b3ef991e1f15"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000800)={0x20, 0x0, 0x8, {0x1c00, 0x20, [0x0]}}, &(0x7f0000000840)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0x44}, &(0x7f00000008c0)={0x40, 0xb, 0x2, "c19c"}, &(0x7f0000000900)={0x40, 0xf, 0x2, 0x101}, &(0x7f0000000940)={0x40, 0x13, 0x6, @local}, &(0x7f0000000980)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000009c0)={0x40, 0x19, 0x2, "1996"}, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000a40)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000a80)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000ac0)={0x40, 0x21, 0x1, 0x3}}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) 6.444124769s ago: executing program 3 (id=991): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f00000001c0)={0x40, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 5.716720357s ago: executing program 0 (id=992): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dd2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f00000006c0)=ANY=[], 0x174}, {&(0x7f0000000700)={0x12c0, 0x3b, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x119d, 0x13a, 0x0, 0x1, [@typed={0x8, 0x149, 0x0, 0x0, @u32=0xe}, @generic="bd11f4d86c10f5507a139074d8a8e5bcc27eace58ba504ec26157c1daf9dec2334bd6dc35a2aa2a58b233a5985d8b6ab8e5b928d060c4d3eed8b30cb4d0e27543a5b1683398ea9aa4015d376eb69b58b43da92af8eaaf66d1fc6681ae424ae7c95e79647dcfe07ee10d86efc58fba983995ade65c45fe738ed0db2c2f7ca69c2eab815132bcc9ed3e4766f108aa699df304fa219522a0bbd0616adcfe7c3b89db52b00f26dd9bcae52e3c482d9d76a64afbe6cbeab6d2999bc12886ae1d5", @typed={0x14, 0xe3, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @generic="a235021fdd171dfe055653cd4989ab308d68fca94923bf5890b402d251c145730698c5e01b30ea8a46202be82f807f38d567bb7800d7ad51c2aa0deeb43888105c9b2b136f9f0342a9428109c37a1d34bc7979a5afc04f674551dc2b90a92af7f988d3edc79b21da553dd34a5bfde141ac796ef93abc3ca5bcb66d189759d617e4a416531859fe4f621584bb850ab910417f347cd0bec493afa9b58b1b13fc4fd92a013d5e1384cc1c27b29867dd5ae5016414f8fa1e56f96478510ceaea7a4e", @generic="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"]}, @generic="19d9992f051b6a779dd694cacbf669ef47607b6b025c76dbb455401bf1a966ba35872787a112ec8759c391c67f5310a600caa8ac100b3af0ffe1fb8170952ec02892f4775d8c977755", @generic="939b29f6c04777b9ca7a34c8083aa325a0afa82836479dca1059b40438a657c467385272fc681e316cf6711c6980179816a46c54eae3a365bb9d604f200d1b51712cba404769f990688de5765fff54f97a4fa3cf76b2bc682138f3883c7154568d3ff4e3f21985fd65c3c3ed2d8eb48ecc8f40ba543e276888772fedaa24562564171d7fdada888fd41e8e948ff41772b2377d0359351158f5d50ab7cd01812a320b71e11409c367cfbac4452461878729963f38d4746bd3b153d4a159faa41d9b4a7bf8"]}, 0x12c0}, {&(0x7f00000019c0)={0xe4c, 0x19, 0x8, 0x70bd2d, 0x25dfdbfc, "", [@generic="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"]}, 0xe4c}], 0x4, 0x0, 0x0, 0x40101}, 0x40004) 5.631870082s ago: executing program 0 (id=993): io_uring_setup(0x1de0, 0x0) gettid() r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x62300) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xd6c2}, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102384, 0x18ff0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa", 0x45}], 0x1) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) 5.5741786s ago: executing program 1 (id=994): openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) capset(0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2712, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000440)={0x5, 0x8, 0x1}) dup(0xffffffffffffffff) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x1, 0xffda}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x801, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x3, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xfffffffd, 0xfffffffe, 0x1f461e2c, 0x24000, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x1000071, 0x7, 0x7, 0x80000001, 0x0, 0x5, 0x3c, 0x91, 0x7, 0x0, 0x3, 0x5, 0x7, 0x8, 0x0, 0x7e, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000004, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x1, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4000, 0x8001, 0x9, 0x1, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x19, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0xc681, 0x2, 0x7fff, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10005, 0x4, 0x1, 0x7, 0xb, 0xf, 0x48c93690, 0x3, 0xff], [0x4, 0x4, 0x0, 0x64e, 0x3e8, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x6, 0x5, 0x5, 0x2, 0x1ef, 0x5, 0x8, 0x86, 0xf, 0x665, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0xff, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x1004, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x8001, 0x6, 0x81, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x8ad, 0x4, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x9, 0x2, 0x14c, 0x40060a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x4, 0x9, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0xe, 0x1, 0x10000, 0x1, 0x800008, 0x2b91, 0xa1f, 0x7ff, 0x3, 0x1, 0x6c1b, 0x0, 0xb, 0x5, 0x200c, 0x1, 0x200, 0xffff3441, 0xffff0001]}, 0x45c) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x918) read$FUSE(r2, 0x0, 0x0) 5.06789589s ago: executing program 1 (id=995): add_key$user(&(0x7f0000000000), 0x0, &(0x7f0000000240), 0x0, 0xfffffffffffffffe) r0 = add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x420000, 0x30) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r3, &(0x7f00000003c0)={[{0x2b, 'rdma'}]}, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x30, 0x1, 0x4, 0x101, 0x0, 0x1000000, {0x3, 0x0, 0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x17b}, @NFULA_CFG_MODE={0xa, 0x2, {0x1, 0x3}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) 4.952793706s ago: executing program 1 (id=996): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x30000, 0x0, 0x0, 0x8, 0x10000}}, 0x50) lchown(&(0x7f00000001c0)='./file0/../file0/file0\x00', r3, r4) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') syz_fuse_handle_req(r1, &(0x7f000000a280)="1695367704d10dd832678e4e2d01860484a69eaac410e2d6cf3b3d3925f9a3cb602592377170dffdc4de86f163e390e21d07459b0f058cfc248c4bcbe896f3c68006f3c2cbe07c55b87170871c1d364d740faeb750c8c8acb76aca18bc0c018ed341b55b0ef80cefe95b85756aac978a0e0b5ce59cae6657643e7ada0c1336bab310888351664553c2faa6dd39054e19e23cc7c4b4d33546407f880194aa0761f2a9360c4ba26de342328b92db81ae84fc9c1e9eefb4b7ec3f58a6d5d23b907327b14480a37f3c84305729a91c28807f8809b997235bfa2d4b6f45ee9568bb4a416df34f4140c5e272bfc068ea61a48b365490ccb02772a906dad457f5d2dd1a57cc1209e8897c8115049d7e4e3c756a7f5ad0c004ef66c8bf91f600910e73b4aa5f516bab5cd62ad93642960ab32b7fdaeacb1a9587a389a529c231f8a47a65fb6d27ba6a0eeb46660cd75dbf47df89e9f578eafa6992a12d9d7de56d69fd0e30b15caabd13c28d63921597466292f8c4e87f23d53d52e6e8f1c9295af0743c8c671a49273074ba44dbce9e9b1136a93dbc19d2b8e60cda5f50eba2d814822a68a0fd4ff5e6a25dd5346f96b26b5e1563ebb97829a76fd8c2aa467499fdced91b05b193b68316494f11f5ce97ed8e13d474b03c6f6eda4eff54b0ec362fda53003e6e2a3868a5d57e2426aed5adccdac8e162c6cc20361dd4709889b79b2810ba42f531fdd3746562a00da65b4211fb7d8f482a3610748d3b80d2942d8432471f98c6e9036cb57f3913b31dd8baddd6d85b44e8463b838fcfb6979628c5fa3dbd30688e10b9ede257ebc7b96d4092f38d11b9e6a4d10490a9df1387b3743cf51e206c7dbc0741c408bbebaae7f36d81b5ce5b21bb9fe992c8a0cb3a91ea2df21e571ff094b53b17c46fe22c0cead29144d203294eb42c984790a6b6348ed8b7b0317ee5b2353cc54bcfd808bf0f61f73917584e17bd9259c8a04d2ba3b4f931571947c77035975933471fb1203088dce478eb4e411ddb7b88caeb02e1cda741245df701a2b5c29c48a631eaf18549bd90c70222fd6dafe5550726bb58dd0fbf84ffeeae683a0379505f03740a652025add8e0e4e6b5bfb4bd0876dfe1ecb639acc110eba97294a4e4642aefbcad04ba50d830e945fd9900ee7e02488694041f43cbaa86280c1df64e8f1f81f7cd5130914efd19b58262f3bd2c43bd8b4a5beac09f1ba27020521994465e62c329debb50efe0716d22cf0056febc7cb95aa818e10639077e91cac3c80b37d6eebc6907dde971b578383ee04086a0dad18750ceff6b8d6d373afa93a51fee65fe1318c1ac291b784e45d66962c8b54571bc1e92a996c11561d94af6ecdd37948d35adbd1ad63c1c05c31c7f4afd707aa1956d1444fec1137fb6d81f56566887131777e5fe3e2fafe8af8f21ed34480afe74afb25d8d16f8089fcb851ac49dd826b7f273aa3d771856d712c62397d49c72d93e3c2a5e6b9767fcff0fc5b3d70dcd70ff8bad5dfd7f5a84c194f99450601f970104f9be026852ead21824152dd8f6536fcd01a69177a65f2af266e619d61d20de0c738680fbec29e7c594cad29f009d46d87908c951b2e4ad8d9a67db8be6f570fe5416d9e4dd22a108140a1c95369731807325ee7f4201209a795fa1609ce8fa27384677816f651a96cc08400e1b647bdddfb851313e3ccaa472b9a6a1da3a0936e119a6d7808f09de244d739c39df3ed36004b77cb54b6b1396b718c87fba28cb1439c7d1d140dae1ee2c2a7d647427b1e7472710c7ac4f1fb0fc0c9d15ecce28167d23e2e42474dbf1c63c0819606be9c9b6dc2eb59bf9932568ef408c20e9498cf105e84eee30460d4348f4cdfab623b416adadb4427887d9b1b6b8db75b224e8a55fa0351d21093b2b7e42e6685491cbfce100d602d0281f4bd086b50612f3ccf055fab1aad97a52695a233c3d458be4536b66b0acdda5ce0aaab48bb7d7f39a8af473c4478991f1c4569839eab0c1d684001ee1772290871653a2293bb7754c1eac178c60f86e2a98e1992dee198c76365f2d04d159d7c210c6cc58764e3b7dfb5bc15190555febd01c69cab8f55926c28a13fa4f9060dde1ca2df7e1f71fd99a0c350d7f0e341ece8e0685e9c205b486ef400910211b688f07fb05b542261c74b45f4ac23ff53e9e620ab12dad7b5131f67128bb8ed6a4a70caec437f2157f8bcb3d080091e5715dfc7d7539dd0320c90d0aab6a6d7a447ebeea893a0efa2176292c648c62cedd4138c9d0535ab0621855484fc43e0e3e84357db6951bb21fe2f4e99fa188ebecbc23f73ea879bd304408acd1c470fd112606ccfd7b7970e950ebd363afbba359a51877248a42845097094ff785dc82264225752f3aefa980d9ed5309b48f47a5b5ef49f69808b91bde955277b6525f55436ffeba0bfa8c13f6314c57ec97eea295afc66a9f4ec844474c0da6ff1ef0c6c65c035f3bb74a70ffa668359b58a46af97600c428626b45c81a4e372e198894c02e2bee8010fb4c2c075ea623a6ee24a99e225f809322df6ea6f39b1566b1aee5403d45ba648f94f70976013199b3241744458d030a5319360780897413289d89267c389e04f23de79adf4b864c5ca76efc225eb1ecf6424887f0d8b3ac13cbe9df4eb69f7b702e85fb396dc4a030d57a8c4edd227ee568fb11a9859935ad53dcfdb01727f106af352c569a020b7e405a1ad4c6b39e2e8796fe9f16db3794550f5ef3ecd6af2b2ab0383e6c198f17ada5840bde84ccbaa661d9c456d9ddaf92763ba450098cd5a971d847fd5030a4c9b066ab3b0096dfdf7e5ce2f8349165f94c493b7e4192e85239bb11552f910fb41c5e96ee10fc8dce711e88e0572ce0bbbd9c9f3b7c9dae89f1dfa6af309c4321755a5b19070c8731ac590c30fffb69feeb75f699aebb101d3a30f784f1745182cb4f0bf63a148b521f0a03c691927694ee453b278523e3ed256c150098a932f62c90ac65faa4b9782c27a3ef6ca2b5ecae6a01d8a1d7096bf6a7d1b317a9eab22ef4907c631bcca224f723f5fb9a44d7e1295186cf37fd71343919aa167fa70a505a73e9f52a11cfbd40d8c1087d4ffdfe45a40ed5aebfa4b0c3622c78a914d68dd92f46478711437ff88803ab28cd9ce2223aa0fa37eb9d9a4a7866dec4ca6bb66e794ccac6bd19b11daa0b6d4d42cbcf7d6426b5718030ca51bf92b3d8ea0b11c46ec5c0c6e3805c88b39731b2b751d9928ed1ddba7c66bcc5273d709fd295aa0792384435b98c1f44575c028ff2869074156713931f7e62f8b0f8c7ee9dfeaeb2e096e77600586a47d6f6a2e13a17dfceae46ad84858bf8873f9f1e35fc700aef0a648af168ab0774a3441a203ef325577f2c76f5f0e5808acdc7965bc65e8ad1ca816bc3b67711ea42e619c957d0f26b394be1f3b0c4ac9af8558eaebf5c1c27b6549022513479b4c28dbe3f1c3131cc9211eee768f96a9c8b5e0e6425bef921a355faccf0072ba19b16d88b75feb5dc8fcfc1b7b5973eb9654ca3dcfd482831ff5d1fe09fe7ae43cf129c8c17a6686685a13ed076f34608b7ac16eb8e9de6a44418c4e3f8162e6a679bc9482df96a04b14575ebf093b99bf5cc26495f5dd6e571129d9760de3f801b001a1f3248d14f579bc519de2b656641a88da758a2ed3baf15fdf2739ddb44f0e5892de7ea48e9302129d0c939137b9d0687b296577675bcbf433a53f6a9816797cbfef1ba0caa2b8602387b5a8bae24d3e15d42b34d81708738fd269c3e8cbacdc3ff5ab1d4816a783d7be0f0a8086e345a6b4c231ffd61745f6c45cfceaf6089e70542aea1574e3c78740f77a08eb55b37f03549c1dd318cb5a76094210e8cf800c350d328fbf9442d0437e7affd54b3bfc33da3f24558f3ea8e59da8e61ae60e7e7b4de7179b8cf941d51d420c8eee69143966800dc4f7bcb50a033331fcac02a65e88de28ab219c68388a9da9196e044dd1ebbd3994bf8cc862f6f8b419fa1f4f4e5427f10866b498935fa28b8e6f9c5e48be8b74b9c2262823390480f71aff6cf72281f526265877d223eef9ad7a4be7438f9afb6aff0e80c5125c2c612ceb83f0470ea04479979c0a10fbbd0bed7379e949cc19fe36fbcbcc59a9fe30a2662d3e4d22862e8841b587b8995ef8482bc60fe0863b41752ef3dd44a387eff101595822bf1ce440ff9e5f73e560e4f7fbfe4754d9dabbcd92de02017eb43d3cf7c75e45ba04009a782a68ce11eefd52253c721daa5f37c6408e37b48d1f2e36d7c1793300f2c9039e69a52057486b63c0fa644d00528ce48f2e551ca88e356ac25ae74c73492ed3e6233490acfbe7ed8244f23e2af86e0ade6b78bb34a75a86f6cbadbd39762680cb0821d6d28f18d427df13d0e747f6da54be970e43ef8ca8285dc8bf44e3cecdbf2d8757a9800bb889b846d58cc636a2648809451a95736a0ecec6ea3fe61fb24dcd8a00ac0b8933918189cda555b17e431d99ee190d6d0d9f769e665ec193ba8889ae72a01e18b98cebb75d20ed778e5778ef657ce85d40eafa44b46f293d64023b877e8c5d58587c3abecf9a1ad8d874a4cdba0bfbea61b7eb19e81f7c932be12a83bacc51017b42dbe2931dc11c742a5a942cb6ed9bd9922ad78f55b0f6cbae0e8d4235140263ed8c83ab22e71a0f0a62b6920b5d5109e415254e527546546bd025cf1583e3e8d9d5bf735a4651fa2e5c3c86a185bb77e9b75224cdda8cb0eb21d9e3bb19e286832aa5dce19f055539a0a5caccfd752742a31d0af882c4f02c29cbd90ac2cdf5cc61c448cd09eb7b82b930ca99962c0e5ed84124fe37f7d30aad0296ee340377a7e0aa7413c495ac8ab0b482c4c5f59872efd5a1ceadbc7606e67d3c79a77d095bd82519db0893b9d2bbc2b2f3a7391826840e49424703c006399cde5f2a52a9383e89dfbfca284be4d75dd3aafd8a43dc6c71bd7fde9460647eb5c97707e96ddb9124d6020da38ee7ad743db8fd0377a8711905194c496e39a2132d7bbf35b79f920b6dcaa73625bf8b5320da250513cd45bf42c8072809ad59d69c02f0554cf82b79ff291e42d9227de1948352b0dba0281b69876ae0ca24972a5e75aee7e0a46bd4fc83f5a0dd3f22d666f2d950ca580c6da6dfaaa293beded10d1328613611b6e01d5d8567541e81466467302d8050a3ae4791fbddc1aec749edb68173be5341166c1d5c42d63e7368473e48bafa43459de3fa3a5550a4ac979711dd9a2d6796b0bcf9b5881124ade4b12bf64fa55724976a0da9d642e76a036c430f5fb2c06d599b0f78e978580f8eb763d2846177ff18b9b5cf8c76197ed809ef24212bc5563a1713214ce78e0e6cced6e41578d46a07839795c83c189610244bc1b680535fce39f290da90d719078015d90020b1d4567a97081b48514709df8e327d814e8c15496d90efacae6b13e297ed520d280203896bbc3a23f3b638adf594de03a782bb292a93ef0b14b8b3e13c01787a0b7bfb3abd8ab15eebbc651b7b054d3e56ebb7808de9b9bd067560ec6a6432455b37054292a3d9d32434506bf84b2907560017089de3f60c2deb4dfb7371f96d65a575d446aa1d2df81867135120df4e24e9227f72ff9f8f015a7754948704ecd084a1a93fbeb5a44af086ef73e9fc1c072b7d5473e92558fc2824acf27f1dbe9b019247d3074bf4256a966ceb674a2c4222632c8e4b6c0736de019ccfe4cca40b9b07f8c4df9753cdfb4ad66643ed71510983e29c2b5f9ae7db4913cb74d9dd0461a900810650d0da73f766aa6882385f3bb40644bf43f01faf2aa4cd187659edb0498527f201442b64349afa814b3dae5ce815971f3b11d177e3e1aaf90c7674c097d475640218ad27e63f9071c9081c06d9b5d1f3a070da3eed4f4080190a74063e7f97b5f35706dd1173dcbfa13a70d5362e50d57d0c5105c8d3beb926d93f61699e737ebe1a935839c3aa5b629dc93aa209d9e7774c40de7f59fca1eb274a8280022a15934e5dd2579a8cf5cd16a3b0a1ff3ea712c4258164fe2fa17a4cbfa5630f4041bad4204605eb2e762d610fa17dafa415ed8a678da1d4b5a6618d71d0066d66e3ac10b3ce65137a5a02344abc57f1be4ce0cbf1a2ac66dcb5e94495e863819c627e4704fb479c232b27aa4a5dfca8896a7eb8e0592b6b392ec9fa2767f569d5c1356d7ef7a909d8ee344ba017c75ca664d98f5288230b7f1ffa2fa7a5d07fab5f4b53b7f19c3fb361795fd632fa8a654004d931b4b7fc0890927aec727160cded3c01b7e40e6b81ce015796895f9c007762a1c22acfb9513eccd93c845e91ea8b0960b299b3ce788cbcce5bea9a94325289d2c3573975c512d56e19c4655f849b3652f8b5f9fa6f49e03202f2031debe3c299c3ceceb1febf4b285da9033493088a36f885ed6d3958b8d05cc6be00f3465de8bf6e41796d17e393067585b459b143d592cea102f584e48676a45f896cf662bd6b3b2309aa7f46d2b8ec6597a063f12bcc88922050c8c1e070134ce77ab1cb7a7f29983a0b30d9b2abeca5cfbfc55e941376c616c2834b1c1c9a9473b531c86c3b708478ee95923fe6a8108c2c4dc8a78a9d5e995f6c815b292b986cab0afa233ef10567a49d4e8dc17f438b90b620df4d291b52549ac8e1b69078b62011ed4bb0e288db740817ff07d01e779e11cb8e0606b5ca3aac6c7b262499f5a115acdad8a67b6eb77503318ef3bf0008347b270aa986d9e79e2af174f38a4743250c1091e6053a7a785464483161aad3ef3ad976e5329b71afe9bbfd93d7541a1014db4cc159ac266021e841c665217fa150e130f921ebd4cfb5accdb87f5f9bc0fd94b402289db4d0ac3f0906a689aef044c09fc2c5a00f7795ea935aeb943eb32826bd2176c1d1cb058195e3229d293595ebc07514c6b038a1d964199c59e59d4fc621c54b7bbd3410ccec22f7fb6751527c2aa0940ed2f0c9dcfc4e99ced91d09ba4a37042b5f48b127439cad24df2951ff1e769d3892dc4788dbbe27cce60f7f0138789444712e84e059ac0a4e87557f6c3369fc61b9a843c816df3cb4ec77a11e16390234da24dc0420f6a44554fc7954cc74d63ec030d4d964898e14500d0dacdbb2959f7a8a191773f66448348f36c3f4904187088bcfeafda7dd721236810d04469e93ca4e7926305c25b1ef1380d775008fd238e33e8dd2dc5a9783f97414487a7ef70eba3dcf71331803fad223f65aadfc87d79512bf311c14926d619a089f5e84c46f4a9ff393969f8eacc8fa20acaa9eb01a8aab625853e415d3871e555a11ee71ee93cba85ee9cde60b3962e294c2c840f0a1ba87714bac54f1ca0ebda74daa3e8e19d382b951d64a22da48c632ec5754f42129214a807427e69a93c128b6b0a8697c9ee375818dd79244a38287fe8f66c7cc3aa18aee2fbf804fc1aadcc7d2daf75be82a60276b6902a51f2bbb64c261915b80053fb9635f405f1fa855d1ec8adc0ebe9648b8151eda70ec5ad5f704fa2a337bcfb7ecbc845a11cae7a68d6bc58f107ac7bb0c2f6b83edc48703ba00c94036b9af4ada51d6d78bfe697df06f47573c14cd7191ec52dc0f208ecdcf54669529bba2c2fb7a6b38f6f2b5ec5fe876f03c096ae092b6f881a84b00edd1e9f67449069d876afaa99eb1a446f20656b5104c72ed28bd8553c724785f4e8bfdc33194409960de4969b708ce26e4cd608d21ace0c38e27d54b55369a9e807cfda9a6240466dd94f6150d4b0105f7b9ae392009b2cf146d1dad5d7c8664463d7d60d11b45f30d01db7364e21ac557d37a4c9ad88926c472e98710d2cbfc4b70d6a5dbb128d46909e634761c6f6952bf9021aa5282c391dcee3278a25e3e2ee31a7f6713979a546084fb2e598214c36a3b7618bf23c57bb23b33e9c98dfe5192ef257dc2d891a6f7c11be334fbdab015eedafe1c4aea95ff1fa6d340d0cade542f3f782c1589470fa64c6fd9ac0c31536ecee0ae312f992733beea6fcaf7562dd6e0f2c016f712ce14d93f02a54f577c75b444fd7f46e9bd2cd9cd1f89195781d88f984eca45c97355095d3b48b0d9bd730c7d6f63b1dc78d2344bdb0f18c4e1554822345c11efa2ba32bcef4f29ed05315cf44617a80d7d1392de077bbda08669c8c3cb6c0b12f872f1247bc1d07634bf5bf4acc3a4ecdae7e6acd7c4af9820147afe55500a7270d7eb511f907339e5af54cfaf33e2364f54091ebee2a245ba048452d383cd441604c4dd1c6376e4df8b83ebf6070d2be248174fc1dc0a1352c103325360aeb3ab71cb73bb646ac6247dd68155fd48b90250c3b0f250a74f827780367e117a94094e5005e2f926accaef0b3e36c25e315c1e80cd4c3481f3465d99025c7de91c45bb8dd0a5577174c1f366017d87d2033239a8b6f399a9095845b5fafe9cca113b93f455bb790709b6c93fcbbd0c4bd7b5d621088dca06802e241836291226ad56d40b3b4e90eb68bd5845742baf4cb4a69b4bdb07f02d0bd6fbb5a5fad3af030816b254725e6db4073b7a0536b884c8985c3a159cdb105c73f7e0e03546248336449eff6afeb96cf8ad3617df18ee2247bc2d11ebbe10e0379f5578c41611872c5461541fb4da5be3f3348e0592982a61c352315370a9b452306c9f31f9040ef755ad096a8733dd9daf6bdbcb7a3521ad2282ae4fa7bfdb9cda5997ba3a6652af46c6d0205bb356dfb411e2b931b357723bb70254211819b74a461ed5c126cec6573cda4f6107fc3ebc76483621e9ab5789a5575ea3a91463f76138ea0f3ec9c44e1cddb2de59bef83333d235e922b920e267453676575b38e6415bd136534b8df2360ab489fb69eefd04b66758ab5dd105be7b0635f7194f9e4b158b22b21ac97fda4e804747a9718b40a32531cd5c3fd1d3c1dd8ba5ef9c86d3c8df8c71f81da1a9756e5db4dddf70755053f7129d656a8069fe83c39ab240cf7a73f0f880ec7a791c5115ab262184839b906c238eaabf2268dfcd6560c5bcb70fea00b580ad52e7de0333e6de63ae351952e6e5dee6edf284de0a2f53e2089db13bd5eca5f98883a24eb2e1a58ae199f8db9c60a5b6b85585b2d2a17d6b5406e5668685d95c4718c375db05f7953b363c25d2ed0906eda70eb659845acd31fec9b8e4d5951d12fd50bbb969dd824a78c72622c8311a980f0f2e6a1ddc368879a1f3a07d3c0780e85a4e5d13223a3424782e3f77bf6a1ebf823f468d41b777ff61345064f1096ed653c277bab90ca5afc8ad6d25f4447236cdd82950afff27763f3fef5308f034379f4ad4955cb8cc5280d51b5427de4eba374f64dde2f1e7a6ae628aa4696160a5cf0ae9fc70e307b4eb19c0a5af2c2855710c8e117211d73a7e7f3f7f2ba55d03a4b73d816c9c3fc1edb86ec95ddcd77884a913805ad6549e7a5f776a1c2385dd6d83877727f128207cda29f83462269a7f606fa31934d06a6e0efd238d0a180c754a9d2e85609fd20c880ea0e79cbe887c442f9f682801da783529e1e45eb3e70195fa2711fa291dca43ee0672b7afc14cf87b9506a7ebe223019c856777e1783f6ae1b0ed90486b32e3b6f7ff77be834c7b6676da6c8052fa49450e3e16a6f90ee33742bbfe3dc025832e0bbc7abeb625077b8c1ea07dee89c7dc26fa42514ff9ac21e848e32309bc2862a873fb57796e05923fce42fa2833c73866e22a04497ec13acebcdff6ae1df71dd8756f1febac04f2034c1f3e1d401ddbdb7f2ef676d5c85437830d527a5fb04c9bbf0d892ee1306d2d2df37008916a3a66e70f865cd6d25de16fdb4bb4f2616204cf86a3ffdbf147223968c092a46dc2aae4aedb32fb850b85d4adb87bfada328bce4c2c70ec42affde442179fcc1d3d9f5e4a848c8ba03b0df3065d1b2d5f1b08d8c25148c51bb54e191a87ea59903084000b4b520fffda111fe831d4bdcf62423c1fcd673b020c5f2c41973dd1b9698054368081f917715e1c1592bc78dd265e051bcda5bf5877821fedfcf7790a58b328cf780f71ee71491e59194504bc800d319251607e53ba0e1ed15cd4fd5c959eaff4d3a1c7cb28c479f2776256633ef7c0f0e98688b54e8c8634cf57e27e5c1ee1e43573ae23bfbb1ff1bef6cabd33c02ff165c44f0f190426ba8391ba4f03458be3351869c5c5c9d5fa5600edbcce523525b9cd9c3bb040e34771ea277d05cb76302c72fac5edc815412dbbbc651371d70d044c4f89a68da7abd836fb3a495e212b5fd13819c41c9a240405582ae69b7c35b30935af3085d457a4d76a94c9272c5eafcecc4c92dd4f314b04b4739864e626a5bab27fa2f345f052afe3bae2ff4c442c42a1c83091bfcc23a3b5e06a511d02cefcd618a6d9761de00af192cf1aacc902cf3ba98f898c48fbc74b6710db7ac890b4f7ed7377e0fa3b4c46a131e775130a80db5014a79e674c8fc8b45495066e88201d2e320320fa4561abab617d0e67e9e879b0080a8ab404f4eb007a088990aa6a7b29afce5b8dd038ce96d43e1271315f6070e761e759c44fba1ce78730e35ca31e0bf5840cc01289c81613a07c497f288ed70a6d10d9f58fe135558b2a862bd877fcc939d7536e7dc988409290cd73da04a3b1399b0a2637f737d5f86bba4a31019546e2000a3ca57f8291cd9af28299eb93909061200c9738cca998add04e7bb0137ecc460fc3ef72872e7d13c159914fcdf577910e6c5d7a1636b13b78c5088551c614e3c75befb0f37fb89b918f4aad0126a9efd3390d6a0cab97ed0e01c7eae0e798a4142345578beb10d6b61a90b4d1fe836022def90bb8e37e07428a4592e7bf30e935951e492234a8db96f081379e7c4e18c3b6ce4ed1f97698dc1da940f14217e877bb8e0f33b392d801a01c48ec62ce2774d2e4e55e9415c063e1bfa31a8f0633443ec19c5fab977c1485147e46c06f86742278fd071de4a165dff7eddd5390a1e031d80e3d44477f6009c9fc27a7d92b865a292b0d586083f681c2d92da7e7f42eabd076fa7d61eba0c2b406c75f1cec561b1a523dd4c6f344b02ed59bd473d7d30a24144e981fc8da434931adeb841d63bb705485f8f58a180da91af64bad1379356787b37467dc9b4a0d12496e5048e7ccb40a978eebee5eaac4e9dd96faf194aa93a22333d7f68cccde147dce26c9ff18d7c8ffe0d1377c70dd1057d54473b2c2b2b3eea82fb223952c0dc3796efd0cd94afea38341ab9a83c6a9ee77f26bf8dea8510dfc964f9b9b4942c08ade50e43f06e5101f2e6b68b6a7f9cc5443c862b1198627461938daf4bd1fc7b21d6d7fd3f775f0e4a1f60434a242b049f159dbe5de145e741c5c9b4e59a7f5d7de54a6d51cd87845dde819ca74e3abf60356fbcf18bfff3b6ae1c545e243c08f9f41b86e55ed6e71be453843e0bffc5b6bdcfeefd33075ee5110627d4f05e008e54ddd62fb6979d9c2a5e4a2cb45fad7b2d77bd17508952889b30df2124cdc2fe6a749a12c9f6dbbd01226cc4ba2693b7e6a858d3c36ac6519ee70e896588a6df81b0e3be3604bbbe1a845088cf1834a04368dde8b6ee76d0492911dc09b05cf6642e0003cd8faafd398872c1a8dc3e85d3658ec8", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x0, {0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1, {0x0, 