last executing test programs: 32m52.427194762s ago: executing program 4 (id=11): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_pts(0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, 0x0) sched_getparam(r2, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, 0x0, 0x400041c) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = dup2(r3, r0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYRES16=r0, @ANYRES32=r1, @ANYBLOB="0800050000000000", @ANYRES64=r3], 0x24}, 0x1, 0x0, 0x0, 0x4810}, 0x0) socket$netlink(0x10, 0x3, 0xf) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000000)=0x37, 0x4) r6 = mq_open(&(0x7f00000013c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82', 0x42, 0x48, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r6) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x3, 0x10001, 0xff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) io_uring_setup(0x20e, &(0x7f0000000300)={0x0, 0x80000001, 0x2, 0x3, 0x2}) 32m51.11533524s ago: executing program 4 (id=16): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000280), &(0x7f0000000100)=@tcp6=r1, 0x2}, 0x20) 32m50.616313634s ago: executing program 4 (id=19): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000180)="df33c9f7b9a60000000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x30) 32m50.120579082s ago: executing program 4 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x911091, 0x0) chroot(&(0x7f0000000040)='./file0/file0\x00') mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2125099, 0x0) 32m49.992672557s ago: executing program 4 (id=26): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24, 0x80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfae8}, 0xf) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r2, &(0x7f0000003e80)=[{{0x0, 0x57, &(0x7f0000002800)=[{&(0x7f00000014c0)="cd5927a8b2a00ee8cc111509a5dcf0343c2c5b667c514bb3055b96ebda11b4c8308aef587ef82686dc7f027c402a00582f1b338d80160b21beef66b139a7061ff65ea9c6ed4de3c272fcce0b257c322f54ca01000000bb318d29a96c5035fd713f02f959dc5e55bd518d2ce967008eb6db0a89b4129c5b692bff14aeaa783a3cb22eb1004d87c97e8c8c587adeff394c43b74f5ba5ce66df35b3f4e7d9d7cbc36a20ec75e5dc96701ef447ee3160e70ad13117e96c171be8f0ba442afef0d073a33d", 0x1a}], 0x1}}, {{0x0, 0xffffffffffffff78, &(0x7f0000003d40)=[{&(0x7f0000002b00)="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", 0x148}], 0x1}}], 0x2, 0x42054) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) sendto$inet(r2, &(0x7f0000000040)="17", 0xfffffe75, 0x10008085, 0x0, 0x0) r3 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x5, 0x27, 0x2006, 0xf1, 0x20008, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x4, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x9f, 0x6, 0x4, 0xee, 0x4, 0x8000]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x78, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x2}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140), &(0x7f0000000240)=0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000012000000050800000010"], 0x48) r4 = epoll_create1(0x0) socket(0x1, 0x80802, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000000d}) 32m49.600690747s ago: executing program 4 (id=30): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) ioctl$sock_TIOCOUTQ(r0, 0x5411, 0x0) 32m48.90885896s ago: executing program 32 (id=30): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) ioctl$sock_TIOCOUTQ(r0, 0x5411, 0x0) 31m25.504952423s ago: executing program 3 (id=329): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848130000", 0x17}], 0x1}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'batadv0\x00', {0x5}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f00000000c0)=r5, 0x4) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x33, &(0x7f00000a2000)={0x0, &(0x7f0000000200)}, 0x10) read$FUSE(r4, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r7}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) lseek(r8, 0x0, 0x2) read$FUSE(r8, &(0x7f0000002140)={0x2020}, 0x2020) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x42013, 0x2020e}}, 0x20}, 0x1, 0x0, 0x0, 0x20000886}, 0x0) 31m18.425048787s ago: executing program 3 (id=345): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r3 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r3, &(0x7f0000001b80)=[{&(0x7f0000000140)=""/105, 0x69}, {&(0x7f0000000500)=""/101, 0x65}], 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0x8, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) write$rfkill(r1, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0xfffffffd, @local}, {0xa, 0x4e22, 0x800, @empty, 0x3d95}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x60) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) 31m14.135887559s ago: executing program 3 (id=354): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000680), 0x105e00) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000006c0)={0xcf, 0x9, 0x9}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x26, 0x804, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, 0x0, 0x4044881) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = io_uring_setup(0x2f35, &(0x7f0000000000)={0x0, 0xd314, 0x80, 0x2, 0x3d1}) io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x13, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socket$nl_generic(0x10, 0x3, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) syz_open_dev$admmidi(0x0, 0x4, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8946, &(0x7f0000000040)={'ipvlan1\x00', @random='\x00\x00\x00\x00\x00 '}) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) 31m12.245600165s ago: executing program 3 (id=358): bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(0x0, 0x32, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f000001b2c0)=ANY=[@ANYBLOB="18000000070000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200800095000000000000008f61edc01bb7f73604748e3fb648020e0a5806c3af045095579bc64e4d07c6ec2797aa8444bc283d84890e8ecafcb6fe1b2f4cdbd27967fc8f4548c0bf9810b233bc1d2fcb2915a644a3d6b0da643f9864b8983b7a7b0cd2ffadc09eb7a646bdefdf2b31bd3265849f5a48885bb96ac42177ae6d7664577ba099db7f43858e36796ac459c82d0db2a2a4cb5b74ad59084fe1769e416d0bd2da1e2e523cae50051c48804030838a3386a6a307dde413ab3072451bb9ddbcc48754e1d904725afcc195b522a83d03313d1fab47b0ef1712"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) bind$bt_hci(r2, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r2, 0x400448e6, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='io\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000001c0)='vegas', 0x5) write$binfmt_script(r6, &(0x7f0000000200), 0xfffffd9d) pread64(r5, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000100)={0x0, 0xa36c, 0xa000, 0x9, 0x4, 0x9}, &(0x7f0000000240)=0x14) 31m10.975442126s ago: executing program 3 (id=361): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102"], 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000240)={0x900, "030000000000000023000000debd12ffff00000004000000001020000400"}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) move_pages(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0) epoll_create1(0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0xfffffffffffffff6, 0xfffffffffffffffd, 0x4, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0xfffffffffffffffd, 0x1000000000c27, 0x9, 0x7fffffffffffffff, 0x663, 0x7fffffff}, 0x0, 0x0) syz_usb_disconnect(r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'hsr0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4044c02}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x6c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x5, 0x30000009, 0xa5f, 0x8}, @private=0xa010100, @loopback, 0xff000000, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='btrfs\x00', 0x22000, 0x0) 31m7.808551569s ago: executing program 3 (id=368): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1) socket$kcm(0x2, 0xa, 0x2) syz_genetlink_get_family_id$gtp(&(0x7f0000001100), 0xffffffffffffffff) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0), 0x8a2800, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pwritev2(0xffffffffffffffff, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x1}], 0x1, 0x5, 0xa, 0x14) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x1c, r2, 0xb1d, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x488d0) 30m51.882764807s ago: executing program 33 (id=368): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1) socket$kcm(0x2, 0xa, 0x2) syz_genetlink_get_family_id$gtp(&(0x7f0000001100), 0xffffffffffffffff) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0), 0x8a2800, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pwritev2(0xffffffffffffffff, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x1}], 0x1, 0x5, 0xa, 0x14) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x1c, r2, 0xb1d, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x488d0) 17.674371464s ago: executing program 1 (id=6574): openat$adsp1(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x33, 0x2}, 0x7) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x1000, 0x16d3, 0x5, 0x180, 0x2000000000000004, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x4, 0xfffffffbfffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0x25000, 0x4000}) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, r4, 0x301, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x24008080) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201510100000010da092b020000000000010902240001000040050904000b02030006000922280009058103ff03b309090000000000"], 0x0) syz_usb_control_io$hid(r6, &(0x7f0000001200)={0x14, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002228000000b350360009176f4044e6a3a02da4f0a37a240000000000"], 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) 14.483926023s ago: executing program 1 (id=6599): set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x24}, 0x1, 0x0, 0x0, 0xfed024fc985380b3}, 0x4008840) r5 = socket$packet(0x11, 0x2, 0x300) bind$packet(r5, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, 0x0, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) r6 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r6, &(0x7f0000000200)={0x11, 0x1, 0x0, 0x1, 0x3, 0x6, @random="1e5609001000"}, 0x14) syz_emit_ethernet(0x96, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2b) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x5, 0x6, 0xa000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r9 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x26020480) r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaa000800450000180000008ab2e50fc6dc81ba6c820000899078ac140000"], 0x0) ioctl$VHOST_SET_VRING_BASE(r10, 0xaf01, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x40010) syz_usb_control_io$printer(r7, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000240)={0x40, 0xc, 0x1, '!'