last executing test programs: 16.096314244s ago: executing program 0 (id=4751): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) epoll_create1(0x80000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000100)={0x3, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000d40)=@multiplanar_fd={0xfffffffc, 0x0, 0x4, 0x400, 0x0, {0x0, 0x2710}, {0x3, 0x1, 0xff, 0x9, 0xc, 0x3, "b87568bb"}, 0x1, 0x4, {0x0}, 0x5, 0x0, r5}) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2) r7 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x18\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ftruncate(r7, 0x10000) fcntl$addseals(r7, 0x409, 0x7) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r7, 0x0, 0x0, 0x8000}) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@caif=@rfm={0x25, 0xa, "fd46e5e1ec7239e39d3df2b007385955"}, 0x80, &(0x7f0000000100)=[{&(0x7f0000001680)="b0268126d41b373b5c71fafce38297925b17219ba9f46f0fb10d673c3ed470010259cb1e51b8d6209b6c89e0ea156d4a9f6c8438e8375e641c64535f549e455bbee7b33ce61214a288c01aa0d7e36e46d46f71af618ccece107d5d31ab82561e80a37b72392d0b13242f1cead0bb35841da500822bc5bf3cb0801f2e4a7f06df93823f91c7fbf16479767c25da35d4f700ab5892daf7fe6f554b0093164c882c4cea0c140e982ec61c69284cc278a93f9c4d9fff23271a61a965e1d0a632d8de8e5cac01ff94cf9b84e697b249fa6f7925a48174c39d0000", 0xd8}, {&(0x7f0000001780)="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", 0x10fe}], 0x2, &(0x7f00000003c0)=[{0x80, 0x11, 0x59, "5c053daade3becee6bdb5366435a3b8fe448e0f010aaad4cad9b83faea1ff15f4f7a37939df54df128104caebfd2ddb4f9a5520673e29834c9762c422143775a038b120de84dceeba479943c1cb3e3080c4d6b80ddae24ac0c4b47cfe363b10bbda0e9e00cf70ce93b20"}], 0x80}}], 0x2, 0x40) 15.034455227s ago: executing program 0 (id=4752): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=@getlink={0x24, 0x12, 0x18efde40b3708357, 0x0, 0x0, {}, [@IFLA_PHYS_SWITCH_ID={0x4}]}, 0x24}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0x8, 0x20000000, 0x1ff, 0x8}, 0x41}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$alg(0x26, 0x5, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newtaction={0xb4, 0x30, 0x1, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0x5, 0x5, 0x1, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffa}, @local, @multicast2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, 0x0) sendmmsg(r7, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r8 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, 0x0) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r9, 0x0, 0x0) 13.684134937s ago: executing program 1 (id=4757): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x323, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xfd, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000140)={0x40, 0x23, 0x6, {0x6, 0x6, "417680d9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) socket$kcm(0x10, 0x2, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)={0x0, 0x11, 0x5, {0x5, 0xe, "2ff465"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x2, 0x100, {0x0}, {0xee01}, 0x9, 0x2}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x1000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd700000000000490000000800010070636900110002003030"], 0x60}}, 0x24004000) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 13.600073615s ago: executing program 0 (id=4759): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)={0x0, 0x22, 0x1f, {0x1f, 0x23, "3744071d59018039a00d152e6c6fc3453655d1e95057fced7c062267ed"}}, &(0x7f0000000080)={0x0, 0x3, 0xdb, @string={0xdb, 0x3, "46b1015dda1fceba052bb188aca88c76ee8ce6f08d93365d75124b0ca3c7dcbfa55d977cdeab6df801d9c2c646c7f684e5fcb30f0907a0970a85d87bb6f7d87e666c1e94173ed501675dc45f7a0278f76f84eb9519d50fd744853b94c4120a75089b154cc3a03847c42b18293b1205465f1501fd5921885b2f1adb5c852c175dc695a4aa57325f389428892b8b78ef9a8a64bd0b9a3ba6d83ca0ff69e96345eccc29f226b54ff4895a7899475e627a4a4237be2cd88f94cf106a363ec62fe2c9a6594df31cb8e7f5539d236ef76731b141b25cb83490c61adc"}}, &(0x7f0000000200)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x4, 0x5, "88c8c4f2", "86a23238"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x2, 0x8, 0x8, 0x1, 0x10, 0x173}}}, &(0x7f0000000a40)={0x84, &(0x7f00000003c0)={0x40, 0x14, 0x5d, "203ae2c14b45441f46e0ccc996534650f2b30729558e1146d97010f899ba175e32b83f2fe44bb9cb4d36dfab89346e3623bcf042e1d1b2a58e816036e6f3f3259b28327e622ebf416ad69c3532485a5f86f301a64d7ecad5cf62d46d29"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x1000, 0x1}}, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000740)={0x40, 0xb, 0x2, "95c9"}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0x6}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000800)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000840)={0x40, 0x19, 0x2, 'QW'}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0xb82}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0x38}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0x9}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x23, @string={0x23, 0x3, "d3c608554b3afc174f150da73d9210aea50e7309a45b35065206bb2473d58e623c"}}, 0x0, 0x0, 0x0}, &(0x7f0000000980)={0x84, &(0x7f00000004c0)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.824442794s ago: executing program 1 (id=4768): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x181c06, 0x8, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) ioctl$FBIOPUTCMAP(r3, 0x4605, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000100)=[0x9, 0xc, 0xea, 0x0], &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x10000009, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = syz_usb_connect$cdc_ecm(0x6, 0x73, &(0x7f0000000380)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x1, 0x1, 0x9, 0x10, 0x9, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x56, {{0x9, 0x24, 0x6, 0x0, 0x0, "2ef53e54"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0xe4cb, 0x4, 0x7f}, [@network_terminal={0x7, 0x24, 0xa, 0x96, 0x4, 0x4, 0x5}, @country_functional={0x12, 0x24, 0x7, 0xc, 0x8, [0x1, 0x5, 0x8, 0x6, 0x7, 0x59e]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0xeb, 0x6, 0x80}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x1, 0x5, 0x2b}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xa1, 0x8, 0x5}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x7f, 0x4c, 0x6, 0x10, 0xd}, 0x15, &(0x7f0000000180)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0xf9, 0x1, 0x6, 0xff00, 0x7fff, [0x30]}]}, 0x3, [{0x17, &(0x7f0000000300)=@string={0x17, 0x3, "c5b922fc40d7dde744aafc89c737c3806096fcecc9"}}, {0xcb, &(0x7f0000000400)=@string={0xcb, 0x3, "5b1a279be559170f76662ed5b8ec002f6d7da85b711cf073446aeb61c967d1c5cc9d5e9681a6774ea84a1eca2681a37bfee413acd1ae49a8f0d69b94eca65c1d1b04d77a51f96a99578f8ce172491bc0811a3fc33b9c9c551c9d6174a0d7e2c418d547d122292a9aa24b0a47cce672622f971f2a376f6c4a83a79af862b80bdd6d855c732c6ee36caa5784b81068bd3d8f2ed73a6f6f2867d22e8e46d8dac31adfb89dce1a8518e303cd7d0456f422d25a8bcc5a634d4cf9d2cb3b50390f1a1268044e26f02fa88e13"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x404}}]}) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000700)={0x14, &(0x7f0000000580)={0x20, 0x28, 0xf0, {0xf0, 0xa, "4a530a62924f2923e94131d2fe31752ef96a4297e11f4266f6cff99101119243e6b9bfed60c01af3e405c4d225dabc2e3bac1a7b84fa37dab4846156a0f724d81a1fa1a363acba860b3d19dbd7763bac2873a35743da27493da621d977fd67e37fbdc2bef238117f43fc168d8a6165710cbd4549b6bf6f7f0da858b8003c565792d0c2662a6dab1889bb8a12fdc1946357f5a969de82c616b516b58edc8b59e104eb405b5694df9afb83b412a48787d2106389c67a80d0b001bc0e8198ce3e52023630d424b50add96554dc4bcba769a1e71b45256525a457e0c4fbd6bee2a83e5160f92b4cde1dfcf6d497dd7c3"}}, &(0x7f00000006c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000900)={0x1c, &(0x7f0000000800)={0x20, 0x15, 0xbd, "b07de1ae58c9210c43a519928d32c4683b3e2515b707fc4c67ab09b7820fd4f1c204138a0904fc140858ee6ccc1ceef5ff0d8aeaf2542b83a946b45d2da7d6945cf15e8c1586c1b0c409bd514d92c8bd28c8a2f44e4e5df91c705ac1fb9403d2fdd3b6138910b84e54cda15f0cbe07b8d664c655d4043c1dd91ad4f6d95b0c8df4b8361d5e0decb3c75e1be09bfe1c9c23eb9e20be63968f0389042cbe0109335d1b8cbae4fa70a74ef22f98c4febfa6647720458761095b602e0e3094"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x2}}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000940), 0x40801, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, &(0x7f00000007c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10.580720122s ago: executing program 3 (id=4769): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = semget$private(0x0, 0x20000000102, 0x9) semctl$SETALL(r1, 0x0, 0x11, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) syz_usb_connect(0x5, 0x27, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000240)={&(0x7f00000001c0)=[{0xf, 0x5200, 0x0, &(0x7f0000000280)}, {0x0, 0x10f5, 0x0, 0x0}], 0x2}) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@newlink={0x58, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34092}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}}, 0x804) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23d, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x4, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x960, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x3, 0x1010001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9388, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_SET_RELBIT(r7, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r7, 0x5501) ioctl$UI_DEV_DESTROY(r7, 0x5502) 10.52279832s ago: executing program 0 (id=4770): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = semget$private(0x0, 0x20000000102, 0x9) semctl$SETALL(r1, 0x0, 0x11, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) syz_usb_connect(0x5, 0x27, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000240)={&(0x7f00000001c0)=[{0xf, 0x5200, 0x0, &(0x7f0000000280)}, {0x0, 0x10f5, 0x0, 0x0}], 0x2}) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@newlink={0x58, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34092}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}}, 0x804) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23d, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x4, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x960, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x3, 0x1010001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9388, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_SET_RELBIT(r7, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r7, 0x5501) ioctl$UI_DEV_DESTROY(r7, 0x5502) 10.138883879s ago: executing program 4 (id=4773): r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x109042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="a0000000190001000000fe0000010000000084001200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001ef4242eca3a2a71000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060eb02558a343e09d8f5ff722d87233d85bbac233da95f75129174f12a89128e834bc3ebae64d39fa2695405fa00"/205], 0xa0}}, 0x0) write$P9_RSTATu(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) sendmmsg(r5, &(0x7f0000006a80)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000280)="f0", 0x1}], 0x1}}], 0x1, 0x4000005) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) 9.201767868s ago: executing program 4 (id=4774): socket(0x1d, 0x2, 0x6) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 8.935759867s ago: executing program 4 (id=4775): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000001900), 0xffffffffffffffff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24004800, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000200), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000400)={0x1003, 0x22}) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x178, 0x8, 0xfa04, 0x178, 0x6c02, 0x278, 0x194, 0x194, 0x278, 0x194, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x0, 0x74020000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x39d, 0x3, 0xfff, 'netbios-ns\x00', {0x2}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x2c}, 0x0, 0xffffff00, 'macvlan1\x00', 'sit0\x00', {}, {}, 0x0, 0x0, 0x24}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xef, 0xa, {0x9}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) r7 = bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={r6, 0xffffffffffffffff, 0x10, 0x0, @val=@iter={&(0x7f0000001a40)=@cgroup={0x0, r2}, 0x10}}, 0x20) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) syz_usb_connect(0x0, 0x52, &(0x7f0000000040)=ANY=[@ANYBLOB="120100002598f110210494008e280102030109024000010000000009046d00000202ff400524060000052400b77f0d240f0104000000020008000905240600000524"], 0x0) sendmsg$FOU_CMD_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYRES16=r8, @ANYBLOB="010725bd7000fcdbdfb303003f316e527b3320eaafaf14594c5880a94509e5e92a67b19a8d396b5bdfbaa49b"], 0x14}, 0x1, 0x0, 0x0, 0x20045091}, 0x24048880) write(r7, &(0x7f0000000200)="240000001e005f80004000000000000003000000000000000000080008000100000000ff", 0x24) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) mprotect(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0xb) sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYBLOB="1e000000", @ANYRES16=r9, @ANYBLOB="49fdb159f9f24f78d465531453dfea566c25231a5792cefbeb64951e1d644e6a4a84628c4a6117ddc9642480500eea902a8569d3bb1dd55f200a7a1d5c33a51b27b9f223", @ANYRES32=0x0], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x0) 8.03549329s ago: executing program 3 (id=4777): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000001cc0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x0, 0x0, 0x4}, {0x6, 0x24, 0x1a, 0x0, 0x33}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x1b, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x0, 0xab}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x40, 0x7}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f00000006c0)={0x40, 0x18, 0x19, "c1c7115cf3096ebb7d2cdd8d7f10d01395792e622d489983a3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000005c0)={0x14, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vti={{0x8}, {0x24, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0x1}, @IFLA_VTI_OKEY={0x8, 0x3, 0xfffffffc}, @IFLA_VTI_IKEY={0x8}], @IFLA_VTI_LOCAL={0x3, 0x4, @loopback}]}}}]}, 0x50}}, 0x4044004) 7.168127383s ago: executing program 1 (id=4779): r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x109042, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="a0000000190001000000fe0000010000000084001200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001ef4242eca3a2a71000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060eb02558a343e09d8f5ff722d87233d85bbac233da95f75129174f12a89128e834bc3ebae64d39fa2695405fa00"/205], 0xa0}}, 0x0) syz_open_dev$loop(&(0x7f00000000c0), 0x7, 0x40) write$P9_RSTATu(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) sendmmsg(r5, &(0x7f0000006a80)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000280)="f0", 0x1}], 0x1}}], 0x1, 0x4000005) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) 7.058128462s ago: executing program 0 (id=4780): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x74}}, 0xd0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) fsopen(&(0x7f0000000000)='vfat\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x38}}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4c884}, 0x4080) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x25, &(0x7f0000000340)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) bind$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000000040)={0x2, 0x2000, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) 6.138500371s ago: executing program 1 (id=4781): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioperm(0x7, 0x81, 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r2, 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) syz_open_dev$sg(0x0, 0x0, 0x8002) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc000) truncate(&(0x7f0000000040)='./file0\x00', 0x1000000) close_range(r0, 0xffffffffffffffff, 0x0) 5.677811821s ago: executing program 1 (id=4783): bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) socket(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000300)={0x1d, r4, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_usb_connect(0x3, 0x24, 0x0, 0x0) bpf$PROG_LOAD(0x4, &(0x7f00000009c0)={0xa, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000100ffff0000000000000000850000007b0000009500000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4046800}, 0x800) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 5.629056049s ago: executing program 0 (id=4784): bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) socket(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000300)={0x1d, r4, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_usb_connect(0x3, 0x24, 0x0, 0x0) bpf$PROG_LOAD(0x4, &(0x7f00000009c0)={0xa, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000100ffff0000000000000000850000007b0000009500"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4046800}, 0x800) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 5.180743548s ago: executing program 2 (id=4785): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000001500)={0x28, 0x4000, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000000)=0x3, 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$hidraw(&(0x7f0000000000), 0x5, 0x6ca080) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socket(0x2c, 0x3, 0x3c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000380)=[{&(0x7f0000001c40)=""/4096, 0x1000}], 0x1, &(0x7f0000000480)}, 0x6}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfb9, 0x1}, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) r4 = syz_open_dev$dmmidi(&(0x7f0000000040), 0x2, 0x88001) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r4, 0x40045702, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0) bind$inet(r3, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000001bc0)={0x2, 0x4e23, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x1}]}, 0x10) sendto(r3, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e3b32905b0d26e9ff34b83f38a2ae8b1c6748ef8b87ef2a359249c3e294931489ba57f83f96048684434854ab3b6ad59f45e832972639508fe4dcb371c013bc129572e996a7db94fae8d71a076ec54a28a926e37c7a678a5e16c121f27527bf75fb49d31d41a5", 0xc5, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0) 5.096118714s ago: executing program 4 (id=4786): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000010ac0544020000000000010902240001000000000904000000030002"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) sched_getscheduler(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00'}, 0xe) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1c8, 0x12) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)}], 0x3}], 0x1, 0x40800) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000100)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x40, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x40000, 0x0, 0x0, 0x0, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7762, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r7, 0x5501) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) 4.220210201s ago: executing program 2 (id=4787): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}]}, 0x1c}}, 0x40) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x5}, 0x18) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r6, 0x40044590, 0x0) close(r6) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, 0x0) r7 = io_uring_setup(0x2f00, &(0x7f0000000700)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, 0x0, 0x0) r8 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x653f, 0x0, 0x0, 0x28e, 0x0, r7}) io_uring_register$IORING_REGISTER_FILES(r8, 