0x6, 0x4, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0003}]}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r7, 0xc0745645, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, 0x0) 4.67641058s ago: executing program 0 (id=997): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x40000032, r3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r4, 0x0, r3, 0x0, 0x7ffff000, 0x1) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000080)=0x3, 0x12) 4.561711378s ago: executing program 2 (id=998): io_uring_setup(0x1de0, 0x0) gettid() r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x62300) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xd6c2}, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102384, 0x18ff0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa", 0x45}], 0x1) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) 4.519789126s ago: executing program 4 (id=999): socket$kcm(0x21, 0x2, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$tipc(0x1e, 0x5, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_usbip_server_init(0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8501, 0x0) r2 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000000), 0x8000, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e11", @ANYRES64=r2], 0xfc) 4.013955722s ago: executing program 1 (id=1000): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x820800, &(0x7f0000000040)=ANY=[]) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x40001f00) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000d000f00cc0002000600009a0618cb11a4d9176c140005000000", @ANYRES16=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESHEX=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x3) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)}, 0x11) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="3000000040002b06fefffffffdffffff017c0000040042801400018010000400cab1891c20b8d2a93521800a040002800d738831d7f13ea1bc1438caca1ae70349f831422301675a9027e41c97b4cc2b72def03e9be474ed7d449d43821afe07863cd03c9d76ecf9bd58f8602a3f842000407a62d6488d4a7a906790f8b064acc6c7a52599bf3aa1b4268785fd7fae6ec5db6c48f8e8666195844539b6e14d6e33e7915050ec35f6e3a5bc6a76940c42af69004549f174fc13173e8607e0e70f3a0453bbe73fece367fa64ee640d0e6b8bfc2e391387168f7765b3301516ab01"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 2.943676298s ago: executing program 0 (id=1001): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0xc, @string={0xc, 0x3, "a1b0c90f2503f8303346"}}, 0x0, 0x0}, 0x0) 2.875258139s ago: executing program 3 (id=1002): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/image_size', 0x1a1081, 0x18) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) pread64(r2, 0x0, 0x0, 0x1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r3, 0x0, 0x13, 0x0, &(0x7f0000000140)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) 2.770588801s ago: executing program 1 (id=1003): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dd2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f00000006c0)=ANY=[], 0x174}, {&(0x7f0000000700)={0x12c0, 0x3b, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x119d, 0x13a, 0x0, 0x1, [@typed={0x8, 0x149, 0x0, 0x0, @u32=0xe}, @generic="bd11f4d86c10f5507a139074d8a8e5bcc27eace58ba504ec26157c1daf9dec2334bd6dc35a2aa2a58b233a5985d8b6ab8e5b928d060c4d3eed8b30cb4d0e27543a5b1683398ea9aa4015d376eb69b58b43da92af8eaaf66d1fc6681ae424ae7c95e79647dcfe07ee10d86efc58fba983995ade65c45fe738ed0db2c2f7ca69c2eab815132bcc9ed3e4766f108aa699df304fa219522a0bbd0616adcfe7c3b89db52b00f26dd9bcae52e3c482d9d76a64afbe6cbeab6d2999bc12886ae1d5", @typed={0x14, 0xe3, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @generic="a235021fdd171dfe055653cd4989ab308d68fca94923bf5890b402d251c145730698c5e01b30ea8a46202be82f807f38d567bb7800d7ad51c2aa0deeb43888105c9b2b136f9f0342a9428109c37a1d34bc7979a5afc04f674551dc2b90a92af7f988d3edc79b21da553dd34a5bfde141ac796ef93abc3ca5bcb66d189759d617e4a416531859fe4f621584bb850ab910417f347cd0bec493afa9b58b1b13fc4fd92a013d5e1384cc1c27b29867dd5ae5016414f8fa1e56f96478510ceaea7a4e", @generic="231d2433d9494999866a3753746da71b390a87b98863d5d3c6f9c56beeac0c8fa96dae714a627102e919f3b38f1f541a6498aa8f213716df2ac93874079bb3573297c6a6175793101a05bd41961e8bd1592a6b01787b6bcac16b7a070268c8c1a3bb3e8566936ef2b127361f4a590ace6878e62aab3e1e8f6d97d04213bb6fc02646f0c22eceaafc3b2858a9c8c39b88872ee74843a11a1e277f57cbfee86bb13e23adf9c335d2db632c48e418e933433ac2f0c0840d1b13ea706c5d41cccca32cb74cb11412cdacbe92abea4af08c8ad3169705e3db081a71e29b86d6c0df6b57b08d2b88eeda4c5b163e4e56d4b1e1adcbbaa612d22974f185f20e2632108c69325534da33f321fb4d00bef03ad0dc1066f7b6e268f44006a5319f6e58915598cff21e006461dcc2d7d2336846a7b61342c88dd70fc2583ad726a67686eabedc4f51c0a24c04b4b30e3fa78591424c3762e669c069829ece201b6a107de1436e0e556bf3e6542779144e3e8adc3f3326527aaa431100978c6e39bf8a2c2f5e6ff09deb9407288f308a825d982cc3f7b69b84561491a868aad776184cfdc5bb659f4be64d99f5e768b02a885967e515fa62e305897838a42d2572bbeab0ae135e6aac7b06a53803436befa433a88844a304649d73bf1fbb60f61bbb47e61ba0f97219d9af255d11ddec00cf425039851a18fff471d9cb05dc04413647dfa89fa948ed95fb4fa674d0ee6634ba9fa009c7256ffbf191a00bb8552317a2955123f569644619f8edb0c6115f41e1ed8d0e26569386cdaa1aecf8d5d3210d9348e51426c694aaffc15ac018320ba8db9ae2b8fba64a241a9e109f9d898e0eac16656a5b95c0b20903090905748fd7b8991b4ef6c7ddcfc9ba1b213e803ceb976ce8a0d4c4c50db414eab08022c8dfdf4794f71980bf22aae7525869fe8af84c84f68e7d429baea8a2c26e67180d36d7cf1fe5d0a0c461b964b752e2b82df0222888d038e74999f86ae9cc6445bc14f47f178c459457b92534a69a13ad0360a369ae8a93c6936c1ebb5ae3b8a0e47fe26ea3cee1ba5c7bc944849035b8feb8ae0178a8c811c32a43b52f3224e8591f7a22e261990872a3166290e43c4ca8018642ccc113d7840ebe3d5e9d633f6e072e1f24398c6f482121125e9361973602c059e4beb4821b75a7f6750337232af6be74f5b1cfccd966d373b3e0b326583eb86803150e30817d173c995da05b79c8de8827cc61127829a74a0aae3aa5e2e8690e31ea4114c84230a67cf2f472e883934d7f2a68629cd4cf0d4ec2d726984ec99d24e348d9220b265f9a619711841c3b98bb5875e60205304771e289d2298a181b3e2d3a3c94aab6e0ddcba12143092f564eda4be32a5b9a90f6570523cfe94353ef082a30295fe1b465301d704530239a1f490feadb241487653259d1ede2459ed34219c708f670b0ac35bbbd11659dc3fcda8bce9b3b63e8e354a4e0d30ace8e804d0d150f17dc1aa6fcd4e17f5089cbe6d126b04a432e7a9d55b91f875423ce199652651e6d7e32f04a9330da863b4674fdbea9f3f540add279446d6b099f5e1d3e9e64c8280c4843a147e7e0f7dec22f29840a22121e23f4ef81b8fe0f19027d9131a72b711657101b0e7c86cf757734877ec7e2725c1d9f51c6167f7bcc7862a6f1fc0c9b9629ce67f4e3cf74e8ac551f8a93fe3da937fe38ea25203032a00316ee35990c083950775618a9e124346a34f5180b5e64d1021b4bde0cdb7518f6239f10f0df6f84417679cd02ae30d74b0988e953d347340dcf2fa76991b419299c8baa9983c7d7f5cd4a6608c4b16483a4e2dd29c15a27038eeee8ad348e259435c2d56794a54cb4479a61f5c789e51bc6e265cf344c82b4b9a9d74123b938567998b91d68fe895d56f69d9e69c3c79dfa51afe1e7b202c3260291e88888b4ee3c0e81d437aa6fe0f7629e8de52b81bfb7471107de8b9d2d80eeefe86739ab8343000918e1507dc1582fefbf2c2e3d3b0a0079c94c8475ea71b3457f47285a35e90a993c8a68d121d675f00c3eefc2293172ca63e00f490a818d4c2287dcecc164500b11167943949f9464eefeb95a6d6428675e405612e88b1c380012ef551eab49bd5a3b04e1c3f68d34629f29f4425f853be4c0edbd47199d121ccc4c54bb93e3aaf57a33e295a4e0b3c3a42a6f729e838eafc9ca38b97e9f74f120e0f092bee07688dfa237f3a4af32f2dd8add00df18ec3001249ca4ba6b694a381b79ed45f60bc5b0e9b1b2d22aef0765bdd982656473de31ef64bbb727e380e4089609b6c259a551985f387ee314f7854c848f7a0baabd37208ec484d735a85c74accfcdcd5728e3f8319901616e3f72331f7da9f44b4c465beed27a77b644e3fb48d48e6f1ee7487f74c07da28dccba8d9c57f492fd8f7d383b4b6644e0f9ab9c0d00c8953bf3702853eb51686e4400490c15456e721e2f396e3216579273070036eb9f0c54d87598662ef708a208768924dd9c732c2fb759a433890c0daf2e178b9a345c92d77aeabb253bfc6c870578a1744526e1e89fb1321a7fca00e4f6452d8661d41c9ab8031baf1096485615544a2587d6ebd4edb0a4523f82bc0d67f581009fef09cc9f8665121e876e187a106682762f49df0ce5f680e2799381bb7fe6750e10fdf7a509e431061e30a832488c3bec94eb1aff799bed2667914986abe0b9514f723e6383d5d55ee5ccfd32428f72b1339c8b7465adea43d8a291f9aa8999156211b34bcfb945c918162008aa9842253d51069a4b429ac30f8a16546f7cd9667566353aed1833ae04d2c6242d5cc548d99c197e0e55d3da4051d67eaccc4f164e86536facfac6620517bfa2453c40eb18d5a05ceb82d8e13c87ea30d0bf0de736b0b798897b7aa879194c9ff041bc0dffbf72e6c4f43cb3881ef364f13906c45138f861e246d1afe4b9ff9d50b292afc9335cf0cbeca6cb49975b466b73f66e453127d9ce749be073e45b365c38e086dbd3c9b95dce7eb030a33a64ceccfa652124c312ef7a9b61963d38ac2bf185f89cc0c7c2dec363d07a10508822db4a1b631dcbbc366c3f9d585a6fd463acbfd23e807462ff288f41c82f0519ab30d569bdf94d7426187f1433df074ed22ceffd884043a3af8b706dac98fa289eb44f047ee3a29ef983c17ed8071062d9fef6e410339d56c8b29c0ae4ac2f3ad1fd2a929f017f12afa85634487fc3099d297643619bcdaf5d7f753e184afbbbea1acbb00a001d20d1ab007a6f094277cd27b3a0e5c52eefd4d5e1bf8972c5e8adf1095248f2309a39b045a521cd1f3c70077f74366f6732cf155c284257c000d43c519e03a1a8f557f9e4af6e510de46b4810699b75e9817d01fda7ee231273c1f76d3c18b24eb374820a7b1cb8a8b2064212214609c3754409fa66627a347ddab25359153678cbdd8dd3f919d126a5d347632107380a7c6189acc25a66c26555634baedb0a1ffbc7124616afe0aa16802da604b29c06326ba7faf9a8b49b8635483afffb80e64c88e0918f9d55ca43b4daa0e3f099e21c3ae7aa2910218dbc42934f46574e96212b9e1182d7e2df71c943ae5e2e2b76e5c09aeb2fd7d9796e92373ed95515e69d68a2488d553852a6532c400901119a69636c6e1005855eb1f3a78d29071aff1b080783e5925097f245723ae2ee62713ef00d8a85f7f84bcc09c01dcefa8ade142d9677623f01f9063c15276a74a4fe93772fdb21365882dda4782f461a520d72fcf8aa77c03ac203b57e056dfc8a9913a7b135929a101c9aec0c0763593f6ba6bb15b9df1f621884306c611c8c722743b784591d9174179119c9b6a8522e11d9f0fc6a1fa6b59c1e9e35ea2782a5c37dc946c277baea4479e37b92c72876aef5ad06099136e060c778ba41d6bfc242c40febb10c9feedeec1efff50401bb561988798402837ff5f06802658dc6cbb0964abadfd9b2ddfb8aa19eac6b577ba09dfd3faf1f0fde284b9a8235c71a98b99528d910f5264f60f15aa231beeca4b093ec25ea461716e737afea8c9d5ca570c7cea5116892c18a69ef7004dae46e7520e64741d205ba01e8f680047f6ac8393c93a2d590ac3abce42107c6326b91c5d03f78aa4a2a79d050055719140c4842e147ddb734ea86236ff5bed04d602c25d3c4ed57575fba4d8ca16c803dd3c1713bbc173dfb36e062ecc0820a65be35677e3d9c33c86e9e5982d92933511d3baf8fdbeea45842b9295e160b7202dad1583800d3c2df2f639d4abcf59cd9d0ecebf2ffa86c6c0b6a5d3a79cc13560d388d2052e3e5caddc694b1348120fc3c0b37b7a2343bde6845e44b54b4b14198e6c778a990d18fba5cf47cb748a35f075ead0b45f83957d3aa655d94d581304700e44176ba68ad4bf19315cbfb862158cfc0ea7a964efb68a4d22acaff30e3ebf3c79c65df27e94a713254ac9ecf33055b5335bbd27618ac7e289420355959955065a2dfdc302ac8ffe010116111c84305fb283cae88afd0882ac4f79281202f0c644ae8cbc34984817869e22fa0bfb0d16a15e04e724e4fab86564dbf3a7ac8b1d59ed1347a7dfd30e79e02e8ec7e0abcc9dfae18bd6a21f07cfdfb09704da42baeab888665659205bddedd1b796e8d73e500ea36665cef4bfd8a56c358f6183b93a707b8878cce24ef8ea7dbe8a0c9347c45a5ab00763ff558ad7bea2a732b4ee527b40c54e294056483803edb34e65c6391be6c088c79fed5d7f7490fccd6b6535b114e896f373471de17d5ac41f38ac4f42d27c6089b29deb214c1ff87ddaee84964ff99d27a5e953b2c308df7af9c8a115645b9d9c746fbd4f3590a27aea5f851756af185f7d4cac31655fd73f14ee68d7befd2577929f13bb34220fd6cf499e74d27f59fc6b8bfdaaf8330dec5a0d332effa34560b0fea68d9e709852e25f2515c2221780951937dd6513ea44201ee6941a6c427b7ba1408a6c81b5810cf8d08575963e7e4f1418155141d7c95e60cf58940ba4febb574b29dae69d99ab247a9ee418ec6163cd89ff6d7012bb789774fbf45b4bd6c3010b010b141a7d630b2b9e1d8746f14997731d6ae3b47afdaddc0155864969bbe647a8ef241b5053f946364814b38ef174991cc9422e0b8c2a853037eba95da956febaa2b2cb97a80aa16d812f2a4cf2fda123435bd3b9314668a7ea0de02175fa9e9efdd7226dd771433a228d47336bcc3b31c96b912855cb03e4aaec2c5305c325e9998864573d6905c47e49d1d480d3fbd36396478cc2dde147e9c225d4498e28adadf671cd28c3c391217e47ec83d639707a91a0ee0815bad24d33bcdf632e5b4b230aad4f5a8a3cd4571d18d2698ca2569b7905f5d0bf8c9b7df08346f0eb63914d7354d88fa31f5c14d8a3ed1641e57e13e6d19aa05c827f8618fdd719d93255e3152c9dd8c28488339c3b1ee53cf1399fd304b63a00f61d29f4395609196723b47fbdf725d8665467bbdf79b599d42960861ce29eb407e9acbdd3a84eda1a054258a3b1c4b69b00b8a0a89b9ca2316c793ccf5edf6c64fc2d888319927dd55fc5ea8e98a783c1a97d28273087be22a28ca1158824008d39faab44e720b93bafd2c628fc8d9b7c28cd31efaf9a13a4a3345da79cf38cbbd830eec384626bf537e36c14227b4764313176e9dbcd9d30fbb68d717b85c9e927fcbf1acc5c41257f112d0c9b4d9d3d018155832a2c0f5fc09afa39c22db351fbc17c94ab618d37d6889b5fd53f6f345f1ac7fcfec2fe965bc44b5faed5c2c21f0f5a3954dbbccf83eeb"]}, @generic="19d9992f051b6a779dd694cacbf669ef47607b6b025c76dbb455401bf1a966ba35872787a112ec8759c391c67f5310a600caa8ac100b3af0ffe1fb8170952ec02892f4775d8c977755", @generic="939b29f6c04777b9ca7a34c8083aa325a0afa82836479dca1059b40438a657c467385272fc681e316cf6711c6980179816a46c54eae3a365bb9d604f200d1b51712cba404769f990688de5765fff54f97a4fa3cf76b2bc682138f3883c7154568d3ff4e3f21985fd65c3c3ed2d8eb48ecc8f40ba543e276888772fedaa24562564171d7fdada888fd41e8e948ff41772b2377d0359351158f5d50ab7cd01812a320b71e11409c367cfbac4452461878729963f38d4746bd3b153d4a159faa41d9b4a7bf8"]}, 0x12c0}, {&(0x7f00000019c0)={0xe88, 0x19, 0x8, 0x70bd2d, 0x25dfdbfc, "", [@generic="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"]}, 0xe88}], 0x4, 0x0, 0x0, 0x40101}, 0x40004) 2.636954402s ago: executing program 4 (id=1004): socket(0x2c, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000003640)={0x0, 'hsr0\x00', {0x1}, 0x7}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0xb}]}}) r6 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r6, 0x200004) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r2, &(0x7f0000000040)={0xffffffffffffffff, r0, 0x2}) syz_open_dev$ttys(0xc, 0x2, 0x0) 1.906741549s ago: executing program 2 (id=1005): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r3, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r3, 0x1) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002180)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x9, 0x3400}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x0, 0x8}}}]}, 0x34}}, 0x0) connect$netrom(r4, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) connect$netrom(r4, &(0x7f0000000300)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 1.759973568s ago: executing program 3 (id=1006): add_key$user(&(0x7f0000000000), 0x0, &(0x7f0000000240), 0x0, 0xfffffffffffffffe) r0 = add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x420000, 0x30) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r3, &(0x7f00000003c0)={[{0x2b, 'rdma'}]}, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x30, 0x1, 0x4, 0x101, 0x0, 0x1000000, {0x3, 0x0, 0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x17b}, @NFULA_CFG_MODE={0xa, 0x2, {0x1, 0x3}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) 1.660913144s ago: executing program 3 (id=1007): openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) capset(0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2712, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000440)={0x5, 0x8, 0x1}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x360c0) dup(r1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x1, 0xffda}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x801, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x3, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xfffffffd, 0xfffffffe, 0x1f461e2c, 0x24000, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x1000071, 0x7, 0x7, 0x80000001, 0x0, 0x5, 0x3c, 0x91, 0x7, 0x0, 0x3, 0x5, 0x7, 0x8, 0x0, 0x7e, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000004, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x1, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4000, 0x8001, 0x9, 0x1, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x19, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0xc681, 0x2, 0x7fff, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10005, 0x4, 0x1, 0x7, 0xb, 0xf, 0x48c93690, 0x3, 0xff], [0x4, 0x4, 0x0, 0x64e, 0x3e8, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x6, 0x5, 0x5, 0x2, 0x1ef, 0x5, 0x8, 0x86, 0xf, 0x665, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0xff, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x1004, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x8001, 0x6, 0x81, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x8ad, 0x4, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x9, 0x2, 0x14c, 0x40060a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x4, 0x9, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0xe, 0x1, 0x10000, 0x1, 0x800008, 0x2b91, 0xa1f, 0x7ff, 0x3, 0x1, 0x6c1b, 0x0, 0xb, 0x5, 0x200c, 0x1, 0x200, 0xffff3441, 0xffff0001]}, 0x45c) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x918) read$FUSE(r2, 0x0, 0x0) 1.660235053s ago: executing program 4 (id=1008): io_uring_setup(0x1de0, 0x0) gettid() r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x62300) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xd6c2}, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102384, 0x18ff0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa", 0x45}], 0x1) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) 1.220534031s ago: executing program 1 (id=1009): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004400000000002190337bf58400ffffffff050090780a0101026a0000000000000000000000ac1e0001ac14140107be00e0000002000000"], 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x7, @local, 0xe1f}]}, &(0x7f0000000100)=0x10) r6 = socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYRES32=r4], 0x3c}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) 1.124172776s ago: executing program 3 (id=1010): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x30000, 0x0, 0x0, 0x8, 0x10000}}, 0x50) lchown(&(0x7f00000001c0)='./file0/../file0/file0\x00', r3, r4) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') syz_fuse_handle_req(r1, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x0, {0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1, {0x0, 0x6, 0x4, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0003}]}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r7, 0xc0745645, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, 0x0) 201.700385ms ago: executing program 2 (id=1011): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r2, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r2, 0x1) 136.059882ms ago: executing program 4 (id=1012): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) futex(0x0, 0x1, 0x0, 0x0, 0x0, 0xc57ffffc) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000"], 0x44}, 0x1, 0x0, 0x0, 0x2400e084}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000080)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/67, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f00000006c0)=""/245, &(0x7f00000000c0)=""/77, &(0x7f0000000480)=""/57, 0xa000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x66, &(0x7f00000001c0)=""/102}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) 123.389575ms ago: executing program 3 (id=1013): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, 0x0) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r5, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmmsg$inet6(r5, &(0x7f0000001840), 0x3b, 0x0) r7 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x8100, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000140)={'c6xdigio\x00', [0xb02c, 0x8, 0xb, 0x3, 0x88d6, 0x80000001, 0x1007, 0xeffffffe, 0x1002, 0xffffffff, 0x7, 0x7, 0x10000004, 0x5, 0x6, 0xe969, 0x8, 0x6, 0xbcbd, 0x8e, 0x10d, 0x804005, 0x2, 0x80000001, 0x5, 0x0, 0x49, 0x12, 0xff, 0xfffffff1, 0x4000004]}) r8 = socket$netlink(0x10, 0x3, 0x4) write(r8, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe004681000000078a151f75080039000500", 0x27) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000004060101000000000000000700"/28], 0x1c}}, 0x0) 0s ago: executing program 0 (id=1014): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x40000032, r3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r4, 0x0, r3, 0x0, 0x7ffff000, 0x1) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000080)=0x3, 0x12) kernel console output (not intermixed with test programs): .414577][ T5925] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 111.756981][ T5925] usb 5-1: USB disconnect, device number 5 [ 111.847006][ T30] audit: type=1400 audit(1768432956.102:249): avc: denied { create } for pid=6590 comm="syz.3.