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000008c0)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}}) sysfs$3(0x3) syz_usb_control_io$cdc_ncm(r7, &(0x7f0000000380)={0x14, &(0x7f0000000280)={0x20, 0x21, 0xb4, {0xb4, 0x3d, "8e9f0647d71ae46412b613c4bb5890973ea8209c58edc39c32200deca786b0414a290f5c7ae535e197ba5d5ba41698d298bd8da8b29edae0e5b9ab32fa8e5e79993b774c76301d80a17ec2084792224da63318854027482a282d3f8bd27b35ed0e18fb2caccbd965569596e65656c6dd73ba428362cc2222525d405fe5452ddfc2ac2de168072f05cd3cadcebe6c27fe755699604b4af63b7f1d18edc35f45cb99c316ab401c42b4a95948fd3a7cc030acf2"}}, &(0x7f0000000340)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x44, &(0x7f00000003c0)={0x40, 0x0, 0x85, "e76696bd945aaa6d49003d54518d79076359d00be68d8d4391cb0af83c96ede40c44bf3298d2a653b6ecf5b0c5e0b2793d516fc6bf016ec4731bea57f85ddba420738b957c921c4118f6540c2cddc491e66cd245822a1cc2543db99dbf1aa1b43f12ae5b6efed6c1ad32521478e8ef5ff95011eafdd5873a8b80a102c9f66963f17edfe02f"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x52}, &(0x7f0000000500)={0x20, 0x80, 0x1c, {0xa7, 0x3ff, 0x5e, 0x6, 0x5, 0x5, 0x1000, 0x9, 0x2, 0x3, 0x713, 0x6}}, &(0x7f0000000540)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000000580)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000005c0)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000000640)={0x20, 0x89, 0x2}}) 12.712647683s ago: executing program 1 (id=6613): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000844) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r1, 0x0, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x31, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x1d, 0x0, @gue={{0x2, 0x0, 0x0, 0xff, 0x100}, "b68ed34f131c03080000000040"}}}}, 0xfdef) 9.019473262s ago: executing program 5 (id=6630): socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/hardlockup_count', 0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x20000080) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x4d, &(0x7f0000000100)}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e005", 0x26}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93", 0x72}], 0x3, &(0x7f0000000240)=[@op={0x18}], 0x18}], 0x1, 0x40800) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0xff07, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000002f00090027bd7000fddbdf250400000007000b00050000006a965e43c97d2242c3ea8c51aa03af6ab596b1d7786a47ebe5664a7c174736f9a8e364d2e8350f757e68e515f7ff29d0a70f68247f9417633b6c88b6847188f8e2f0091b35dfa0fc97947b7b9259a7132f1d6fdc8fa2aa7393a18d69014e46317f61d5f73bb02c1eb37479342c7600725007f31d2853cd6435366b2bd8a45d3e2c0a80da7a3f522ab2189c43ba6d38424e39854d2f18864a11154a9bbe894277de041f6bf984fd7f3d6b15128f9d008993"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x1, 0x323b, 0x55}, {@remote, 0x4e27, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) 8.606545686s ago: executing program 5 (id=6633): openat$adsp1(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x33, 0x2}, 0x7) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x1000, 0x16d3, 0x5, 0x180, 0x2000000000000004, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x4, 0xfffffffbfffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0x25000, 0x4000}) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, r4, 0x301, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x24008080) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201510100000010da092b020000000000010902240001000040050904000b02030006000922280009058103ff03b309090000000000"], 0x0) syz_usb_control_io$hid(r5, &(0x7f0000001200)={0x14, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002228000000b350360009176f4044e6a3a02da4f0a37a240000000000"], 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) 6.216458241s ago: executing program 6 (id=6643): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x980000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90b, 0x9, '\x00', @p_u16=&(0x7f0000000340)=0x8}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x810) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000140)={0xff, r2, 'id0\x00'}) bind$rds(r3, &(0x7f00000001c0)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) socket(0x10, 0x803, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002780)={0x18, 0x2f, 0x9, 0x70bd28, 0x0, {0x4}, [@nested={0x4, 0x10}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) close_range(r2, 0xffffffffffffffff, 0x0) 5.9638872s ago: executing program 2 (id=6644): syz_usb_connect(0x0, 0x24, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) r0 = mq_open(&(0x7f0000000540)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v\xf8\xff\xff\xff\xff\xff\xff\xffr\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xb9f\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\xb2F\xdf\xcc\xae', 0x40, 0xa8, 0x0) lseek(r0, 0x0, 0x3) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) memfd_secret(0x80000) syz_open_dev$dri(&(0x7f0000000040), 0x8001, 0x10140) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) iopl(0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x1, 0x70bd24, 0x25dfd402, {0x0, 0x0, 0x0, r4, 0x64e98, 0x12ad1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP_WIFI={0x5}, @IFLA_BRPORT_VLAN_TUNNEL={0x5, 0x1d, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc084}, 0x200088c2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 5.21394425s ago: executing program 6 (id=6646): bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) statfs(&(0x7f0000000180)='./file0\x00', 0x0) 4.913173681s ago: executing program 6 (id=6647): syz_usb_connect$uac2(0x5, 0x98, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100300000010351212824000010203010902860003010d5003080b00010108209809040000000101200009240106000626006e0c240303010105030251c70011240202"], 0x0) 4.684267465s ago: executing program 0 (id=6649): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100039040000ebffffffffffffff0000", @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000700ac"], 0x40}, 0x1, 0x0, 0x0, 0x40090}, 0x0) sendto$packet(r0, &(0x7f0000000240), 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.684050799s ago: executing program 5 (id=6650): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x0, 0x6, 0x7, &(0x7f0000000080)={0x12, "1a9c66bf2f615e427b2644e953449f6c12f206b2855cd8c82b1b9950cf5e1dee93"}}) 4.536803531s ago: executing program 0 (id=6651): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040), 0xfffffff8, 0x800240) ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0xffffffffffffffff, 0x0, 0x8, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180), 0x0, 0x101, 0x2, 0x0, 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r4, 0x0, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x31, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r4, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'pim6reg1\x00', &(0x7f00000001c0)=@ethtool_pauseparam={0x1b, 0x4, 0x62, 0x5}}) r5 = socket$kcm(0x10, 0x2, 0x0) removexattr(&(0x7f0000000280)='./file2\x00', &(0x7f00000002c0)=@random={'security.', 'sit0\x00'}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000200)={@loopback, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa, 0x0, 0x6, 0x0, 0x8001, 0x10200}) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x6c, 0x3f, 0x9, 0x70bd29, 0x0, {0x2}, [@generic="aa56ff28a4d1ca3340e119e4544214c0fbfaefeaf539438c78adb097354307eb8af44109e18e4d42c5c057ca4980375e1290d59ef247ff9ccb9680c579e051babf1c388dc4bd2939240b5489f7d85f", @typed={0x8, 0x4d, 0x0, 0x0, @fd=r3}]}, 0x6c}}, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) 3.858437266s ago: executing program 6 (id=6652): r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x32) setresuid(0x0, r1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2b, 0x25dfdbfc, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote, 0x4e20, 0xc620, 0x4e23, 0x5, 0xa, 0xa0, 0xc0, 0x3b}, {0x5, 0x6, 0x0, 0x8, 0x8, 0x6, 0x8}, {0x4, 0x5, 0x6, 0x13}, 0x1, 0x6e6bbe, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x8004}, 0x20000010) 3.701016172s ago: executing program 6 (id=6653): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0400000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000700)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.977766726s ago: executing program 5 (id=6654): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x3}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/142, 0x8e}], 0x1, 0x36, 0xffffffff) 2.850451061s ago: executing program 2 (id=6655): socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/hardlockup_count', 0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x20000080) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x4d, &(0x7f0000000100)}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e005", 0x26}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93", 0x72}], 0x3, &(0x7f0000000240)=[@op={0x18}], 0x18}], 0x1, 0x40800) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0xff07, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000002f00090027bd7000fddbdf250400000007000b00050000006a965e43c97d2242c3ea8c51aa03af6ab596b1d7786a47ebe5664a7c174736f9a8e364d2e8350f757e68e515f7ff29d0a70f68247f9417633b6c88b6847188f8e2f0091b35dfa0fc97947b7b9259a7132f1d6fdc8fa2aa7393a18d69014e46317f61d5f73bb02c1eb37479342c7600725007f31d2853cd6435366b2bd8a45d3e2c0a80da7a3f522ab2189c43ba6d38424e39854d2f18864a11154a9bbe894277de041f6bf984fd7f3d6b15128f9d008993"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x1, 0x323b, 0x55}, {@remote, 0x4e27, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) 2.748597315s ago: executing program 0 (id=6656): bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) statfs(&(0x7f0000000180)='./file0\x00', 0x0) 2.684820596s ago: executing program 5 (id=6657): socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x4000010) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x4000010, 0xffffffffffffffff, 0x3960f000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='\x10\x9cm\'z\x97}\x9d\xa7\xdb\x1f\xd7', 0x0) r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340), 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000001c0)=0x1, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$CEC_ADAP_G_CONNECTOR_INFO(0xffffffffffffffff, 0x8044610a, &(0x7f0000000380)={0x0, @raw}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000640)) 2.494487295s ago: executing program 0 (id=6658): openat$sequencer2(0xffffffffffffff9c, 0x0, 0x540, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) preadv(r0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000001300)=""/4100, 0x1004}], 0x2, 0x8c0, 0x2bd6) 2.416228435s ago: executing program 2 (id=6659): prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000005c0)={'tunl0\x00', 0x8, 0x95}) prctl$PR_GET_KEEPCAPS(0x7) syz_emit_vhci(&(0x7f0000000700)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x8, 0x0, 0x803}}}, 0x7) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, 0x0) 2.346232433s ago: executing program 0 (id=6660): syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000003680), 0x0, 