0x1e, &(0x7f0000000000)=[r7], 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) 3.440661497s ago: executing program 3 (id=4788): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x4, {0x0, 0x1}, {0x36, 0x2}, @cond=[{0x8, 0x4, 0x101, 0xe, 0x2, 0x10}, {0x200, 0x7ff, 0x0, 0xe57, 0x2, 0x8001}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 3.260083264s ago: executing program 2 (id=4789): socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0xa2) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x18, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x26008890) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "bc4a06", 0x44, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x14}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x3, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) 3.167982297s ago: executing program 3 (id=4790): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x400000000000000}}, 0x1c) 2.379516863s ago: executing program 2 (id=4791): r0 = msgget$private(0x0, 0x6c2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$kcm(0x29, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)={0x24, 0x36, 0x107, 0x3, 0x2000000, {0x1, 0x7c}, [@nested={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0x8, 0x0, 0x0, @u64=0x1000}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) msgsnd(r0, &(0x7f0000000340)={0x3}, 0x2000, 0x8cff) lseek(0xffffffffffffffff, 0x7, 0x2) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085000000854eb1"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000000), 0x15e, 0x800) ioctl$HIDIOCGFEATURE(r3, 0xc0404807, &(0x7f0000000440)={0x80, "99b0f587ab891d4092ef24dcb9337f0a67af99fccd6a9e5ade883d0c3391775d4ad24cb974ebd6ea244be4ecfe61be00d3224e60057300adc5d2566a6c892345"}) 2.167763682s ago: executing program 3 (id=4792): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) epoll_create1(0x80000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000100)={0x3, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000d40)=@multiplanar_fd={0xfffffffc, 0x0, 0x4, 0x400, 0x0, {0x0, 0x2710}, {0x3, 0x1, 0xff, 0x9, 0xc, 0x3, "b87568bb"}, 0x1, 0x4, {0x0}, 0x5, 0x0, r5}) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2) r7 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x18\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ftruncate(r7, 0x10000) fcntl$addseals(r7, 0x409, 0x7) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r7, 0x0, 0x0, 0x8000}) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@caif=@rfm={0x25, 0xa, "fd46e5e1ec7239e39d3df2b007385955"}, 0x80, &(0x7f0000000100)=[{&(0x7f0000001680)="b0268126d41b373b5c71fafce38297925b17219ba9f46f0fb10d673c3ed470010259cb1e51b8d6209b6c89e0ea156d4a9f6c8438e8375e641c64535f549e455bbee7b33ce61214a288c01aa0d7e36e46d46f71af618ccece107d5d31ab82561e80a37b72392d0b13242f1cead0bb35841da500822bc5bf3cb0801f2e4a7f06df93823f91c7fbf16479767c25da35d4f700ab5892daf7fe6f554b0093164c882c4cea0c140e982ec61c69284cc278a93f9c4d9fff23271a61a965e1d0a632d8de8e5cac01ff94cf9b84e697b249fa6f7925a48174c39d0000", 0xd8}, {&(0x7f0000001780)="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", 0x10fe}], 0x2, &(0x7f00000003c0)=[{0x80, 0x11, 0x59, "5c053daade3becee6bdb5366435a3b8fe448e0f010aaad4cad9b83faea1ff15f4f7a37939df54df128104caebfd2ddb4f9a5520673e29834c9762c422143775a038b120de84dceeba479943c1cb3e3080c4d6b80ddae24ac0c4b47cfe363b10bbda0e9e00cf70ce93b20"}], 0x80}}], 0x2, 0x40) 1.564763159s ago: executing program 4 (id=4793): syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x1a3c65) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$loop(0x0, 0x7, 0x40) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_wake_idle_without_ipi\x00', r7}, 0x18) gettid() write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{0x6, 0x0, [0x2, 0x1091, 0x6, 0x3, 0x2, 0x5, 0x8, 0x4, 0x6, 0x3, 0x100, 0x9, 0x7, 0x10000, 0x800, 0xffffffff]}, {0x6, 0x0, [0x7ff, 0x0, 0x8, 0x5, 0x1, 0x1000, 0x198, 0x7, 0x7, 0x3, 0xe04, 0x9, 0xb6, 0x7, 0x5, 0x2]}], r8, 0x1, 0x1, 0x90}}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 1.213488261s ago: executing program 2 (id=4794): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) pwritev2(r3, &(0x7f00000013c0)=[{0x0}], 0x1, 0xa, 0xb, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0x8000, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) futex(0x0, 0x4, 0x2, 0x0, 0x0, 0x1) sendto$packet(r4, &(0x7f0000000180)="0b03", 0x2, 0x4005, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) 1.211212946s ago: executing program 3 (id=4795): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = syz_usb_connect(0x1, 0x2d, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000280)=0x40000) syz_emit_ethernet(0x6e, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x1, 0x0) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000040)={0x0, 0x4000000, 0x1, 0xc, 0x200, &(0x7f0000001500)="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"}) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() socket$inet_icmp(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000300)={@rand_addr=' \x01\x00', @remote, @remote, 0x1ff, 0x0, 0x0, 0x500, 0x0, 0x80040306}) socket$can_j1939(0x1d, 0x2, 0x7) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019300)=""/102390, 0x18ff6) socket(0x6, 0x2, 0x0) 1.016077232s ago: executing program 2 (id=4796): r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x109042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) syz_open_dev$loop(&(0x7f00000000c0), 0x7, 0x40) write$P9_RSTATu(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) sendmmsg(r5, &(0x7f0000006a80)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000280)="f0", 0x1}], 0x1}}], 0x1, 0x4000005) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) 201.513706ms ago: executing program 4 (id=4797): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, 0x0, 0x2d, 0x0, 0x30, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000380)}], 0x1}}], 0x1, 0x8d1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000014c0)=ANY=[@ANYBLOB="50010000", @ANYRES16=r2, @ANYBLOB="010000000000fcdbdf250100000008000100000000000400048008000c8004000b800800020001000000200108801c0007800800050000000000080005"], 0x150}}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETS(r4, 0x545c, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x2, r6}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x1) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f00009ae000/0x1000)=nil, 0x1000, &(0x7f0000000240)='/dev/qrtr-tun\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}}, 0x24) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=4798): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) r1 = socket$qrtr(0x2a, 0x2, 0x0) r2 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f00000000c0)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0xf5, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) truncate(&(0x7f0000000240)='./file0\x00', 0x7) read$FUSE(r7, &(0x7f0000001280)={0x2020, 0x0, 0x0}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x7, 0x8, 0xfffffffd, 0x2020, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x3}, 0x50) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r9, 0x0, 0x0) write$FUSE_INIT(r7, &(0x7f0000001200)={0x50, 0x0, r8, {0x7, 0x2b, 0x3, 0x200c0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) read$FUSE(r7, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r7, &(0x7f0000000200)={0x10, 0xffffffffffffffda, r10}, 0x10) syz_fuse_handle_req(r7, &(0x7f0000008380)="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", 0x2000, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x78, 0x0, 0x3, {0x94d, 0x5, 0x0, {0x5, 0x9, 0x6, 0x7f, 0x8, 0x2838, 0x8, 0xfff, 0x7, 0x8000, 0x1, 0x0, 0x0, 0x5, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2000, 0x28, 0x11}, 0x18) kernel console output (not intermixed with test programs): ffc0000 [ 1719.325721][ T30] audit: type=1326 audit(1765646208.063:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23451 comm="syz.3.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f30a2f8f749 code=0x7ffc0000 [ 1719.401968][ T30] audit: type=1326 audit(1765646208.073:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23451 comm="syz.3.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a2f8f749 code=0x7ffc0000 [ 1719.446250][ T30] audit: type=1326 audit(1765646208.113:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23451 comm="syz.3.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30a2f8f749 code=0x7ffc0000 [ 1719.507236][ T30] audit: type=1326 audit(1765646208.113:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23451 comm="syz.3.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a2f8f749 code=0x7ffc0000 [ 1719.566159][ T30] audit: type=1326 audit(1765646208.133:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23451 comm="syz.3.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f30a2f8f749 code=0x7ffc0000 [ 1719.637705][ T30] audit: type=1326 audit(1765646208.133:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23451 comm="syz.3.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a2f8f749 code=0x7ffc0000 [ 1719.721087][ T30] audit: type=1326 audit(1765646208.143:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23451 comm="syz.3.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f30a2f8f749 code=0x7ffc0000 [ 1719.774834][ T30] audit: type=1326 audit(1765646208.143:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23451 comm="syz.3.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a2f8f749 code=0x7ffc0000 [ 1719.817139][ T30] audit: type=1326 audit(1765646208.253:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23451 comm="syz.3.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30a2f8f749 code=0x7ffc0000 [ 1720.164055][T23475] fuse: Unknown parameter 'group_i00000000000000000000' [ 1720.362120][ T9] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 1720.695470][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1720.716675][ T9] usb 1-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 1720.738586][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1720.831685][ T9] usb 1-1: config 0 descriptor?? [ 1720.899835][ T9] usbhid 1-1:0.0: can't add hid device: -22 [ 1720.926313][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 1721.938326][T23489] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1722.601922][ T5901] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1722.607619][T23504] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1722.616170][T23504] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1722.624520][T23504] vhci_hcd vhci_hcd.0: Device attached [ 1722.811980][ T5901] usb 3-1: Using ep0 maxpacket: 16 [ 1722.826704][ T5901] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1722.884104][ T5901] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1722.902046][ T48] usb 40-1: SetAddress Request (46) to port 0 [ 1722.916265][ T48] usb 40-1: new SuperSpeed USB device number 46 using vhci_hcd [ 1722.948898][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1722.994968][ T5901] usb 3-1: config 0 descriptor?? [ 1723.051910][ T5901] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input352 [ 1723.183382][ T6056] usb 1-1: USB disconnect, device number 39 [ 1724.153232][T23522] fuse: Unknown parameter 'group_id00000000000000000000' [ 1724.927791][T23525] input: syz0 as /devices/virtual/input/input353 [ 1725.008490][ T6660] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 1725.223609][ T6660] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1725.248377][ T6660] usb 1-1: New USB device found, idVendor=05ac, idProduct=0323, bcdDevice= 0.00 [ 1725.292442][ T6660] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1725.322574][T18375] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1725.365805][ T6660] usb 1-1: config 0 descriptor?? [ 1725.481913][T18375] usb 2-1: Using ep0 maxpacket: 16 [ 1725.489129][T18375] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1725.500749][T18375] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1725.517471][T18375] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1725.529147][T23505] vhci_hcd: connection reset by peer [ 1725.529148][T18375] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1725.529171][T18375] usb 2-1: Product: syz [ 1725.547132][ T2046] vhci_hcd vhci_hcd.3: stop threads [ 1725.547143][T18375] usb 2-1: Manufacturer: syz [ 1725.559531][ T2046] vhci_hcd vhci_hcd.3: release socket [ 1725.559532][T18375] usb 2-1: SerialNumber: syz [ 1725.569316][T18375] usb 2-1: config 0 descriptor?? [ 1725.595861][T18375] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1725.602026][ T2046] vhci_hcd vhci_hcd.3: disconnect device [ 1725.606880][T18375] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1725.810503][T23532] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1726.059247][T23524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1726.071129][ T6660] magicmouse 0003:05AC:0323.0021: item fetching failed at offset 3/5 [ 1726.081016][T23524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1726.090091][ T6660] magicmouse 0003:05AC:0323.0021: magicmouse hid parse failed [ 1726.098473][ T6660] magicmouse 0003:05AC:0323.0021: probe with driver magicmouse failed with error -22 [ 1726.108551][T23524] netlink: 'syz.0.4028': attribute type 10 has an invalid length. [ 1726.120323][T23524] bond0: (slave dummy0): Releasing backup interface [ 1726.159876][T23533] netlink: 'syz.0.4028': attribute type 10 has an invalid length. [ 1726.190811][T18375] em28xx 2-1:0.0: chip ID is em2874 [ 1726.206851][T23524] team0: Port device dummy0 added [ 1726.219843][ T5172] bcm5974 3-1:0.0: could not read from device [ 1726.239141][ T5172] bcm5974 3-1:0.0: could not read from device [ 1726.250716][ T5901] usb 3-1: USB disconnect, device number 14 [ 1726.261288][ T5172] bcm5974 3-1:0.0: could not read from device [ 1727.172716][T23533] team0: Port device dummy0 removed [ 1727.190163][T23533] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1727.384739][T18375] usb 1-1: USB disconnect, device number 40 [ 1727.967382][T23558] fuse: Bad value for 'fd' [ 1728.343699][ T48] usb 40-1: device descriptor read/8, error -110 [ 1728.563086][ T6660] usb 2-1: USB disconnect, device number 57 [ 1728.588370][ T6660] em28xx 2-1:0.0: Disconnecting em28xx [ 1728.607047][ T6660] em28xx 2-1:0.0: Freeing device [ 1728.865148][T23566] fuse: Bad value for 'fd' [ 1729.236636][ T48] usb usb40-port1: attempt power cycle [ 1729.581348][T23572] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1729.587896][T23572] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1729.609931][T23575] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1729.682386][ T48] usb 40-1: SetAddress Request (48) to port 0 [ 1729.832709][T23570] comedi: valid board names for 8255 driver are: [ 1729.839116][T23570] 8255 [ 1729.841988][T23570] comedi: valid board names for vmk80xx driver are: [ 1729.848630][T23570] vmk80xx [ 1729.851659][T23570] comedi: valid board names for usbduxsigma driver are: [ 1729.858766][T23570] usbduxsigma [ 1729.862301][T23570] comedi: valid board names for usbduxfast driver are: [ 1729.869180][T23570] usbduxfast [ 1729.872622][T23570] comedi: valid board names for usbdux driver are: [ 1729.881505][T23570] usbdux [ 1729.884703][T23570] comedi: valid board names for ni6501 driver are: [ 1729.891294][T23570] ni6501 [ 1729.900337][T23570] comedi: valid board names for dt9812 driver are: [ 1729.906980][T23570] dt9812 [ 1729.910046][T23570] comedi: valid board names for ni_labpc_cs driver are: [ 1729.917120][T23570] ni_labpc_cs [ 1729.920544][T23570] comedi: valid board names for ni_daq_700 driver are: [ 1729.927565][T23570] ni_daq_700 [ 1729.930903][T23570] comedi: valid board names for labpc_pci driver are: [ 1729.937782][T23570] labpc_pci [ 1729.941008][T23570] comedi: valid board names for adl_pci9118 driver are: [ 1729.948370][T23570] pci9118dg [ 1729.951667][T23570] pci9118hg [ 1729.955105][T23570] pci9118hr [ 1729.958353][T23570] comedi: valid board names for 8255_pci driver are: [ 1729.965112][T23570] 8255_pci [ 1729.968275][T23570] comedi: valid board names for s526 driver are: [ 1729.974764][T23570] s526 [ 1729.977589][T23570] comedi: valid board names for multiq3 driver are: [ 1729.984368][T23570] multiq3 [ 1729.987470][T23570] comedi: valid board names for pcmuio driver are: [ 1729.994232][T23570] pcmuio48 [ 1729.997388][T23570] pcmuio96 [ 1730.000514][T23570] comedi: valid board names for pcmmio driver are: [ 1730.007177][T23570] pcmmio [ 1730.010153][T23570] comedi: valid board names for pcmda12 driver are: [ 1730.016933][T23570] pcmda12 [ 1730.019994][T23570] comedi: valid board names for pcmad driver are: [ 1730.026646][T23570] pcmad12 [ 1730.029704][T23570] pcmad16 [ 1730.032895][T23570] comedi: valid board names for ni_labpc driver are: [ 1730.039594][T23570] lab-pc-1200 [ 1730.043739][T23570] lab-pc-1200ai [ 1730.047291][T23570] lab-pc+ [ 1730.050313][T23570] comedi: valid board names for atmio16 driver are: [ 1730.057055][T23570] atmio16 [ 1730.060106][T23570] atmio16d [ 1730.063267][T23570] comedi: valid board names for ni_at_ao driver are: [ 1730.069965][T23570] at-ao-6 [ 1730.073202][T23570] at-ao-10 [ 1730.076347][T23570] comedi: valid board names for ni_at_a2150 driver are: [ 1730.083358][T23570] ni_at_a2150 [ 1730.086758][T23570] comedi: valid board names for adq12b driver are: [ 1730.093392][T23570] adq12b [ 1730.096367][T23570] comedi: valid board names for mpc624 driver are: [ 1730.103067][T23570] mpc624 [ 1730.106043][T23570] comedi: valid board names for c6xdigio driver are: [ 1730.112870][T23570] c6xdigio [ 1730.116011][T23570] comedi: valid board names for aio_iiro_16 driver are: [ 1730.131597][T23570] aio_iiro_16 [ 1730.135098][T23570] comedi: valid board names for aio_aio12_8 driver are: [ 1730.142166][T23570] aio_aio12_8 [ 1730.145588][T23570] aio_ai12_8 [ 1730.148890][T23570] aio_ao12_4 [ 1730.152360][T23570] comedi: valid board names for fl512 driver are: [ 1730.158834][T23570] fl512 [ 1730.161712][T23570] comedi: valid board names for dmm32at driver are: [ 1730.168412][T23570] dmm32at [ 1730.171490][T23570] comedi: valid board names for dt282x driver are: [ 1730.178094][T23570] dt2821 [ 1730.181063][T23570] dt2821-f [ 1730.184325][T23570] dt2821-g [ 1730.187484][T23570] dt2823 [ 1730.190438][T23570] dt2824-pgh [ 1730.193901][T23570] dt2824-pgl [ 1730.197241][T23570] dt2825 [ 1730.200173][T23570] dt2827 [ 1730.203166][T23570] dt2828 [ 1730.206175][T23570] dt2829 [ 1730.209127][T23570] dt21-ez [ 1730.212337][T23570] dt23-ez [ 1730.215419][T23570] dt24-ez [ 1730.218487][T23570] dt24-ez-pgl [ 1730.223705][T23570] comedi: valid board names for dt2817 driver are: [ 1730.230267][T23570] dt2817 [ 1730.234036][T23570] comedi: valid board names for dt2815 driver are: [ 1730.240583][T23570] dt2815 [ 1730.243879][T23570] comedi: valid board names for dt2814 driver are: [ 1730.250435][T23570] dt2814 [ 1730.254407][T23570] comedi: valid board names for dt2811 driver are: [ 1730.260969][T23570] dt2811-pgh [ 1730.264424][T23570] dt2811-pgl [ 1730.267742][T23570] comedi: valid board names for dt2801 driver are: [ 1730.274347][T23570] dt2801 [ 1730.277337][T23570] comedi: valid board names for das6402 driver are: [ 1730.284117][T23570] das6402-12 [ 1730.287434][T23570] das6402-16 [ 1730.290733][T23570] comedi: valid board names for das1800 driver are: [ 1730.297513][T23570] das-1701st [ 1730.300837][T23570] das-1701st-da [ 1730.304519][T23570] das-1702st [ 1730.307847][T23570] das-1702st-da [ 1730.311413][T23570] das-1702hr [ 1730.314848][T23570] das-1702hr-da [ 