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 111.910713][ T6007] usb usb38-port1: unable to enumerate USB device [ 111.928978][ T30] audit: type=1400 audit(1768432956.122:250): avc: denied { connect } for pid=6590 comm="syz.3.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 112.028300][ T5830] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 113.734769][ T30] audit: type=1400 audit(1768432957.582:251): avc: denied { bind } for pid=6592 comm="syz.3.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.814856][ T6596] netlink: 'syz.1.225': attribute type 10 has an invalid length. [ 113.820277][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.834059][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.845450][ T5830] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 113.854496][ T5830] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 113.862953][ T5830] usb 1-1: Manufacturer: syz [ 113.870475][ T5830] usb 1-1: config 0 descriptor?? [ 113.892360][ T30] audit: type=1400 audit(1768432957.592:252): avc: denied { connect } for pid=6592 comm="syz.3.224" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 113.935777][ T30] audit: type=1400 audit(1768432958.192:253): avc: denied { node_bind } for pid=6610 comm="syz.2.227" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 115.164256][ T30] audit: type=1400 audit(1768432959.412:254): avc: denied { write } for pid=6631 comm="syz.3.236" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 115.237335][ T5830] uclogic 0003:256C:006D.0005: failed retrieving string descriptor #100: -71 [ 115.252762][ T5830] uclogic 0003:256C:006D.0005: failed retrieving pen parameters: -71 [ 115.271397][ T5830] uclogic 0003:256C:006D.0005: failed probing pen v1 parameters: -71 [ 115.279623][ T5830] uclogic 0003:256C:006D.0005: failed probing parameters: -71 [ 115.294468][ T5830] uclogic 0003:256C:006D.0005: probe with driver uclogic failed with error -71 [ 115.489438][ T5830] usb 1-1: USB disconnect, device number 7 [ 117.002318][ T30] audit: type=1400 audit(1768432961.252:255): avc: denied { write } for pid=6659 comm="syz.3.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 117.464718][ T790] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 117.493698][ T6668] ceph: No mds server is up or the cluster is laggy [ 117.501668][ T5964] libceph: connect (1)[c::]:6789 error -101 [ 117.509015][ T5964] libceph: mon0 (1)[c::]:6789 connect error [ 117.650088][ T790] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 117.662908][ T790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.685512][ T790] usb 1-1: Product: syz [ 117.689710][ T790] usb 1-1: Manufacturer: syz [ 117.694314][ T790] usb 1-1: SerialNumber: syz [ 117.720098][ T790] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 117.735770][ T30] audit: type=1400 audit(1768432961.992:256): avc: denied { firmware_load } for pid=5871 comm="kworker/0:4" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 117.789409][ T5871] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 117.968293][ T30] audit: type=1400 audit(1768432962.212:257): avc: denied { read } for pid=6681 comm="syz.3.253" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 118.182176][ T30] audit: type=1400 audit(1768432962.212:258): avc: denied { open } for pid=6681 comm="syz.3.253" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 118.294826][ T5964] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 118.939513][ T5964] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 118.970813][ T5964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.027865][ T5964] usb 5-1: Product: syz [ 119.050639][ T5964] usb 5-1: Manufacturer: syz [ 119.084888][ T5964] usb 5-1: SerialNumber: syz [ 119.264888][ T5871] usb 1-1: Service connection timeout for: 256 [ 119.271082][ T5871] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 119.292984][ T10] usb 1-1: USB disconnect, device number 8 [ 119.297951][ T5964] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 119.318888][ T5871] ath9k_htc: Failed to initialize the device [ 119.585993][ T5830] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 120.382538][ T10] usb 1-1: ath9k_htc: USB layer deinitialized [ 121.145649][ T5830] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 121.152672][ T5830] ath9k_htc: Failed to initialize the device [ 121.163528][ T6606] usb 5-1: USB disconnect, device number 6 [ 121.179232][ T6606] usb 5-1: ath9k_htc: USB layer deinitialized [ 121.329586][ T30] audit: type=1400 audit(1768432965.582:259): avc: denied { ioctl } for pid=6718 comm="syz.2.265" path="socket:[11222]" dev="sockfs" ino=11222 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 121.356804][ T10] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 121.378573][ T30] audit: type=1400 audit(1768432965.632:260): avc: denied { setopt } for pid=6718 comm="syz.2.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 121.527067][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 8: 33, using maximum allowed: 30 [ 121.539168][ T10] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 121.557284][ T10] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 121.570775][ T5871] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 121.610215][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 121.628171][ T10] usb 4-1: New USB device found, idVendor=1b96, idProduct=0011, bcdDevice= 0.00 [ 121.643577][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.671940][ T10] usb 4-1: config 0 descriptor?? [ 121.684372][ T6711] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 121.736304][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.854763][ T5871] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 121.986500][ T30] audit: type=1400 audit(1768432966.212:261): avc: denied { create } for pid=6726 comm="syz.4.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 122.340967][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.376200][ T5871] usb 2-1: config 0 descriptor?? [ 122.389120][ T30] audit: type=1400 audit(1768432966.212:262): avc: denied { getopt } for pid=6726 comm="syz.4.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 122.444001][ T30] audit: type=1400 audit(1768432966.222:263): avc: denied { execute } for pid=6726 comm="syz.4.269" path="/dev/audio" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 122.618831][ T30] audit: type=1400 audit(1768432966.732:264): avc: denied { create } for pid=6731 comm="syz.2.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 122.638395][ T30] audit: type=1400 audit(1768432966.732:265): avc: denied { setopt } for pid=6731 comm="syz.2.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 122.665515][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 123.105175][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 123.116316][ T10] usb 4-1: USB disconnect, device number 7 [ 123.385938][ T5871] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 124.308684][ T5871] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0006/input/input5 [ 124.414753][ T5897] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 124.635601][ T6743] netlink: 60 bytes leftover after parsing attributes in process `syz.2.273'. [ 124.666526][ T6743] netlink: 60 bytes leftover after parsing attributes in process `syz.2.273'. [ 124.690283][ T5897] usb 5-1: config 8 has an invalid interface number: 177 but max is 0 [ 124.719693][ T5871] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 124.736799][ T5897] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 124.753746][ T5897] usb 5-1: config 8 has no interface number 0 [ 124.768096][ T5871] usb 2-1: USB disconnect, device number 4 [ 124.782471][ T5897] usb 5-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 124.804974][ T30] audit: type=1400 audit(1768432969.032:266): avc: denied { bind } for pid=6744 comm="syz.3.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 124.852466][ T5897] usb 5-1: config 8 interface 177 has no altsetting 0 [ 124.876856][ T5897] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 124.890126][ T30] audit: type=1400 audit(1768432969.032:267): avc: denied { write } for pid=6744 comm="syz.3.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 124.926124][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.943122][ T6747] netlink: 'syz.1.275': attribute type 10 has an invalid length. [ 125.021606][ T5897] ir_toy 5-1:8.177: required endpoints not found [ 125.033410][ T6743] netlink: 60 bytes leftover after parsing attributes in process `syz.2.273'. [ 125.071895][ T6743] netlink: 60 bytes leftover after parsing attributes in process `syz.2.273'. [ 125.116584][ T6751] fido_id[6751]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 125.120939][ T30] audit: type=1400 audit(1768432969.372:268): avc: denied { ioctl } for pid=6754 comm="syz.1.278" path="socket:[12307]" dev="sockfs" ino=12307 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 125.216408][ T30] audit: type=1400 audit(1768432969.472:269): avc: denied { create } for pid=6736 comm="syz.4.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 125.245218][ T5897] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 125.283031][ T6007] usb 5-1: USB disconnect, device number 7 [ 125.310240][ T6743] netlink: 60 bytes leftover after parsing attributes in process `syz.2.273'. [ 125.323801][ T6743] netlink: 60 bytes leftover after parsing attributes in process `syz.2.273'. [ 125.418209][ T30] audit: type=1400 audit(1768432969.672:270): avc: denied { create } for pid=6764 comm="syz.2.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 125.447231][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 125.458598][ T5897] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 125.480318][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 125.584208][ T5897] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 125.594532][ T5897] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 125.603682][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.623969][ T5897] usb 4-1: config 0 descriptor?? [ 126.264751][ T5897] hdpvr 4-1:0.0: firmware version 0x85 dated =¦µîŸÓ0tµ-nh µÑHY#«|ÉÞyóju¿?ÎóKÕ\ßÍì¶ÝÇ’Ý [ 126.288182][ T5897] hdpvr 4-1:0.0: untested firmware, the driver might not work. [ 127.597480][ T6782] trusted_key: encrypted_key: insufficient parameters specified [ 128.262889][ T5897] hdpvr 4-1:0.0: Could not setup controls [ 128.269458][ T5897] hdpvr 4-1:0.0: registering videodev failed [ 128.303779][ T5897] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -71 [ 128.339598][ T5897] usb 4-1: USB disconnect, device number 8 [ 129.044413][ T6806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.296'. [ 129.060662][ T6806] netlink: 12 bytes leftover after parsing attributes in process `syz.3.296'. [ 129.105073][ T3453] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.114122][ T6806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.296'. [ 129.123317][ T3453] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.132617][ T6806] netlink: 12 bytes leftover after parsing attributes in process `syz.3.296'. [ 129.141891][ T3453] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.164893][ T3453] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.958451][ T6820] ceph: No mds server is up or the cluster is laggy [ 130.025532][ T6007] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 130.194985][ T6007] usb 4-1: Using ep0 maxpacket: 32 [ 130.204624][ T6007] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.217929][ T6007] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.256726][ T6007] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 130.335595][ T6007] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.356288][ T6007] usb 4-1: config 0 descriptor?? [ 130.372057][ T6007] hub 4-1:0.0: USB hub found [ 130.579185][ T6007] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 130.844706][ T30] audit: type=1400 audit(1768432975.092:271): avc: denied { watch watch_reads } for pid=6843 comm="syz.1.309" path="/67/file0" dev="tmpfs" ino=359 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 130.991263][ T6007] hid-generic 0003:046D:C31C.0007: unknown main item tag 0x0 [ 131.154568][ T6007] hid-generic 0003:046D:C31C.0007: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 131.659916][ T6007] usb 4-1: USB disconnect, device number 9 [ 131.708258][ T6852] fido_id[6852]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 132.158593][ T6855] syz.2.312 (6855) used greatest stack depth: 17640 bytes left [ 132.384754][ T6007] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 132.424776][ T5926] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 132.500560][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.507017][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.535506][ T6007] usb 4-1: Using ep0 maxpacket: 32 [ 132.568507][ T6007] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.587845][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.601144][ T6007] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.616582][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.637867][ T6007] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 132.659275][ T6007] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.670259][ T5926] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 132.680626][ T5926] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 132.690127][ T5926] usb 5-1: Manufacturer: syz [ 132.691172][ T6007] usb 4-1: config 0 descriptor?? [ 132.711477][ T5926] usb 5-1: config 0 descriptor?? [ 132.717163][ T30] audit: type=1400 audit(1768432976.952:272): avc: denied { read write } for pid=6866 comm="syz.1.317" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 132.728117][ T6007] hub 4-1:0.0: USB hub found [ 132.814781][ T30] audit: type=1400 audit(1768432976.952:273): avc: denied { open } for pid=6866 comm="syz.1.317" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 132.864839][ T30] audit: type=1400 audit(1768432976.952:274): avc: denied { mounton } for pid=6866 comm="syz.1.317" path="/71/file0" dev="tmpfs" ino=380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 132.925203][ T30] audit: type=1400 audit(1768432976.962:275): avc: denied { mount } for pid=6866 comm="syz.1.317" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 132.953918][ T6007] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 132.962307][ T30] audit: type=1400 audit(1768432977.012:276): avc: denied { unmount } for pid=6866 comm="syz.1.317" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 132.989339][ T6007] usbhid 4-1:0.0: can't add hid device: -71 [ 133.006081][ T6007] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 133.007263][ T30] audit: type=1400 audit(1768432977.252:277): avc: denied { create } for pid=6871 comm="syz.0.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 133.047489][ T6007] usb 4-1: USB disconnect, device number 10 [ 133.063007][ T6874] input: syz0 as /devices/virtual/input/input6 [ 133.063903][ T30] audit: type=1400 audit(1768432977.252:278): avc: denied { setopt } for pid=6871 comm="syz.0.319" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 133.863202][ T5926] uclogic 0003:256C:006D.0008: failed retrieving string descriptor #200: -71 [ 133.872209][ T5961] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 133.879819][ T5926] uclogic 0003:256C:006D.0008: failed retrieving pen parameters: -71 [ 133.888100][ T5926] uclogic 0003:256C:006D.0008: failed probing pen v2 parameters: -71 [ 133.896370][ T5926] uclogic 0003:256C:006D.0008: failed probing parameters: -71 [ 133.906993][ T5926] uclogic 0003:256C:006D.0008: probe with driver uclogic failed with error -71 [ 133.923992][ T5926] usb 5-1: USB disconnect, device number 8 [ 133.953003][ T30] audit: type=1400 audit(1768432978.202:279): avc: denied { read } for pid=6885 comm="syz.3.324" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 134.055473][ T5961] usb 1-1: Using ep0 maxpacket: 8 [ 134.062199][ T5961] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 134.071439][ T5961] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 134.083123][ T5961] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 134.095254][ T5961] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 134.107280][ T5961] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 134.125214][ T5961] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 134.132815][ T5961] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 134.146817][ T5961] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 134.158978][ T5961] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 134.171184][ T5961] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 134.190837][ T5961] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 134.198709][ T5961] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 134.243680][ T5961] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 134.283716][ T5961] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 134.302085][ T5961] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 134.316144][ T5961] usb 1-1: string descriptor 0 read error: -22 [ 134.322452][ T5961] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 134.331800][ T5961] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.627293][ T5961] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 135.742251][ T6903] netlink: 'syz.2.330': attribute type 10 has an invalid length. [ 135.908366][ T30] audit: type=1400 audit(1768432980.162:280): avc: denied { read } for pid=6910 comm="syz.2.334" path="socket:[13422]" dev="sockfs" ino=13422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 135.959270][ T6911] netlink: 36 bytes leftover after parsing attributes in process `syz.2.334'. [ 135.974776][ T6911] netlink: 16 bytes leftover after parsing attributes in process `syz.2.334'. [ 136.053532][ T6911] netlink: 36 bytes leftover after parsing attributes in process `syz.2.334'. [ 136.063895][ T6911] netlink: 36 bytes leftover after parsing attributes in process `syz.2.334'. [ 136.134910][ T5961] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 136.435445][ T5961] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.445872][ T5961] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 136.461822][ T5961] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 136.506714][ T5961] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 136.523390][ T5961] usb 5-1: SerialNumber: syz [ 136.811295][ T5961] usb 5-1: 0:2 : does not exist [ 136.825276][ T5961] usb 5-1: USB disconnect, device number 9 [ 136.973513][ T5816] udevd[5816]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 137.385157][ T5926] usb 1-1: USB disconnect, device number 9 [ 137.584244][ T5871] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 137.689129][ T6934] loop2: detected capacity change from 0 to 7 [ 137.744798][ T5961] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 137.842102][ T6934] Dev loop2: unable to read RDB block 7 [ 137.851623][ T6934] loop2: unable to read partition table [ 137.888453][ T6934] loop2: partition table beyond EOD, truncated [ 137.904795][ T5961] usb 4-1: device descriptor read/64, error -71 [ 137.915757][ T6937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.343'. [ 137.925231][ T6934] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 137.963952][ T6937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.343'. [ 138.075997][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.094223][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.118439][ T5871] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 138.137932][ T5871] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 138.155376][ T5871] usb 3-1: Manufacturer: syz [ 138.163868][ T30] audit: type=1400 audit(1768432982.412:281): avc: denied { create } for pid=6940 comm="syz.4.