0xe) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3, 0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.239901743s ago: executing program 2 (id=6661): syz_usb_connect$uac2(0x5, 0x98, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100300000010351212824000010203010902860003010d5003080b00010108209809040000000101200009240106000626006e0c240303010105030251c70011240202"], 0x0) 1.775853341s ago: executing program 6 (id=6662): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.687770614s ago: executing program 1 (id=6616): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [], [0x2b8], [0x0, 0x1]}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) 1.50933827s ago: executing program 5 (id=6663): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(0x0, 0x1, 0x2603) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x0, 0x6, 0x7, &(0x7f0000000080)={0x12, "1a9c66bf2f615e427b2644e953449f6c12f206b2855cd8c82b1b9950cf5e1dee93"}}) 1.34479415s ago: executing program 1 (id=6664): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000027000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) 1.18602541s ago: executing program 2 (id=6665): socket(0x3e, 0x1, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'syztnl2\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0xff41, 0x700, 0xfffffffc, 0x4, {{0x7, 0x4, 0x3, 0x0, 0x1c, 0x65, 0x0, 0x6b, 0x4, 0x0, @private=0xa010102, @multicast1, {[@lsrr={0x83, 0x3, 0x4a}, @lsrr={0x83, 0x3, 0x43}]}}}}}) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=ANY=[@ANYBLOB="28000000240007012bbd7000ffdbdf2503740000080001800400de800c0004"], 0x28}}, 0x48010) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x4000010, 0xffffffffffffffff, 0x3960f000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) 545.478695ms ago: executing program 0 (id=6666): socket$inet6_udp(0xa, 0x2, 0x0) r0 = epoll_create1(0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x401, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r4, 0x3b87, &(0x7f0000000180)={0x18}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_wait(r0, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x4d0d) bind$xdp(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 492.440734ms ago: executing program 2 (id=6668): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', 0x80040, 0x54) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f0000000800)={0x40, 0x17}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0xff}, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x6bb, &(0x7f0000000040)={0x0, 0xbb84, 0x1c080, 0xa, 0x20082f5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x1e00, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r3, 0x2219, 0x7723, 0x16, 0x0, 0x0) 0s ago: executing program 1 (id=6669): openat$sequencer2(0xffffffffffffff9c, 0x0, 0x540, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) preadv(r0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000001300)=""/4100, 0x1004}], 0x2, 0x8c0, 0x2bd6) kernel console output (not intermixed with test programs): dv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1967.306142][ T5727] nzxt-smart2 0003:1E71:2009.007D: unknown main item tag 0x0 [ 1967.322726][ T5727] nzxt-smart2 0003:1E71:2009.007D: unknown main item tag 0x0 [ 1967.330814][ T5727] nzxt-smart2 0003:1E71:2009.007D: unknown main item tag 0x0 [ 1967.341924][ T5727] nzxt-smart2 0003:1E71:2009.007D: unknown main item tag 0x0 [ 1967.349989][ T5727] nzxt-smart2 0003:1E71:2009.007D: unknown main item tag 0x0 [ 1967.367434][T29521] hsr_slave_0: entered promiscuous mode [ 1967.367963][ T5727] nzxt-smart2 0003:1E71:2009.007D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 1967.389093][T29521] hsr_slave_1: entered promiscuous mode [ 1967.397345][T29521] debugfs: 'hsr0' already exists in 'hsr' [ 1967.403923][T29521] Cannot create hsr debugfs directory [ 1967.491187][ C0] usb 3-1: input irq status -75 received [ 1967.560207][ T30] audit: type=1400 audit(1783914576.284:1017): avc: denied { call } for pid=29591 comm="syz.1.6237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1967.582760][ T30] audit: type=1400 audit(1783914576.284:1018): avc: denied { transfer } for pid=29591 comm="syz.1.6237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1967.703911][T28836] usb 3-1: USB disconnect, device number 127 [ 1967.813963][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1967.836861][T29521] bond0: (slave netdevsim1): Releasing backup interface [ 1967.966613][T29601] netlink: 'syz.1.6241': attribute type 1 has an invalid length. [ 1968.004086][T29601] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1968.046139][T29601] bond7: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 1968.058674][T29601] bond7: entered allmulticast mode [ 1968.065963][T29601] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6241'. [ 1968.075680][T29601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6241'. [ 1968.084797][T29601] bond7: left allmulticast mode [ 1968.090011][T29601] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1968.181621][T28836] usb 7-1: new full-speed USB device number 102 using dummy_hcd [ 1968.355269][T29521] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1968.363824][T28836] usb 7-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1968.367428][T29521] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1968.377776][T28836] usb 7-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1968.384573][T29521] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1968.400543][T28836] usb 7-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1968.413629][T28836] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1968.416814][T29521] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1968.420289][T28836] usb 7-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 1968.420314][T28836] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1968.433044][T28836] usb 7-1: config 0 descriptor?? [ 1968.451757][T29521] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1968.463250][T29521] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1968.473343][T29521] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1968.483204][T29521] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1968.524951][T29615] pim6reg: entered allmulticast mode [ 1968.536391][T29615] pim6reg: left allmulticast mode [ 1968.593302][T28834] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 1968.606765][T29521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1968.631059][T29521] 8021q: adding VLAN 0 to HW filter on device team0 [ 1968.646680][T23075] bridge0: port 1(bridge_slave_0) entered blocking state [ 1968.653811][T23075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1968.669437][T23075] bridge0: port 2(bridge_slave_1) entered blocking state [ 1968.676582][T23075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1968.721645][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1968.775282][T28834] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1968.785855][T28834] usb 3-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1968.800914][T28834] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1968.810494][T28834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1968.824141][T28834] hub 3-1:4.0: bad descriptor, ignoring hub [ 1968.838292][T28834] hub 3-1:4.0: probe with driver hub failed with error -5 [ 1968.856306][T28834] usbhid 3-1:4.0: couldn't find an input interrupt endpoint [ 1968.884911][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 1968.894427][T28836] usbhid 7-1:0.0: can't add hid device: -71 [ 1968.900400][T28836] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1968.923570][T28836] usb 7-1: USB disconnect, device number 102 [ 1968.942219][ T50] Bluetooth: hci3: command tx timeout [ 1969.196266][T29521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1969.204581][ T10] usb 3-1: USB disconnect, device number 2 [ 1969.258547][T29521] veth0_vlan: entered promiscuous mode [ 1969.299180][T29521] veth1_vlan: entered promiscuous mode [ 1969.328605][T29521] veth0_macvtap: entered promiscuous mode [ 1969.343899][T29630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6245'. [ 1969.354309][T29521] veth1_macvtap: entered promiscuous mode [ 1969.373107][T29521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1969.387394][T29521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1969.421957][T23066] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1969.448063][T23066] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1969.464172][T23066] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1969.497521][T23066] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1969.554592][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1969.595132][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1969.645097][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1969.666183][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1969.692161][ T10] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1969.731983][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1969.742689][T19331] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 1969.778838][T19331] hid-generic 0000:0000:0000.007E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1969.876548][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1969.894040][ T10] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1969.931730][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1969.975501][ T10] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1970.018316][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1970.047021][ T10] usb 2-1: Product: syz [ 1970.065634][ T10] usb 2-1: Manufacturer: syz [ 1970.081126][ T10] usb 2-1: SerialNumber: syz [ 1970.104322][ T10] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 1970.126780][ T10] usb 2-1: no configuration chosen from 1 choice [ 1970.262135][T21294] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1970.373806][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1970.382865][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1970.424584][T21294] usb 3-1: Using ep0 maxpacket: 16 [ 1970.435931][T29654] netlink: 'syz.5.6251': attribute type 10 has an invalid length. [ 1970.462270][T21294] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1970.501288][T21294] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1970.504578][T29654] netlink: 84 bytes leftover after parsing attributes in process `syz.5.6251'. [ 1970.525902][T21294] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1970.536810][T21294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1970.570812][T21294] usb 3-1: config 0 descriptor?? [ 1970.781677][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1971.015380][ T50] Bluetooth: hci3: command tx timeout [ 1971.030406][T21294] nzxt-smart2 0003:1E71:2009.007F: unknown main item tag 0x0 [ 1971.041461][T21294] nzxt-smart2 0003:1E71:2009.007F: unknown main item tag 0x0 [ 