1730.318421][T23570] das-1701ao [ 1730.321757][T23570] das-1702ao [ 1730.325293][T23570] das-1801st [ 1730.328642][T23570] das-1801st-da [ 1730.332332][T23570] das-1802st [ 1730.335648][T23570] das-1802st-da [ 1730.339205][T23570] das-1802hr [ 1730.342600][T23570] das-1802hr-da [ 1730.346191][T23570] das-1801hc [ 1730.349493][T23570] das-1802hc [ 1730.352951][T23570] das-1801ao [ 1730.356255][T23570] das-1802ao [ 1730.359569][T23570] comedi: valid board names for das800 driver are: [ 1730.366966][T23570] das-800 [ 1730.370026][T23570] cio-das800 [ 1730.373605][T23570] das-801 [ 1730.376691][T23570] cio-das801 [ 1730.380037][T23570] das-802 [ 1730.383160][T23570] cio-das802 [ 1730.386481][T23570] cio-das802/16 [ 1730.390772][T23570] comedi: valid board names for isa-das08 driver are: [ 1730.397698][T23570] isa-das08 [ 1730.400959][T23570] das08-pgm [ 1730.404188][T23570] das08-pgh [ 1730.407386][T23570] das08-pgl [ 1730.410674][T23570] das08-aoh [ 1730.414127][T23570] das08-aol [ 1730.417375][T23570] das08-aom [ 1730.420595][T23570] das08/jr-ao [ 1730.424074][T23570] das08jr-16-ao [ 1730.427674][T23570] pc104-das08 [ 1730.431056][T23570] das08jr/16 [ 1730.434684][T23570] comedi: valid board names for das16m1 driver are: [ 1730.441326][T23570] das16m1 [ 1730.444584][T23570] comedi: valid board names for dac02 driver are: [ 1730.451046][T23570] dac02 [ 1730.454166][T23570] comedi: valid board names for rti802 driver are: [ 1730.460737][T23570] rti802 [ 1730.463803][T23570] comedi: valid board names for rti800 driver are: [ 1730.470357][T23570] rti800 [ 1730.473441][T23570] rti815 [ 1730.476408][T23570] comedi: valid board names for pcm3724 driver are: [ 1730.483246][T23570] pcm3724 [ 1730.486312][T23570] comedi: valid board names for pcl818 driver are: [ 1730.492974][T23570] pcl818l [ 1730.496058][T23570] pcl818h [ 1730.499105][T23570] pcl818hd [ 1730.502374][T23570] pcl818hg [ 1730.505540][T23570] pcl818 [ 1730.508494][T23570] pcl718 [ 1730.511445][T23570] pcm3718 [ 1730.514627][T23570] comedi: valid board names for pcl816 driver are: [ 1730.521165][T23570] pcl816 [ 1730.524372][T23570] pcl814b [ 1730.527455][T23570] comedi: valid board names for pcl812 driver are: [ 1730.534127][T23570] pcl812 [ 1730.537097][T23570] pcl812pg [ 1730.540225][T23570] acl8112pg [ 1730.543477][T23570] acl8112dg [ 1730.546708][T23570] acl8112hg [ 1730.549950][T23570] a821pgl [ 1730.553146][T23570] a821pglnda [ 1730.556502][T23570] a821pgh [ 1730.559543][T23570] a822pgl [ 1730.562667][T23570] a822pgh [ 1730.565782][T23570] a823pgl [ 1730.568819][T23570] a823pgh [ 1730.571981][T23570] pcl813 [ 1730.574933][T23570] pcl813b [ 1730.577973][T23570] acl8113 [ 1730.581011][T23570] iso813 [ 1730.584023][T23570] acl8216 [ 1730.587081][T23570] a826pg [ 1730.590037][T23570] comedi: valid board names for pcl730 driver are: [ 1730.596664][T23570] pcl730 [ 1730.599669][T23570] iso730 [ 1730.602720][T23570] acl7130 [ 1730.605757][T23570] pcm3730 [ 1730.608812][T23570] pcl725 [ 1730.611764][T23570] p8r8dio [ 1730.614856][T23570] acl7225b [ 1730.617982][T23570] p16r16dio [ 1730.621172][T23570] pcl733 [ 1730.624168][T23570] pcl734 [ 1730.627132][T23570] opmm-1616-xt [ 1730.630597][T23570] pearl-mm-p [ 1730.634005][T23570] ir104-pbf [ 1730.637260][T23570] comedi: valid board names for pcl726 driver are: [ 1730.643896][T23570] pcl726 [ 1730.646914][T23570] pcl727 [ 1730.649871][T23570] pcl728 [ 1730.652943][T23570] acl6126 [ 1730.656018][T23570] acl6128 [ 1730.659055][T23570] comedi: valid board names for pcl724 driver are: [ 1730.665788][T23570] pcl724 [ 1730.668784][T23570] pcl722 [ 1730.671743][T23570] pcl731 [ 1730.674914][T23570] acl7122 [ 1730.677993][T23570] acl7124 [ 1730.681036][T23570] pet48dio [ 1730.684871][T23570] pcmio48 [ 1730.688013][T23570] onyx-mm-dio [ 1730.691422][T23570] comedi: valid board names for pcl711 driver are: [ 1730.698106][T23570] pcl711 [ 1730.701078][T23570] pcl711b [ 1730.704168][T23570] acl8112hg [ 1730.707413][T23570] acl8112dg [ 1730.710629][T23570] comedi: valid board names for amplc_pc263 driver are: [ 1730.717832][T23570] pc263 [ 1730.720724][T23570] comedi: valid board names for amplc_pc236 driver are: [ 1730.727741][T23570] pc36at [ 1730.730742][T23570] comedi: valid board names for amplc_dio200 driver are: [ 1730.737966][T23570] pc212e [ 1730.740953][T23570] pc214e [ 1730.744022][T23570] pc215e [ 1730.747010][T23570] pc218e [ 1730.749970][T23570] pc272e [ 1730.753147][T23570] comedi: valid board names for comedi_parport driver are: [ 1730.760371][T23570] comedi_parport [ 1730.764177][T23570] comedi: valid board names for comedi_test driver are: [ 1730.771141][T23570] comedi_test [ 1730.774698][T23570] comedi: valid board names for comedi_bond driver are: [ 1730.781664][T23570] comedi_bond [ 1730.841223][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.847556][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.859011][T19042] IPVS: starting estimator thread 0... [ 1730.957921][ T48] usb 40-1: new SuperSpeed USB device number 48 using vhci_hcd [ 1730.995328][T23572] vhci_hcd vhci_hcd.0: Device attached [ 1731.042095][T23578] IPVS: using max 64 ests per chain, 153600 per kthread [ 1732.597337][T23600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4047'. [ 1733.315652][T23607] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1733.370806][T23607] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1733.614487][T23614] fuse: Unknown parameter 'group_id00000000000000000000' [ 1734.022089][T22764] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1734.099914][T23574] vhci_hcd: connection reset by peer [ 1734.113844][ T6025] vhci_hcd vhci_hcd.3: stop threads [ 1734.132183][ T6025] vhci_hcd vhci_hcd.3: release socket [ 1734.150821][ T6025] vhci_hcd vhci_hcd.3: disconnect device [ 1734.259305][T22764] usb 1-1: Using ep0 maxpacket: 16 [ 1734.289318][T22764] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 1734.400732][T22764] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1734.471856][T22764] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 1734.507074][T22764] usb 1-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00 [ 1734.527264][T22764] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1734.563882][T22764] usb 1-1: config 0 descriptor?? [ 1734.582742][ T5901] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1734.759693][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 1734.759705][ T30] audit: type=1400 audit(1765646223.503:1693): avc: denied { getopt } for pid=23627 comm="syz.2.4055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1734.787165][T23628] program syz.2.4055 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1734.798159][ T5901] usb 4-1: Using ep0 maxpacket: 16 [ 1734.825931][ T5901] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1734.836745][ T5901] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1734.847984][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1734.869768][ T5901] usb 4-1: config 0 descriptor?? [ 1734.886982][ T5901] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input354 [ 1734.974948][ T30] audit: type=1400 audit(1765646223.723:1694): avc: denied { map } for pid=23630 comm="syz.2.4056" path="socket:[79103]" dev="sockfs" ino=79103 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1735.011929][ T30] audit: type=1400 audit(1765646223.723:1695): avc: denied { read accept } for pid=23630 comm="syz.2.4056" path="socket:[79103]" dev="sockfs" ino=79103 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1735.039712][T22764] smartjoyplus 0003:6666:8801.0022: global environment stack underflow [ 1735.041964][ T9] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 1735.049651][T22764] smartjoyplus 0003:6666:8801.0022: item 0 1 1 11 parsing failed [ 1735.072497][T22764] smartjoyplus 0003:6666:8801.0022: parse failed [ 1735.079264][T22764] smartjoyplus 0003:6666:8801.0022: probe with driver smartjoyplus failed with error -22 [ 1735.333580][T23634] input: syz0 as /devices/virtual/input/input355 [ 1735.644077][T23606] netlink: 666 bytes leftover after parsing attributes in process `syz.0.4048'. [ 1735.662342][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1735.675350][T23606] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23606 comm=syz.0.4048 [ 1735.689270][ T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 1735.749473][T22764] usb 1-1: USB disconnect, device number 41 [ 1735.773623][T23637] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4056'. [ 1735.789955][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1735.809051][T23637] netlink: 'syz.2.4056': attribute type 4 has an invalid length. [ 1735.848035][ T6660] lo speed is unknown, defaulting to 1000 [ 1735.858200][ T6660] syz1: Port: 1 Link DOWN [ 1735.869598][ T9] usb 2-1: config 0 descriptor?? [ 1735.884747][T12065] lo speed is unknown, defaulting to 1000 [ 1735.967084][ T9] usbhid 2-1:0.0: can't add hid device: -22 [ 1736.009347][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 1736.044714][ T48] usb 40-1: device descriptor read/8, error -110 [ 1736.443375][ T48] usb usb40-port1: unable to enumerate USB device [ 1737.391037][ T5172] bcm5974 4-1:0.0: could not read from device [ 1737.435364][ T5172] bcm5974 4-1:0.0: could not read from device [ 1737.444679][ T5172] bcm5974 4-1:0.0: could not read from device [ 1737.468603][ T5901] usb 4-1: USB disconnect, device number 15 [ 1737.492162][ T5172] bcm5974 4-1:0.0: could not read from device [ 1737.518396][T23304] bcm5974 4-1:0.0: could not read from device [ 1737.581074][T23653] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1737.710936][ T9] usb 2-1: USB disconnect, device number 58 [ 1738.026492][T23658] fuse: Bad value for 'user_id' [ 1738.031410][T23658] fuse: Bad value for 'user_id' [ 1738.761512][T23665] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1738.768043][T23665] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1738.815731][T23665] vhci_hcd vhci_hcd.0: Device attached [ 1739.432568][T12065] usb 38-1: SetAddress Request (62) to port 0 [ 1739.441973][T12065] usb 38-1: new SuperSpeed USB device number 62 using vhci_hcd [ 1739.700070][T23676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4067'. [ 1739.755299][T23676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4067'. [ 1739.852154][T23669] input: syz1 as /devices/virtual/input/input356 [ 1740.482088][ T9] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 1741.288531][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1741.302662][ T9] usb 1-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 1741.327017][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1741.367079][ T9] usb 1-1: config 0 descriptor?? [ 1741.387195][ T9] usbhid 1-1:0.0: can't add hid device: -22 [ 1741.407336][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 1741.453978][T23696] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1741.612037][ T9] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1741.791888][ T9] usb 2-1: device descriptor read/64, error -71 [ 1741.861355][T23666] vhci_hcd: connection reset by peer [ 1741.873439][ T6308] vhci_hcd vhci_hcd.2: stop threads [ 1741.903961][ T6308] vhci_hcd vhci_hcd.2: release socket [ 1741.924147][ T6308] vhci_hcd vhci_hcd.2: disconnect device [ 1742.161963][ T9] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1742.449185][ T9] usb 2-1: device descriptor read/64, error -71 [ 1742.572364][ T9] usb usb2-port1: attempt power cycle [ 1742.974288][T18375] usb 1-1: USB disconnect, device number 42 [ 1743.012061][ T9] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1743.042883][ T9] usb 2-1: device descriptor read/8, error -71 [ 1743.423539][ T9] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1743.454723][ T9] usb 2-1: device descriptor read/8, error -71 [ 1743.582850][ T9] usb usb2-port1: unable to enumerate USB device [ 1744.522592][T12065] usb 38-1: device descriptor read/8, error -110 [ 1744.772818][T23740] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1745.092978][T12065] usb usb38-port1: attempt power cycle [ 1745.169241][T23738] input: syz1 as /devices/virtual/input/input357 [ 1745.312464][T22764] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1745.501865][T22764] usb 4-1: Using ep0 maxpacket: 16 [ 1745.534037][T22764] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1745.595105][T22764] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1745.651922][T22764] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1745.682613][T12065] usb usb38-port1: unable to enumerate USB device [ 1745.716542][T22764] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1745.898157][T22764] usb 4-1: config 0 descriptor?? [ 1746.248066][T22764] usbhid 4-1:0.0: can't add hid device: -71 [ 1746.288120][T22764] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1746.356377][T22764] usb 4-1: USB disconnect, device number 16 [ 1746.709096][T23764] netlink: 'syz.3.4089': attribute type 10 has an invalid length. [ 1746.728028][T23764] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1747.642019][T18375] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1747.780617][T23775] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1747.931884][T18375] usb 4-1: Using ep0 maxpacket: 16 [ 1747.938410][T18375] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1747.969131][T18375] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1748.021218][T18375] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1748.061919][T18375] usb 4-1: config 0 descriptor?? [ 1748.095201][T22764] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1748.096587][T18375] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input358 [ 1748.292522][T22764] usb 2-1: Using ep0 maxpacket: 16 [ 1748.342224][T22764] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1748.389194][T22764] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1748.425920][T22764] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1748.463595][T22764] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1748.581218][T23786] input: syz0 as /devices/virtual/input/input359 [ 1749.021946][T22764] usb 2-1: Product: syz [ 1749.026196][T22764] usb 2-1: Manufacturer: syz [ 1749.030822][T22764] usb 2-1: SerialNumber: syz [ 1749.039824][T22764] usb 2-1: config 0 descriptor?? [ 1749.050386][T22764] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1749.069917][T22764] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1749.110046][T17679] Bluetooth: hci0: Dropping invalid advertising data [ 1749.117269][T17679] Bluetooth: hci0: Malformed LE Event: 0x02 [ 1749.676730][T22764] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1749.691821][T22764] em28xx 2-1:0.0: Config register raw data: 0x56 [ 1750.095840][T22764] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1750.120632][T22764] em28xx 2-1:0.0: No AC97 audio processor [ 1750.402266][ T5172] bcm5974 4-1:0.0: could not read from device [ 1750.414358][ T5172] bcm5974 4-1:0.0: could not read from device [ 1750.421413][ T5172] bcm5974 4-1:0.0: could not read from device [ 1750.432991][ T5172] bcm5974 4-1:0.0: could not read from device [ 1750.457507][T18375] usb 4-1: USB disconnect, device number 17 [ 1750.602336][T23812] bridge0: port 3(gretap0) entered blocking state [ 1750.609310][T23812] bridge0: port 3(gretap0) entered disabled state [ 1750.617338][T23812] gretap0: entered allmulticast mode [ 1750.632964][T23812] gretap0: entered promiscuous mode [ 1750.639742][T23812] bridge0: port 3(gretap0) entered blocking state [ 1750.646252][T23812] bridge0: port 3(gretap0) entered forwarding state [ 1751.438798][T19042] usb 2-1: USB disconnect, device number 63 [ 1751.460983][T19042] em28xx 2-1:0.0: Disconnecting em28xx [ 1751.498176][T23386] udevd[23386]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1751.525804][T19042] em28xx 2-1:0.0: Freeing device [ 1751.930020][T23818] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1752.318853][T23824] lo speed is unknown, defaulting to 1000 [ 1752.331310][T23827] netlink: 'syz.4.4110': attribute type 12 has an invalid length. [ 1752.345782][T23827] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4110'. [ 1752.429863][T23834] Device name cannot be null; rc = [-22] [ 1753.422944][T23846] Device name cannot be null; rc = [-22] [ 1754.168429][ T30] audit: type=1400 audit(1765646242.913:1696): avc: denied { setattr } for pid=23847 comm="syz.3.4115" name="ALG" dev="sockfs" ino=80445 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1754.622829][T12065] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1754.793751][T12065] usb 3-1: Using ep0 maxpacket: 16 [ 1754.806063][T12065] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1754.827615][T12065] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1754.848024][T12065] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1754.885567][T12065] usb 3-1: config 0 descriptor?? [ 1754.918638][T12065] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input360 [ 1755.292453][T18375] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 1755.362004][T23874] input: syz0 as /devices/virtual/input/input361 [ 1755.997401][T18375] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1756.050063][T18375] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 1756.097348][T18375] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1756.270354][T18375] usb 4-1: config 0 descriptor?? [ 1756.304791][T18375] usbhid 4-1:0.0: can't add hid device: -22 [ 1756.347208][T18375] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 1756.386922][T17679] Bluetooth: hci4: ISO packet too small [ 1756.861882][T19042] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1757.141931][T19042] usb 2-1: Using ep0 maxpacket: 16 [ 1757.267084][T19042] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1757.351904][ T5172] bcm5974 3-1:0.0: could not read from device [ 1757.362142][T19042] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1757.397186][T23887] Device name cannot be null; rc = [-22] [ 1757.435040][ T5172] bcm5974 3-1:0.0: could not read from device [ 1757.441936][T19042] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1757.454187][T12065] usb 3-1: USB disconnect, device number 15 [ 1757.488031][T19042] usb 2-1: config 0 descriptor?? [ 1757.921512][T23892] Device name cannot be null; rc = [-22] [ 1758.095664][T19042] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input362 [ 1758.239927][T23899] input: syz0 as /devices/virtual/input/input363 [ 1759.345853][T18375] usb 4-1: USB disconnect, device number 18 [ 1759.895624][T18375] usb 2-1: USB disconnect, device number 64 [ 1759.897461][ T5172] bcm5974 2-1:0.0: could not read from device [ 1759.953731][T23386] bcm5974 2-1:0.0: could not read from device [ 1761.305647][T23944] IPv6: NLM_F_CREATE should be specified when creating new route [ 1762.295217][T23936] mkiss: ax0: crc mode is auto. [ 1762.709294][T23952] fuse: Bad value for 'fd' [ 1764.732117][T19042] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1764.881928][T19042] usb 2-1: device descriptor read/64, error -71 [ 1765.321899][T19042] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1765.461895][T19042] usb 2-1: device descriptor read/64, error -71 [ 1765.912809][T19042] usb usb2-port1: attempt power cycle [ 1766.202201][T18375] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1766.331890][T23993] netlink: 'syz.4.4159': attribute type 3 has an invalid length. [ 1766.341882][T19042] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1766.371917][T18375] usb 4-1: Using ep0 maxpacket: 16 [ 1766.378015][T19042] usb 2-1: device descriptor read/8, error -71 [ 