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 138.169506][ T5871] usb 3-1: config 0 descriptor?? [ 138.188654][ T5961] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 138.220403][ T30] audit: type=1400 audit(1768432982.452:282): avc: denied { listen } for pid=6940 comm="syz.4.345" lport=34766 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 138.571238][ T5961] usb 4-1: device descriptor read/64, error -71 [ 139.391284][ T5871] usbhid 3-1:0.0: can't add hid device: -71 [ 139.415967][ T5871] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 139.436089][ T6943] nbd4: detected capacity change from 0 to 63 [ 139.751390][ T5961] usb usb4-port1: attempt power cycle [ 139.791815][ T5821] block nbd4: Receive control failed (result -104) [ 139.812438][ T6949] block nbd4: NBD_DISCONNECT [ 139.822180][ T6949] block nbd4: Send disconnect failed -32 [ 139.835517][ T6949] block nbd4: shutting down sockets [ 139.860113][ T5871] usb 3-1: USB disconnect, device number 4 [ 139.876371][ C1] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 139.886195][ C1] Buffer I/O error on dev nbd4, logical block 0, async page read [ 139.912210][ C0] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 139.921720][ C0] Buffer I/O error on dev nbd4, logical block 1, async page read [ 139.929499][ C0] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 139.939012][ C0] Buffer I/O error on dev nbd4, logical block 2, async page read [ 139.946816][ C0] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 139.956308][ C0] Buffer I/O error on dev nbd4, logical block 3, async page read [ 139.990638][ T5833] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 140.001289][ T5833] Buffer I/O error on dev nbd4, logical block 0, async page read [ 140.012133][ T5833] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 140.041837][ T5833] Buffer I/O error on dev nbd4, logical block 1, async page read [ 140.096197][ T5833] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 140.518856][ T5961] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 140.559242][ T5961] usb 4-1: device descriptor read/8, error -71 [ 140.579053][ T5833] Buffer I/O error on dev nbd4, logical block 2, async page read [ 140.655832][ T6964] trusted_key: encrypted_key: insufficient parameters specified [ 141.126171][ T5833] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 141.284502][ T5833] Buffer I/O error on dev nbd4, logical block 3, async page read [ 141.295509][ T5833] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 141.311972][ T5833] Buffer I/O error on dev nbd4, logical block 0, async page read [ 141.323275][ T5833] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 141.877881][ T30] audit: type=1400 audit(1768432985.642:283): avc: denied { write } for pid=6965 comm="syz.2.352" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 141.898594][ T5833] Buffer I/O error on dev nbd4, logical block 1, async page read [ 141.909923][ T5833] ldm_validate_partition_table(): Disk read failed. [ 141.917245][ T5833] Dev nbd4: unable to read RDB block 0 [ 141.923233][ T5833] nbd4: unable to read partition table [ 141.932749][ T5833] ldm_validate_partition_table(): Disk read failed. [ 141.940418][ T5833] Dev nbd4: unable to read RDB block 0 [ 141.946838][ T5833] nbd4: unable to read partition table [ 142.049511][ T30] audit: type=1400 audit(1768432986.302:284): avc: denied { bind } for pid=6973 comm="syz.4.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 142.358832][ T6984] netlink: 'syz.4.358': attribute type 10 has an invalid length. [ 142.409137][ T5926] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 142.593648][ T30] audit: type=1400 audit(1768432986.842:285): avc: denied { listen } for pid=6993 comm="syz.2.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 142.595456][ T5926] usb 1-1: Using ep0 maxpacket: 32 [ 142.628883][ T5926] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 142.646590][ T5926] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 142.660939][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 142.670079][ T5926] usb 1-1: Product: syz [ 142.674255][ T5926] usb 1-1: Manufacturer: syz [ 142.682676][ T5926] usb 1-1: SerialNumber: syz [ 142.712789][ T5926] usb 1-1: config 0 descriptor?? [ 142.726536][ T6979] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 142.797364][ T7003] trusted_key: encrypted_key: insufficient parameters specified [ 143.215354][ T5864] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 143.540630][ T7006] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 143.548396][ T5926] hub 1-1:0.0: bad descriptor, ignoring hub [ 143.551026][ T7006] PKCS7: Only support pkcs7_signedData type [ 143.555589][ T5926] hub 1-1:0.0: probe with driver hub failed with error -5 [ 143.631364][ T5864] usb 5-1: device descriptor read/64, error -71 [ 143.813736][ T6979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.839125][ T6979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.858518][ T30] audit: type=1400 audit(1768432988.112:286): avc: denied { setopt } for pid=7012 comm="syz.3.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 143.880619][ T7013] netlink: 'syz.3.369': attribute type 10 has an invalid length. [ 143.894549][ T30] audit: type=1400 audit(1768432988.132:287): avc: denied { write } for pid=7012 comm="syz.3.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 143.913891][ T5864] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 143.947221][ T7013] batman_adv: batadv0: Adding interface: netdevsim0 [ 143.963402][ T7013] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.005686][ T7013] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 144.024533][ T7015] warning: `syz.2.368' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 144.054830][ T5864] usb 5-1: device descriptor read/64, error -71 [ 144.131632][ T30] audit: type=1400 audit(1768432988.382:288): avc: denied { ioctl } for pid=7016 comm="syz.3.371" path="socket:[12778]" dev="sockfs" ino=12778 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 144.165270][ T5864] usb usb5-port1: attempt power cycle [ 144.172348][ T7021] netlink: 'syz.2.372': attribute type 10 has an invalid length. [ 144.415045][ T7032] tipc: Started in network mode [ 144.420297][ T7032] tipc: Node identity 7f000001, cluster identity 4711 [ 144.444354][ T7032] tipc: Enabling of bearer rejected, failed to enable media [ 144.504901][ T5864] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 144.505704][ T7034] trusted_key: encrypted_key: insufficient parameters specified [ 144.715588][ T5830] usb 1-1: USB disconnect, device number 10 [ 144.936259][ T7032] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 144.945723][ T5864] usb 5-1: device descriptor read/8, error -71 [ 144.953216][ T7032] tipc: Enabled bearer , priority 10 [ 145.240890][ T5864] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 146.189231][ T5898] tipc: Node number set to 2130706433 [ 146.252676][ T5864] usb 5-1: device descriptor read/8, error -71 [ 146.394126][ T7047] netlink: 16 bytes leftover after parsing attributes in process `syz.4.380'. [ 146.403157][ T7047] netlink: 48 bytes leftover after parsing attributes in process `syz.4.380'. [ 146.414108][ T30] audit: type=1400 audit(1768432990.672:289): avc: denied { listen } for pid=7043 comm="syz.0.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 146.470670][ T5864] usb usb5-port1: unable to enumerate USB device [ 146.534232][ T30] audit: type=1400 audit(1768432990.782:290): avc: denied { getopt } for pid=7051 comm="syz.0.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 146.600414][ T7053] netlink: 'syz.4.384': attribute type 10 has an invalid length. [ 146.777131][ T7062] netlink: 'syz.3.388': attribute type 1 has an invalid length. [ 146.832816][ T7062] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 146.851418][ T7062] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.897537][ T72] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 147.985726][ T72] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 149.103178][ T7095] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 149.400685][ T7106] netlink: 'syz.2.400': attribute type 10 has an invalid length. [ 149.600509][ T7112] trusted_key: encrypted_key: insufficient parameters specified [ 150.190775][ T7118] netlink: 'syz.1.406': attribute type 1 has an invalid length. [ 150.622185][ T7118] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 150.690297][ T7124] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.698482][ T72] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 150.870989][ T72] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 151.014847][ T790] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 151.454292][ T7141] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 151.467376][ T7141] netlink: 'syz.4.414': attribute type 10 has an invalid length. [ 151.899314][ T790] usb 3-1: too many endpoints for config 0 interface 0 altsetting 8: 33, using maximum allowed: 30 [ 151.925967][ T790] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 151.945233][ T7144] loop2: detected capacity change from 0 to 7 [ 151.985703][ T5816] Dev loop2: unable to read RDB block 7 [ 151.992355][ T790] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 152.036385][ T5816] loop2: unable to read partition table [ 152.042329][ T5816] loop2: partition table beyond EOD, truncated [ 152.049624][ T790] usb 3-1: config 0 interface 0 has no altsetting 0 [ 152.089832][ T790] usb 3-1: New USB device found, idVendor=1b96, idProduct=0011, bcdDevice= 0.00 [ 152.089964][ T7144] Dev loop2: unable to read RDB block 7 [ 152.101870][ T790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.183299][ T790] usb 3-1: config 0 descriptor?? [ 152.191745][ T7129] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 152.424599][ T7144] loop2: unable to read partition table [ 152.458488][ T7144] loop2: partition table beyond EOD, truncated [ 152.497428][ T7144] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 152.527278][ T7151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.418'. [ 152.632939][ T790] usbhid 3-1:0.0: can't add hid device: -71 [ 152.644788][ T790] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 152.666117][ T790] usb 3-1: USB disconnect, device number 5 [ 152.745044][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 152.964906][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 153.032967][ T7160] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 153.040290][ T7160] PKCS7: Only support pkcs7_signedData type [ 153.112142][ T30] audit: type=1400 audit(1768432997.362:291): avc: denied { map } for pid=7156 comm="syz.0.421" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 153.244120][ T30] audit: type=1400 audit(1768432997.392:292): avc: denied { execute } for pid=7156 comm="syz.0.421" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 153.940067][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.959491][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.969387][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 153.982236][ T10] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 153.995017][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.005120][ T10] usb 2-1: config 0 descriptor?? [ 154.098436][ T30] audit: type=1400 audit(1768432998.352:293): avc: denied { read write } for pid=7174 comm="syz.2.426" dev="sockfs" ino=13086 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 155.020729][ T5830] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 155.047807][ T10] hid-multitouch 0003:0457:07DA.0009: unknown main item tag 0x0 [ 155.086944][ T10] hid-multitouch 0003:0457:07DA.0009: unknown main item tag 0x0 [ 155.104741][ T10] hid-multitouch 0003:0457:07DA.0009: unknown main item tag 0x0 [ 155.112611][ T10] hid-multitouch 0003:0457:07DA.0009: unknown main item tag 0x0 [ 155.154850][ T5830] usb 5-1: device descriptor read/64, error -71 [ 155.158835][ T10] hid-multitouch 0003:0457:07DA.0009: unknown main item tag 0x0 [ 155.271206][ T7185] loop2: detected capacity change from 0 to 7 [ 155.274632][ T10] hid-multitouch 0003:0457:07DA.0009: unknown main item tag 0x0 [ 155.281812][ T7185] Dev loop2: unable to read RDB block 7 [ 155.294957][ T10] hid-multitouch 0003:0457:07DA.0009: unknown main item tag 0x0 [ 155.329083][ T7185] loop2: unable to read partition table [ 155.333285][ T7185] loop2: partition table beyond EOD, truncated [ 155.343677][ T7185] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 155.378000][ T10] hid-multitouch 0003:0457:07DA.0009: unknown main item tag 0x0 [ 155.383543][ T10] hid-multitouch 0003:0457:07DA.0009: unknown main item tag 0x0 [ 155.394920][ T5830] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 155.397403][ T10] hid-multitouch 0003:0457:07DA.0009: unknown main item tag 0x0 [ 155.474116][ T10] hid-multitouch 0003:0457:07DA.0009: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.1-1/input0 [ 155.530125][ T5830] usb 5-1: device descriptor read/64, error -71 [ 155.788400][ T5830] usb usb5-port1: attempt power cycle [ 155.843190][ T30] audit: type=1400 audit(1768433000.082:294): avc: denied { append } for pid=7191 comm="syz.2.432" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 156.074825][ T10] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 156.221148][ T5830] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 156.245491][ T5830] usb 5-1: device descriptor read/8, error -71 [ 156.337951][ T7211] o2cb: This node has not been configured. [ 156.343897][ T7211] o2cb: Cluster check failed. Fix errors before retrying. [ 156.351169][ T7211] (syz.0.439,7211,1):user_dlm_register:674 ERROR: status = -22 [ 156.358810][ T7211] (syz.0.439,7211,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 156.376490][ T7211] o2cb: This node has not been configured. [ 156.382344][ T7211] o2cb: Cluster check failed. Fix errors before retrying. [ 156.389923][ T7211] (syz.0.439,7211,1):user_dlm_register:674 ERROR: status = -22 [ 156.397875][ T7211] (syz.0.439,7211,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 156.417681][ T30] audit: type=1400 audit(1768433000.582:295): avc: denied { add_name } for pid=7208 comm="syz.0.439" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 156.582098][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 8: 33, using maximum allowed: 30 [ 156.594317][ T10] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 156.606801][ T30] audit: type=1400 audit(1768433000.592:296): avc: denied { create } for pid=7208 comm="syz.0.439" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 156.606903][ T10] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 156.627260][ T30] audit: type=1400 audit(1768433000.592:297): avc: denied { associate } for pid=7208 comm="syz.0.439" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 156.670236][ T5830] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 156.715518][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 156.732740][ T10] usb 4-1: New USB device found, idVendor=1b96, idProduct=0011, bcdDevice= 0.00 [ 156.745361][ T5830] usb 5-1: device descriptor read/8, error -71 [ 156.747262][ T5871] usb 2-1: USB disconnect, device number 5 [ 156.758687][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.800691][ T10] usb 4-1: config 0 descriptor?? [ 156.810583][ T7198] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 156.854982][ T5830] usb usb5-port1: unable to enumerate USB device [ 157.181292][ T30] audit: type=1400 audit(1768433001.432:298): avc: denied { read write } for pid=7219 comm="syz.0.443" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 157.217267][ T7220] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 157.242111][ T30] audit: type=1400 audit(1768433001.462:299): avc: denied { open } for pid=7219 comm="syz.0.443" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 157.294780][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 157.316361][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 157.318217][ T30] audit: type=1400 audit(1768433001.552:300): avc: denied { create } for pid=7221 comm="syz.4.