1971.041803][T28833] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1971.049866][T21294] nzxt-smart2 0003:1E71:2009.007F: unknown main item tag 0x0 [ 1971.049907][T21294] nzxt-smart2 0003:1E71:2009.007F: unknown main item tag 0x0 [ 1971.120041][T21294] nzxt-smart2 0003:1E71:2009.007F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 1971.140476][ T30] audit: type=1804 audit(1783914579.844:1019): pid=29668 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.6258" name="/newroot/2/file1" dev="fuse" ino=1 res=1 errno=0 [ 1971.198671][ C0] usb 3-1: input irq status -75 received [ 1971.216627][ T30] audit: type=1800 audit(1783914579.844:1020): pid=29668 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.6258" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1971.421051][T28836] usb 3-1: USB disconnect, device number 3 [ 1971.511878][T28833] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 1971.679517][T28833] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1971.700015][T28833] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1971.716102][T28833] usb 7-1: Product: syz [ 1971.720273][T28833] usb 7-1: Manufacturer: syz [ 1971.724924][T28833] usb 7-1: SerialNumber: syz [ 1971.735964][T28833] usb 7-1: config 0 descriptor?? [ 1971.891997][T21294] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1971.948835][T28833] usb 7-1: USB disconnect, device number 103 [ 1971.982477][T28834] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1972.041623][T21294] usb 6-1: Using ep0 maxpacket: 32 [ 1972.049370][T21294] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 1972.058478][T21294] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1972.070146][T21294] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1972.082793][T21294] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1972.097100][T21294] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1972.107522][T21294] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1972.118630][T21294] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1972.128926][T21294] usb 6-1: Product: syz [ 1972.133519][T21294] usb 6-1: Manufacturer: syz [ 1972.138524][T21294] usb 6-1: SerialNumber: syz [ 1972.149295][T21294] usb 6-1: config 0 descriptor?? [ 1972.156806][T21294] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1972.168861][T21294] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1972.238388][T28833] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1972.248858][T28833] hid-generic 0000:0000:0000.0080: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1972.385909][T28834] usb 6-1: USB disconnect, device number 2 [ 1972.401365][T28834] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 1972.449913][T28833] usb 2-1: USB disconnect, device number 114 [ 1973.081787][T21294] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1973.091846][ T50] Bluetooth: hci3: command tx timeout [ 1973.241650][T21294] usb 2-1: Using ep0 maxpacket: 32 [ 1973.254634][T21294] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 1973.274949][T21294] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1973.303276][T21294] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1973.315744][T21294] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1973.324611][T28833] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 1973.350645][T21294] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1973.365294][T21294] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1973.375921][T21294] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1973.385215][T21294] usb 2-1: Product: syz [ 1973.389869][T21294] usb 2-1: Manufacturer: syz [ 1973.395813][T21294] usb 2-1: SerialNumber: syz [ 1973.409499][T21294] usb 2-1: config 0 descriptor?? [ 1973.423157][T21294] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1973.436802][T21294] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1973.523849][T29707] program syz.5.6274 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1973.533361][T28833] usb 7-1: Using ep0 maxpacket: 16 [ 1973.539922][T28833] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1973.553953][T28833] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1973.567951][T28833] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1973.591023][T28833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1973.605920][T28833] usb 7-1: config 0 descriptor?? [ 1973.629762][T28834] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 1973.663380][T28836] usb 2-1: USB disconnect, device number 115 [ 1973.672652][T28834] hid-generic 0000:0000:0000.0081: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1973.688089][T28836] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 1973.751706][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1974.035823][T28833] nzxt-smart2 0003:1E71:2009.0082: unknown main item tag 0x0 [ 1974.053573][T28833] nzxt-smart2 0003:1E71:2009.0082: unknown main item tag 0x0 [ 1974.061245][T28833] nzxt-smart2 0003:1E71:2009.0082: unknown main item tag 0x0 [ 1974.079794][T28833] nzxt-smart2 0003:1E71:2009.0082: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0 [ 1974.269283][ C1] usb 7-1: input irq status -75 received [ 1974.281755][T11779] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1974.452205][T11779] usb 6-1: Using ep0 maxpacket: 8 [ 1974.465052][T11779] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1974.469426][T29733] xt_hashlimit: size too large, truncated to 1048576 [ 1974.480640][T28833] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1974.496884][T11779] usb 6-1: config 179 has no interface number 0 [ 1974.507896][T21294] usb 7-1: USB disconnect, device number 104 [ 1974.521692][T11779] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1974.568835][T11779] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1974.593157][T11779] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1974.605873][T11779] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1974.628508][T11779] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1974.643127][T11779] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1974.651653][T28833] usb 1-1: Using ep0 maxpacket: 32 [ 1974.652852][T11779] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1974.661180][T28833] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 1974.674026][T29718] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1974.684218][T28833] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1974.695796][T28833] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1974.721171][T28833] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1974.736636][T28833] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1974.747510][T28833] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1974.759574][T28833] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1974.768925][T28833] usb 1-1: Product: syz [ 1974.773209][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1974.787520][T28833] usb 1-1: Manufacturer: syz [ 1974.799982][T28833] usb 1-1: SerialNumber: syz [ 1974.803397][T29739] program syz.2.6287 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1974.811975][T28833] usb 1-1: config 0 descriptor?? [ 1974.822488][T28833] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1974.833426][T28833] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1974.853203][T11779] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1974.912879][T21294] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input88 [ 1975.024685][T11779] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1975.056907][T11779] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1975.095299][T11779] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1975.131878][T11779] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1975.143005][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1975.143011][T28836] usb 6-1: USB disconnect, device number 3 [ 1975.143138][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1975.169984][T11779] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1975.188732][T11779] usb 2-1: config 0 descriptor?? [ 1975.374657][T29754] netlink: 'syz.2.6292': attribute type 1 has an invalid length. [ 1975.390325][T29752] loop5: detected capacity change from 0 to 7 [ 1975.400254][T29752] Dev loop5: unable to read RDB block 7 [ 1975.406020][T29752] loop5: unable to read partition table [ 1975.413371][T29752] loop5: partition table beyond EOD, truncated [ 1975.419609][T29752] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1975.496654][T29758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6292'. [ 1975.504874][T29754] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1975.507392][T29758] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6292'. [ 1975.549653][T29757] bond7: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 1975.577376][T29754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6292'. [ 1975.596591][T29757] bond7: entered allmulticast mode [ 1975.608471][T29754] bond7: left allmulticast mode [ 1975.620295][T11779] hid_parser_main: 1 callbacks suppressed [ 1975.620327][T11779] plantronics 0003:047F:FFFF.0083: unknown main item tag 0x0 [ 1975.621589][T29754] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1975.637005][T11779] plantronics 0003:047F:FFFF.0083: unknown main item tag 0x0 [ 1975.683716][T11779] plantronics 0003:047F:FFFF.0083: unknown main item tag 0x0 [ 1975.700065][T11779] plantronics 0003:047F:FFFF.0083: unknown main item tag 0x0 [ 1975.710799][T28833] usb 1-1: USB disconnect, device number 113 [ 1975.711989][T11779] plantronics 0003:047F:FFFF.0083: unknown main item tag 0x0 [ 1975.732504][T11779] plantronics 0003:047F:FFFF.0083: unknown main item tag 0x0 [ 1975.743352][T11779] plantronics 0003:047F:FFFF.0083: unknown main item tag 0x0 [ 1975.764534][T28833] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 1975.775220][T11779] plantronics 0003:047F:FFFF.0083: unknown main item tag 0x0 [ 1975.803020][T11779] plantronics 0003:047F:FFFF.0083: unknown main item tag 0x0 [ 1975.811655][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1975.889005][T11779] plantronics 0003:047F:FFFF.0083: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1975.939991][T11779] usb 2-1: USB disconnect, device number 116 [ 1975.960086][T29773] program syz.5.6298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1976.092397][T29776] fido_id[29776]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1976.212468][T19331] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1976.362148][T19331] usb 3-1: Using ep0 maxpacket: 16 [ 1976.374055][T19331] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1976.397029][T29783] pim6reg: entered allmulticast mode [ 1976.403074][T19331] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1976.412363][T19331] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1976.424521][T29783] pim6reg: left allmulticast mode [ 