1766.380110][T18375] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1766.396037][T18375] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1766.411877][T18375] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1766.421301][T18375] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1766.429686][T18375] usb 4-1: Product: syz [ 1766.435340][T18375] usb 4-1: Manufacturer: syz [ 1766.440089][T18375] usb 4-1: SerialNumber: syz [ 1766.463156][T18375] usb 4-1: config 0 descriptor?? [ 1766.474146][T18375] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1766.484370][T18375] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1767.192861][T18375] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1767.511659][T24011] netlink: 4436 bytes leftover after parsing attributes in process `syz.4.4167'. [ 1767.522294][T24011] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 1768.212677][T18375] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1768.615291][T18375] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 1768.628949][T18375] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 1768.642546][T18375] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 1768.651179][T18375] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 1768.691583][T18375] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 1768.711687][T18375] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 1769.045136][T18375] usb 4-1: USB disconnect, device number 19 [ 1769.649041][T24054] lo speed is unknown, defaulting to 1000 [ 1769.892149][T19042] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1770.565172][T19042] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1770.648317][T24075] fuse: Unknown parameter 'fd0x0000000000000007' [ 1770.998925][T19042] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1771.007100][T19042] usb 1-1: Product: syz [ 1771.011267][T19042] usb 1-1: Manufacturer: syz [ 1771.015914][T19042] usb 1-1: SerialNumber: syz [ 1771.034095][T19042] usb 1-1: config 0 descriptor?? [ 1771.162105][T18375] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1771.325991][T18375] usb 2-1: no configurations [ 1771.350867][T18375] usb 2-1: can't read configurations, error -22 [ 1771.534215][T18375] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1771.656104][T19042] mos7840 1-1:0.0: required endpoints missing [ 1771.681930][T22764] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 1771.689814][T19042] usb 1-1: USB disconnect, device number 43 [ 1771.705558][T18375] usb 2-1: no configurations [ 1771.717494][T18375] usb 2-1: can't read configurations, error -22 [ 1771.733315][T18375] usb usb2-port1: attempt power cycle [ 1771.903933][T22764] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1771.916595][T22764] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1771.930804][T22764] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 12336, setting to 64 [ 1771.944530][T22764] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1772.003859][T22764] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1772.014020][T22764] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1772.022711][T22764] usb 4-1: Product: syz [ 1772.027475][T22764] usb 4-1: Manufacturer: syz [ 1772.032240][T22764] usb 4-1: SerialNumber: syz [ 1772.066034][T22764] usb 4-1: config 0 descriptor?? [ 1772.084913][T22764] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input364 [ 1772.093095][T18375] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1772.132824][T18375] usb 2-1: no configurations [ 1772.137467][T18375] usb 2-1: can't read configurations, error -22 [ 1772.282057][T18375] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1772.314058][T18375] usb 2-1: no configurations [ 1772.343177][T18375] usb 2-1: can't read configurations, error -22 [ 1772.375422][T18375] usb usb2-port1: unable to enumerate USB device [ 1772.387187][ T9] usb 4-1: USB disconnect, device number 20 [ 1772.795986][T24091] overlayfs: overlapping lowerdir path [ 1773.096994][T24101] lo speed is unknown, defaulting to 1000 [ 1773.112735][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1773.321462][T24108] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1773.406444][T24089] Bluetooth: hci1: Malformed LE Event: 0x1b [ 1773.438129][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1773.471617][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1773.556957][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1773.625931][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1773.677541][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1773.722803][ T9] usb 3-1: Product: syz [ 1773.737756][ T9] usb 3-1: Manufacturer: syz [ 1773.751375][ T9] usb 3-1: SerialNumber: syz [ 1773.766328][ T9] usb 3-1: config 0 descriptor?? [ 1773.847758][ T9] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1773.859619][ T9] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1774.324172][T18375] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 1774.441882][T24089] Bluetooth: hci3: command 0xfc11 tx timeout [ 1774.442416][T17679] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 1774.483850][T18375] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1774.490704][T18375] usb 4-1: New USB device found, idVendor=05ac, idProduct=0323, bcdDevice= 0.00 [ 1774.513519][T18375] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1774.536212][ T9] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1774.542934][T18375] usb 4-1: config 0 descriptor?? [ 1774.558154][ T9] em28xx 3-1:0.0: Config register raw data: 0x56 [ 1774.724301][T24124] overlayfs: overlapping lowerdir path [ 1774.751636][ T9] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 1774.762130][ T9] em28xx 3-1:0.0: No AC97 audio processor [ 1774.995748][T18375] magicmouse 0003:05AC:0323.0023: item fetching failed at offset 3/5 [ 1775.016612][T18375] magicmouse 0003:05AC:0323.0023: magicmouse hid parse failed [ 1775.035453][T18375] magicmouse 0003:05AC:0323.0023: probe with driver magicmouse failed with error -22 [ 1775.231351][T24113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1775.247614][T24113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1775.264783][T24113] netlink: 'syz.3.4196': attribute type 10 has an invalid length. [ 1775.278426][T24113] bond0: (slave dummy0): Releasing backup interface [ 1775.295877][T24113] team0: Port device dummy0 added [ 1775.312346][T24113] netlink: 'syz.3.4196': attribute type 10 has an invalid length. [ 1775.336875][T24113] team0: Port device dummy0 removed [ 1775.350366][T24113] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1775.545700][ T9] usb 4-1: USB disconnect, device number 21 [ 1775.867423][T12065] usb 3-1: USB disconnect, device number 16 [ 1775.892817][T12065] em28xx 3-1:0.0: Disconnecting em28xx [ 1775.914333][T12065] em28xx 3-1:0.0: Freeing device [ 1776.308425][T24148] fuse: Bad value for 'fd' [ 1777.787904][T24166] netlink: 'syz.2.4212': attribute type 1 has an invalid length. [ 1777.802272][T22764] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 1777.858525][T24170] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1777.876009][T24166] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1777.938334][T24171] bond2: (slave veth3): Enslaving as an active interface with a down link [ 1778.033719][T24166] netlink: 'syz.2.4212': attribute type 10 has an invalid length. [ 1778.041569][T24166] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4212'. [ 1778.090347][T24172] bond2: (slave dummy0): making interface the new active one [ 1778.098063][T22764] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1778.142444][T24172] dummy0: entered promiscuous mode [ 1778.154184][T24172] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 1778.177645][T22764] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 1778.205098][T24166] bond2: (slave dummy0): Releasing active interface [ 1778.220498][T22764] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1778.268347][T22764] usb 4-1: config 0 descriptor?? [ 1778.307406][T22764] usbhid 4-1:0.0: can't add hid device: -22 [ 1778.344026][T22764] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 1778.403345][ T9] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1778.573294][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1778.604506][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=08c6, bcdDevice=33.c2 [ 1778.634218][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1778.670110][ T9] usb 1-1: config 0 descriptor?? [ 1778.701028][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1778.715263][ T9] usb 1-1: MIDIStreaming interface descriptor not found [ 1779.096226][ T30] audit: type=1400 audit(1765646267.843:1697): avc: denied { watch watch_reads } for pid=24177 comm="syz.0.4214" path="/proc/846/fdinfo" dev="proc" ino=82188 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1779.295512][T24190] netlink: 'syz.2.4219': attribute type 4 has an invalid length. [ 1779.320230][T24190] netlink: 'syz.2.4219': attribute type 4 has an invalid length. [ 1779.357132][T22764] lo speed is unknown, defaulting to 1000 [ 1779.383967][T22764] syz1: Port: 1 Link ACTIVE [ 1779.406988][T22764] lo speed is unknown, defaulting to 1000 [ 1780.225002][T22764] usb 4-1: USB disconnect, device number 22 [ 1781.617762][T22452] usb 1-1: USB disconnect, device number 44 [ 1781.841885][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1781.992071][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1782.082735][ T9] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1782.104384][ T9] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1782.118993][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1782.128370][ T9] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1782.141414][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1782.288374][ T9] usb 4-1: config 0 descriptor?? [ 1782.323956][ T9] usbhid 4-1:0.0: can't add hid device: -22 [ 1782.351064][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 1782.737004][ T9] usb 4-1: USB disconnect, device number 23 [ 1784.316939][T24261] netlink: 'syz.1.4237': attribute type 3 has an invalid length. [ 1784.838591][T24265] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1784.845140][T24265] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1785.004236][T24265] vhci_hcd vhci_hcd.0: Device attached [ 1785.271908][T18375] usb 40-1: SetAddress Request (50) to port 0 [ 1785.283192][T18375] usb 40-1: new SuperSpeed USB device number 50 using vhci_hcd [ 1785.618266][T24286] Device name cannot be null; rc = [-22] [ 1786.124575][T24288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1788.151928][T24303] netlink: 552 bytes leftover after parsing attributes in process `syz.0.4251'. [ 1788.643327][T24270] vhci_hcd: connection reset by peer [ 1788.652418][ T3526] vhci_hcd vhci_hcd.3: stop threads [ 1788.661687][ T3526] vhci_hcd vhci_hcd.3: release socket [ 1788.669843][ T3526] vhci_hcd vhci_hcd.3: disconnect device [ 1788.769535][ T9] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1788.901865][ T30] audit: type=1400 audit(1765646277.633:1698): avc: denied { map } for pid=24321 comm="syz.0.4258" path="/dev/swradio0" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1788.963798][ T9] usb 2-1: config 143 has an invalid descriptor of length 0, skipping remainder of the config [ 1788.987387][ T9] usb 2-1: config 143 has 0 interfaces, different from the descriptor's value: 1 [ 1789.022360][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 1789.049969][T24327] Device name cannot be null; rc = [-22] [ 1789.241915][T22452] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1789.983545][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1790.186557][T22452] usb 1-1: Using ep0 maxpacket: 16 [ 1790.193980][T22452] usb 1-1: config 253 has an invalid interface number: 71 but max is 0 [ 1790.202487][T22452] usb 1-1: config 253 has no interface number 0 [ 1790.208792][T22452] usb 1-1: config 253 interface 71 has no altsetting 0 [ 1790.215814][T22452] usb 1-1: New USB device found, idVendor=11ca, idProduct=0201, bcdDevice=42.cd [ 1790.225068][T22452] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1790.295352][T24334] Device name cannot be null; rc = [-22] [ 1791.200961][ T6056] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1791.238694][T18375] usb 40-1: device descriptor read/8, error -110 [ 1791.439076][ T30] audit: type=1400 audit(1765646280.173:1699): avc: denied { map } for pid=24309 comm="syz.1.4254" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1791.575909][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.582406][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.653466][ T6056] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1791.663823][ T30] audit: type=1400 audit(1765646280.183:1700): avc: denied { execute } for pid=24309 comm="syz.1.4254" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1791.690572][ T6056] usb 4-1: config 0 has no interfaces? [ 1791.705655][ T9] usb 2-1: string descriptor 0 read error: -71 [ 1791.717444][ T6056] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1791.734094][ T9] usb 2-1: USB disconnect, device number 73 [ 1791.743224][ T6056] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1791.754528][ T6056] usb 4-1: Product: syz [ 1791.777512][ T6056] usb 4-1: Manufacturer: syz [ 1791.784873][ T6056] usb 4-1: SerialNumber: syz [ 1791.816391][ T6056] usb 4-1: config 0 descriptor?? [ 1791.853695][T18375] usb usb40-port1: attempt power cycle [ 1791.888951][T24347] ubi: mtd0 is already attached to ubi31 [ 1792.050607][ T9] usb 4-1: USB disconnect, device number 24 [ 1793.182604][T22452] usb 1-1: string descriptor 0 read error: -71 [ 1793.235956][T22452] usb 1-1: USB disconnect, device number 45 [ 1793.372819][T18375] usb usb40-port1: unable to enumerate USB device [ 1793.403317][ T30] audit: type=1400 audit(1765646282.153:1701): avc: denied { cmd } for pid=24355 comm="syz.1.4267" path="socket:[82407]" dev="sockfs" ino=82407 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1793.675919][T24361] fuse: Bad value for 'fd' [ 1794.056547][T24362] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1794.063083][T24362] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1794.075506][T24362] vhci_hcd vhci_hcd.0: Device attached [ 1794.263333][T24365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4268'. [ 1794.372249][T18375] usb 40-1: SetAddress Request (54) to port 0 [ 1794.414653][T18375] usb 40-1: new SuperSpeed USB device number 54 using vhci_hcd [ 1796.923711][T24399] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4277'. [ 1796.946741][T24399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4277'. [ 1797.712887][T24405] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1797.956911][T24363] vhci_hcd: connection reset by peer [ 1798.002201][ T2046] vhci_hcd vhci_hcd.3: stop threads [ 1798.048072][ T2046] vhci_hcd vhci_hcd.3: release socket [ 1798.200598][ T2046] vhci_hcd vhci_hcd.3: disconnect device [ 1798.211605][T24409] netlink: 'syz.4.4282': attribute type 10 has an invalid length. [ 1798.244331][T24409] bond0: (slave dummy0): Releasing backup interface [ 1798.299015][T24415] Device name cannot be null; rc = [-22] [ 1798.391666][T24414] netlink: 'syz.4.4282': attribute type 10 has an invalid length. [ 1798.717331][T24419] netlink: 536 bytes leftover after parsing attributes in process `syz.1.4285'. [ 1798.719391][T24414] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1799.431864][ T6660] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1799.564235][T18375] usb 40-1: device descriptor read/8, error -110 [ 1800.192026][ T6660] usb 1-1: device descriptor read/64, error -71 [ 1800.482202][T18375] usb usb40-port1: attempt power cycle [ 1800.603729][ T6660] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1800.822211][ T6660] usb 1-1: device descriptor read/64, error -71 [ 1801.210946][ T6660] usb usb1-port1: attempt power cycle [ 1801.285573][T18375] usb usb40-port1: unable to enumerate USB device [ 1801.314133][T24453] Device name cannot be null; rc = [-22] [ 1801.941916][ T6660] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1802.084846][ T6660] usb 1-1: device descriptor read/8, error -71 [ 1802.104770][T24463] netlink: 536 bytes leftover after parsing attributes in process `syz.1.4297'. [ 1804.379841][T24477] netlink: 'syz.0.4299': attribute type 3 has an invalid length. [ 1804.787300][T24482] fuse: Bad value for 'fd' [ 1805.293778][ T6660] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1805.480144][ T6660] usb 1-1: device descriptor read/64, error -71 [ 1806.004826][ T6660] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1806.964186][T24495] fuse: Invalid rootmode [ 1807.201905][ T6660] usb 1-1: device descriptor read/64, error -71 [ 1807.316454][ T6660] usb usb1-port1: attempt power cycle [ 1808.092017][ T6056] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 1808.277161][ T6056] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1808.442180][ T6056] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 1808.525936][T24530] fuse: Bad value for 'fd' [ 1808.907356][ T6056] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1808.964342][ T6056] usb 4-1: config 0 descriptor?? [ 1809.006979][ T6056] usbhid 4-1:0.0: can't add hid device: -22 [ 1809.038782][ T6056] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 1809.518402][T24540] fuse: Bad value for 'fd' [ 1810.656628][T24546] can: request_module (can-proto-0) failed. [ 1810.927884][T18375] usb 4-1: USB disconnect, device number 25 [ 1811.884796][T24570] fuse: Bad value for 'fd' [ 1812.171899][T12115] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 1812.294605][T24608] overlayfs: overlapping lowerdir path [ 1812.373658][T12115] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1812.388110][T12115] usb 2-1: New USB device found, idVendor=05ac, idProduct=0323, bcdDevice= 0.00 [ 1812.417297][T12115] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1812.448918][T12115] usb 2-1: config 0 descriptor?? [ 1812.721970][T24618] FAULT_INJECTION: forcing a failure. [ 1812.721970][T24618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1812.741852][T24618] CPU: 1 UID: 0 PID: 24618 Comm: syz.3.4336 Tainted: G L syzkaller #0 PREEMPT(full) [ 1812.741884][T24618] Tainted: [L]=SOFTLOCKUP [ 1812.741894][T24618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1812.741907][T24618] Call Trace: [ 1812.741913][T24618] [ 1812.741921][T24618] dump_stack_lvl+0x16c/0x1f0 [ 1812.741947][T24618] should_fail_ex+0x512/0x640 [ 1812.741974][T24618] _copy_from_user+0x2e/0xd0 [ 1812.741998][T24618] copy_msghdr_from_user+0x98/0x160 [ 1812.742025][T24618] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1812.742064][T24618] ___sys_sendmsg+0xfe/0x1d0 [ 1812.742090][T24618] ? __pfx____sys_sendmsg+0x10/0x10 [ 1812.742150][T24618] __sys_sendmsg+0x16d/0x220 [ 1812.742176][T24618] ? __pfx___sys_sendmsg+0x10/0x10 [ 1812.742225][T24618] do_syscall_64+0xcd/0xf80 [ 1812.742247][T24618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1812.742266][T24618] RIP: 0033:0x7f30a2f8f749 [ 1812.742282][T24618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1812.742299][T24618] RSP: 002b:00007f30a11ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1812.742318][T24618] RAX: ffffffffffffffda RBX: 00007f30a31e5fa0 RCX: 00007f30a2f8f749 [ 1812.742331][T24618] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1812.742343][T24618] RBP: 00007f30a11ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1812.742355][T24618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1812.742366][T24618] R13: 00007f30a31e6038 R14: 00007f30a31e5fa0 R15: 00007ffcafab5e08 [ 1812.742395][T24618] [ 