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 157.408787][ T10] usb 4-1: USB disconnect, device number 15 [ 158.264748][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 158.264780][ T30] audit: type=1400 audit(1768433002.092:302): avc: denied { write } for pid=7228 comm="syz.4.448" path="socket:[13280]" dev="sockfs" ino=13280 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 158.956490][ T30] audit: type=1400 audit(1768433003.212:303): avc: denied { ioctl } for pid=7241 comm="syz.4.451" path="socket:[14187]" dev="sockfs" ino=14187 ioctlcmd=0x64b9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 159.004794][ T5830] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 159.320706][ T7255] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 159.361464][ T5830] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.372005][ T5830] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 159.389849][ T5830] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 159.402650][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.437409][ T5830] usb 4-1: config 0 descriptor?? [ 159.641356][ T7259] netlink: 996 bytes leftover after parsing attributes in process `syz.0.457'. [ 159.744715][ T30] audit: type=1400 audit(1768433003.982:304): avc: denied { watch watch_reads } for pid=7262 comm="syz.2.459" path="/91" dev="tmpfs" ino=473 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 159.988409][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.462'. [ 160.026123][ T7270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.462'. [ 160.048719][ T7270] netlink: 'syz.2.462': attribute type 6 has an invalid length. [ 160.148276][ T7279] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 160.247741][ T30] audit: type=1400 audit(1768433004.502:305): avc: denied { write } for pid=7283 comm="syz.4.468" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 160.279056][ T5830] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 160.481044][ T5830] usb 1-1: too many endpoints for config 0 interface 0 altsetting 8: 33, using maximum allowed: 30 [ 161.147365][ T7289] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 161.153910][ T7289] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 161.217484][ T7289] vhci_hcd vhci_hcd.0: Device attached [ 161.284376][ T7294] vhci_hcd: connection closed [ 161.305683][ T4077] vhci_hcd vhci_hcd.1: stop threads [ 161.376019][ T4077] vhci_hcd vhci_hcd.1: release socket [ 161.408567][ T5830] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 161.419511][ T5830] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 161.432444][ T5830] usb 1-1: config 0 interface 0 has no altsetting 0 [ 161.434720][ T4077] vhci_hcd vhci_hcd.1: disconnect device [ 161.439096][ T5830] usb 1-1: New USB device found, idVendor=1b96, idProduct=0011, bcdDevice= 0.00 [ 161.463746][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.491815][ T5830] usb 1-1: config 0 descriptor?? [ 161.497565][ T7273] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 161.730524][ T976] usb 4-1: USB disconnect, device number 16 [ 161.933244][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 161.946684][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 161.954222][ T5830] usbhid 1-1:0.0: can't add hid device: -71 [ 161.960674][ T5830] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 161.994991][ T5830] usb 1-1: USB disconnect, device number 11 [ 162.704904][ T30] audit: type=1400 audit(1768433006.942:306): avc: denied { mount } for pid=7326 comm="syz.4.483" name="/" dev="ramfs" ino=14585 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 163.079494][ T7337] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 163.086051][ T7337] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 163.094833][ T7337] vhci_hcd vhci_hcd.0: Device attached [ 163.108628][ T5821] Bluetooth: hci4: unexpected subevent 0x0e length: 248 > 15 [ 163.108746][ T976] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 163.116111][ T5821] Bluetooth: hci4: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 163.142524][ T7338] vhci_hcd: connection closed [ 163.142794][ T3541] vhci_hcd vhci_hcd.4: stop threads [ 163.156374][ T3541] vhci_hcd vhci_hcd.4: release socket [ 163.165163][ T3541] vhci_hcd vhci_hcd.4: disconnect device [ 163.219021][ T30] audit: type=1400 audit(1768433007.472:307): avc: denied { name_connect } for pid=7318 comm="syz.3.480" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 163.356187][ T976] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.391056][ T976] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 163.410747][ T976] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 163.427829][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.442748][ T976] usb 3-1: config 0 descriptor?? [ 163.704044][ T7349] Bluetooth: MGMT ver 1.23 [ 163.797739][ T30] audit: type=1400 audit(1768433007.952:308): avc: denied { bind } for pid=7346 comm="syz.0.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 164.042500][ T30] audit: type=1400 audit(1768433007.952:309): avc: denied { write } for pid=7346 comm="syz.0.490" path="socket:[15382]" dev="sockfs" ino=15382 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 164.104734][ T5821] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 165.617760][ T7380] o2cb: This node has not been configured. [ 165.623627][ T7380] o2cb: Cluster check failed. Fix errors before retrying. [ 165.630881][ T7380] (syz.4.500,7380,1):user_dlm_register:674 ERROR: status = -22 [ 165.638483][ T7380] (syz.4.500,7380,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 165.654122][ T7380] o2cb: This node has not been configured. [ 165.660062][ T7380] o2cb: Cluster check failed. Fix errors before retrying. [ 165.667321][ T7380] (syz.4.500,7380,1):user_dlm_register:674 ERROR: status = -22 [ 165.674942][ T7380] (syz.4.500,7380,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 166.034854][ T976] usb 3-1: USB disconnect, device number 6 [ 166.266686][ T30] audit: type=1400 audit(1768433010.522:310): avc: denied { mounton } for pid=7385 comm="syz.1.503" path="/107/file1" dev="tmpfs" ino=566 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 166.279249][ T7389] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 166.323730][ T7387] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 166.330287][ T7387] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 166.339664][ T7389] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 166.351795][ T7389] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 166.360503][ T7387] vhci_hcd vhci_hcd.0: Device attached [ 166.366344][ T5821] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 166.367068][ T7389] UDF-fs: Scanning with blocksize 512 failed [ 166.412364][ T5821] Bluetooth: hci1: unexpected subevent 0x0e length: 248 > 15 [ 166.422697][ T5821] Bluetooth: hci1: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 166.422910][ T7390] vhci_hcd: connection closed [ 166.448103][ T4319] vhci_hcd vhci_hcd.0: stop threads [ 166.469974][ T7389] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 166.473331][ T4319] vhci_hcd vhci_hcd.0: release socket [ 166.486689][ T4319] vhci_hcd vhci_hcd.0: disconnect device [ 166.499549][ T7389] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 166.513454][ T7389] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 166.521143][ T7389] UDF-fs: Scanning with blocksize 1024 failed [ 166.528712][ T7389] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 166.538454][ T7389] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 166.549882][ T7389] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 166.561600][ T7389] UDF-fs: Scanning with blocksize 2048 failed [ 166.573543][ T7389] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 166.584556][ T7389] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 166.604700][ T7389] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 166.617082][ T7389] UDF-fs: Scanning with blocksize 4096 failed [ 166.623988][ T7389] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 167.837669][ T7427] trusted_key: encrypted_key: insufficient parameters specified [ 168.374469][ T30] audit: type=1400 audit(1768433012.552:311): avc: denied { write } for pid=7418 comm="syz.0.514" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 168.897256][ T5821] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 168.989426][ T7438] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 168.996957][ T7438] IPv6: NLM_F_CREATE should be set when creating new route [ 169.330083][ T7444] rdma_op ffff8880325e61f0 conn xmit_rdma 0000000000000000 [ 170.045403][ T7457] trusted_key: encrypted_key: insufficient parameters specified [ 170.410489][ T30] audit: type=1400 audit(1768433014.662:312): avc: denied { block_suspend } for pid=7460 comm="syz.0.526" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 170.470828][ T5821] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 171.186699][ T7480] netlink: 36 bytes leftover after parsing attributes in process `syz.2.531'. [ 171.217459][ T30] audit: type=1326 audit(1768433015.472:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7481 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa678f749 code=0x7ffc0000 [ 171.275218][ T30] audit: type=1326 audit(1768433015.472:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7481 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa678f749 code=0x7ffc0000 [ 171.425678][ T30] audit: type=1326 audit(1768433015.522:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7481 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f5fa678f749 code=0x7ffc0000 [ 171.457254][ T30] audit: type=1326 audit(1768433015.522:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7481 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa678f749 code=0x7ffc0000 [ 171.486285][ T30] audit: type=1326 audit(1768433015.522:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7481 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa678f749 code=0x7ffc0000 [ 171.544815][ T5830] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 171.664074][ T7490] program syz.0.536 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 171.704822][ T5830] usb 3-1: Using ep0 maxpacket: 8 [ 171.712802][ T5830] usb 3-1: config 0 has an invalid interface number: 93 but max is 0 [ 171.720987][ T5830] usb 3-1: config 0 has no interface number 0 [ 171.732993][ T5830] usb 3-1: config 0 interface 93 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 171.784750][ T5830] usb 3-1: New USB device found, idVendor=2040, idProduct=4902, bcdDevice=17.d8 [ 171.793823][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.950040][ T5830] usb 3-1: config 0 descriptor?? [ 171.972508][ T7493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.537'. [ 172.100837][ T7493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.537'. [ 172.184313][ T5830] usb 3-1: string descriptor 0 read error: -71 [ 172.253265][ T7497] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 172.262295][ T7497] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 172.274958][ T7497] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 172.292886][ T30] audit: type=1400 audit(1768433016.522:318): avc: denied { firmware_load } for pid=7494 comm="syz.0.538" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 172.498515][ T5830] hdpvr 3-1:0.93: Could not find bulk-in endpoint [ 172.532747][ T5830] hdpvr 3-1:0.93: probe with driver hdpvr failed with error -12 [ 172.534878][ T5821] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 172.550588][ T5830] usb 3-1: USB disconnect, device number 7 [ 173.111908][ T5821] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 173.122169][ T5821] CPU: 0 UID: 0 PID: 5821 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 173.122196][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 173.122207][ T5821] Workqueue: hci3 hci_rx_work [ 173.122239][ T5821] Call Trace: [ 173.122245][ T5821] [ 173.122252][ T5821] dump_stack_lvl+0x16c/0x1f0 [ 173.122277][ T5821] sysfs_warn_dup+0x7f/0xa0 [ 173.122297][ T5821] sysfs_create_dir_ns+0x24b/0x2b0 [ 173.122314][ T5821] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 173.122338][ T5821] ? kobject_add_internal+0x28e/0x9d0 [ 173.122367][ T5821] kobject_add_internal+0x2c4/0x9d0 [ 173.122397][ T5821] kobject_add+0x16e/0x240 [ 173.122421][ T5821] ? __pfx_kobject_add+0x10/0x10 [ 173.122450][ T5821] ? kobject_put+0xaf/0x6f0 [ 173.122472][ T5821] ? _raw_spin_unlock+0x3e/0x50 [ 173.122497][ T5821] device_add+0x288/0x1980 [ 173.122516][ T5821] ? __pfx_dev_set_name+0x10/0x10 [ 173.122537][ T5821] ? __pfx_device_add+0x10/0x10 [ 173.122555][ T5821] ? mgmt_send_event_skb+0x2fb/0x460 [ 173.122582][ T5821] hci_conn_add_sysfs+0x1a8/0x260 [ 173.122606][ T5821] le_conn_complete_evt+0x11ed/0x1fa0 [ 173.122633][ T5821] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 173.122661][ T5821] hci_le_conn_complete_evt+0x23c/0x3a0 [ 173.122687][ T5821] hci_le_meta_evt+0x357/0x610 [ 173.122708][ T5821] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 173.122731][ T5821] hci_event_packet+0x685/0x1210 [ 173.122752][ T5821] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 173.122775][ T5821] ? __pfx_hci_event_packet+0x10/0x10 [ 173.122798][ T5821] ? kcov_remote_start+0x399/0x680 [ 173.122817][ T5821] ? lockdep_hardirqs_on+0x7c/0x110 [ 173.122846][ T5821] hci_rx_work+0x2c9/0x1020 [ 173.122867][ T5821] process_one_work+0x9ba/0x1b20 [ 173.122896][ T5821] ? __pfx_process_one_work+0x10/0x10 [ 173.122924][ T5821] ? assign_work+0x1a0/0x250 [ 173.122947][ T5821] worker_thread+0x6c8/0xf10 [ 173.122971][ T5821] ? __kthread_parkme+0x19e/0x250 [ 173.122986][ T5821] ? __pfx_worker_thread+0x10/0x10 [ 173.123003][ T5821] kthread+0x3c5/0x780 [ 173.123023][ T5821] ? __pfx_kthread+0x10/0x10 [ 173.123045][ T5821] ? rcu_is_watching+0x12/0xc0 [ 173.123062][ T5821] ? __pfx_kthread+0x10/0x10 [ 173.123084][ T5821] ret_from_fork+0x983/0xb10 [ 173.123104][ T5821] ? __pfx_ret_from_fork+0x10/0x10 [ 173.123125][ T5821] ? __switch_to+0x7af/0x10d0 [ 173.123148][ T5821] ? __pfx_kthread+0x10/0x10 [ 173.123169][ T5821] ret_from_fork_asm+0x1a/0x30 [ 173.123209][ T5821] [ 173.123262][ T5821] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 173.385050][ T5830] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 173.388609][ T790] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 173.393883][ T5821] Bluetooth: hci3: failed to register connection device [ 173.547488][ T790] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.559379][ T790] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 173.578115][ T790] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 173.594124][ T790] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.607246][ T5830] usb 1-1: too many endpoints for config 0 interface 0 altsetting 8: 33, using maximum allowed: 30 [ 173.621081][ T5830] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 173.621330][ T790] usb 2-1: config 0 descriptor?? [ 173.632512][ T5830] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 173.675281][ T790] hdpvr 2-1:0.0: Could not find bulk-in endpoint [ 173.681661][ T5830] usb 1-1: config 0 interface 0 has no altsetting 0 [ 173.688904][ T790] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 173.689340][ T5830] usb 1-1: New USB device found, idVendor=1b96, idProduct=0011, bcdDevice= 0.00 [ 173.712720][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.730001][ T5830] usb 1-1: config 0 descriptor?? [ 173.742694][ T7514] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 173.752173][ T6606] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 173.764546][ T5821] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 174.037777][ T790] libceph: connect (1)[c::]:6789 error -101 [ 174.043867][ T790] libceph: mon0 (1)[c::]:6789 connect error [ 174.046401][ T6606] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.060914][ T6606] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.073724][ T7528] ceph: No mds server is up or the cluster is laggy [ 174.077985][ T6606] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 174.089987][ T6606] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 174.101765][ T6606] usb 4-1: Manufacturer: syz [ 174.118352][ T6606] usb 4-1: config 0 descriptor?? [ 174.183645][ T5830] hid_parser_main: 24 callbacks suppressed [ 174.183659][ T5830] ntrig 0003:1B96:0011.000A: unknown main item tag 0x0 [ 174.197124][ T5830] ntrig 0003:1B96:0011.000A: unknown main item tag 0x0 [ 174.211048][ T5830] ntrig 0003:1B96:0011.000A: unknown main item tag 0x0 [ 174.219932][ T5830] ntrig 0003:1B96:0011.000A: unknown main item tag 0x0 [ 174.227132][ T5830] ntrig 0003:1B96:0011.000A: unknown main item tag 0x0 [ 174.237069][ T5830] ntrig 0003:1B96:0011.000A: hidraw0: USB HID v0.04 Device [HID 1b96:0011] on usb-dummy_hcd.0-1/input0 [ 174.388580][ T5830] usb 1-1: USB disconnect, device number 12 [ 175.431232][ T30] audit: type=1400 audit(1768433019.292:319): avc: denied { listen } for pid=7552 comm="syz.4.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 175.469425][ T6606] uclogic 0003:256C:006D.000B: v1 frame probing failed: -71 [ 175.471495][ T30] audit: type=1400 audit(1768433019.442:320): avc: denied { getopt } for pid=7542 comm="syz.2.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 175.479451][ T6606] uclogic 0003:256C:006D.000B: failed probing parameters: -71 [ 175.506707][ T6606] uclogic 0003:256C:006D.000B: probe with driver uclogic failed with error -71 [ 175.542872][ T6606] usb 4-1: USB disconnect, device number 17 [ 175.579890][ T30] audit: type=1400 audit(1768433019.702:321): avc: denied { accept } for pid=7552 comm="syz.4.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 175.799579][ T790] usb 2-1: USB disconnect, device number 6 [ 175.872485][ T7564] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 175.879037][ T7564] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 175.888182][ T7564] vhci_hcd vhci_hcd.0: Device attached [ 175.897668][ T7565] vhci_hcd: connection closed [ 175.897983][ T4319] vhci_hcd vhci_hcd.1: stop threads [ 176.010648][ T4319] vhci_hcd vhci_hcd.1: release socket [ 176.016644][ T4319] vhci_hcd vhci_hcd.1: disconnect device [ 176.605827][ T5821] Bluetooth: hci0: unexpected event for opcode 0x202a [ 176.637596][ T30] audit: type=1400 audit(1768433020.882:322): avc: denied { connect } for pid=7579 comm="syz.1.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 176.662715][ T5821] Bluetooth: hci4: link tx timeout [ 176.669142][ T5821] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 176.679229][ T5821] Bluetooth: hci4: link tx timeout [ 176.684457][ T5821] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 176.694704][ T5821] Bluetooth: hci4: link tx timeout [ 176.699986][ T5821] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 176.708212][ T5821] Bluetooth: hci4: link tx timeout [ 176.713383][ T5821] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 176.836686][ T30] audit: type=1400 audit(1768433020.962:323): avc: denied { shutdown } for pid=7579 comm="syz.1.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 176.866440][ T5898] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 177.205038][ T5830] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 177.215221][ T5898] usb 5-1: Using ep0 maxpacket: 16 [ 177.276999][ T5898] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 177.286797][ T5898] usb 5-1: config 1 has no interface number 0 [ 177.301280][ T5898] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 177.321464][ T5898] usb 5-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 177.362325][ T5898] usb 5-1: config 1 interface 105 has no altsetting 0 [ 177.366461][ T5830] usb 1-1: too many endpoints for config 0 interface 0 altsetting 8: 33, using maximum allowed: 30 [ 177.384700][ T5830] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 177.396194][ T5830] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 177.401155][ T5898] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 177.412707][ T5830] usb 1-1: config 0 interface 0 has no altsetting 0 [ 177.434762][ T5830] usb 1-1: New USB device found, idVendor=1b96, idProduct=0011, bcdDevice= 0.00 [ 177.443953][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.464567][ T5830] usb 1-1: config 0 descriptor?? [ 177.472057][ T7586] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 177.497812][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.541688][ T5898] usb 5-1: Product: syz [ 177.664722][ T5898] usb 5-1: Manufacturer: syz [ 177.669358][ T5898] usb 5-1: SerialNumber: syz [ 178.070830][ T7578] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 178.110018][ T5830] usbhid 1-1:0.0: can't add hid device: -71 [ 178.119267][ T30] audit: type=1400 audit(1768433022.362:324): avc: denied { getopt } for pid=7597 comm="syz.2.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 178.138911][ T5830] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 178.150546][ T5830] usb 1-1: USB disconnect, device number 13 [ 178.286706][ T5898] aqc111 5-1:1.105: probe with driver aqc111 failed with error -22 [ 178.301385][ T5898] usb 5-1: USB disconnect, device number 18 [ 178.354751][ T5871] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 178.424767][ T976] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 178.504845][ T5871] usb 3-1: Using ep0 maxpacket: 16 [ 178.512076][ T5871] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.524116][ T5871] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.534779][ T5871] usb 3-1: config 0 interface 0 has no altsetting 0 [ 178.543985][ T5871] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 178.554023][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.564473][ T5871] usb 3-1: config 0 descriptor?? [ 178.737198][ T5821] Bluetooth: hci4: command 0x0406 tx timeout [ 178.867118][ T30] audit: type=1400 audit(1768433023.122:325): avc: denied { ioctl } for pid=7597 comm="syz.2.572" path="socket:[15203]" dev="sockfs" ino=15203 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 178.934573][ T976] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.945595][ T976] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 178.948680][ T5871] usbhid 3-1:0.0: can't add hid device: -71 [ 178.958831][ T976] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 178.973783][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.988552][ T976] usb 4-1: config 0 descriptor?? [ 178.996794][ T976] hdpvr 4-1:0.0: Could not find bulk-in endpoint [ 179.002855][ T5871] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 179.003613][ T976] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 179.029561][ T5871] usb 3-1: USB disconnect, device number 8 [ 179.074304][ T5825] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 181.396271][ T6606] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 181.502235][ T30] audit: type=1400 audit(1768433025.752:326): avc: denied { create } for pid=7633 comm="syz.4.