1976.430055][T11779] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1976.447643][T19331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1976.470754][T29789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6303'. [ 1976.475722][T19331] usb 3-1: config 0 descriptor?? [ 1976.493314][T29789] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6303'. [ 1976.591862][T11779] usb 6-1: device descriptor read/64, error -71 [ 1976.610569][T29792] syzkaller1: entered promiscuous mode [ 1976.616672][T29792] syzkaller1: entered allmulticast mode [ 1976.752490][T28833] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1976.842280][T11779] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1976.866174][T29798] netlink: 72 bytes leftover after parsing attributes in process `syz.6.6307'. [ 1976.919457][T19331] nzxt-smart2 0003:1E71:2009.0084: unknown main item tag 0x0 [ 1976.934981][T28833] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1976.947173][T19331] nzxt-smart2 0003:1E71:2009.0084: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 1976.959794][T28833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1976.959818][T28833] usb 1-1: Product: syz [ 1976.959833][T28833] usb 1-1: Manufacturer: syz [ 1976.959848][T28833] usb 1-1: SerialNumber: syz [ 1976.995807][T28833] usb 1-1: config 0 descriptor?? [ 1977.001703][T11779] usb 6-1: device descriptor read/64, error -71 [ 1977.112261][T11779] usb usb6-port1: attempt power cycle [ 1977.140352][ C0] usb 3-1: input irq status -75 received [ 1977.299505][T28833] usb 1-1: USB disconnect, device number 114 [ 1977.346664][T28836] usb 3-1: USB disconnect, device number 4 [ 1977.357085][T29808] netlink: 'syz.1.6310': attribute type 10 has an invalid length. [ 1977.409376][T29807] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6310'. [ 1977.492459][T11779] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1977.512019][T29781] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6301'. [ 1977.525539][T11779] usb 6-1: device descriptor read/8, error -71 [ 1977.537655][T29781] tipc: Invalid UDP bearer configuration [ 1977.537695][T29781] tipc: Enabling of bearer rejected, failed to enable media [ 1977.771651][T11779] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1977.802454][T11779] usb 6-1: device descriptor read/8, error -71 [ 1977.924245][T11779] usb usb6-port1: unable to enumerate USB device [ 1977.947258][ T30] audit: type=1800 audit(1783914586.674:1021): pid=29812 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.6312" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1978.351689][T21294] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1978.513314][T21294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1978.547644][T21294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1978.569992][T21294] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1978.600211][T21294] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1978.621447][T21294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1978.644047][T21294] usb 3-1: config 0 descriptor?? [ 1978.801702][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1979.084530][T21294] plantronics 0003:047F:FFFF.0085: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1979.211718][T19331] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1979.347573][ T30] audit: type=1326 audit(1783914588.074:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29830 comm="syz.5.6319" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd08999de59 code=0x0 [ 1979.354001][T28833] usb 3-1: USB disconnect, device number 5 [ 1979.411803][T19331] usb 1-1: Using ep0 maxpacket: 32 [ 1979.447085][T19331] usb 1-1: config 0 has an invalid interface number: 61 but max is 1 [ 1979.471497][T19331] usb 1-1: config 0 has no interface number 1 [ 1979.530070][T19331] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 1979.548516][T19331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1979.582788][T19331] usb 1-1: Product: syz [ 1979.591740][T19331] usb 1-1: Manufacturer: syz [ 1979.605922][T19331] usb 1-1: SerialNumber: syz [ 1979.623710][T19331] usb 1-1: config 0 descriptor?? [ 1979.752832][T19331] viperboard 1-1:0.61: version 0.00 found at bus 001 address 115 [ 1979.762492][T29839] pim6reg: entered allmulticast mode [ 1979.770178][T29839] pim6reg: left allmulticast mode [ 1979.777997][T19331] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1979.789524][T19331] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1979.801441][T29841] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6321'. [ 1979.811682][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1979.812590][T19331] viperboard 1-1:0.0: version 0.00 found at bus 001 address 115 [ 1979.863523][T19331] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1979.878723][T19331] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 1979.907665][T19331] usb 1-1: USB disconnect, device number 115 [ 1980.092707][T28833] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1980.205808][T29846] netlink: 'syz.6.6323': attribute type 4 has an invalid length. [ 1980.243381][T28833] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1980.265238][T28833] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1980.298107][T28833] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1980.308046][T28836] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1980.329507][T28833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1980.348274][T28833] usb 2-1: SerialNumber: syz [ 1980.382169][T29848] syzkaller0: entered promiscuous mode [ 1980.387760][T29848] syzkaller0: entered allmulticast mode [ 1980.513406][T28836] usb 3-1: Using ep0 maxpacket: 16 [ 1980.528381][T28836] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1980.561305][T28836] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1980.586403][T28836] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1980.609899][T28836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1980.626971][T28836] usb 3-1: config 0 descriptor?? [ 1980.824470][T29854] netlink: 'syz.0.6326': attribute type 10 has an invalid length. [ 1980.875572][T29854] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6326'. [ 1980.957542][T29860] xt_hashlimit: size too large, truncated to 1048576 [ 1981.035964][T29841] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 1981.073639][T28836] hid_parser_main: 12 callbacks suppressed [ 1981.073659][T28836] nzxt-smart2 0003:1E71:2009.0086: unknown main item tag 0x0 [ 1981.139533][T28836] nzxt-smart2 0003:1E71:2009.0086: unknown main item tag 0x0 [ 1981.174015][T28836] nzxt-smart2 0003:1E71:2009.0086: unknown main item tag 0x0 [ 1981.224892][T28836] nzxt-smart2 0003:1E71:2009.0086: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 1981.285601][ C1] usb 3-1: input irq status -75 received [ 1981.483972][ T29] usb 3-1: USB disconnect, device number 6 [ 1981.571873][T28834] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 1981.644438][T29875] fido_id[29875]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1981.763802][T28834] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1981.812825][T28834] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1981.843441][T28834] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1981.890788][T28834] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1981.924561][T28834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1981.966380][T28834] usb 7-1: config 0 descriptor?? [ 1982.103205][T28833] usb 2-1: 0:2 : does not exist [ 1982.213833][T28833] usb 2-1: USB disconnect, device number 117 [ 1982.270909][T21337] udevd[21337]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1982.295280][T29881] fuse: Invalid rootmode [ 1982.382021][T19331] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1982.400820][T28834] plantronics 0003:047F:FFFF.0087: unknown main item tag 0x0 [ 1982.415535][T28834] plantronics 0003:047F:FFFF.0087: unknown main item tag 0x0 [ 1982.441886][T28834] plantronics 0003:047F:FFFF.0087: unknown main item tag 0x0 [ 1982.453920][T28834] plantronics 0003:047F:FFFF.0087: unknown main item tag 0x0 [ 1982.461323][T28834] plantronics 0003:047F:FFFF.0087: unknown main item tag 0x0 [ 1982.488075][T28834] plantronics 0003:047F:FFFF.0087: unknown main item tag 0x0 [ 1982.506188][T28834] plantronics 0003:047F:FFFF.0087: unknown main item tag 0x0 [ 1982.521231][T28834] plantronics 0003:047F:FFFF.0087: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1982.546515][T19331] usb 3-1: Using ep0 maxpacket: 16 [ 1982.560440][T19331] usb 3-1: too many configurations: 123, using maximum allowed: 8 [ 1982.584459][T19331] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1982.603275][T19331] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1982.630797][T19331] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1982.645340][T19331] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1982.657930][T19331] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1982.670121][T19331] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1982.672454][T28834] usb 7-1: USB disconnect, device number 105 [ 1982.685845][T19331] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1982.715300][T19331] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1982.733989][T19331] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1982.744076][T11779] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1982.756034][T19331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 1982.765079][ T30] audit: type=1400 audit(1783914591.484:1023): avc: denied { create } for pid=29890 comm="syz.0.6339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 1982.783155][T29891] sock: sock_set_timeout: `syz.0.6339' (pid 29891) tries to set negative timeout [ 1982.789603][T19331] usb 3-1: SerialNumber: syz [ 1982.814468][T19331] usb 3-1: config 0 descriptor?? [ 1982.841893][T19331] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input89 [ 1982.941873][T11779] usb 6-1: Using ep0 maxpacket: 32 [ 1982.953809][T11779] usb 6-1: config 0 has an invalid interface number: 61 but max is 1 [ 1982.963969][T11779] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1982.981584][T11779] usb 6-1: config 0 has no interface number 0 [ 1982.994502][T11779] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 1983.014096][T11779] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1983.039752][T11779] usb 6-1: Product: syz [ 1983.049645][T11779] usb 6-1: Manufacturer: syz [ 1983.056101][T11779] usb 6-1: SerialNumber: syz [ 1983.058081][T29902] syzkaller0: entered promiscuous mode [ 1983.077474][T11779] usb 6-1: config 0 descriptor?? [ 1983.081581][T29902] syzkaller0: entered allmulticast mode [ 1983.192355][T11779] viperboard 6-1:0.61: version 0.00 found at bus 006 address 008 [ 1983.220988][T11779] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1983.234306][T11779] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1983.338054][T11779] usb 6-1: USB disconnect, device number 8 [ 1983.566222][T29910] netlink: 'syz.6.6346': attribute