1812.923680][ T6660] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1812.937156][T12115] magicmouse 0003:05AC:0323.0024: item fetching failed at offset 3/5 [ 1812.946027][T12115] magicmouse 0003:05AC:0323.0024: magicmouse hid parse failed [ 1812.953661][T12115] magicmouse 0003:05AC:0323.0024: probe with driver magicmouse failed with error -22 [ 1813.040734][T24575] kexec: Could not allocate control_code_buffer [ 1813.081853][ T6660] usb 1-1: Using ep0 maxpacket: 16 [ 1813.088947][ T6660] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1813.100773][ T6660] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1813.111094][ T6660] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1813.124209][ T6660] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1813.143598][ T6660] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1813.182403][ T6660] usb 1-1: config 0 descriptor?? [ 1813.191429][T24582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1813.227232][T24582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1813.240187][T24582] netlink: 'syz.1.4329': attribute type 10 has an invalid length. [ 1813.272703][T24582] bond0: (slave dummy0): Releasing backup interface [ 1813.292054][T24626] netlink: 'syz.1.4329': attribute type 10 has an invalid length. [ 1813.305820][T24582] team0: Port device dummy0 added [ 1813.317315][T24626] team0: Port device dummy0 removed [ 1813.332125][T24626] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1813.751201][T22764] usb 2-1: USB disconnect, device number 74 [ 1814.072711][ T6660] usbhid 1-1:0.0: can't add hid device: -71 [ 1814.092076][ T6660] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1814.114625][ T6660] usb 1-1: USB disconnect, device number 53 [ 1814.315773][T24642] overlayfs: failed to clone lowerpath [ 1815.761754][T24668] comedi comedi0: Minor 3 could not be opened [ 1817.373907][T24690] overlayfs: failed to clone lowerpath [ 1819.446108][T24704] fuse: Unknown parameter 'user_i00000000000000000000' [ 1819.864939][T24710] netlink: 'syz.1.4362': attribute type 3 has an invalid length. [ 1820.381569][ T6056] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1820.524824][ T6056] usb 2-1: device descriptor read/64, error -71 [ 1820.655248][T24715] netlink: 'syz.4.4363': attribute type 3 has an invalid length. [ 1820.781850][ T6056] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1820.809350][T24719] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1820.951946][ T6056] usb 2-1: device descriptor read/64, error -71 [ 1821.062262][ T6056] usb usb2-port1: attempt power cycle [ 1822.212501][ T6056] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1822.403939][ T6056] usb 2-1: device descriptor read/8, error -71 [ 1822.435833][T24738] tipc: Enabling of bearer rejected, failed to enable media [ 1822.511135][T24744] overlayfs: failed to clone lowerpath [ 1822.691076][ T6056] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1823.022321][ T6056] usb 2-1: device descriptor read/8, error -71 [ 1823.172328][ T6056] usb usb2-port1: unable to enumerate USB device [ 1823.466294][T24755] fuse: Bad value for 'fd' [ 1823.531889][T18375] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1823.624267][ T30] audit: type=1326 audit(1765646312.373:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24757 comm="syz.1.4373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d698f749 code=0x7ffc0000 [ 1823.652160][ T30] audit: type=1326 audit(1765646312.403:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24757 comm="syz.1.4373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f15d698f749 code=0x7ffc0000 [ 1823.684894][ T30] audit: type=1326 audit(1765646312.403:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24757 comm="syz.1.4373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d698f749 code=0x7ffc0000 [ 1823.712241][T18375] usb 1-1: Using ep0 maxpacket: 32 [ 1823.717968][ T30] audit: type=1326 audit(1765646312.403:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24757 comm="syz.1.4373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d698f749 code=0x7ffc0000 [ 1823.743750][T18375] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1823.770437][T18375] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 1823.788343][T18375] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1823.815856][T18375] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1823.835554][T18375] usb 1-1: config 128 has no interface number 0 [ 1824.310726][T18375] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1824.332154][T18375] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1824.351893][T18375] usb 1-1: config 128 interface 127 has no altsetting 0 [ 1824.414747][T18375] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1824.515594][T18375] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1824.568024][T18375] usb 1-1: Product: syz [ 1824.668965][T18375] usb 1-1: Manufacturer: syz [ 1824.675670][T18375] usb 1-1: SerialNumber: syz [ 1826.167731][T18375] usb 1-1: USB disconnect, device number 54 [ 1826.188126][T24335] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 1826.228471][T24797] overlayfs: failed to clone lowerpath [ 1826.236272][T24465] udevd[24465]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1826.268591][T16758] Bluetooth: hci3: Frame reassembly failed (-84) [ 1826.306081][T16758] Bluetooth: hci3: Frame reassembly failed (-84) [ 1826.363221][T24335] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 1826.373811][T24335] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1826.490234][T24335] usb 4-1: config 8 has no interface number 0 [ 1826.658146][T24335] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1826.773100][T24335] usb 4-1: config 8 interface 177 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1826.798459][T24335] usb 4-1: config 8 interface 177 has no altsetting 0 [ 1826.831969][T24335] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1826.847795][T24335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1826.873633][T24789] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1827.110187][T24335] usb 4-1: string descriptor 0 read error: -71 [ 1827.126357][T24335] ir_toy 4-1:8.177: required endpoints not found [ 1827.143041][T24335] usb 4-1: USB disconnect, device number 26 [ 1827.357528][T24812] netlink: 'syz.2.4386': attribute type 10 has an invalid length. [ 1827.365774][T24812] dummy0: left promiscuous mode [ 1827.418149][T24813] netlink: 'syz.2.4386': attribute type 10 has an invalid length. [ 1827.437948][T24814] fuse: Bad value for 'fd' [ 1827.778319][T24812] team0: Port device dummy0 added [ 1827.791347][T24813] team0: Port device dummy0 removed [ 1827.800080][T24813] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1828.275509][T24824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4389'. [ 1828.284555][T24824] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4389'. [ 1828.292435][T24089] Bluetooth: hci3: command 0xfc11 tx timeout [ 1828.293957][T17679] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 1829.237055][T24841] overlayfs: failed to clone lowerpath [ 1830.286422][T24863] fuse: Unknown parameter 'user_id00000000000000000000' [ 1830.709088][T24865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4401'. [ 1830.765691][T24865] macvlan2: entered promiscuous mode [ 1830.771024][T24865] macvlan2: entered allmulticast mode [ 1830.817788][T24865] mac80211_hwsim hwsim21 wlan0: entered allmulticast mode [ 1832.569173][T24888] kAFS: No cell specified [ 1832.587845][T24888] overlayfs: overlapping lowerdir path [ 1833.596465][T24913] fuse: Bad value for 'fd' [ 1834.346196][T24919] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4415'. [ 1834.411863][ T6056] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 1834.576695][ T6056] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1834.595599][ T6056] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1834.614758][ T6056] usb 2-1: config 0 descriptor?? [ 1834.822419][T24927] kAFS: No cell specified [ 1834.828385][T24927] overlayfs: overlapping lowerdir path [ 1835.792474][T24335] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 1835.965507][T24335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1836.004800][T24335] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 1836.035279][T24335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1836.236371][T24335] usb 4-1: config 0 descriptor?? [ 1837.142758][ T6056] pegasus 2-1:0.0: can't reset MAC [ 1837.148442][ T6056] pegasus 2-1:0.0: probe with driver pegasus failed with error -5 [ 1837.164300][T24335] usbhid 4-1:0.0: can't add hid device: -22 [ 1837.176950][T24335] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 1837.247676][T12065] usb 2-1: USB disconnect, device number 79 [ 1837.572126][T24335] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1837.802011][T24335] usb 1-1: Using ep0 maxpacket: 16 [ 1837.810099][T24335] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1837.820619][T24335] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1837.830758][T24335] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1838.290216][T24335] usb 1-1: config 0 descriptor?? [ 1838.318430][T24335] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input365 [ 1838.764939][T24973] input: syz0 as /devices/virtual/input/input366 [ 1839.263629][ T5901] usb 4-1: USB disconnect, device number 27 [ 1839.663268][ T5901] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1839.949579][ T5901] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1839.985820][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1840.013144][ T5901] usb 4-1: Product: syz [ 1840.027404][ T5901] usb 4-1: Manufacturer: syz [ 1840.049964][ T5901] usb 4-1: SerialNumber: syz [ 1840.124265][ T5901] usb 4-1: config 0 descriptor?? [ 1840.145741][T24994] Device name cannot be null; rc = [-22] [ 1840.164628][ T5901] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1840.430805][ T5172] bcm5974 1-1:0.0: could not read from device [ 1840.504608][ T5172] bcm5974 1-1:0.0: could not read from device [ 1840.517854][T24335] usb 1-1: USB disconnect, device number 55 [ 1840.535590][ T5172] bcm5974 1-1:0.0: could not read from device [ 1840.621088][ T6009] Bluetooth: hci3: Frame reassembly failed (-84) [ 1840.635002][ T6009] Bluetooth: hci3: Frame reassembly failed (-84) [ 1840.776939][ T5901] input: sonixb as /devices/platform/dummy_hcd.3/usb4/4-1/input/input367 [ 1840.930349][ T6660] usb 4-1: USB disconnect, device number 28 [ 1841.325533][ T30] audit: type=1400 audit(1765646330.063:1706): avc: denied { getattr } for pid=25007 comm="syz.1.4441" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1841.926465][T25015] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1842.682587][T17679] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 1843.262024][ T6660] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1843.831844][ T6660] usb 1-1: Using ep0 maxpacket: 16 [ 1843.840637][ T6660] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1843.874980][ T6660] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1843.898886][T25047] Device name cannot be null; rc = [-22] [ 1843.907339][ T6660] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1843.921553][ T6660] usb 1-1: config 0 descriptor?? [ 1843.939523][ T6660] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input368 [ 1844.246025][T25053] overlayfs: failed to clone upperpath [ 1844.455638][T25058] input: syz0 as /devices/virtual/input/input369 [ 1845.051893][T22764] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1845.324386][T22764] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1845.341951][T22764] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1845.356271][T22764] usb 2-1: Product: syz [ 1845.375092][T22764] usb 2-1: Manufacturer: syz [ 1845.387988][T22764] usb 2-1: SerialNumber: syz [ 1845.410650][T22764] usb 2-1: config 0 descriptor?? [ 1845.437882][T22764] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1845.880627][T22764] input: sonixb as /devices/platform/dummy_hcd.1/usb2/2-1/input/input370 [ 1846.076689][ T5172] bcm5974 1-1:0.0: could not read from device [ 1846.126177][ T5172] bcm5974 1-1:0.0: could not read from device [ 1846.157561][ T6660] usb 1-1: USB disconnect, device number 56 [ 1846.213198][T22764] usb 2-1: USB disconnect, device number 80 [ 1847.073928][T25089] Device name cannot be null; rc = [-22] [ 1848.499486][T25098] sctp: [Deprecated]: syz.2.4465 (pid 25098) Use of int in max_burst socket option. [ 1848.499486][T25098] Use struct sctp_assoc_value instead [ 1848.991979][ T6660] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1849.167202][ T6660] usb 4-1: Using ep0 maxpacket: 16 [ 1849.190760][ T6660] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1849.216557][ T6660] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1849.245871][ T6660] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1849.340455][ T6660] usb 4-1: config 0 descriptor?? [ 1849.416596][ T6660] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input371 [ 1850.444170][T25108] input: syz0 as /devices/virtual/input/input372 [ 1850.474746][ T5901] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1850.668648][T25113] Device name cannot be null; rc = [-22] [ 1850.696628][ T5901] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1850.717469][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1850.736160][ T5901] usb 1-1: Product: syz [ 1850.745788][ T5901] usb 1-1: Manufacturer: syz [ 1850.761293][ T5901] usb 1-1: SerialNumber: syz [ 1850.793545][ T5901] usb 1-1: config 0 descriptor?? [ 1850.836911][ T5901] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1850.881179][ T5901] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1850.930914][ T5901] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1851.167019][T25118] input: syz1 as /devices/virtual/input/input373 [ 1851.423073][ T5901] usb 1-1: media controller created [ 1851.494369][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1851.791993][ T5172] bcm5974 4-1:0.0: could not read from device [ 1851.809699][ T6660] usb 4-1: USB disconnect, device number 29 [ 1851.911507][T24959] bcm5974 4-1:0.0: could not read from device [ 1851.988079][ T5901] DVB: Unable to find symbol mt352_attach() [ 1852.237981][ T5901] DVB: Unable to find symbol nxt6000_attach() [ 1852.283420][ T5901] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1852.355962][ T5901] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input374 [ 1852.443012][ T5901] dvb-usb: schedule remote query interval to 1000 msecs. [ 1852.506794][ T5901] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1852.589144][ T5901] dvb-usb: bulk message failed: -22 (7/0) [ 1852.642035][ T5901] dvb-usb: bulk message failed: -22 (7/0) [ 1852.736450][ T5901] usb 1-1: USB disconnect, device number 57 [ 1852.983573][ T5901] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1853.004864][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.011231][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.920525][T25152] sctp: [Deprecated]: syz.3.4477 (pid 25152) Use of int in max_burst socket option. [ 1853.920525][T25152] Use struct sctp_assoc_value instead [ 1854.911964][ T5901] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1855.249677][T25169] Device name cannot be null; rc = [-22] [ 1855.778818][ T5901] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1855.836488][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1855.880149][ T5901] usb 1-1: Product: syz [ 1855.893469][T25175] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4486'. [ 1855.913713][ T5901] usb 1-1: Manufacturer: syz [ 1855.936295][ T5901] usb 1-1: SerialNumber: syz [ 1855.981065][ T5901] usb 1-1: config 0 descriptor?? [ 1856.030786][ T5901] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1856.556356][T25183] fuse: Unknown parameter '0xffffffffffffffff' [ 1857.037863][ T5901] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1857.246830][T25184] input: syz1 as /devices/virtual/input/input375 [ 1857.415474][ T5901] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1857.449649][ T5901] usb 1-1: media controller created [ 1857.556835][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1857.645031][T25189] tipc: Enabling of bearer rejected, failed to enable media [ 1857.760693][T25188] usb usb8: usbfs: process 25188 (syz.1.4490) did not claim interface 0 before use [ 1858.165985][T24089] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1858.234309][ T5901] DVB: Unable to find symbol mt352_attach() [ 1859.202368][T25209] netlink: 'syz.2.4496': attribute type 10 has an invalid length. [ 1859.267220][T25210] netlink: 'syz.2.4496': attribute type 10 has an invalid length. [ 1859.391733][ T5901] DVB: Unable to find symbol nxt6000_attach() [ 1859.417827][ T5901] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1859.462433][ T5901] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input376 [ 1859.510531][ T5901] dvb-usb: schedule remote query interval to 1000 msecs. [ 1859.534121][ T5901] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1859.566327][ T5901] dvb-usb: bulk message failed: -22 (7/0) [ 1859.580883][ T5901] dvb-usb: bulk message failed: -22 (7/0) [ 1859.617029][ T5901] usb 1-1: USB disconnect, device number 58 [ 1860.257950][T25209] bond0: (slave dummy0): Releasing backup interface [ 1860.389732][T25209] team0: Port device dummy0 added [ 1860.434837][T25210] team0: Port device dummy0 removed [ 1860.454126][T25210] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1860.488984][ T5901] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1860.625836][T25225] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1860.672204][ T6660] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 1861.379103][T25233] fuse: Unknown parameter '0xffffffffffffffff' [ 1861.901697][ T6660] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1861.981580][ T6660] usb 4-1: New USB device found, idVendor=05ac, idProduct=0323, bcdDevice= 0.00 [ 1862.008721][ T6660] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1862.044473][ T6660] usb 4-1: config 0 descriptor?? [ 1863.002234][ T5901] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1863.171851][ T5901] usb 2-1: Using ep0 maxpacket: 16 [ 1863.178954][ T5901] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1863.188021][ T5901] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1863.205828][ T5901] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1864.211889][ T6660] usbhid 4-1:0.0: can't add hid device: -71 [ 1864.267125][T25249] fuse: Bad value for 'fd' [ 1864.381560][ T6660] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1865.051944][ T6660] usb 4-1: USB disconnect, device number 30 [ 1865.123713][ T5901] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1865.144594][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1865.152629][ T5901] usb 2-1: Product: syz [ 1865.156848][ T5901] usb 2-1: Manufacturer: syz [ 1865.161440][ T5901] usb 2-1: SerialNumber: syz [ 1865.480644][T25260] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4505'. [ 1865.596226][T25261] overlayfs: workdir and upperdir must reside under the same mount [ 1865.934063][ T5901] usb 2-1: 0:2 : does not exist [ 1866.328110][T25269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4510'. [ 1866.374976][T25269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4510'. [ 1866.458451][T25269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4510'. [ 1866.518089][T25274] afs: Unknown parameter 'dy' [ 1866.618413][T25276] overlayfs: failed to clone lowerpath [ 1866.813322][ T5901] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 