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 181.558124][ T976] usb 4-1: USB disconnect, device number 18 [ 181.625354][ T6606] usb 3-1: too many endpoints for config 0 interface 0 altsetting 8: 33, using maximum allowed: 30 [ 181.795301][ T6606] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 181.826299][ T5825] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 181.845104][ T30] audit: type=1400 audit(1768433025.752:327): avc: denied { connect } for pid=7633 comm="syz.4.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 181.907280][ T6606] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 181.964741][ T6606] usb 3-1: config 0 interface 0 has no altsetting 0 [ 181.994693][ T6606] usb 3-1: New USB device found, idVendor=1b96, idProduct=0011, bcdDevice= 0.00 [ 182.134155][ T6606] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.571345][ T6606] usb 3-1: config 0 descriptor?? [ 182.601035][ T7645] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 183.637058][ T7669] netlink: 'syz.1.594': attribute type 10 has an invalid length. [ 183.778513][ T6606] usbhid 3-1:0.0: can't add hid device: -71 [ 183.784545][ T6606] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 183.808441][ T6606] usb 3-1: USB disconnect, device number 9 [ 183.966423][ T7685] trusted_key: encrypted_key: insufficient parameters specified [ 184.134889][ T5864] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 184.339680][ T5864] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.400380][ T5864] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 184.439185][ T5864] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 184.471645][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.518941][ T5864] usb 2-1: config 0 descriptor?? [ 184.547785][ T5864] hdpvr 2-1:0.0: Could not find bulk-in endpoint [ 184.567263][ T5864] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 184.690209][ T7696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.600'. [ 185.777738][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 185.777845][ T5140] Bluetooth: hci1: command 0x0406 tx timeout [ 185.783833][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 185.794797][ T5821] Bluetooth: hci0: command 0x0c1a tx timeout [ 186.061435][ T7722] trusted_key: encrypted_key: insufficient parameters specified [ 186.529746][ T7720] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 186.573770][ T7720] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 186.639772][ T7720] netlink: 'syz.0.608': attribute type 10 has an invalid length. [ 186.831425][ T7729] trusted_key: encrypted_key: insufficient parameters specified [ 187.207305][ T5830] usb 2-1: USB disconnect, device number 7 [ 187.524534][ T7740] trusted_key: encrypted_key: insufficient parameters specified [ 188.576380][ T7749] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 188.950709][ T5898] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 189.214743][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 190.215507][ T5898] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 190.232961][ T5898] usb 2-1: config 1 has no interface number 0 [ 190.239605][ T5898] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 190.250290][ T5898] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 190.434414][ T5898] usb 2-1: config 1 interface 105 has no altsetting 0 [ 190.690425][ T5898] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 190.743062][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.754726][ T790] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 190.764710][ T5898] usb 2-1: Product: syz [ 190.773257][ T5898] usb 2-1: Manufacturer: syz [ 190.778618][ T5898] usb 2-1: SerialNumber: syz [ 190.785810][ T7753] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 190.794023][ T5820] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 190.801442][ T7753] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 190.873240][ T7782] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 190.953741][ T7784] trusted_key: encrypted_key: insufficient parameters specified [ 190.989473][ T790] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.078372][ T5898] aqc111 2-1:1.105: probe with driver aqc111 failed with error -71 [ 191.113330][ T790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 191.240951][ T790] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 191.257666][ T5898] usb 2-1: USB disconnect, device number 8 [ 191.462945][ T790] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 191.485976][ T790] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 191.495360][ T790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.506652][ T790] usb 4-1: config 0 descriptor?? [ 191.516566][ T790] hdpvr 4-1:0.0: Could not find bulk-in endpoint [ 191.529361][ T790] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 193.489972][ T6606] usb 4-1: USB disconnect, device number 19 [ 193.975302][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.981750][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.133103][ T7815] netlink: 'syz.0.638': attribute type 10 has an invalid length. [ 194.150409][ T7824] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 194.578258][ T7831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.641'. [ 196.109984][ T7864] netlink: 'syz.4.652': attribute type 10 has an invalid length. [ 196.181245][ T7868] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 196.224730][ T5830] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 196.401320][ T7874] trusted_key: encrypted_key: insufficient parameters specified [ 196.922515][ T5830] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.934864][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 196.946670][ T5830] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 196.961899][ T5830] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 196.989362][ T5830] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 197.006904][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.029559][ T5830] usb 4-1: config 0 descriptor?? [ 197.038732][ T5830] hdpvr 4-1:0.0: Could not find bulk-in endpoint [ 197.045894][ T5830] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 197.110699][ T7885] trusted_key: encrypted_key: insufficient parameters specified [ 198.651718][ T7901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.662'. [ 199.253337][ T5961] usb 4-1: USB disconnect, device number 20 [ 199.357662][ T7906] netlink: 'syz.4.664': attribute type 10 has an invalid length. [ 200.473779][ T7924] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 200.480429][ T7924] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 200.515120][ T7924] vhci_hcd vhci_hcd.0: Device attached [ 200.627957][ T5820] Bluetooth: hci2: unexpected subevent 0x0e length: 248 > 15 [ 200.635467][ T5820] Bluetooth: hci2: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 200.656080][ T7926] vhci_hcd: connection closed [ 200.656354][ T13] vhci_hcd vhci_hcd.1: stop threads [ 200.683977][ T13] vhci_hcd vhci_hcd.1: release socket [ 200.697684][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 201.336545][ T7944] trusted_key: encrypted_key: insufficient parameters specified [ 203.567370][ T7961] trusted_key: encrypted_key: insufficient parameters specified [ 205.688185][ T7985] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 205.694796][ T7985] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 206.607328][ T7985] vhci_hcd vhci_hcd.0: Device attached [ 206.928492][ T8003] trusted_key: encrypted_key: insufficient parameters specified [ 206.954953][ T7988] vhci_hcd: connection closed [ 207.459082][ T5830] usb 38-1: SetAddress Request (6) to port 0 [ 207.478282][ T5830] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 207.517481][ T3914] vhci_hcd vhci_hcd.2: stop threads [ 207.727200][ T3914] vhci_hcd vhci_hcd.2: release socket [ 207.752276][ T3914] vhci_hcd vhci_hcd.2: disconnect device [ 208.705546][ T5820] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 209.078561][ T8024] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.699'. [ 210.157822][ T8037] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 210.164384][ T8037] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 210.401433][ T8037] vhci_hcd vhci_hcd.0: Device attached [ 210.673643][ T8041] vhci_hcd: connection closed [ 210.673962][ T13] vhci_hcd vhci_hcd.0: stop threads [ 210.709144][ T13] vhci_hcd vhci_hcd.0: release socket [ 210.722916][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 210.764770][ T5973] usb 34-1: enqueue for inactive port 0 [ 211.625827][ T5973] usb usb34-port1: attempt power cycle [ 211.816295][ T5820] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 212.984112][ T5830] usb 38-1: device descriptor read/8, error -110 [ 213.178404][ T5973] usb usb34-port1: unable to enumerate USB device [ 213.396183][ T8078] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 213.402810][ T8078] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 213.715716][ T5830] usb usb38-port1: attempt power cycle [ 213.863052][ T8078] vhci_hcd vhci_hcd.0: Device attached [ 213.875659][ T8085] vhci_hcd: connection closed [ 213.875844][ T3541] vhci_hcd vhci_hcd.0: stop threads [ 213.915888][ T3541] vhci_hcd vhci_hcd.0: release socket [ 213.928739][ T3541] vhci_hcd vhci_hcd.0: disconnect device [ 214.372167][ T5830] usb usb38-port1: unable to enumerate USB device [ 216.888298][ T8129] netlink: 'syz.2.727': attribute type 10 has an invalid length. [ 217.184929][ T8137] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 217.191531][ T8137] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 217.626923][ T8137] vhci_hcd vhci_hcd.0: Device attached [ 217.647213][ T8142] vhci_hcd: connection closed [ 217.647379][ T3779] vhci_hcd vhci_hcd.4: stop threads [ 217.667299][ T3779] vhci_hcd vhci_hcd.4: release socket [ 217.672881][ T3779] vhci_hcd vhci_hcd.4: disconnect device [ 223.416005][ T5820] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 224.638664][ T8210] netlink: 'syz.3.739': attribute type 10 has an invalid length. [ 225.684982][ T8223] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 227.036957][ T8230] Invalid source name [ 227.300077][ T8239] netlink: 'syz.3.758': attribute type 10 has an invalid length. [ 227.508960][ T5820] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 228.493337][ T5820] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 230.094359][ T8266] trusted_key: encrypted_key: insufficient parameters specified [ 230.983036][ T8274] netlink: 'syz.2.765': attribute type 10 has an invalid length. [ 233.843501][ T8296] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 233.850150][ T8296] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 233.875012][ T8296] vhci_hcd vhci_hcd.0: Device attached [ 233.883790][ T8297] vhci_hcd: connection closed [ 233.883975][ T3453] vhci_hcd vhci_hcd.3: stop threads [ 233.914729][ T3453] vhci_hcd vhci_hcd.3: release socket [ 233.920178][ T3453] vhci_hcd vhci_hcd.3: disconnect device [ 234.076448][ T5820] Bluetooth: hci4: link tx timeout [ 234.081613][ T5820] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 235.903557][ T5825] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 236.208210][ T5825] Bluetooth: hci4: command 0x0406 tx timeout [ 236.240381][ T8325] netlink: 'syz.3.780': attribute type 10 has an invalid length. [ 236.407077][ T8334] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 236.630106][ T8343] netlink: 'syz.4.787': attribute type 10 has an invalid length. [ 236.639305][ T5825] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 236.674782][ T5925] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 236.782602][ T5820] Bluetooth: hci2: unexpected subevent 0x0e length: 248 > 15 [ 236.790186][ T5820] Bluetooth: hci2: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 236.831809][ T8349] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 236.838434][ T8349] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 236.847010][ T8349] vhci_hcd vhci_hcd.0: Device attached [ 236.853454][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.864677][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.876082][ T5925] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 236.876968][ T8350] vhci_hcd: connection closed [ 236.885859][ T5925] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 237.255429][ T4077] vhci_hcd vhci_hcd.1: stop threads [ 237.261739][ T4077] vhci_hcd vhci_hcd.1: release socket [ 237.284031][ T5925] usb 1-1: Manufacturer: syz [ 237.285158][ T4077] vhci_hcd vhci_hcd.1: disconnect device [ 237.296980][ T5925] usb 1-1: config 0 descriptor?? [ 237.754901][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 237.949300][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.022049][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.046024][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 238.055585][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.077882][ T9] usb 3-1: config 0 descriptor?? [ 238.446927][ T5925] uclogic 0003:256C:006D.000C: v1 frame probing failed: -71 [ 238.469057][ T5925] uclogic 0003:256C:006D.000C: failed probing parameters: -71 [ 238.495264][ T5925] uclogic 0003:256C:006D.000C: probe with driver uclogic failed with error -71 [ 238.544885][ T5925] usb 1-1: USB disconnect, device number 14 [ 238.602412][ T5820] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 238.811623][ T9] pyra 0003:1E7D:2CF6.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 238.972837][ T8395] Invalid source name [ 239.121647][ T8362] IPv6: sit1: Disabled Multicast RS [ 239.169974][ T8362] sit1: entered allmulticast mode [ 239.797101][ T8406] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 239.803652][ T8406] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 239.814927][ T8406] vhci_hcd vhci_hcd.0: Device attached [ 239.830351][ T9] pyra 0003:1E7D:2CF6.000D: couldn't init struct pyra_device [ 239.907168][ T9] pyra 0003:1E7D:2CF6.000D: couldn't install mouse [ 239.908349][ T8407] vhci_hcd: connection closed [ 239.934783][ T9] pyra 0003:1E7D:2CF6.000D: probe with driver pyra failed with error -71 [ 239.956055][ T9] usb 3-1: USB disconnect, device number 10 [ 239.997979][ T6114] vhci_hcd vhci_hcd.3: stop threads [ 240.197132][ T6114] vhci_hcd vhci_hcd.3: release socket [ 240.202550][ T6114] vhci_hcd vhci_hcd.3: disconnect device [ 240.249013][ T5926] usb 40-1: enqueue for inactive port 0 [ 240.357159][ T5820] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 240.366815][ T5820] CPU: 0 UID: 0 PID: 5820 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 240.366832][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 240.366839][ T5820] Workqueue: hci2 hci_rx_work [ 240.366856][ T5820] Call Trace: [ 240.366861][ T5820] [ 240.366865][ T5820] dump_stack_lvl+0x16c/0x1f0 [ 240.366882][ T5820] sysfs_warn_dup+0x7f/0xa0 [ 240.366898][ T5820] sysfs_create_dir_ns+0x24b/0x2b0 [ 240.366911][ T5820] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 240.366923][ T5820] ? find_held_lock+0x2b/0x80 [ 240.366943][ T5820] ? do_raw_spin_unlock+0x172/0x230 [ 240.366958][ T5820] kobject_add_internal+0x2c4/0x9d0 [ 240.366976][ T5820] kobject_add+0x16e/0x240 [ 240.366991][ T5820] ? __pfx_kobject_add+0x10/0x10 [ 240.367009][ T5820] ? kobject_put+0xaf/0x6f0 [ 240.367022][ T5820] ? _raw_spin_unlock+0x28/0x50 [ 240.367037][ T5820] device_add+0x288/0x1980 [ 240.367050][ T5820] ? __pfx_dev_set_name+0x10/0x10 [ 240.367063][ T5820] ? __pfx_device_add+0x10/0x10 [ 240.367074][ T5820] ? mgmt_send_event_skb+0x2fb/0x460 [ 240.367105][ T5820] hci_conn_add_sysfs+0x1a8/0x260 [ 240.367119][ T5820] le_conn_complete_evt+0x11ed/0x1fa0 [ 240.367134][ T5820] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 240.367149][ T5820] hci_le_conn_complete_evt+0x23c/0x3a0 [ 240.367163][ T5820] hci_le_meta_evt+0x357/0x610 [ 240.367176][ T5820] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 240.367189][ T5820] hci_event_packet+0x685/0x1210 [ 240.367200][ T5820] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 240.367214][ T5820] ? __pfx_hci_event_packet+0x10/0x10 [ 240.367228][ T5820] ? kcov_remote_start+0x399/0x680 [ 240.367239][ T5820] ? lockdep_hardirqs_on+0x7c/0x110 [ 240.367255][ T5820] hci_rx_work+0x2c9/0x1020 [ 240.367269][ T5820] process_one_work+0x9ba/0x1b20 [ 240.367288][ T5820] ? __pfx_process_one_work+0x10/0x10 [ 240.367305][ T5820] ? assign_work+0x1a0/0x250 [ 240.367318][ T5820] worker_thread+0x6c8/0xf10 [ 240.367337][ T5820] ? __pfx_worker_thread+0x10/0x10 [ 240.367349][ T5820] kthread+0x3c5/0x780 [ 240.367361][ T5820] ? __pfx_kthread+0x10/0x10 [ 240.367374][ T5820] ? rcu_is_watching+0x12/0xc0 [ 240.367384][ T5820] ? __pfx_kthread+0x10/0x10 [ 240.367396][ T5820] ret_from_fork+0x983/0xb10 [ 240.367408][ T5820] ? __pfx_ret_from_fork+0x10/0x10 [ 240.367420][ T5820] ? __switch_to+0x7af/0x10d0 [ 240.367433][ T5820] ? __pfx_kthread+0x10/0x10 [ 240.367445][ T5820] ret_from_fork_asm+0x1a/0x30 [ 240.367467][ T5820] [ 240.367482][ T5820] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 240.619232][ T5820] Bluetooth: hci2: failed to register connection device [ 240.768377][ T5926] usb usb40-port1: attempt power cycle [ 241.895826][ T5820] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 242.341170][ T5926] usb usb40-port1: unable to enumerate USB device [ 242.875599][ T8454] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 242.882221][ T8454] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 242.921304][ T8454] vhci_hcd vhci_hcd.0: Device attached [ 243.273218][ T8461] Invalid source name [ 243.319619][ T8455] vhci_hcd: connection closed [ 243.319881][ T72] vhci_hcd vhci_hcd.3: stop threads [ 243.331015][ T72] vhci_hcd vhci_hcd.3: release socket [ 243.344181][ T72] vhci_hcd vhci_hcd.3: disconnect device [ 243.360690][ T5820] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 243.364738][ T5898] usb 40-1: SetAddress Request (6) to port 0 [ 243.370240][ T5820] CPU: 1 UID: 0 PID: 5820 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 243.370261][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 243.370272][ T5820] Workqueue: hci1 hci_rx_work [ 243.370293][ T5820] Call Trace: [ 243.370298][ T5820] [ 243.370305][ T5820] dump_stack_lvl+0x16c/0x1f0 [ 243.370329][ T5820] sysfs_warn_dup+0x7f/0xa0 [ 243.370349][ T5820] sysfs_create_dir_ns+0x24b/0x2b0 [ 243.370365][ T5820] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 243.370382][ T5820] ? find_held_lock+0x2b/0x80 [ 243.370408][ T5820] ? do_raw_spin_unlock+0x172/0x230 [ 243.370430][ T5820] kobject_add_internal+0x2c4/0x9d0 [ 243.370457][ T5820] kobject_add+0x16e/0x240 [ 243.370478][ T5820] ? __pfx_kobject_add+0x10/0x10 [ 243.370501][ T5820] ? kobject_put+0xaf/0x6f0 [ 243.370519][ T5820] ? _raw_spin_unlock+0x28/0x50 [ 243.370543][ T5820] device_add+0x288/0x1980 [ 243.370561][ T5820] ? __pfx_dev_set_name+0x10/0x10 [ 243.370579][ T5820] ? __pfx_device_add+0x10/0x10 [ 243.370596][ T5820] ? mgmt_send_event_skb+0x2fb/0x460 [ 243.370619][ T5820] hci_conn_add_sysfs+0x1a8/0x260 [ 243.370640][ T5820] le_conn_complete_evt+0x11ed/0x1fa0 [ 243.370663][ T5820] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 243.370687][ T5820] hci_le_conn_complete_evt+0x23c/0x3a0 [ 243.370708][ T5820] hci_le_meta_evt+0x357/0x610 [ 243.370726][ T5820] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 243.370746][ T5820] hci_event_packet+0x685/0x1210 [ 243.370763][ T5820] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 243.370781][ T5820] ? __pfx_hci_event_packet+0x10/0x10 [ 243.370800][ T5820] ? kcov_remote_start+0x399/0x680 [ 243.370816][ T5820] ? lockdep_hardirqs_on+0x7c/0x110 [ 243.370841][ T5820] hci_rx_work+0x2c9/0x1020 [ 243.370861][ T5820] process_one_work+0x9ba/0x1b20 [ 243.370889][ T5820] ? __pfx_process_one_work+0x10/0x10 [ 243.370913][ T5820] ? assign_work+0x1a0/0x250 [ 243.370933][ T5820] worker_thread+0x6c8/0xf10 [ 243.370961][ T5820] ? __pfx_worker_thread+0x10/0x10 [ 243.370978][ T5820] kthread+0x3c5/0x780 [ 243.370996][ T5820] ? __pfx_kthread+0x10/0x10 [ 243.371014][ T5820] ? rcu_is_watching+0x12/0xc0 [ 243.371028][ T5820] ? __pfx_kthread+0x10/0x10 [ 243.371046][ T5820] ret_from_fork+0x983/0xb10 [ 243.371063][ T5820] ? __pfx_ret_from_fork+0x10/0x10 [ 243.371080][ T5820] ? __switch_to+0x7af/0x10d0 [ 243.371099][ T5820] ? __pfx_kthread+0x10/0x10 [ 243.371117][ T5820] ret_from_fork_asm+0x1a/0x30 [ 243.371150][ T5820] [ 243.371170][ T5820] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 243.385875][ T5898] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 243.395947][ T5820] Bluetooth: hci1: failed to register connection device [ 243.684811][ T5898] usb 40-1: enqueue for inactive port 0 [ 244.841337][ T5898] usb usb40-port1: attempt power cycle [ 244.854749][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 244.966841][ T5820] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 245.025547][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.050471][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.097092][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 245.106786][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.126232][ T9] usb 3-1: config 0 descriptor?? [ 245.555869][ T8491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.830'. [ 245.811201][ T5898] usb usb40-port1: unable to enumerate USB device [ 245.961822][ T9] pyra 0003:1E7D:2CF6.