type 10 has an invalid length. [ 1983.627991][T29910] netlink: 84 bytes leftover after parsing attributes in process `syz.6.6346'. [ 1983.831673][T21294] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1984.016896][T21294] usb 2-1: Using ep0 maxpacket: 16 [ 1984.051239][T21294] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1984.115370][T21294] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1984.138607][T21294] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1984.174999][T21294] usb 2-1: config 0 descriptor?? [ 1984.447187][T21294] usbhid 2-1:0.0: can't add hid device: -71 [ 1984.465736][T21294] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1984.490573][T29920] binder: 29918:29920 ioctl c0306201 0 returned -14 [ 1984.503541][T21294] usb 2-1: USB disconnect, device number 118 [ 1984.681974][T29921] loop4: detected capacity change from 0 to 7 [ 1984.710608][T29921] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 1984.721711][T29921] loop4: partition table partially beyond EOD, truncated [ 1984.746026][T29921] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 1984.771296][T29922] binder: 29918:29922 ioctl c0306201 0 returned -14 [ 1985.189585][ T4963] bcm5974 3-1:0.0: could not read from device [ 1985.220181][ T4963] bcm5974 3-1:0.0: could not read from device [ 1985.227581][T19331] usb 3-1: USB disconnect, device number 7 [ 1985.352263][T29928] bridge_slave_0: left allmulticast mode [ 1986.052617][T28834] hid-generic 0000:0000:0000.0088: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1986.128193][T29928] bridge_slave_0: left promiscuous mode [ 1986.174637][T29928] bridge0: port 1(bridge_slave_0) entered disabled state [ 1986.211651][T28833] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 1986.293546][T29928] bridge_slave_1: left promiscuous mode [ 1986.321236][T29928] bridge0: port 2(bridge_slave_1) entered disabled state [ 1986.417014][T29928] bond0: (slave bond_slave_0): Releasing backup interface [ 1986.433125][T28833] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 1986.458356][T29928] bond0: (slave bond_slave_1): Releasing backup interface [ 1986.492745][T28833] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1986.525373][T28833] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1986.561334][T29928] team0: Port device team_slave_0 removed [ 1986.582911][T28833] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1986.607134][T28833] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1986.620754][T29928] team0: Port device team_slave_1 removed [ 1986.643667][T28833] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1986.655918][T29928] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1986.688780][T29928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1986.700978][T28833] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1986.749589][T28833] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1986.773006][T29928] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1986.796862][T28833] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1986.827565][T29928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1986.847417][T28833] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1986.882000][T29928] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1986.921490][T28833] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1986.940814][T28833] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1986.999691][T28833] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1987.035946][T28833] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1987.099132][T28833] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1987.145216][T28833] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1987.171397][T28833] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1987.213327][T28833] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1987.265004][T28833] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1987.280024][T29945] syzkaller0: entered promiscuous mode [ 1987.298710][T29945] syzkaller0: entered allmulticast mode [ 1987.308765][T28833] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1987.351265][T28833] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1987.391290][T28833] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1987.422227][T28833] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1987.444980][T28833] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1987.467563][T28833] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1987.483929][T28833] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1987.503032][T28833] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1987.520509][T28833] usb 7-1: Product: syz [ 1987.528702][T28833] usb 7-1: Manufacturer: syz [ 1987.534173][T28833] usb 7-1: SerialNumber: syz [ 1987.549195][T28833] usb 7-1: config 0 descriptor?? [ 1987.569486][T28833] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 1987.654380][T19331] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1987.823313][T19331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1987.835391][T19331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1987.845952][T19331] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1987.860135][T19331] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1987.878289][T19331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1987.900086][T19331] usb 2-1: config 0 descriptor?? [ 1987.912666][ T30] audit: type=1326 audit(1783914596.644:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29927 comm="syz.6.6351" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcb6279de59 code=0x0 [ 1988.366785][T19331] hid_parser_main: 1 callbacks suppressed [ 1988.366820][T19331] plantronics 0003:047F:FFFF.0089: unknown main item tag 0x0 [ 1988.382275][T19331] plantronics 0003:047F:FFFF.0089: unknown main item tag 0x0 [ 1988.390215][T19331] plantronics 0003:047F:FFFF.0089: unknown main item tag 0x0 [ 1988.399112][T19331] plantronics 0003:047F:FFFF.0089: unknown main item tag 0x0 [ 1988.408030][T19331] plantronics 0003:047F:FFFF.0089: unknown main item tag 0x0 [ 1988.415965][T19331] plantronics 0003:047F:FFFF.0089: unknown main item tag 0x0 [ 1988.424557][T19331] plantronics 0003:047F:FFFF.0089: unknown main item tag 0x0 [ 1988.450474][T19331] plantronics 0003:047F:FFFF.0089: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1988.584694][T19331] usb 2-1: USB disconnect, device number 119 [ 1988.984181][ C1] usb 7-1: yurex_control_callback - control failed: -2 [ 1989.042900][T19331] usb 7-1: USB disconnect, device number 106 [ 1989.082413][T19331] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 1990.403929][ T5727] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1990.578778][ T5727] usb 2-1: Using ep0 maxpacket: 8 [ 1990.596676][ T5727] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1990.621119][ T5727] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1990.689237][ T5727] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1990.699269][ T5727] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1990.855941][ C0] bridge0: port 1(1¾x9ÿ) entered learning state [ 1991.141727][T28833] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1991.309130][T28833] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1991.489013][T28833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1991.497399][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 1991.518263][T28833] usb 1-1: Product: syz [ 1991.522906][T28833] usb 1-1: Manufacturer: syz [ 1991.527626][T28833] usb 1-1: SerialNumber: syz [ 1991.539634][T28833] usb 1-1: config 0 descriptor?? [ 1991.547500][T28833] hub 1-1:0.0: bad descriptor, ignoring hub [ 1991.553734][T28833] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1991.652452][ T30] audit: type=1804 audit(1783914600.294:1025): pid=29989 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.6.6367" name="/newroot/554/file1" dev="fuse" ino=1 res=1 errno=0 [ 1992.658073][ T5727] usbtmc 2-1:16.0: bulk endpoints not found [ 1992.768604][T28833] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 1992.961935][ T30] audit: type=1800 audit(1783914600.294:1026): pid=29989 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.6367" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1993.139385][ T30] audit: type=1400 audit(1783914601.854:1027): avc: denied { write } for pid=29994 comm="syz.2.6368" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1993.191415][ T30] audit: type=1400 audit(1783914601.914:1028): avc: denied { firmware_load } for pid=28833 comm="kworker/1:13" path="/lib/firmware/dvb-usb-dib0700-1.20.fw" dev="sda1" ino=414 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1993.218183][T28833] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1993.228985][T28833] dib0700: firmware download failed at 7 with -22 [ 1993.262336][T28833] usb 1-1: USB disconnect, device number 116 [ 1993.381820][T28834] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1993.497824][T29999] loop5: detected capacity change from 0 to 6 [ 1993.513372][T29999] Dev loop5: unable to read RDB block 6 [ 1993.531858][T29999] loop5: AHDI p2 [ 1993.535594][T29999] loop5: partition table partially beyond EOD, truncated [ 1993.545953][T28834] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1993.562910][T28834] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1993.582887][T28834] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1993.593099][T28834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1993.611707][T28834] usb 3-1: SerialNumber: syz [ 1993.687396][T30002] team0: Port device xfrm0 removed [ 1993.695874][T30002] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1993.972271][T28833] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1993.972428][T30011] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1993.993612][T30010] IPVS: stopping master sync thread 30011 ... [ 1994.376108][T28834] usb 3-1: 0:2 : does not exist [ 1995.009890][T28834] usb 3-1: unit 5: unexpected type 0x09 [ 1995.040750][T28834] usb 3-1: USB disconnect, device number 8 [ 1995.073286][T21294] usb 2-1: USB disconnect, device number 120 [ 1995.125651][T21336] udevd[21336]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1995.162164][T28833] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 1995.174868][T28833] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1995.200521][T28833] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1995.240728][T28833] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1995.279696][T28833] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1995.307513][ T50] Bluetooth: hci2: Invalid handle: 0x2e70 > 0x0eff [ 