1866.965481][ T5901] usb 2-1: USB disconnect, device number 81 [ 1867.024446][T24997] udevd[24997]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1867.381957][T25283] fuse: Unknown parameter '0x0000000000000007' [ 1868.237739][T25291] Device name cannot be null; rc = [-22] [ 1869.738565][T25306] tmpfs: Unknown parameter 'òÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿtmpfs' [ 1870.261946][ T5901] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1870.510710][T25308] futex_wake_op: syz.1.4514 tries to shift op by 144; fix this program [ 1870.532078][ T5901] usb 1-1: Using ep0 maxpacket: 16 [ 1870.615633][ T5901] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1870.633227][ T5901] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1870.645946][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1870.659080][ T5901] usb 1-1: config 0 descriptor?? [ 1870.978488][ T5901] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input377 [ 1871.280921][T25315] input: syz0 as /devices/virtual/input/input378 [ 1872.966329][ T5172] bcm5974 1-1:0.0: could not read from device [ 1873.005218][ T5901] usb 1-1: USB disconnect, device number 59 [ 1873.048295][T25107] bcm5974 1-1:0.0: could not read from device [ 1873.124965][T25329] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1873.679239][T25337] fuse: Unknown parameter '0xffffffffffffffff' [ 1876.166516][T25353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4531'. [ 1876.180227][T25353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4531'. [ 1877.805082][T25379] 9p: Bad value for 'rfdno' [ 1878.201912][T22764] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1878.274244][T25392] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4543'. [ 1879.391267][T19042] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1879.441490][T22764] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1879.473649][T22764] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1879.496627][T22764] usb 2-1: Product: syz [ 1879.500803][T22764] usb 2-1: Manufacturer: syz [ 1879.525965][T22764] usb 2-1: SerialNumber: syz [ 1879.543378][T22764] usb 2-1: config 0 descriptor?? [ 1879.580777][T22764] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1879.597829][T19042] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1879.614835][T19042] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1879.661879][ T5951] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 1879.679592][T19042] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1879.702844][T19042] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1879.721964][T19042] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1879.754874][T19042] usb 1-1: config 0 descriptor?? [ 1879.853954][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1879.867214][ T5951] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1879.882626][ T5951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1879.904988][ T5951] usb 4-1: config 0 descriptor?? [ 1879.989314][T22764] input: sonixb as /devices/platform/dummy_hcd.1/usb2/2-1/input/input379 [ 1880.147419][T25405] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1880.213432][ T5951] usb 4-1: string descriptor 0 read error: -71 [ 1880.257729][T22764] usb 2-1: USB disconnect, device number 82 [ 1880.274384][ T5951] usb 4-1: USB disconnect, device number 31 [ 1880.711706][T25423] afs: Unknown parameter 'dy' [ 1880.724690][T25423] overlayfs: failed to clone lowerpath [ 1881.554537][T19042] usbhid 1-1:0.0: can't add hid device: -71 [ 1882.317954][T19042] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1882.331557][T19042] usb 1-1: USB disconnect, device number 60 [ 1884.068246][ T1319] Bluetooth: hci3: Frame reassembly failed (-84) [ 1884.081531][ T1319] Bluetooth: hci3: Frame reassembly failed (-84) [ 1885.565004][T25472] netlink: 'syz.2.4568': attribute type 3 has an invalid length. [ 1885.672907][T25474] Device name cannot be null; rc = [-22] [ 1885.782267][ T5936] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 1885.954722][ T5936] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1885.961434][ T5936] usb 4-1: New USB device found, idVendor=05ac, idProduct=0323, bcdDevice= 0.00 [ 1885.970975][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1885.980857][ T5936] usb 4-1: config 0 descriptor?? [ 1886.230799][T24089] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 1886.239451][T17679] Bluetooth: hci3: command 0xfc11 tx timeout [ 1886.494494][ T5936] magicmouse 0003:05AC:0323.0025: item fetching failed at offset 3/5 [ 1886.503429][ T5936] magicmouse 0003:05AC:0323.0025: magicmouse hid parse failed [ 1886.510989][ T5936] magicmouse 0003:05AC:0323.0025: probe with driver magicmouse failed with error -22 [ 1887.293223][T25470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1887.309933][T25470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1887.323548][T25470] netlink: 'syz.3.4567': attribute type 10 has an invalid length. [ 1887.335159][T25470] bond0: (slave dummy0): Releasing backup interface [ 1887.527487][T25486] netlink: 'syz.3.4567': attribute type 10 has an invalid length. [ 1887.689907][T25470] team0: Port device dummy0 added [ 1887.944372][T25486] team0: Port device dummy0 removed [ 1888.277080][T25486] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1889.404144][ T5951] usb 4-1: USB disconnect, device number 32 [ 1890.148763][T25521] netlink: 'syz.3.4579': attribute type 3 has an invalid length. [ 1890.513651][ T5951] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1890.611873][T24335] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1890.661848][ T5951] usb 4-1: device descriptor read/64, error -71 [ 1890.785765][T24335] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1890.803234][T24335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1890.819812][T24335] usb 1-1: Product: syz [ 1890.828537][T24335] usb 1-1: Manufacturer: syz [ 1890.838035][T24335] usb 1-1: SerialNumber: syz [ 1890.858932][T24335] hub 1-1:24.0: bad descriptor, ignoring hub [ 1890.872255][T24335] hub 1-1:24.0: probe with driver hub failed with error -5 [ 1890.911837][ T5951] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1891.041841][ T5951] usb 4-1: device descriptor read/64, error -71 [ 1891.063975][T24335] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 1891.152162][ T5951] usb usb4-port1: attempt power cycle [ 1891.214404][T24335] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1891.223461][T24335] dib0700: firmware download failed at 7 with -22 [ 1891.252783][T24335] usb 1-1: USB disconnect, device number 61 [ 1892.301829][ T5951] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1892.346316][T25542] Device name cannot be null; rc = [-22] [ 1892.538679][ T5951] usb 4-1: device descriptor read/8, error -71 [ 1892.812079][ T5951] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1892.846484][ T5951] usb 4-1: device descriptor read/8, error -71 [ 1892.984266][T25554] netlink: 'syz.2.4588': attribute type 3 has an invalid length. [ 1893.159172][ T5951] usb usb4-port1: unable to enumerate USB device [ 1893.299445][T25563] netlink: 'syz.4.4590': attribute type 10 has an invalid length. [ 1893.756390][T25567] netlink: 'syz.4.4590': attribute type 10 has an invalid length. [ 1893.769438][T25563] bond0: (slave dummy0): Releasing backup interface [ 1893.790224][T25567] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1898.893434][T24335] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1899.461829][T24335] usb 2-1: Using ep0 maxpacket: 32 [ 1899.475003][T24335] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1899.495640][T24335] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1899.515967][T24335] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1899.535342][T24335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1899.552067][T24335] usb 2-1: Product: syz [ 1899.560279][T24335] usb 2-1: Manufacturer: syz [ 1899.570662][T24335] usb 2-1: SerialNumber: syz [ 1900.092538][T22764] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 1900.734628][T22764] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1900.741295][T22764] usb 1-1: New USB device found, idVendor=05ac, idProduct=0323, bcdDevice= 0.00 [ 1900.810235][T22764] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1900.844332][ T9] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 1900.860115][T22764] usb 1-1: config 0 descriptor?? [ 1900.884851][T24335] usb 2-1: 0:2 : does not exist [ 1900.947272][T24335] usb 2-1: USB disconnect, device number 83 [ 1901.051948][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1901.095767][T25617] udevd[25617]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1901.121116][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 1901.156547][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1901.183258][ T9] usb 4-1: config 0 descriptor?? [ 1901.210433][ T9] usbhid 4-1:0.0: can't add hid device: -22 [ 1901.232217][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 1901.323175][T22764] magicmouse 0003:05AC:0323.0026: item fetching failed at offset 3/5 [ 1901.342877][T22764] magicmouse 0003:05AC:0323.0026: magicmouse hid parse failed [ 1901.368401][T22764] magicmouse 0003:05AC:0323.0026: probe with driver magicmouse failed with error -22 [ 1901.442029][T24335] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1901.527571][T25631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1901.548035][T25631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1901.557147][T25631] netlink: 'syz.0.4610': attribute type 10 has an invalid length. [ 1901.569527][T25631] bond0: (slave dummy0): Releasing backup interface [ 1901.584792][T25631] team0: Port device dummy0 added [ 1901.602153][T24335] usb 2-1: Using ep0 maxpacket: 16 [ 1901.607427][T25631] netlink: 'syz.0.4610': attribute type 10 has an invalid length. [ 1901.621873][T24335] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1901.648200][T25631] team0: Port device dummy0 removed [ 1901.657775][T24335] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1901.670724][T25631] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1901.682790][T24335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1901.732270][T24335] usb 2-1: config 0 descriptor?? [ 1901.776139][T24335] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input380 [ 1901.869060][ T9] usb 1-1: USB disconnect, device number 62 [ 1902.287591][T25663] input: syz0 as /devices/virtual/input/input381 [ 1904.336739][ T5172] bcm5974 2-1:0.0: could not read from device [ 1904.545033][ T5172] bcm5974 2-1:0.0: could not read from device [ 1905.057636][T24335] usb 2-1: USB disconnect, device number 84 [ 1905.069301][ T5172] bcm5974 2-1:0.0: could not read from device [ 1905.170618][T22764] usb 4-1: USB disconnect, device number 37 [ 1905.441929][T24335] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1906.594497][ T30] audit: type=1326 audit(1765646394.853:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25685 comm="syz.3.4622" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f30a2f8f749 code=0x0 [ 1907.042588][T24335] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1907.051637][T24335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1907.068836][T24335] usb 2-1: Product: syz [ 1907.080051][T24335] usb 2-1: Manufacturer: syz [ 1907.105232][T24335] usb 2-1: SerialNumber: syz [ 1907.133712][T24335] usb 2-1: config 0 descriptor?? [ 1907.171455][T24335] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1907.539931][ T6660] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1908.037352][ T6660] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1908.081970][ T6660] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1908.090067][ T6660] usb 4-1: Product: syz [ 1908.100010][ T6660] usb 4-1: Manufacturer: syz [ 1908.242065][ T6660] usb 4-1: SerialNumber: syz [ 1908.262553][ T6660] usb 4-1: config 0 descriptor?? [ 1908.276972][ T6660] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1908.354781][T25702] fuse: Bad value for 'fd' [ 1908.765798][ T6660] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1908.807222][ T6660] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1908.845941][ T6660] usb 4-1: media controller created [ 1908.916250][ T6660] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1908.984171][T24335] gspca_sunplus: reg_w_riv err -110 [ 1909.015632][T24335] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 1909.068511][T25692] input: syz1 as /devices/virtual/input/input382 [ 1909.189321][T25708] netlink: 'syz.2.4627': attribute type 10 has an invalid length. [ 1909.210646][T25708] bond0: (slave dummy0): Releasing backup interface [ 1909.227864][T25708] team0: Port device dummy0 added [ 1909.241148][T25708] netlink: 'syz.2.4627': attribute type 10 has an invalid length. [ 1909.269011][T25708] team0: Port device dummy0 removed [ 1909.276992][ T6660] DVB: Unable to find symbol mt352_attach() [ 1909.279677][T25708] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1909.369065][ T6660] DVB: Unable to find symbol nxt6000_attach() [ 1909.398230][ T6660] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1909.440437][ T6660] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input383 [ 1909.499117][ T6660] dvb-usb: schedule remote query interval to 1000 msecs. [ 1909.515714][ T6660] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1909.527042][ T6660] dvb-usb: bulk message failed: -22 (7/0) [ 1909.535339][ T6660] dvb-usb: bulk message failed: -22 (7/0) [ 1909.594019][ T5901] usb 2-1: USB disconnect, device number 85 [ 1910.696955][T19042] dvb-usb: bulk message failed: -22 (7/0) [ 1910.719644][T19042] dvb-usb: error while querying for an remote control event. [ 1912.049963][ T6660] dvb-usb: bulk message failed: -22 (7/0) [ 1912.091852][ T6660] dvb-usb: error while querying for an remote control event. [ 1912.375917][T25735] Device name cannot be null; rc = [-22] [ 1913.162330][T19042] dvb-usb: bulk message failed: -22 (7/0) [ 1913.212172][T19042] dvb-usb: error while querying for an remote control event. [ 1914.927656][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.931624][T22764] dvb-usb: bulk message failed: -22 (7/0) [ 1914.934441][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.940020][T22764] dvb-usb: error while querying for an remote control event. [ 1915.930439][T22764] usb 4-1: USB disconnect, device number 38 [ 1916.038497][T22764] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1916.251827][T19042] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1916.421864][T19042] usb 2-1: Using ep0 maxpacket: 16 [ 1916.444992][T19042] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1916.487668][T19042] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1916.530797][T19042] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1916.555905][T19042] usb 2-1: config 0 descriptor?? [ 1916.582799][T19042] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input384 [ 1917.973240][T25773] input: syz0 as /devices/virtual/input/input385 [ 1918.496939][T25790] Device name cannot be null; rc = [-22] [ 1918.508817][ T9] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1919.023401][T25789] 9p: Bad value for 'rfdno' [ 1919.318873][ T5172] bcm5974 2-1:0.0: could not read from device [ 1919.502351][ T5172] bcm5974 2-1:0.0: could not read from device [ 1919.515625][ T9] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1919.524877][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1919.539527][ T5172] bcm5974 2-1:0.0: could not read from device [ 1919.966508][T19042] usb 2-1: USB disconnect, device number 86 [ 1919.985122][ T9] usb 1-1: Product: syz [ 1919.996401][T25797] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1919.999216][T25797] @0Ù: renamed from bond_slave_1 (while UP) [ 1920.097093][ T9] usb 1-1: Manufacturer: syz [ 1920.101904][ T9] usb 1-1: SerialNumber: syz [ 1920.151613][ T9] usb 1-1: config 0 descriptor?? [ 1920.161993][ T9] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1920.213236][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1920.223761][ T9] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1920.233431][ T9] usb 1-1: media controller created [ 1920.574552][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1920.869863][T25806] input: syz1 as /devices/virtual/input/input386 [ 1920.979810][ T9] DVB: Unable to find symbol mt352_attach() [ 1921.101013][T25802] mkiss: ax0: crc mode is auto. [ 1921.373258][ T9] DVB: Unable to find symbol nxt6000_attach() [ 1921.379580][ T9] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1921.422985][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input387 [ 1921.972102][ T9] dvb-usb: schedule remote query interval to 1000 msecs. [ 1921.995695][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1922.008431][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 1922.016044][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 1922.032029][ T9] usb 1-1: USB disconnect, device number 63 [ 1922.099297][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1922.277649][T25824] netlink: 'syz.2.4658': attribute type 10 has an invalid length. [ 1922.286832][T24335] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1922.297634][T25824] bond0: (slave dummy0): Releasing backup interface [ 1922.311550][T25824] team0: Port device dummy0 added [ 1922.323329][T25824] netlink: 'syz.2.4658': attribute type 10 has an invalid length. [ 1922.356566][T25824] team0: Port device dummy0 removed [ 1922.372613][T25824] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1922.712723][T24335] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1922.725953][T24335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1922.747900][T24335] usb 4-1: Product: syz [ 1922.772007][T24335] usb 4-1: Manufacturer: syz [ 1922.776683][T24335] usb 4-1: SerialNumber: syz [ 1922.794760][T24335] usb 4-1: config 0 descriptor?? [ 1922.813297][T24335] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1922.983045][T25838] sctp: [Deprecated]: syz.1.4661 (pid 25838) Use of int in max_burst socket option. [ 1922.983045][T25838] Use struct sctp_assoc_value instead [ 1925.942412][T24335] gspca_sunplus: reg_w_riv err -110 [ 1926.005864][T24335] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 1926.682125][T24705] usb 4-1: USB disconnect, device number 39 [ 1927.104738][T24335] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1927.286982][T24335] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1927.297978][T24335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1927.306528][T24335] usb 2-1: Product: syz [ 1927.315219][T24335] usb 2-1: Manufacturer: syz [ 1927.327778][T24335] usb 2-1: SerialNumber: syz [ 1927.787981][ T30] audit: type=1400 audit(1765646416.523:1708): avc: denied { unmount } for pid=25872 comm="syz.4.4672" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 1928.011213][T25881] overlayfs: failed to resolve './file0': -2 [ 1928.108350][T24335] rtl8150 2-1:1.0: couldn't reset the device [ 1928.125553][T24335] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 1928.141956][T19042] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 1928.173660][T24335] usb 2-1: USB disconnect, device number 87 [ 1928.324650][T19042] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1928.336188][T19042] usb 1-1: New USB device found, idVendor=05ac, idProduct=0323, bcdDevice= 0.00 [ 1928.369625][T19042] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1928.405357][T19042] usb 1-1: config 0 descriptor?? [ 1928.859819][T25893] fuse: Bad value for 'fd' [ 1929.604689][T25895] sctp: [Deprecated]: syz.2.4679 (pid 25895) Use of