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 246.750492][ T8468] IPv6: sit1: Disabled Multicast RS [ 246.910248][ T8468] sit1: entered allmulticast mode [ 247.854684][ T5825] Bluetooth: hci4: command 0x0406 tx timeout [ 249.615413][ T9] pyra 0003:1E7D:2CF6.000E: couldn't init struct pyra_device [ 249.622868][ T9] pyra 0003:1E7D:2CF6.000E: couldn't install mouse [ 249.685971][ T9] pyra 0003:1E7D:2CF6.000E: probe with driver pyra failed with error -71 [ 249.808353][ T9] usb 3-1: USB disconnect, device number 11 [ 250.159657][ T5820] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 250.217568][ T5820] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 250.227497][ T5820] CPU: 1 UID: 0 PID: 5820 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 250.227524][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 250.227536][ T5820] Workqueue: hci0 hci_rx_work [ 250.227561][ T5820] Call Trace: [ 250.227567][ T5820] [ 250.227575][ T5820] dump_stack_lvl+0x16c/0x1f0 [ 250.227600][ T5820] sysfs_warn_dup+0x7f/0xa0 [ 250.227620][ T5820] sysfs_create_dir_ns+0x24b/0x2b0 [ 250.227639][ T5820] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 250.227657][ T5820] ? find_held_lock+0x2b/0x80 [ 250.227688][ T5820] ? do_raw_spin_unlock+0x172/0x230 [ 250.227712][ T5820] kobject_add_internal+0x2c4/0x9d0 [ 250.227741][ T5820] kobject_add+0x16e/0x240 [ 250.227762][ T5820] ? __pfx_kobject_add+0x10/0x10 [ 250.227792][ T5820] ? kobject_put+0xaf/0x6f0 [ 250.227813][ T5820] ? _raw_spin_unlock+0x28/0x50 [ 250.227842][ T5820] device_add+0x288/0x1980 [ 250.227864][ T5820] ? __pfx_dev_set_name+0x10/0x10 [ 250.227887][ T5820] ? __pfx_device_add+0x10/0x10 [ 250.227906][ T5820] ? mgmt_send_event_skb+0x2fb/0x460 [ 250.227935][ T5820] hci_conn_add_sysfs+0x1a8/0x260 [ 250.227961][ T5820] le_conn_complete_evt+0x11ed/0x1fa0 [ 250.227991][ T5820] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 250.228019][ T5820] hci_le_conn_complete_evt+0x23c/0x3a0 [ 250.228045][ T5820] hci_le_meta_evt+0x357/0x610 [ 250.228067][ T5820] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 250.228090][ T5820] hci_event_packet+0x685/0x1210 [ 250.228108][ T5820] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 250.228126][ T5820] ? __pfx_hci_event_packet+0x10/0x10 [ 250.228144][ T5820] ? kcov_remote_start+0x399/0x680 [ 250.228163][ T5820] ? lockdep_hardirqs_on+0x7c/0x110 [ 250.228200][ T5820] hci_rx_work+0x2c9/0x1020 [ 250.228229][ T5820] process_one_work+0x9ba/0x1b20 [ 250.228266][ T5820] ? __pfx_process_one_work+0x10/0x10 [ 250.228297][ T5820] ? assign_work+0x1a0/0x250 [ 250.228320][ T5820] worker_thread+0x6c8/0xf10 [ 250.228354][ T5820] ? __pfx_worker_thread+0x10/0x10 [ 250.228377][ T5820] kthread+0x3c5/0x780 [ 250.228397][ T5820] ? __pfx_kthread+0x10/0x10 [ 250.228419][ T5820] ? rcu_is_watching+0x12/0xc0 [ 250.228436][ T5820] ? __pfx_kthread+0x10/0x10 [ 250.228457][ T5820] ret_from_fork+0x983/0xb10 [ 250.228480][ T5820] ? __pfx_ret_from_fork+0x10/0x10 [ 250.228502][ T5820] ? __switch_to+0x7af/0x10d0 [ 250.228526][ T5820] ? __pfx_kthread+0x10/0x10 [ 250.228547][ T5820] ret_from_fork_asm+0x1a/0x30 [ 250.228587][ T5820] [ 250.228610][ T5820] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 250.482626][ T5820] Bluetooth: hci0: failed to register connection device [ 250.526225][ T8529] Invalid source name [ 250.804992][ T30] audit: type=1400 audit(1768433095.062:328): avc: denied { write } for pid=8515 comm="syz.2.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 251.231125][ T8536] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 251.238456][ T8536] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 251.287269][ T8536] vhci_hcd vhci_hcd.0: Device attached [ 251.389547][ T8538] vhci_hcd: connection closed [ 251.389802][ T3541] vhci_hcd vhci_hcd.3: stop threads [ 251.515143][ T5961] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 251.523301][ T3541] vhci_hcd vhci_hcd.3: release socket [ 251.554466][ T3541] vhci_hcd vhci_hcd.3: disconnect device [ 251.564758][ T8503] usb 40-1: SetAddress Request (10) to port 0 [ 251.570843][ T8503] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 251.616767][ T8503] usb 40-1: enqueue for inactive port 0 [ 251.696062][ T5961] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 251.713669][ T5961] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 251.728988][ T5961] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 251.750646][ T5961] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 251.761430][ T5961] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 251.771690][ T5961] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.782933][ T5961] usb 5-1: config 0 descriptor?? [ 252.955049][ T8503] usb usb40-port1: attempt power cycle [ 252.977295][ T5961] hdpvr 5-1:0.0: unexpected answer of status request, len -32 [ 253.021642][ T5961] hdpvr 5-1:0.0: device init failed [ 253.031839][ T5961] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 253.435121][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 253.455222][ T5961] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 253.599400][ T8503] usb usb40-port1: unable to enumerate USB device [ 253.619157][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.634681][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.636469][ T5961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.644498][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 253.665082][ T5961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.665122][ T5961] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 253.665142][ T5961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.698521][ T5961] usb 2-1: config 0 descriptor?? [ 253.713209][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.735381][ T9] usb 4-1: config 0 descriptor?? [ 253.951167][ T5820] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 254.006197][ T5820] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 254.132980][ T5961] pyra 0003:1E7D:2CF6.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 254.175469][ T9] pyra 0003:1E7D:2CF6.0010: hidraw1: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 254.288789][ T8562] usb 5-1: USB disconnect, device number 19 [ 254.619366][ T9] pyra 0003:1E7D:2CF6.0010: couldn't init struct pyra_device [ 254.639030][ T9] pyra 0003:1E7D:2CF6.0010: couldn't install mouse [ 254.656518][ T9] pyra 0003:1E7D:2CF6.0010: probe with driver pyra failed with error -71 [ 254.671767][ T9] usb 4-1: USB disconnect, device number 21 [ 254.685250][ T8564] IPv6: sit1: Disabled Multicast RS [ 254.706310][ T8564] sit1: entered allmulticast mode [ 254.902715][ T5961] pyra 0003:1E7D:2CF6.000F: couldn't init struct pyra_device [ 255.376672][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.528908][ T5961] pyra 0003:1E7D:2CF6.000F: couldn't install mouse [ 255.558889][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.784673][ T5961] pyra 0003:1E7D:2CF6.000F: probe with driver pyra failed with error -71 [ 255.802031][ T5961] usb 2-1: USB disconnect, device number 9 [ 255.905486][ T5820] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 256.024870][ T8598] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 256.031524][ T8598] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 256.048445][ T8598] vhci_hcd vhci_hcd.0: Device attached [ 256.057506][ T5820] Bluetooth: hci0: unexpected subevent 0x0c length: 248 > 5 [ 256.057653][ T8600] vhci_hcd: connection closed [ 256.085414][ T6114] vhci_hcd vhci_hcd.3: stop threads [ 256.096615][ T6114] vhci_hcd vhci_hcd.3: release socket [ 256.102015][ T6114] vhci_hcd vhci_hcd.3: disconnect device [ 256.576516][ T5961] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 257.103687][ T5961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.116332][ T5961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.174007][ T5961] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 257.233585][ T5961] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 257.281378][ T5961] usb 2-1: Manufacturer: syz [ 257.346169][ T5961] usb 2-1: config 0 descriptor?? [ 257.722494][ T8503] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 257.906072][ T8634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.864'. [ 258.242620][ T8639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.863'. [ 258.357465][ T8503] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 258.368218][ T8503] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 258.383580][ T8503] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 258.393478][ T8503] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 258.403576][ T8503] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 258.646055][ T8643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.866'. [ 258.732163][ T8503] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.928501][ T8503] usb 5-1: config 0 descriptor?? [ 259.128569][ T5961] uclogic 0003:256C:006D.0011: v1 frame probing failed: -71 [ 259.146102][ T5961] uclogic 0003:256C:006D.0011: failed probing parameters: -71 [ 259.157882][ T8503] hdpvr 5-1:0.0: unexpected answer of status request, len -32 [ 259.165743][ T5961] uclogic 0003:256C:006D.0011: probe with driver uclogic failed with error -71 [ 259.176581][ T8503] hdpvr 5-1:0.0: device init failed [ 259.181944][ T8503] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 259.211657][ T5961] usb 2-1: USB disconnect, device number 10 [ 260.585591][ T5961] usb 5-1: USB disconnect, device number 20 [ 261.076818][ T790] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 261.648236][ T790] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.684856][ T790] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.845058][ T790] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 261.971192][ T790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.016635][ T790] usb 1-1: config 0 descriptor?? [ 262.776550][ T790] pyra 0003:1E7D:2CF6.0012: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 263.233816][ T8658] IPv6: sit1: Disabled Multicast RS [ 263.265724][ T8658] sit1: entered allmulticast mode [ 263.351373][ T8699] trusted_key: encrypted_key: insufficient parameters specified [ 263.951469][ T790] pyra 0003:1E7D:2CF6.0012: couldn't init struct pyra_device [ 264.204709][ T5973] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 264.302952][ T5898] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 264.310682][ T790] pyra 0003:1E7D:2CF6.0012: couldn't install mouse [ 264.322261][ T790] pyra 0003:1E7D:2CF6.0012: probe with driver pyra failed with error -71 [ 264.334235][ T790] usb 1-1: USB disconnect, device number 15 [ 264.598121][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 264.619523][ T5973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.634667][ T5898] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 264.644746][ T5973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.655096][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 264.666639][ T5973] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 264.676932][ T5898] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 264.687214][ T5973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.695354][ T5898] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 264.711408][ T5973] usb 5-1: config 0 descriptor?? [ 264.725129][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.742760][ T5898] usb 3-1: config 0 descriptor?? [ 264.964059][ T5898] hdpvr 3-1:0.0: unexpected answer of status request, len -32 [ 264.975063][ T8562] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 265.203506][ T8562] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.287850][ T8562] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.358917][ T8562] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 265.417945][ T8562] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 265.418091][ T5973] pyra 0003:1E7D:2CF6.0013: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 265.459128][ T8562] usb 4-1: Manufacturer: syz [ 265.538544][ T8562] usb 4-1: config 0 descriptor?? [ 265.787735][ T5898] hdpvr 3-1:0.0: device init failed [ 265.793026][ T5898] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 265.804107][ T5973] pyra 0003:1E7D:2CF6.0013: couldn't init struct pyra_device [ 265.811672][ T5973] pyra 0003:1E7D:2CF6.0013: couldn't install mouse [ 265.812854][ T8720] IPv6: sit1: Disabled Multicast RS [ 265.819829][ T5973] pyra 0003:1E7D:2CF6.0013: probe with driver pyra failed with error -5 [ 265.847450][ T8720] sit1: entered allmulticast mode [ 267.080908][ T8503] usb 5-1: USB disconnect, device number 21 [ 267.120150][ T49] usb 3-1: USB disconnect, device number 12 [ 267.655701][ T8562] uclogic 0003:256C:006D.0014: v1 frame probing failed: -71 [ 267.663099][ T8562] uclogic 0003:256C:006D.0014: failed probing parameters: -71 [ 267.673899][ T8562] uclogic 0003:256C:006D.0014: probe with driver uclogic failed with error -71 [ 268.033891][ T8562] usb 4-1: USB disconnect, device number 22 [ 268.889741][ T8757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.893'. [ 269.630323][ T8771] Invalid source name [ 269.644711][ T790] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 269.806268][ T790] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.827612][ T790] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.895103][ T5973] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 269.905431][ T790] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 269.925728][ T790] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 269.943556][ T790] usb 2-1: Manufacturer: syz [ 270.105353][ T790] usb 2-1: config 0 descriptor?? [ 270.177997][ T5973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 270.214137][ T5973] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 270.227479][ T5973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 270.275846][ T8782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.902'. [ 270.468054][ T5973] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 270.554489][ T5973] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 270.634313][ T5973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.658724][ T790] usbhid 2-1:0.0: can't add hid device: -71 [ 270.670431][ T5973] usb 1-1: config 0 descriptor?? [ 270.675622][ T790] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 270.691376][ T790] usb 2-1: USB disconnect, device number 11 [ 270.895831][ T5973] hdpvr 1-1:0.0: unexpected answer of status request, len -32 [ 270.903332][ T5973] hdpvr 1-1:0.0: device init failed [ 270.924714][ T5973] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 270.963267][ T8784] netlink: 'syz.3.903': attribute type 10 has an invalid length. [ 271.096548][ T5825] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 272.752301][ T5973] usb 1-1: USB disconnect, device number 16 [ 273.384705][ T5973] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 273.789517][ T8827] Invalid source name [ 273.886297][ T5973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.897689][ T5973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.922666][ T5973] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 273.940091][ T5973] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 273.963215][ T5973] usb 2-1: Manufacturer: syz [ 273.979728][ T5973] usb 2-1: config 0 descriptor?? [ 274.089325][ T8833] netlink: 'syz.3.918': attribute type 10 has an invalid length. [ 275.285018][ T5973] uclogic 0003:256C:006D.0015: v1 frame probing failed: -71 [ 275.303349][ T5973] uclogic 0003:256C:006D.0015: failed probing parameters: -71 [ 275.334703][ T5864] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 275.345118][ T5973] uclogic 0003:256C:006D.0015: probe with driver uclogic failed with error -71 [ 275.379357][ T5973] usb 2-1: USB disconnect, device number 12 [ 275.556753][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 275.683790][ T5864] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 275.724241][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 275.772702][ T5864] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 275.777771][ T5820] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 275.806935][ T5864] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 276.031681][ T8864] trusted_key: encrypted_key: insufficient parameters specified [ 276.992891][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.039086][ T5864] usb 4-1: config 0 descriptor?? [ 277.312163][ T5864] hdpvr 4-1:0.0: unexpected answer of status request, len -32 [ 277.327152][ T5864] hdpvr 4-1:0.0: device init failed [ 277.343282][ T5864] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 277.436587][ T5898] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 277.447323][ T8880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.933'. [ 277.505072][ T8882] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.932'. [ 277.616660][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.627694][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.638000][ T5898] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 277.647190][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.658202][ T5898] usb 2-1: config 0 descriptor?? [ 278.081350][ T5898] pyra 0003:1E7D:2CF6.0016: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 278.274325][ T30] audit: type=1400 audit(1768433122.522:329): avc: denied { create } for pid=8887 comm="syz.4.