1995.310403][T28833] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1995.331957][T28833] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1995.339470][T28833] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1995.355061][T28833] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1995.376102][T28833] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1995.392234][T30018] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1995.398412][T30018] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1995.407027][T28833] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1995.419167][T28833] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1995.431725][T30018] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1995.439287][T30026] fuse: Bad value for 'fd' [ 1995.443413][T30018] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1995.451177][T28833] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1995.461190][T30018] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1995.472965][T28833] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1995.484738][T30018] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1995.494016][T28833] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1995.515881][T28833] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1995.523951][T30018] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1995.532373][T28833] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1995.541487][T28833] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1995.600990][T28833] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1995.641211][T28833] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1995.670402][T28833] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1995.694434][T28833] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1995.708802][T28833] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1995.723787][T28833] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1996.577125][T19331] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1996.633905][T28833] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1996.706876][T28833] usb 6-1: string descriptor 0 read error: -71 [ 1996.731688][T28833] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1996.747680][T19331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1996.767948][T28833] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1996.778472][T19331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1996.810011][T19331] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1996.830393][T28833] usb 6-1: config 0 descriptor?? [ 1996.848490][T28833] usb 6-1: can't set config #0, error -71 [ 1996.858767][T19331] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1996.888540][T28833] usb 6-1: USB disconnect, device number 9 [ 1996.908734][T19331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1996.955864][T19331] usb 2-1: config 0 descriptor?? [ 1997.412321][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 1997.418881][ T5623] Bluetooth: hci2: command 0x0c1a tx timeout [ 1997.450501][T19331] plantronics 0003:047F:FFFF.008A: unknown main item tag 0x0 [ 1997.462637][T19331] plantronics 0003:047F:FFFF.008A: unknown main item tag 0x0 [ 1997.488214][T19331] plantronics 0003:047F:FFFF.008A: unknown main item tag 0x0 [ 1997.497427][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 1997.504003][ T50] Bluetooth: hci5: command 0x0c1a tx timeout [ 1997.512078][ T5623] Bluetooth: hci3: command 0x0c1a tx timeout [ 1997.534010][T19331] plantronics 0003:047F:FFFF.008A: unknown main item tag 0x0 [ 1997.542168][T19331] plantronics 0003:047F:FFFF.008A: unknown main item tag 0x0 [ 1997.565297][T19331] plantronics 0003:047F:FFFF.008A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1997.737573][T28833] usb 2-1: USB disconnect, device number 121 [ 1997.785873][T30052] netlink: 'syz.5.6387': attribute type 1 has an invalid length. [ 1997.880552][T30052] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1997.893098][T23069] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1997.929063][T30056] bond4: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 1997.963243][T30056] bond4: entered allmulticast mode [ 1997.983299][T30052] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6387'. [ 1998.011070][T30052] bond4: left allmulticast mode [ 1998.018949][T30052] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1998.181607][T28835] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 1998.352060][T28835] usb 7-1: Using ep0 maxpacket: 32 [ 1998.365180][T28835] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1998.397238][T28835] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1998.432486][T28835] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 255, changing to 11 [ 1998.480690][T28835] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1998.534824][T28835] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1998.596612][T28835] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1998.625434][T28835] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1998.659142][T28835] usb 7-1: Product: syz [ 1998.683438][T28835] usb 7-1: Manufacturer: syz [ 1998.688052][T28835] usb 7-1: SerialNumber: syz [ 1998.713811][ T30] audit: type=1326 audit(1783914607.434:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30075 comm="syz.2.6397" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9107f9de59 code=0x7ffc0000 [ 1998.744708][T28835] usb 7-1: config 0 descriptor?? [ 1998.778470][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1998.793618][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1998.804590][ T30] audit: type=1326 audit(1783914607.444:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30075 comm="syz.2.6397" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9107f9de59 code=0x7ffc0000 [ 1998.805477][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1998.847328][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1998.859187][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1998.935897][ T30] audit: type=1326 audit(1783914607.474:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30075 comm="syz.2.6397" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f9107f9de59 code=0x7ffc0000 [ 1999.068588][ T30] audit: type=1326 audit(1783914607.474:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30075 comm="syz.2.6397" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9107f9de59 code=0x7ffc0000 [ 1999.176447][ T30] audit: type=1326 audit(1783914607.474:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30075 comm="syz.2.6397" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9107f9de59 code=0x7ffc0000 [ 1999.254912][ T30] audit: type=1326 audit(1783914607.474:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30075 comm="syz.2.6397" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9107f9de59 code=0x7ffc0000 [ 1999.354819][ T30] audit: type=1326 audit(1783914607.474:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30075 comm="syz.2.6397" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9107f9de59 code=0x7ffc0000 [ 1999.514154][ T30] audit: type=1326 audit(1783914607.474:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30075 comm="syz.2.6397" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f9107f9de59 code=0x7ffc0000 [ 1999.541859][ T30] audit: type=1326 audit(1783914607.474:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30075 comm="syz.2.6397" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9107f9de59 code=0x7ffc0000 [ 1999.568849][ T30] audit: type=1326 audit(1783914607.474:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30075 comm="syz.2.6397" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9107f9de59 code=0x7ffc0000 [ 1999.579480][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 1999.645607][T29987] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1999.854273][T30079] wlan0 speed is unknown, defaulting to 1000 [ 1999.906629][T29987] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2000.140435][T29987] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2000.339661][T29987] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2000.356019][T30079] bridge0: port 1(bridge_slave_0) entered blocking state [ 2000.363302][T30079] bridge0: port 1(bridge_slave_0) entered disabled state [ 2000.370468][T30079] bridge_slave_0: entered allmulticast mode [ 2000.380670][T30079] bridge_slave_0: entered promiscuous mode [ 2000.388724][T30079] bridge0: port 2(bridge_slave_1) entered blocking state [ 2000.398481][T30079] bridge0: port 2(bridge_slave_1) entered disabled state [ 2000.406682][T30079] bridge_slave_1: entered allmulticast mode [ 2000.414164][T30079] bridge_slave_1: entered promiscuous mode [ 2000.458453][T30079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2000.471455][T30079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2000.512082][T30079] team0: Port device team_slave_0 added [ 2000.531682][T11779] usb 1-1: new full-speed USB device number 117 using dummy_hcd [ 2000.536664][T30079] team0: Port device team_slave_1 added [ 2000.583325][T30079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2000.592485][T30079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2000.619568][T30079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2000.653142][T30079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2000.660088][T30079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2000.686982][T30079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2000.694539][T11779] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2000.710265][T11779] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2000.723433][T11779] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 2000.738350][T11779] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2000.754719][T30079] hsr_slave_0: entered promiscuous mode [ 2000.760112][T11779] usb 1-1: Product: syz [ 2000.762442][T30079] hsr_slave_1: entered promiscuous mode [ 2000.770725][T30079] debugfs: 'hsr0' already exists in 'hsr' [ 2000.770950][T11779] usb 1-1: Manufacturer: syz [ 2000.776689][T30079] Cannot create hsr debugfs directory [ 2000.818511][T11779] usb 1-1: SerialNumber: syz [ 2000.832951][T11779] usb 1-1: config 0 descriptor?? [ 2000.931786][ T50] Bluetooth: hci0: command tx timeout [ 2000.965248][T28833] usb 7-1: USB disconnect, device number 107 [ 2001.051474][T29987] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 2001.074484][T28836] usb 1-1: USB disconnect, device number 117 [ 2001.485372][T29987] bond0 (unregistering): Released all slaves [ 2001.519216][T29987] bond1 (unregistering): Released all slaves [ 2001.552276][T29987] bond2 (unregistering): Released all slaves [ 2001.590026][T29987] bond3 (unregistering): Released all slaves [ 2001.652055][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 2001.696264][T29987] bond4 (unregistering): Released all slaves [ 2001.928979][ T5273] 8021q: adding VLAN 0 to HW filter on device eth9 [ 2001.955483][T21294] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 2002.119498][T21294] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2002.132031][T28836] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 