int in max_burst socket option. [ 1929.604689][T25895] Use struct sctp_assoc_value instead [ 1929.640479][T19042] magicmouse 0003:05AC:0323.0027: item fetching failed at offset 3/5 [ 1929.677381][T19042] magicmouse 0003:05AC:0323.0027: magicmouse hid parse failed [ 1929.701997][T19042] magicmouse 0003:05AC:0323.0027: probe with driver magicmouse failed with error -22 [ 1929.794980][T25883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1929.804853][T25883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1929.815393][T25883] netlink: 'syz.0.4674': attribute type 10 has an invalid length. [ 1929.835399][T25883] bond0: (slave dummy0): Releasing backup interface [ 1929.853729][T25883] team0: Port device dummy0 added [ 1929.869241][T25883] netlink: 'syz.0.4674': attribute type 10 has an invalid length. [ 1929.894655][T25883] team0: Port device dummy0 removed [ 1929.915339][T25883] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1929.992955][T24335] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1930.000708][ T5901] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1930.165994][T24335] usb 4-1: Using ep0 maxpacket: 16 [ 1930.171427][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 1930.188203][T24335] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1930.209877][ T5901] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1930.226488][T24335] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1930.239865][ T5901] usb 2-1: config 0 has no interface number 0 [ 1930.252414][T25908] overlayfs: failed to clone lowerpath [ 1930.259424][ T5901] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1930.267802][T24335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1930.280726][ T5901] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1930.295495][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1930.305340][T24335] usb 4-1: config 0 descriptor?? [ 1930.306592][T19042] usb 1-1: USB disconnect, device number 64 [ 1930.328228][T24335] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input388 [ 1930.340224][ T5901] usb 2-1: Product: syz [ 1930.353392][ T5901] usb 2-1: Manufacturer: syz [ 1930.358063][ T5901] usb 2-1: SerialNumber: syz [ 1930.383351][ T5901] usb 2-1: config 0 descriptor?? [ 1930.399120][ T5901] smsc75xx v1.0.0 [ 1930.870843][T25921] input: syz0 as /devices/virtual/input/input389 [ 1931.593908][T25930] sctp: [Deprecated]: syz.2.4691 (pid 25930) Use of int in max_burst socket option. [ 1931.593908][T25930] Use struct sctp_assoc_value instead [ 1931.699050][ T5901] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1931.726813][ T5901] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1931.749200][ T5901] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1931.777963][ T5901] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 1932.027268][T25937] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1932.909622][T24335] usb 4-1: USB disconnect, device number 40 [ 1932.915776][ T5172] bcm5974 4-1:0.0: could not read from device [ 1932.922943][ T5172] bcm5974 4-1:0.0: could not read from device [ 1932.934630][T25618] bcm5974 4-1:0.0: could not read from device [ 1933.094751][ T5936] usb 2-1: USB disconnect, device number 88 [ 1933.158126][T25573] Bluetooth: hci3: Frame reassembly failed (-84) [ 1933.619415][T25954] netlink: 'syz.4.4698': attribute type 3 has an invalid length. [ 1933.869034][T25958] Device name cannot be null; rc = [-22] [ 1934.822690][T17679] Bluetooth: hci1: unknown advertising packet type: 0x6c [ 1934.825885][T17679] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1934.992174][ T9] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 1935.161849][T24089] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 1935.161946][T17679] Bluetooth: hci3: command 0xfc11 tx timeout [ 1935.217310][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1935.252419][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0323, bcdDevice= 0.00 [ 1935.289460][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1935.330823][ T9] usb 1-1: config 0 descriptor?? [ 1935.401848][ T5936] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1935.551827][T24335] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1935.561845][ T5936] usb 2-1: Using ep0 maxpacket: 16 [ 1935.570924][ T5936] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1935.592253][ T5936] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1935.613023][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1935.635170][ T5936] usb 2-1: config 0 descriptor?? [ 1935.651106][ T5936] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input390 [ 1935.711902][T24335] usb 4-1: Using ep0 maxpacket: 32 [ 1935.725051][T24335] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1935.754000][T24335] usb 4-1: config 0 has no interface number 0 [ 1935.770788][ T9] magicmouse 0003:05AC:0323.0028: item fetching failed at offset 3/5 [ 1935.779172][T24335] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1935.796164][T24335] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1935.806644][ T9] magicmouse 0003:05AC:0323.0028: magicmouse hid parse failed [ 1935.827057][ T9] magicmouse 0003:05AC:0323.0028: probe with driver magicmouse failed with error -22 [ 1935.837102][T24335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1935.847489][T24335] usb 4-1: Product: syz [ 1935.895024][T24335] usb 4-1: Manufacturer: syz [ 1935.899678][T24335] usb 4-1: SerialNumber: syz [ 1935.993837][T25964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1936.013949][T24335] usb 4-1: config 0 descriptor?? [ 1936.027004][T25964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1936.106400][T25987] input: syz0 as /devices/virtual/input/input391 [ 1936.547021][T24335] smsc75xx v1.0.0 [ 1936.569744][T25964] netlink: 'syz.0.4701': attribute type 10 has an invalid length. [ 1936.601512][T25964] bond0: (slave dummy0): Releasing backup interface [ 1936.633754][T25964] team0: Port device dummy0 added [ 1936.776221][ T5901] usb 1-1: USB disconnect, device number 65 [ 1937.176059][T25998] netlink: 'syz.4.4712': attribute type 3 has an invalid length. [ 1937.486820][T24335] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1937.520552][T24335] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1937.748293][T24335] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1937.763043][T24335] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 1938.180828][ T5172] bcm5974 2-1:0.0: could not read from device [ 1938.215869][ T5172] bcm5974 2-1:0.0: could not read from device [ 1938.228691][ T5936] usb 2-1: USB disconnect, device number 89 [ 1938.243965][ T5172] bcm5974 2-1:0.0: could not read from device [ 1938.358545][T26018] fuse: Bad value for 'fd' [ 1938.554762][T26020] Device name cannot be null; rc = [-22] [ 1938.653403][ T5936] usb 4-1: USB disconnect, device number 41 [ 1939.875653][ T5951] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1940.049073][ T5951] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1940.068560][ T5951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1940.077231][T26038] netlink: 'syz.4.4724': attribute type 3 has an invalid length. [ 1940.095457][ T5951] usb 1-1: Product: syz [ 1940.109830][ T5951] usb 1-1: Manufacturer: syz [ 1940.127561][ T5951] usb 1-1: SerialNumber: syz [ 1940.144930][ T5951] usb 1-1: config 0 descriptor?? [ 1940.163338][ T5951] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1940.282216][ T5901] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 1940.528960][ T5901] usb 4-1: config 0 has an invalid interface number: 30 but max is 0 [ 1940.687512][ T5951] gspca_sunplus: reg_r err -110 [ 1941.124028][ T5901] usb 4-1: config 0 has no interface number 0 [ 1941.171882][ T5901] usb 4-1: New USB device found, idVendor=0572, idProduct=d80b, bcdDevice=94.e2 [ 1941.180959][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1941.208380][ T5901] usb 4-1: config 0 descriptor?? [ 1941.541856][ T5951] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1941.575727][ T5901] usb 4-1: USB disconnect, device number 42 [ 1941.705688][ T5951] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1941.714916][ T5951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1941.723047][ T5951] usb 2-1: Product: syz [ 1941.727296][ T5951] usb 2-1: Manufacturer: syz [ 1941.731919][ T5951] usb 2-1: SerialNumber: syz [ 1941.738158][ T5951] usb 2-1: config 0 descriptor?? [ 1941.745183][ T5951] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1941.755722][ T5951] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1941.765828][ T5951] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1941.775159][ T5951] usb 2-1: media controller created [ 1941.787685][ T5951] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1941.818726][ T5951] DVB: Unable to find symbol mt352_attach() [ 1941.864275][ T5951] DVB: Unable to find symbol nxt6000_attach() [ 1941.870388][ T5951] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1941.885633][ T5951] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input392 [ 1941.900248][ T5951] dvb-usb: schedule remote query interval to 1000 msecs. [ 1941.907477][ T5951] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1941.917675][ T5951] dvb-usb: bulk message failed: -22 (7/0) [ 1941.923499][ T5951] dvb-usb: bulk message failed: -22 (7/0) [ 1942.415867][T26048] input: syz1 as /devices/virtual/input/input393 [ 1942.548216][T19042] usb 1-1: USB disconnect, device number 66 [ 1942.577051][T24335] usb 2-1: USB disconnect, device number 90 [ 1942.682639][T24335] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1942.820582][ T30] audit: type=1326 audit(1765646431.563:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26067 comm="syz.3.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a2f8f749 code=0x7ffc0000 [ 1942.863684][ T30] audit: type=1326 audit(1765646431.593:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26067 comm="syz.3.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f30a2f8f749 code=0x7ffc0000 [ 1942.904336][ T30] audit: type=1326 audit(1765646431.593:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26067 comm="syz.3.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a2f8f749 code=0x7ffc0000 [ 1942.948060][ T30] audit: type=1326 audit(1765646431.593:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26067 comm="syz.3.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f30a2f8df90 code=0x7ffc0000 [ 1942.976181][ T30] audit: type=1326 audit(1765646431.593:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26067 comm="syz.3.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a2f8f749 code=0x7ffc0000 [ 1943.037456][ T30] audit: type=1326 audit(1765646431.593:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26067 comm="syz.3.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f30a2f8f749 code=0x7ffc0000 [ 1943.068010][ T30] audit: type=1326 audit(1765646431.603:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26067 comm="syz.3.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a2f8f749 code=0x7ffc0000 [ 1943.859655][ T30] audit: type=1326 audit(1765646431.603:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26067 comm="syz.3.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a2f8f749 code=0x7ffc0000 [ 1943.921920][ T30] audit: type=1326 audit(1765646431.603:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26077 comm="syz.3.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f30a2fc2005 code=0x7ffc0000 [ 1944.022748][ T30] audit: type=1326 audit(1765646431.643:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26067 comm="syz.3.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f30a2f8f749 code=0x7ffc0000 [ 1944.104311][T26093] netlink: 'syz.4.4737': attribute type 3 has an invalid length. [ 1946.182015][ T9] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1946.357087][ T9] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1946.366558][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1946.374706][ T9] usb 1-1: Product: syz [ 1946.378885][ T9] usb 1-1: Manufacturer: syz [ 1946.384733][ T9] usb 1-1: SerialNumber: syz [ 1946.395260][ T9] usb 1-1: config 0 descriptor?? [ 1946.411339][ T9] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1946.424491][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1946.436958][ T9] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1946.447162][ T9] usb 1-1: media controller created [ 1946.999313][ T5951] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1947.581813][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1947.651172][T26117] dvb-usb: bulk message failed: -22 (7/0) [ 1947.668109][ T9] DVB: Unable to find symbol mt352_attach() [ 1947.741886][ T5951] usb 2-1: device descriptor read/64, error -71 [ 1947.758161][ T9] DVB: Unable to find symbol nxt6000_attach() [ 1947.776655][ T9] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1947.817135][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input395 [ 1947.891016][ T9] dvb-usb: schedule remote query interval to 1000 msecs. [ 1947.911878][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1947.947372][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 1947.964420][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 1948.000042][ T9] usb 1-1: USB disconnect, device number 67 [ 1948.071872][ T5951] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1948.104657][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1948.201961][ T5951] usb 2-1: device descriptor read/64, error -71 [ 1948.215014][T26145] netlink: 'syz.2.4750': attribute type 3 has an invalid length. [ 1948.312248][ T5951] usb usb2-port1: attempt power cycle [ 1949.032176][ T5951] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1949.351821][ T5951] usb 2-1: device descriptor read/8, error -71 [ 1949.404228][T26157] /dev/nullb0: Can't lookup blockdev [ 1949.627216][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 1949.688436][ T30] audit: type=1400 audit(1765646438.323:1736): avc: denied { read write } for pid=26154 comm="syz.1.4754" name="file0" dev="tmpfs" ino=1773 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1949.852973][ T30] audit: type=1400 audit(1765646438.323:1737): avc: denied { open } for pid=26154 comm="syz.1.4754" path="/328/file0" dev="tmpfs" ino=1773 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1949.876390][ T30] audit: type=1400 audit(1765646438.373:1738): avc: denied { getopt } for pid=26154 comm="syz.1.4754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1949.896892][ T5901] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 1950.782116][ T5901] usb 4-1: device descriptor read/64, error -71 [ 1951.022954][ T5901] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 1951.041970][ T9] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1951.151845][ T5951] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 1951.181886][ T5901] usb 4-1: device descriptor read/64, error -71 [ 1951.196563][ T5951] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1951.201812][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1951.215209][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1951.238072][ T5951] usb 2-1: New USB device found, idVendor=05ac, idProduct=0323, bcdDevice= 0.00 [ 1951.261103][ T5951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1951.267332][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1951.292183][ T5901] usb usb4-port1: attempt power cycle [ 1951.298420][ T5951] usb 2-1: config 0 descriptor?? [ 1951.306665][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1951.323294][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1951.334903][ T9] usb 1-1: Product: syz [ 1951.344568][ T9] usb 1-1: Manufacturer: syz [ 1951.349441][ T9] usb 1-1: SerialNumber: syz [ 1951.368162][ T9] usb 1-1: config 0 descriptor?? [ 1951.384481][ T9] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1951.395169][ T9] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1951.795032][ T5951] magicmouse 0003:05AC:0323.0029: item fetching failed at offset 3/5 [ 1951.822190][ T5901] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 1951.885795][T26187] Device name cannot be null; rc = [-22] [ 1952.291562][T26172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1952.292242][ T5901] usb 4-1: device descriptor read/8, error -71 [ 1952.309709][ T5951] magicmouse 0003:05AC:0323.0029: magicmouse hid parse failed [ 1952.321996][ T5951] magicmouse 0003:05AC:0323.0029: probe with driver magicmouse failed with error -22 [ 1952.325196][T26172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1952.509421][ T9] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1952.530432][ T9] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1952.575897][ T9] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 1952.599263][ T9] em28xx 1-1:0.0: No AC97 audio processor [ 1952.675333][ T9] usb 2-1: USB disconnect, device number 94 [ 1953.166363][T26209] Device name cannot be null; rc = [-22] [ 1953.817256][ T5951] usb 1-1: USB disconnect, device number 68 [ 1953.823940][T24705] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1953.836610][ T5951] em28xx 1-1:0.0: Disconnecting em28xx [ 1953.851302][ T5951] em28xx 1-1:0.0: Freeing device [ 1954.032889][T24705] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1954.044171][T24705] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1954.058787][T24705] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1954.068393][T24705] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1954.078963][T24705] usb 2-1: Manufacturer: syz [ 1954.086293][T24705] usb 2-1: config 0 descriptor?? [ 1954.101839][ T5936] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1954.242389][ T5951] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1954.276015][ T5936] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1954.292037][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1954.316204][ T5936] usb 4-1: Product: syz [ 1954.320403][ T5936] usb 4-1: Manufacturer: syz [ 1954.335334][ T5936] usb 4-1: SerialNumber: syz [ 1954.367812][ T5936] usb 4-1: config 0 descriptor?? [ 1954.380719][ T5936] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1954.425673][ T5951] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1954.461000][ T5936] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1954.502150][ T5951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1954.510287][ T5951] usb 1-1: Product: syz [ 1954.527088][T26230] Device name cannot be null; rc = [-22] [ 1954.605882][ T5951] usb 1-1: Manufacturer: syz [ 1954.670224][ T5951] usb 1-1: SerialNumber: syz [ 1954.699185][ T5936] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1954.992142][ T5936] usb 4-1: media controller created [ 1955.072545][T26232] input: syz1 as /devices/virtual/input/input396 [ 1955.346473][ T5951] usb 1-1: config 0 descriptor?? [ 1955.349973][ T5951] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1955.436519][ T5951] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1955.445574][ T5936] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1955.448340][ T5951] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1955.448393][ T5951] usb 1-1: media controller created [ 1955.495356][ T5951] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1955.529250][ T5936] DVB: Unable to find symbol mt352_attach() [ 1955.554753][ T5951] DVB: Unable to find symbol mt352_attach() [ 1955.760394][T26247] input: syz1 as /devices/virtual/input/input397 [ 1955.765661][ T5936] DVB: Unable to find symbol nxt6000_attach() [ 1956.069487][T26248] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4775'. [ 1956.088605][ T5936] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1956.107229][ T5951] DVB: Unable to find symbol nxt6000_attach() [ 1956.118332][ T5936] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input398 [ 1956.144452][ T5951] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1956.209073][ T5936] dvb-usb: schedule remote query interval to 1000 msecs. [ 1956.223747][ T5951] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input399 [ 1956.245321][ T5936] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1956.261650][ T5951] dvb-usb: schedule remote query interval to 1000 msecs. [ 1956.274635][ T5936] dvb-usb: bulk message failed: -22 (7/0) [ 1956.289529][ T5951] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1956.314157][ T5936] dvb-usb: bulk message failed: -22 (7/0) [ 1956.375136][ T5951] dvb-usb: bulk message failed: -22 (7/0) [ 1956.390008][ T5936] usb 4-1: USB disconnect, device number 47 [ 1956.413333][ T5951] dvb-usb: bulk message failed: -22 (7/0) [ 1956.658797][ T5936] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1956.660572][T24335] usb 1-1: USB disconnect, device number 69 [ 1956.765068][T24335] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1957.012098][ T5936] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1957.135397][T24705] uclogic 0003:256C:006D.002A: failed retrieving string descriptor #100: -71 [ 1957.154545][T24705] uclogic 0003:256C:006D.002A: failed retrieving pen parameters: -71 [ 1957.174517][T24705] uclogic 0003:256C:006D.002A: failed probing pen v1 parameters: -71 [ 1957.184690][ T5936] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 27, changing to 8 [ 1957.196983][T24705] uclogic 0003:256C:006D.002A: failed probing parameters: -71 [ 1957.207345][ T5936] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1957.216633][T24705] uclogic 0003:256C:006D.002A: probe with driver uclogic failed with error -71 [ 1957.226224][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1957.237456][ T5936] usb 4-1: Product: syz [ 1957.245940][T24705] usb 2-1: USB disconnect, device number 95 [ 1957.254096][ T5936] usb 4-1: Manufacturer: syz [ 1957.276638][ T5936] usb 4-1: SerialNumber: syz [ 1957.510272][T26268] Device name cannot be null; rc = [-22] [ 1959.192143][T26283] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1959.198712][T26283] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1959.312315][T26283] vhci_hcd vhci_hcd.0: Device attached [ 1959.366039][T26288] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1959.372591][T26288] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1959.538270][ T5936] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1959.544972][ T5936] cdc_ncm 4-1:1.0: setting rx_max = 16384 [ 1959.628984][T26288] vhci_hcd vhci_hcd.0: Device attached [ 1959.635122][T24335] usb 36-1: SetAddress Request (54) to port 0 [ 1959.641436][T24335] usb 36-1: new SuperSpeed USB device number 54 using vhci_hcd [ 1959.804384][T26255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4777'. [ 1960.120042][ T5936] cdc_ncm 4-1:1.0: setting tx_max = 16384 [ 1960.384295][ T9] usb 34-1: SetAddress Request (42) to port 0 [ 1960.401039][ T9] usb 34-1: new SuperSpeed USB device number 42 using vhci_hcd [ 1960.976911][ T5936] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1961.176039][T26307] overlayfs: failed to clone lowerpath [ 1961.958154][ T5936] usb 4-1: USB disconnect, device number 48 [ 1962.048814][ T5936] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 1962.173078][T26318] netlink: 'syz.2.4791': attribute type 3 has an invalid length. [ 1963.353010][T26284] vhci_hcd: connection reset by peer [ 1963.360490][T25718] vhci_hcd vhci_hcd.1: stop threads [ 1963.517153][T25718] vhci_hcd vhci_hcd.1: release socket [ 1964.160467][T25718] vhci_hcd vhci_hcd.1: disconnect device [ 1964.328650][T26290] vhci_hcd: connection reset by peer [ 1964.334897][ T6308] vhci_hcd vhci_hcd.0: stop threads [ 1964.353589][ T6308] vhci_hcd vhci_hcd.0: release socket [ 1964.375170][ T6308] vhci_hcd vhci_hcd.0: disconnect device [ 1964.423988][T26346] Device name cannot be null; rc = [-22] [ 1965.690826][T24335] usb 36-1: device descriptor read/8, error -110 [ 1965.697503][ T9] usb 34-1: device descriptor read/8, error -110 [ 2069.991728][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2069.998708][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P26282/1:b..l [ 2070.007418][ C0] rcu: (detected by 0, t=10502 jiffies, g=148869, q=344 ncpus=2) [ 2070.015220][ C0] task:syz.0.4784 state:R running task stack:27112 pid:26282 tgid:26278 ppid:19113 task_flags:0x40044c flags:0x00080003 [ 2070.030348][ C0] Call Trace: [ 2070.033638][ C0] [ 2070.036567][ C0] ? __schedule+0x10b9/0x6150 [ 2070.041261][ C0] __schedule+0x1139/0x6150 [ 2070.045791][ C0] ? __pfx___schedule+0x10/0x10 [ 2070.050664][ C0] preempt_schedule_irq+0x51/0x90 [ 2070.055691][ C0] irqentry_exit+0x1d8/0x8c0 [ 2070.060293][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2070.066277][ C0] RIP: 0010:__orc_find+0x5d/0xf0 [ 2070.071227][ C0] Code: ff df 49 89 ff 48 89 fd eb 0c 48 8d 6b 04 49 89 df 49 39 ec 72 4e 4c 89 e2 48 29 ea 48 89 d6 48 c1 ea 3f 48 c1 fe 02 48 01 f2 <48> d1 fa 48 8d 5c 95 00 48 89 da 48 c1 ea 03 0f b6 34 0a 48 89 da [ 2070.090928][ C0] RSP: 0018:ffffc90003f66ec8 EFLAGS: 00000202 [ 2070.097002][ C0] RAX: ffffffff9125dc28 RBX: ffffffff90a0c780 RCX: dffffc0000000000 [ 2070.105067][ C0] RDX: 0000000000000002 RSI: 0000000000000002 RDI: ffffffff90a0c774 [ 2070.113055][ C0] RBP: ffffffff90a0c774 R08: ffffffff9125dc8e R09: 00000000ffffffff [ 2070.121031][ C0] R10: 0000000000000002 R11: 000000000000a961 R12: ffffffff90a0c77c [ 2070.129008][ C0] R13: ffffffff81a9612d R14: ffffffff90a0c774 R15: ffffffff90a0c774 [ 2070.136989][ C0] ? stack_trace_save+0x8d/0xc0 [ 2070.141869][ C0] ? stack_trace_save+0x8d/0xc0 [ 2070.146719][ C0] unwind_next_frame+0x2ec/0x20a0 [ 2070.151836][ C0] ? stack_trace_save+0x8e/0xc0 [ 2070.156686][ C0] ? __unwind_start+0x45f/0x7f0 [ 2070.161543][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2070.167695][ C0] arch_stack_walk+0x94/0x100 [ 2070.172398][ C0] ? stack_trace_save+0x8e/0xc0 [ 2070.177285][ C0] stack_trace_save+0x8e/0xc0 [ 2070.181983][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 2070.187364][ C0] ? __lock_acquire+0x436/0x2890 [ 2070.192310][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 2070.197527][ C0] save_stack+0x160/0x1f0 [ 2070.201883][ C0] ? __pfx_save_stack+0x10/0x10 [ 2070.206756][ C0] ? page_ext_put+0x3e/0xd0 [ 2070.211275][ C0] __reset_page_owner+0x84/0x1a0 [ 2070.216226][ C0] free_unref_folios+0xa22/0x1610 [ 2070.221259][ C0] ? rcu_is_watching+0x12/0xc0 [ 2070.226028][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2070.231858][ C0] folios_put_refs+0x4be/0x750 [ 2070.236630][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 2070.241918][ C0] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 2070.248251][ C0] shmem_undo_range+0x58f/0x1140 [ 2070.253209][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 2070.258626][ C0] ? find_held_lock+0x2b/0x80 [ 2070.263350][ C0] ? percpu_counter_add_batch+0xca/0x200 [ 2070.269001][ C0] shmem_evict_inode+0x39e/0xbe0 [ 2070.273947][ C0] ? inode_wait_for_writeback+0x170/0x390 [ 2070.279672][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 2070.285132][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 2070.291215][ C0] ? find_held_lock+0x2b/0x80 [ 2070.295902][ C0] ? evict+0x37e/0xad0 [ 2070.299971][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 2070.305427][ C0] evict+0x3c2/0xad0 [ 2070.309318][ C0] ? find_held_lock+0x2b/0x80 [ 2070.314005][ C0] ? __pfx_evict+0x10/0x10 [ 2070.318512][ C0] ? iput.part.0+0x619/0x1190 [ 2070.323189][ C0] iput.part.0+0x621/0x1190 [ 2070.327702][ C0] iput+0x35/0x40 [ 2070.331329][ C0] dentry_unlink_inode+0x29c/0x480 [ 2070.336450][ C0] __dentry_kill+0x1d0/0x600 [ 2070.341038][ C0] finish_dput+0x76/0x480 [ 2070.345366][ C0] dput.part.0+0x451/0x570 [ 2070.349783][ C0] dput+0x1f/0x30 [ 2070.353413][ C0] __fput+0x51c/0xb70 [ 2070.357395][ C0] task_work_run+0x150/0x240 [ 2070.361991][ C0] ? __pfx_task_work_run+0x10/0x10 [ 2070.367104][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 2070.372314][ C0] do_exit+0x87f/0x2bd0 [ 2070.376474][ C0] ? __pfx_do_exit+0x10/0x10 [ 2070.381059][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 2070.386082][ C0] ? find_held_lock+0x2b/0x80 [ 2070.390767][ C0] do_group_exit+0xd3/0x2a0 [ 2070.395269][ C0] get_signal+0x2671/0x26d0 [ 2070.399780][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 2070.404727][ C0] ? __pfx_get_signal+0x10/0x10 [ 2070.409586][ C0] ? do_futex+0x122/0x350 [ 2070.413920][ C0] arch_do_signal_or_restart+0x8f/0x7e0 [ 2070.419469][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2070.425633][ C0] ? __x64_sys_recvmmsg+0x1d9/0x280 [ 2070.430845][ C0] exit_to_user_mode_loop+0x8c/0x540 [ 2070.436141][ C0] do_syscall_64+0x4ee/0xf80 [ 2070.440738][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2070.446628][ C0] RIP: 0033:0x7efd20f8f749 [ 2070.451035][ C0] RSP: 002b:00007efd21e16038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2070.459447][ C0] RAX: 0000000000010106 RBX: 00007efd211e6090 RCX: 00007efd20f8f749 [ 2070.467418][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 2070.475389][ C0] RBP: 00007efd21013f91 R08: 0000000000000000 R09: 0000000000000000 [ 2070.483353][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 2070.491326][ C0] R13: 00007efd211e6128 R14: 00007efd211e6090 R15: 00007fffbc7a91c8 [ 2070.499316][ C0] [ 2070.502333][ C0] rcu: rcu_preempt kthread starved for 10466 jiffies! g148869 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 2070.513608][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2070.523572][ C0] rcu: RCU grace-period kthread stack dump: [ 2070.529446][ C0] task:rcu_preempt state:R running task stack:27792 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 2070.542945][ C0] Call Trace: [ 2070.546213][ C0] [ 2070.549141][ C0] ? __schedule+0x10b9/0x6150 [ 2070.553834][ C0] __schedule+0x1139/0x6150 [ 2070.558361][ C0] ? __pfx___schedule+0x10/0x10 [ 2070.563216][ C0] ? find_held_lock+0x2b/0x80 [ 2070.567912][ C0] ? schedule+0x2d7/0x3a0 [ 2070.572258][ C0] schedule+0xe7/0x3a0 [ 2070.576336][ C0] schedule_timeout+0x123/0x290 [ 2070.581193][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 2070.586574][ C0] ? __pfx_process_timeout+0x10/0x10 [ 2070.591866][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2070.597681][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 2070.603154][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 2070.607937][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 2070.613233][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 2070.618439][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 2070.623382][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 2070.628242][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2070.634057][ C0] rcu_gp_kthread+0x26d/0x380 [ 2070.638741][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2070.643937][ C0] ? rcu_is_watching+0x12/0xc0 [ 2070.648697][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 2070.653894][ C0] ? __kthread_parkme+0x19e/0x250 [ 2070.658915][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2070.664115][ C0] kthread+0x3c5/0x780 [ 2070.668187][ C0] ? __pfx_kthread+0x10/0x10 [ 2070.672782][ C0] ? rcu_is_watching+0x12/0xc0 [ 2070.677540][ C0] ? __pfx_kthread+0x10/0x10 [ 2070.682131][ C0] ret_from_fork+0x983/0xb10 [ 2070.686723][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2070.691837][ C0] ? __switch_to+0x7af/0x10d0 [ 2070.696523][ C0] ? __pfx_kthread+0x10/0x10 [ 2070.701115][ C0] ret_from_fork_asm+0x1a/0x30 [ 2070.705908][ C0] [ 2070.708929][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 2070.715250][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 2070.725759][ C0] Tainted: [L]=SOFTLOCKUP [ 2070.730070][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2070.740119][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2070.745754][ C0] Code: 26 60 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 d9 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 2070.765368][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 2070.771445][ C0] RAX: 0000000008e40017 RBX: 0000000000000000 RCX: ffffffff8b7786d9 [ 2070.779414][ C0] RDX: 0000000000000000 RSI: ffffffff8dacbd07 RDI: ffffffff8bf2a800 [ 2070.787385][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 2070.795358][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 2070.803328][ C0] R13: ffffffff8e097b40 R14: ffffffff908880d0 R15: 0000000000000000 [ 2070.811294][ C0] FS: 0000000000000000(0000) GS:ffff8881248fb000(0000) knlGS:0000000000000000 [ 2070.820221][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2070.826804][ C0] CR2: 0000001b31121ff8 CR3: 0000000032f7e000 CR4: 00000000003526f0 [ 2070.834776][ C0] Call Trace: [ 2070.838050][ C0] [ 2070.840972][ C0] default_idle+0x13/0x20 [ 2070.845306][ C0] default_idle_call+0x6c/0xb0 [ 2070.850070][ C0] do_idle+0x38d/0x510 [ 2070.854153][ C0] ? __pfx_do_idle+0x10/0x10 [ 2070.858760][ C0] cpu_startup_entry+0x4f/0x60 [ 2070.863532][ C0] rest_init+0x16b/0x2b0 [ 2070.867778][ C0] ? acpi_subsystem_init+0x133/0x180 [ 2070.873064][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 2070.878613][ C0] start_kernel+0x3ef/0x4d0 [ 2070.883117][ C0] x86_64_start_reservations+0x18/0x30 [ 2070.888573][ C0] x86_64_start_kernel+0x130/0x190 [ 2070.893687][ C0] common_startup_64+0x13e/0x148 [ 2070.898638][ C0] [ 2071.395755][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2071.402209][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2071.411001][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2071.417418][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 SYZFAIL: failed to send rpc fd=3 want=9296 sent=0 n=-1 (errno 32: Broken pipe) [ 2071.871663][ T30] audit: type=1400 audit(1765646560.613:1739): avc: denied { write } for pid=5800 comm="syz-executor" path="pipe:[3959]" dev="pipefs" ino=3959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 2072.132747][T24335] usb usb36-port1: attempt power cycle [ 2072.139294][ T9] usb usb34-port1: attempt power cycle [ 2072.742863][ T9] usb usb34-port1: unable to enumerate USB device [ 2072.762833][T24335] usb usb36-port1: unable to enumerate USB device [ 2073.394788][ T1319] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2073.508229][ T1319] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2073.611951][ T1319] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2073.699490][ T1319] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2073.826009][ T1319] bridge_slave_1: left allmulticast mode [ 2073.832422][ T1319] bridge_slave_1: left promiscuous mode [ 2073.841219][ T1319] bridge0: port 2(bridge_slave_1) entered disabled state [ 2073.850287][ T1319] bridge_slave_0: left allmulticast mode [ 2073.856733][ T1319] bridge_slave_0: left promiscuous mode [ 2073.862874][ T1319] bridge0: port 1(bridge_slave_0) entered disabled state [ 2074.164524][ T1319] dvmrp8 (unregistering): left allmulticast mode [ 2074.391562][ T1319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2074.402385][ T1319] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 2074.412563][ T1319] bond0 (unregistering): (slave team0): Releasing backup interface [ 2074.422380][ T1319] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 2074.432954][ T1319] bond0 (unregistering): Released all slaves [ 2074.910874][ T1319] hsr_slave_0: left promiscuous mode [ 2074.922224][ T1319] hsr_slave_1: left promiscuous mode [ 2074.928206][ T1319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2074.940879][ T1319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2074.948917][ T1319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2074.956384][ T1319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2074.975962][ T1319] veth1_macvtap: left promiscuous mode [ 2074.981528][ T1319] veth0_macvtap: left promiscuous mode [ 2074.987253][ T1319] veth1_vlan: left promiscuous mode [ 2074.992619][ T1319] veth0_vlan: left promiscuous mode [ 2075.534588][ T1319] team0 (unregistering): Port device team_slave_1 removed [ 2075.578464][ T1319] team0 (unregistering): Port device team_slave_0 removed [ 2076.386029][ T1319] IPVS: stop unused estimator thread 0... [ 2076.497846][ T1319] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2076.598125][ T1319] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2076.658015][ T1319] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2076.730056][ T1319] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2076.866307][ T1319] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2076.965270][ T1319] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2077.061234][ T1319] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2077.138535][ T1319] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2077.337389][ T1319] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2077.435943][ T1319] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2077.508984][ T1319] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2077.575972][ T1319] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2077.697204][ T1319] bridge_slave_1: left allmulticast mode [ 2077.703958][ T1319] bridge_slave_1: left promiscuous mode [ 2077.709647][ T1319] bridge0: port 2(bridge_slave_1) entered disabled state [ 2077.718257][ T1319] bridge_slave_0: left allmulticast mode [ 2077.726239][ T1319] bridge_slave_0: left promiscuous mode [ 2077.732165][ T1319] bridge0: port 1(bridge_slave_0) entered disabled state [ 2077.741265][ T1319] bridge_slave_1: left allmulticast mode [ 2077.747328][ T1319] bridge_slave_1: left promiscuous mode [ 2077.753572][ T1319] bridge0: port 2(bridge_slave_1) entered disabled state [ 2077.761888][ T1319] bridge_slave_0: left allmulticast mode [ 2077.767514][ T1319] bridge_slave_0: left promiscuous mode [ 2077.773536][ T1319] bridge0: port 1(bridge_slave_0) entered disabled state [ 2077.785332][ T1319] bridge_slave_1: left allmulticast mode [ 2077.790975][ T1319] bridge_slave_1: left promiscuous mode [ 2077.796884][ T1319] bridge0: port 2(bridge_slave_1) entered disabled state [ 2077.806127][ T1319] bridge_slave_0: left allmulticast mode [ 2077.811927][ T1319] bridge_slave_0: left promiscuous mode [ 2077.817569][ T1319] bridge0: port 1(bridge_slave_0) entered disabled state [ 2078.293996][ T1319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2078.304361][ T1319] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2078.314451][ T1319] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 2078.323816][ T1319] bond0 (unregistering): Released all slaves [ 2078.658531][ T1319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2078.668962][ T1319] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2078.679149][ T1319] bond0 (unregistering): Released all slaves [ 2078.816989][ T1319] bond1 (unregistering): Released all slaves [ 2078.975300][ T1319] bond1 (unregistering): (slave geneve2): Releasing active interface [ 2078.983527][ T1319] geneve2 (unregistering): left promiscuous mode [ 2079.288592][ T1319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2079.298721][ T1319] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2079.308977][ T1319] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 2079.318115][ T1319] bond0 (unregistering): Released all slaves [ 2079.458446][ T1319] bond1 (unregistering): Released all slaves [ 2079.570140][ T1319] bond2 (unregistering): (slave veth3): Releasing active interface [ 2079.579159][ T1319] bond2 (unregistering): Released all slaves