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 278.350151][ T5864] usb 4-1: USB disconnect, device number 23 [ 278.461338][ T5820] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 278.471654][ T5898] pyra 0003:1E7D:2CF6.0016: couldn't init struct pyra_device [ 278.495617][ T5898] pyra 0003:1E7D:2CF6.0016: couldn't install mouse [ 278.520502][ T5898] pyra 0003:1E7D:2CF6.0016: probe with driver pyra failed with error -71 [ 278.550731][ T5898] usb 2-1: USB disconnect, device number 13 [ 278.770217][ T8899] Invalid source name [ 278.804683][ T5864] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 278.968198][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.002344][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.037812][ T5864] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 279.063002][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.115621][ T5864] usb 4-1: config 0 descriptor?? [ 279.277806][ T8903] trusted_key: encrypted_key: insufficient parameters specified [ 279.655189][ T5864] pyra 0003:1E7D:2CF6.0017: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 279.838300][ T5864] pyra 0003:1E7D:2CF6.0017: couldn't init struct pyra_device [ 279.847214][ T5864] pyra 0003:1E7D:2CF6.0017: couldn't install mouse [ 279.859423][ T5864] pyra 0003:1E7D:2CF6.0017: probe with driver pyra failed with error -71 [ 279.955304][ T5864] usb 4-1: USB disconnect, device number 24 [ 280.448591][ T8923] netlink: 'syz.0.946': attribute type 10 has an invalid length. [ 280.599227][ T5820] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 280.815089][ T5864] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 280.985585][ T6560] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 281.190597][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 281.231492][ T5864] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 281.306246][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 281.328874][ T5864] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 281.350653][ T5864] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 281.372432][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.389392][ T6560] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.407965][ T6560] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.422882][ T6560] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 281.461016][ T6560] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.472834][ T5864] usb 4-1: config 0 descriptor?? [ 281.506249][ T6560] usb 5-1: config 0 descriptor?? [ 281.706285][ T5864] hdpvr 4-1:0.0: unexpected answer of status request, len -32 [ 281.754582][ T5864] hdpvr 4-1:0.0: device init failed [ 281.772625][ T5864] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 281.985259][ T6560] pyra 0003:1E7D:2CF6.0018: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 282.116736][ T8951] Invalid source name [ 282.342351][ T6560] pyra 0003:1E7D:2CF6.0018: couldn't init struct pyra_device [ 282.358288][ T6560] pyra 0003:1E7D:2CF6.0018: couldn't install mouse [ 282.369670][ T6560] pyra 0003:1E7D:2CF6.0018: probe with driver pyra failed with error -71 [ 282.392155][ T6560] usb 5-1: USB disconnect, device number 22 [ 282.747338][ T8953] trusted_key: encrypted_key: insufficient parameters specified [ 283.724209][ T6560] usb 4-1: USB disconnect, device number 25 [ 283.900134][ T8964] netlink: 'syz.1.958': attribute type 72 has an invalid length. [ 283.908543][ T5820] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 284.054844][ T8968] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 284.061385][ T8968] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 284.176640][ T8968] vhci_hcd vhci_hcd.0: Device attached [ 284.464728][ T6560] usb 34-1: SetAddress Request (14) to port 0 [ 284.481137][ T6560] usb 34-1: new SuperSpeed USB device number 14 using vhci_hcd [ 284.731519][ T8971] vhci_hcd: connection reset by peer [ 284.746049][ T3779] vhci_hcd vhci_hcd.0: stop threads [ 284.759066][ T3779] vhci_hcd vhci_hcd.0: release socket [ 284.776072][ T3779] vhci_hcd vhci_hcd.0: disconnect device [ 285.177097][ T8994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.965'. [ 285.514751][ T49] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 285.727471][ T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 285.786827][ T49] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 285.911957][ T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 285.955009][ T49] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 285.990842][ T49] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 286.840722][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.885416][ T49] usb 2-1: config 0 descriptor?? [ 287.109113][ T49] hdpvr 2-1:0.0: unexpected answer of status request, len 0 [ 287.128225][ T49] hdpvr 2-1:0.0: device init failed [ 287.147628][ T49] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 287.214771][ T5830] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 287.395977][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.407227][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.418198][ T5830] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 287.427444][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.440143][ T5830] usb 1-1: config 0 descriptor?? [ 287.866101][ T5830] pyra 0003:1E7D:2CF6.0019: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 287.925645][ T49] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 288.099218][ T49] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.123380][ T49] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.146914][ T49] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 288.164761][ T49] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 288.183681][ T49] usb 5-1: Manufacturer: syz [ 288.202152][ T49] usb 5-1: config 0 descriptor?? [ 288.287418][ T9012] IPv6: sit1: Disabled Multicast RS [ 288.321598][ T9012] sit1: entered allmulticast mode [ 288.370677][ T5864] usb 2-1: USB disconnect, device number 14 [ 288.462921][ T9032] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 288.469471][ T9032] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 288.478826][ T9032] vhci_hcd vhci_hcd.0: Device attached [ 288.490397][ T5830] pyra 0003:1E7D:2CF6.0019: couldn't init struct pyra_device [ 288.494904][ T5820] Bluetooth: hci2: unexpected subevent 0x0c length: 248 > 5 [ 288.512075][ T9035] vhci_hcd: connection closed [ 288.512213][ T3779] vhci_hcd vhci_hcd.1: stop threads [ 288.529002][ T3779] vhci_hcd vhci_hcd.1: release socket [ 288.534410][ T3779] vhci_hcd vhci_hcd.1: disconnect device [ 288.535508][ T5830] pyra 0003:1E7D:2CF6.0019: couldn't install mouse [ 288.566910][ T5830] pyra 0003:1E7D:2CF6.0019: probe with driver pyra failed with error -71 [ 288.601075][ T5830] usb 1-1: USB disconnect, device number 17 [ 288.634932][ T49] usbhid 5-1:0.0: can't add hid device: -71 [ 288.645453][ T49] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 288.659728][ T49] usb 5-1: USB disconnect, device number 23 [ 289.514912][ T9054] trusted_key: encrypted_key: insufficient parameters specified [ 289.534977][ T6560] usb 34-1: device descriptor read/8, error -110 [ 290.403731][ T9061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.988'. [ 290.524695][ T5871] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 290.625530][ T6560] usb usb34-port1: attempt power cycle [ 290.674675][ T5864] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 290.684582][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.684761][ T8503] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 290.705116][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.715310][ T5871] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 290.726057][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.741961][ T5871] usb 3-1: config 0 descriptor?? [ 290.826212][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.837600][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.850469][ T5864] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 290.860331][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.871441][ T5864] usb 5-1: config 0 descriptor?? [ 290.886631][ T8503] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 290.905603][ T8503] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 290.926721][ T8503] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 290.938655][ T8503] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 290.949306][ T8503] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 290.958615][ T8503] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.969770][ T8503] usb 4-1: config 0 descriptor?? [ 291.179121][ T5871] pyra 0003:1E7D:2CF6.001A: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 291.204823][ T8503] hdpvr 4-1:0.0: unexpected answer of status request, len 0 [ 291.212159][ T8503] hdpvr 4-1:0.0: device init failed [ 291.227603][ T6560] usb usb34-port1: unable to enumerate USB device [ 291.246725][ T8503] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 291.318330][ T5864] pyra 0003:1E7D:2CF6.001B: hidraw1: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 291.619756][ T5871] pyra 0003:1E7D:2CF6.001A: couldn't init struct pyra_device [ 291.643390][ T5871] pyra 0003:1E7D:2CF6.001A: couldn't install mouse [ 291.669317][ T5871] pyra 0003:1E7D:2CF6.001A: probe with driver pyra failed with error -71 [ 291.743876][ T5871] usb 3-1: USB disconnect, device number 13 [ 291.807697][ T5864] pyra 0003:1E7D:2CF6.001B: couldn't init struct pyra_device [ 291.820074][ T5864] pyra 0003:1E7D:2CF6.001B: couldn't install mouse [ 291.856648][ T5864] pyra 0003:1E7D:2CF6.001B: probe with driver pyra failed with error -71 [ 291.898444][ T5864] usb 5-1: USB disconnect, device number 24 [ 292.791281][ T9096] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 292.797824][ T9096] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 292.806145][ T9096] vhci_hcd vhci_hcd.0: Device attached [ 292.821771][ T9097] vhci_hcd: connection closed [ 292.823889][ T6114] vhci_hcd vhci_hcd.4: stop threads [ 292.839353][ T6114] vhci_hcd vhci_hcd.4: release socket [ 292.849286][ T6114] vhci_hcd vhci_hcd.4: disconnect device [ 293.981520][ T6560] usb 4-1: USB disconnect, device number 26 [ 294.194847][ T8503] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 294.382972][ T8503] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.405826][ T8503] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.853370][ T8503] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 294.882248][ T8503] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 294.896021][ T8503] usb 1-1: Manufacturer: syz [ 294.911883][ T8503] usb 1-1: config 0 descriptor?? [ 295.363297][ T9130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1005'. [ 296.159438][ T8503] uclogic 0003:256C:006D.001C: v1 frame probing failed: -71 [ 296.211069][ T8503] uclogic 0003:256C:006D.001C: failed probing parameters: -71 [ 296.256315][ T8503] uclogic 0003:256C:006D.001C: probe with driver uclogic failed with error -71 [ 296.316677][ T8503] usb 1-1: USB disconnect, device number 18 [ 408.984667][ C1] ------------[ cut here ]------------ [ 408.990730][ C1] WARNING: kernel/rcu/tree_stall.h:1049 at rcu_check_gp_start_stall.part.0+0x1c4/0x4b0, CPU#1: vhost-9148/9161 [ 409.002440][ C1] Modules linked in: [ 409.006626][ C1] CPU: 1 UID: 0 PID: 9161 Comm: vhost-9148 Not tainted syzkaller #0 PREEMPT(full) [ 409.015885][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 409.025928][ C1] RIP: 0010:rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 409.032858][ C1] Code: 88 61 01 00 00 be 04 00 00 00 48 c7 c7 c0 62 c2 9a e8 30 3d 85 00 b8 01 00 00 00 87 05 d5 c3 1e 19 85 c0 0f 85 3d 01 00 00 90 <0f> 0b 90 48 c7 c3 74 ee 88 90 48 81 fd 80 46 3d 8e 74 5a 48 b8 00 [ 409.052450][ C1] RSP: 0018:ffffc90000a08df0 EFLAGS: 00010046 [ 409.058494][ C1] RAX: 0000000000000000 RBX: 0000000000002904 RCX: ffffffff81a39ee0 [ 409.066449][ C1] RDX: fffffbfff3584c58 RSI: 0000000000000004 RDI: ffffffff9ac262c0 [ 409.074407][ C1] RBP: ffffffff8e3d4680 R08: 0000000000000001 R09: fffffbfff3584c58 [ 409.082348][ C1] R10: 0000000000000003 R11: ffff88802c310b30 R12: 1ffffffff1c02250 [ 409.090292][ C1] R13: 0000000000000246 R14: ffffffff8e3d4680 R15: ffff8880b853bc52 [ 409.098239][ C1] FS: 00007f908e6b76c0(0000) GS:ffff8881249f4000(0000) knlGS:0000000000000000 [ 409.107141][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 409.113700][ C1] CR2: 0000000000000002 CR3: 0000000059476000 CR4: 00000000003526f0 [ 409.121657][ C1] Call Trace: [ 409.124929][ C1] [ 409.127748][ C1] rcu_core+0x4cf/0x15f0 [ 409.131979][ C1] ? sched_clock+0x38/0x60 [ 409.136367][ C1] ? sched_clock_cpu+0x6c/0x530 [ 409.141190][ C1] ? clockevents_program_event+0x151/0x370 [ 409.146983][ C1] ? __pfx_rcu_core+0x10/0x10 [ 409.151639][ C1] ? read_tsc+0x9/0x20 [ 409.155682][ C1] ? ktime_get+0x1a7/0x310 [ 409.160070][ C1] ? find_held_lock+0x2b/0x80 [ 409.164737][ C1] ? mark_held_locks+0x49/0x80 [ 409.169483][ C1] handle_softirqs+0x219/0x950 [ 409.174225][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 409.179484][ C1] __irq_exit_rcu+0x109/0x170 [ 409.184149][ C1] irq_exit_rcu+0x9/0x30 [ 409.188365][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 409.193976][ C1] [ 409.196879][ C1] [ 409.199786][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 409.205738][ C1] RIP: 0010:gup_fast_fallback+0xdde/0x2350 [ 409.211517][ C1] Code: ff 48 85 db 0f 85 e9 12 00 00 e8 2d 11 b4 ff 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 eb 0b b4 ff 48 85 db 0f 85 b4 13 00 00 0d 11 b4 ff 44 8b b4 24 cc 00 00 00 31 ff 48 63 5c 24 68 44 89 [ 409.231193][ C1] RSP: 0018:ffffc90003577860 EFLAGS: 00000287 [ 409.237233][ C1] RAX: 000000000000003c RBX: 0000000000000000 RCX: ffffc9001a493000 [ 409.245177][ C1] RDX: 0000000000100000 RSI: ffffffff820afdb1 RDI: 0000000000000007 [ 409.253129][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 409.261085][ C1] R10: 0000000000000000 R11: ffff88802c310b30 R12: 0000000000000000 [ 409.269027][ C1] R13: 0000000000000fff R14: dffffc0000000000 R15: 0000000000000000 [ 409.276985][ C1] ? gup_fast_fallback+0x20d1/0x2350 [ 409.282257][ C1] ? __pfx_gup_fast_fallback+0x10/0x10 [ 409.287690][ C1] ? lock_acquire+0x179/0x330 [ 409.292342][ C1] pin_user_pages_fast+0xa7/0xf0 [ 409.297262][ C1] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 409.302868][ C1] ? __mutex_lock+0x27b/0x1ca0 [ 409.307616][ C1] ? find_held_lock+0x2b/0x80 [ 409.312267][ C1] log_write+0x267/0x320 [ 409.316486][ C1] ? __pfx_log_write+0x10/0x10 [ 409.321223][ C1] ? __mutex_unlock_slowpath+0x161/0x790 [ 409.326829][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 409.332609][ C1] log_used.isra.0+0x170/0x1e0 [ 409.337345][ C1] vhost_update_used_flags+0x2ff/0x3d0 [ 409.342776][ C1] vhost_disable_notify+0xba/0x1b0 [ 409.347866][ C1] vhost_vsock_handle_tx_kick+0x18e/0xdb0 [ 409.353573][ C1] ? __pfx_vhost_vsock_handle_tx_kick+0x10/0x10 [ 409.359803][ C1] ? find_held_lock+0x2b/0x80 [ 409.364466][ C1] ? find_held_lock+0x2b/0x80 [ 409.369135][ C1] ? rcu_is_watching+0x12/0xc0 [ 409.373872][ C1] ? kcov_remote_start+0x399/0x680 [ 409.378953][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 409.384132][ C1] vhost_run_work_list+0x18b/0x230 [ 409.389232][ C1] vhost_task_fn+0x165/0x460 [ 409.393812][ C1] ? __pfx_vhost_task_fn+0x10/0x10 [ 409.398895][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 409.403891][ C1] ? find_held_lock+0x2b/0x80 [ 409.408542][ C1] ? rcu_is_watching+0x12/0xc0 [ 409.413286][ C1] ? __pfx_vhost_task_fn+0x10/0x10 [ 409.418375][ C1] ret_from_fork+0x983/0xb10 [ 409.422940][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 409.428023][ C1] ? __switch_to+0x7af/0x10d0 [ 409.432674][ C1] ? __pfx_vhost_task_fn+0x10/0x10 [ 409.437759][ C1] ret_from_fork_asm+0x1a/0x30 [ 409.442512][ C1] [ 409.445505][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 409.452757][ C1] CPU: 1 UID: 0 PID: 9161 Comm: vhost-9148 Not tainted syzkaller #0 PREEMPT(full) [ 409.462016][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 409.472050][ C1] Call Trace: [ 409.475302][ C1] [ 409.478132][ C1] dump_stack_lvl+0x3d/0x1f0 [ 409.482708][ C1] vpanic+0x640/0x6f0 [ 409.486663][ C1] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 409.492964][ C1] panic+0xca/0xd0 [ 409.496655][ C1] ? __pfx_panic+0x10/0x10 [ 409.501043][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 409.506137][ C1] check_panic_on_warn+0xab/0xb0 [ 409.511055][ C1] __warn+0x108/0x3c0 [ 409.515008][ C1] __report_bug+0x2a0/0x520 [ 409.519481][ C1] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 409.525788][ C1] ? __pfx___report_bug+0x10/0x10 [ 409.530783][ C1] ? __pfx_run_posix_cpu_timers+0x10/0x10 [ 409.536745][ C1] ? __lock_acquire+0x436/0x2890 [ 409.541655][ C1] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 409.547957][ C1] report_bug+0xb2/0x220 [ 409.552172][ C1] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 409.558472][ C1] handle_bug+0x127/0x260 [ 409.562792][ C1] exc_invalid_op+0x17/0x50 [ 409.567271][ C1] asm_exc_invalid_op+0x1a/0x20 [ 409.572090][ C1] RIP: 0010:rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 409.578996][ C1] Code: 88 61 01 00 00 be 04 00 00 00 48 c7 c7 c0 62 c2 9a e8 30 3d 85 00 b8 01 00 00 00 87 05 d5 c3 1e 19 85 c0 0f 85 3d 01 00 00 90 <0f> 0b 90 48 c7 c3 74 ee 88 90 48 81 fd 80 46 3d 8e 74 5a 48 b8 00 [ 409.598580][ C1] RSP: 0018:ffffc90000a08df0 EFLAGS: 00010046 [ 409.604631][ C1] RAX: 0000000000000000 RBX: 0000000000002904 RCX: ffffffff81a39ee0 [ 409.612574][ C1] RDX: fffffbfff3584c58 RSI: 0000000000000004 RDI: ffffffff9ac262c0 [ 409.620515][ C1] RBP: ffffffff8e3d4680 R08: 0000000000000001 R09: fffffbfff3584c58 [ 409.628460][ C1] R10: 0000000000000003 R11: ffff88802c310b30 R12: 1ffffffff1c02250 [ 409.636416][ C1] R13: 0000000000000246 R14: ffffffff8e3d4680 R15: ffff8880b853bc52 [ 409.644364][ C1] ? rcu_check_gp_start_stall.part.0+0x1b0/0x4b0 [ 409.650667][ C1] rcu_core+0x4cf/0x15f0 [ 409.654897][ C1] ? sched_clock+0x38/0x60 [ 409.659283][ C1] ? sched_clock_cpu+0x6c/0x530 [ 409.664103][ C1] ? clockevents_program_event+0x151/0x370 [ 409.669883][ C1] ? __pfx_rcu_core+0x10/0x10 [ 409.674533][ C1] ? read_tsc+0x9/0x20 [ 409.678582][ C1] ? ktime_get+0x1a7/0x310 [ 409.682978][ C1] ? find_held_lock+0x2b/0x80 [ 409.687632][ C1] ? mark_held_locks+0x49/0x80 [ 409.692369][ C1] handle_softirqs+0x219/0x950 [ 409.697112][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 409.702374][ C1] __irq_exit_rcu+0x109/0x170 [ 409.707026][ C1] irq_exit_rcu+0x9/0x30 [ 409.711241][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 409.716848][ C1] [ 409.719766][ C1] [ 409.722670][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 409.728622][ C1] RIP: 0010:gup_fast_fallback+0xdde/0x2350 [ 409.734403][ C1] Code: ff 48 85 db 0f 85 e9 12 00 00 e8 2d 11 b4 ff 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 eb 0b b4 ff 48 85 db 0f 85 b4 13 00 00 0d 11 b4 ff 44 8b b4 24 cc 00 00 00 31 ff 48 63 5c 24 68 44 89 [ 409.753995][ C1] RSP: 0018:ffffc90003577860 EFLAGS: 00000287 [ 409.760133][ C1] RAX: 000000000000003c RBX: 0000000000000000 RCX: ffffc9001a493000 [ 409.768091][ C1] RDX: 0000000000100000 RSI: ffffffff820afdb1 RDI: 0000000000000007 [ 409.776035][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 409.783984][ C1] R10: 0000000000000000 R11: ffff88802c310b30 R12: 0000000000000000 [ 409.791922][ C1] R13: 0000000000000fff R14: dffffc0000000000 R15: 0000000000000000 [ 409.799870][ C1] ? gup_fast_fallback+0x20d1/0x2350 [ 409.805147][ C1] ? __pfx_gup_fast_fallback+0x10/0x10 [ 409.810580][ C1] ? lock_acquire+0x179/0x330 [ 409.815231][ C1] pin_user_pages_fast+0xa7/0xf0 [ 409.820141][ C1] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 409.825754][ C1] ? __mutex_lock+0x27b/0x1ca0 [ 409.830493][ C1] ? find_held_lock+0x2b/0x80 [ 409.835146][ C1] log_write+0x267/0x320 [ 409.839363][ C1] ? __pfx_log_write+0x10/0x10 [ 409.844100][ C1] ? __mutex_unlock_slowpath+0x161/0x790 [ 409.849706][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 409.855497][ C1] log_used.isra.0+0x170/0x1e0 [ 409.860230][ C1] vhost_update_used_flags+0x2ff/0x3d0 [ 409.865661][ C1] vhost_disable_notify+0xba/0x1b0 [ 409.870742][ C1] vhost_vsock_handle_tx_kick+0x18e/0xdb0 [ 409.876436][ C1] ? __pfx_vhost_vsock_handle_tx_kick+0x10/0x10 [ 409.882646][ C1] ? find_held_lock+0x2b/0x80 [ 409.887298][ C1] ? find_held_lock+0x2b/0x80 [ 409.891952][ C1] ? rcu_is_watching+0x12/0xc0 [ 409.896683][ C1] ? kcov_remote_start+0x399/0x680 [ 409.901765][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 409.906937][ C1] vhost_run_work_list+0x18b/0x230 [ 409.912029][ C1] vhost_task_fn+0x165/0x460 [ 409.916592][ C1] ? __pfx_vhost_task_fn+0x10/0x10 [ 409.921677][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 409.926684][ C1] ? find_held_lock+0x2b/0x80 [ 409.931339][ C1] ? rcu_is_watching+0x12/0xc0 [ 409.936337][ C1] ? __pfx_vhost_task_fn+0x10/0x10 [ 409.941421][ C1] ret_from_fork+0x983/0xb10 [ 409.945982][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 409.951076][ C1] ? __switch_to+0x7af/0x10d0 [ 409.955737][ C1] ? __pfx_vhost_task_fn+0x10/0x10 [ 409.960820][ C1] ret_from_fork_asm+0x1a/0x30 [ 409.965572][ C1] [ 409.968839][ C1] Kernel Offset: disabled [ 409.973135][ C1] Rebooting in 86400 seconds..