2002.145544][T21294] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2002.188186][T21294] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2002.220221][T30165] fuse: Bad value for 'fd' [ 2002.226363][T21294] usb 7-1: string descriptor 0 read error: -22 [ 2002.238019][T21294] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 2002.256179][T21294] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2002.310553][T28836] usb 3-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0x45, changing to 0x5 [ 2002.317951][T21294] usb 7-1: selecting invalid altsetting 1 [ 2002.340639][T28836] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x5 has invalid maxpacket 200, setting to 64 [ 2002.373949][T28836] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2002.384833][T28836] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2002.385487][T21294] usb 7-1: unit 3 not found! [ 2002.400469][T28836] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2002.409551][T28836] usb 3-1: Product: syz [ 2002.415700][T28836] usb 3-1: Manufacturer: syz [ 2002.421263][T28836] usb 3-1: SerialNumber: syz [ 2002.439317][T28836] usb 3-1: config 0 descriptor?? [ 2002.439685][T29987] hsr_slave_0: left promiscuous mode [ 2002.472214][T29987] hsr_slave_1: left promiscuous mode [ 2002.513477][T21294] usb 7-1: cannot request logical cluster ID: 0 (err: -5) [ 2002.534218][T21294] usb 7-1: invalid MIXER UNIT descriptor 6 [ 2002.547238][T29987] veth1_macvtap: left promiscuous mode [ 2002.568460][T29987] veth0_macvtap: left promiscuous mode [ 2002.575605][T29987] veth1_vlan: left promiscuous mode [ 2002.582979][T29987] veth0_vlan: left promiscuous mode [ 2002.672333][T21294] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -5 [ 2002.684599][T28836] usb 3-1: selecting invalid altsetting 0 [ 2002.868154][T28836] usb 3-1: USB disconnect, device number 9 [ 2003.014510][ T50] Bluetooth: hci0: command tx timeout [ 2003.167817][ T5273] 8021q: adding VLAN 0 to HW filter on device eth10 [ 2003.435627][T28836] usb 7-1: USB disconnect, device number 108 [ 2003.645626][T11779] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 2003.677894][T30203] fuse: Bad value for 'fd' [ 2003.832241][T11779] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2003.857267][T11779] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2003.904656][T11779] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 2003.918204][T11779] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2003.936611][T11779] usb 3-1: Product: syz [ 2003.941766][T30215] misc userio: Invalid payload size [ 2003.956638][T11779] usb 3-1: Manufacturer: syz [ 2003.968745][T11779] usb 3-1: SerialNumber: syz [ 2004.056172][T11779] usb 3-1: config 0 descriptor?? [ 2004.180173][T29987] IPVS: stop unused estimator thread 0... [ 2004.539187][T11779] hub 3-1:0.0: bad descriptor, ignoring hub [ 2004.548329][T11779] hub 3-1:0.0: probe with driver hub failed with error -5 [ 2004.582694][T11779] usb 3-1: USB disconnect, device number 10 [ 2004.599670][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 2004.599683][ T30] audit: type=1400 audit(1783914613.324:1047): avc: denied { write } for pid=30194 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2004.660491][T30224] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6431'. [ 2004.731060][ T30] audit: type=1400 audit(1783914613.454:1048): avc: denied { write } for pid=30225 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2004.865461][T30079] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2004.886686][T30079] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2004.897740][T30079] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2004.921242][T30079] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2004.933452][T28834] hid-generic 0000:0000:0000.008B: unknown main item tag 0x0 [ 2004.946488][T30079] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2004.956663][T28834] hid-generic 0000:0000:0000.008B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2004.956949][T30236] netlink: 88 bytes leftover after parsing attributes in process `syz.6.6435'. [ 2004.985496][T30079] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2005.023991][T30079] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2005.060472][T30079] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2005.094422][ T50] Bluetooth: hci0: command tx timeout [ 2005.102784][T30236] syzkaller1: entered promiscuous mode [ 2005.113056][T30236] syzkaller1: entered allmulticast mode [ 2005.220107][T30255] fuse: Bad value for 'fd' [ 2005.390034][T30079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2005.409699][ T30] audit: type=1400 audit(1783914614.134:1049): avc: denied { write } for pid=30231 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2005.462604][T30079] 8021q: adding VLAN 0 to HW filter on device team0 [ 2005.496077][T23073] bridge0: port 1(bridge_slave_0) entered blocking state [ 2005.503226][T23073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2005.553550][T23069] bridge0: port 2(bridge_slave_1) entered blocking state [ 2005.560652][T23069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2005.583656][ T30] audit: type=1400 audit(1783914614.304:1050): avc: denied { write } for pid=30271 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2006.156080][ T30] audit: type=1400 audit(1783914614.884:1051): avc: denied { write } for pid=30276 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2006.234041][T30297] 9p: Bad value for 'rfdno' [ 2006.325550][ T30] audit: type=1400 audit(1783914615.054:1052): avc: denied { write } for pid=30298 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2006.381898][T30079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2006.442648][T11779] usb 2-1: new full-speed USB device number 122 using dummy_hcd [ 2006.603259][T11779] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2006.635801][T11779] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2006.663540][T11779] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 2006.689104][T11779] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2006.710299][T11779] usb 2-1: Product: syz [ 2006.734660][T11779] usb 2-1: Manufacturer: syz [ 2006.753949][T11779] usb 2-1: SerialNumber: syz [ 2006.782566][T11779] usb 2-1: config 0 descriptor?? [ 2006.839567][T30330] netlink: 88 bytes leftover after parsing attributes in process `syz.6.6450'. [ 2006.876344][T30330] syzkaller1: entered promiscuous mode [ 2006.887371][T30330] syzkaller1: entered allmulticast mode [ 2006.982152][ T30] audit: type=1400 audit(1783914615.714:1053): avc: denied { write } for pid=30311 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2007.044945][T21294] usb 2-1: USB disconnect, device number 122 [ 2007.078186][T30079] veth0_vlan: entered promiscuous mode [ 2007.124026][T30079] veth1_vlan: entered promiscuous mode [ 2007.182184][ T50] Bluetooth: hci0: command tx timeout [ 2007.184739][ T30] audit: type=1400 audit(1783914615.914:1054): avc: denied { write } for pid=30345 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2007.229044][T30079] veth0_macvtap: entered promiscuous mode [ 2007.240525][T30079] veth1_macvtap: entered promiscuous mode [ 2007.267551][T30079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2007.309923][T30079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2007.351675][T28836] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 2007.361621][T23066] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2007.383514][T23066] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2007.399212][T23066] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2007.416693][T23066] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2007.531927][T28836] usb 7-1: Using ep0 maxpacket: 8 [ 2007.550390][T28836] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2007.575752][T28836] usb 7-1: config 0 has no interfaces? [ 2007.583548][T28836] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2007.596327][T28836] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2007.609474][T28836] usb 7-1: config 0 descriptor?? [ 2007.647650][T30351] netlink: 'syz.1.6455': attribute type 1 has an invalid length. [ 2007.695079][T30351] 8021q: adding VLAN 0 to HW filter on device bond8 [ 2007.708738][T23066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2007.719896][T23066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2007.719938][T30353] bond8: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 2007.759706][T30351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6455'. [ 2007.782528][T30353] bond8: entered allmulticast mode [ 2007.817876][T30351] bond8: left allmulticast mode [ 2007.845978][T30351] 8021q: adding VLAN 0 to HW filter on device bond8 [ 2007.938742][T29987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2007.960575][T29987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2008.158047][T30359] binder: 30358:30359 ioctl c0306201 0 returned -14 [ 2008.412579][T30370] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6462'. [ 2008.432319][T30370] syzkaller1: entered promiscuous mode [ 2008.446901][T30370] syzkaller1: entered allmulticast mode [ 2009.587548][T30390] binder: 30389:30390 ioctl c0306201 0 returned -14 [ 2009.800433][T30402] netlink: 996 bytes leftover after parsing attributes in process `syz.1.6475'. [ 2009.901910][T11779] usb 1-1: new full-speed USB device number 118 using dummy_hcd [ 2010.053301][T11779] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2010.071336][T11779] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2010.105918][T11779] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 2010.116028][T28834] usb 7-1: USB disconnect, device number 109 [ 2010.121589][T21294] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 2010.130546][T11779] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2010.153964][T11779] usb 1-1: Product: syz [ 2010.159895][T30416] binder: 30415:30416 ioctl c0306201 0 returned -14 [ 2010.175860][T11779] usb 1-1: Manufacturer: syz [ 2010.186893][T11779] usb 1-1: SerialNumber: syz [ 2010.210146][T11779] usb 1-1: config 0 descriptor?? [ 2010.289707][T30418] loop6: detected capacity change from 0 to 2640 [ 2010.296559][T21294] usb 2-1: Using ep0 maxpacket: 32 [ 2010.304770][T30418] buffer_io_error: 69 callbacks suppressed [ 2010.304786][T30418] Buffer I/O error on dev loop6, logical block 0, async page read [ 2010.320822][T30418] Buffer I/O error on dev loop6, logical block 0, async page read [ 2010.323109][T21294] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 2010.342557][T30418] Buffer I/O error on dev loop6, logical block 0, async page read [ 2010.350578][T21294] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2010.360010][T30418] Buffer I/O error on dev loop6, logical block 0, async page read [ 2010.368276][T21294] usb 2-1: Product: syz [ 2010.374393][T21294] usb 2-1: Manufacturer: syz [ 2010.382089][T21294] usb 2-1: SerialNumber: syz [ 2010.387036][T30418] Buffer I/O error on dev loop6, logical block 0, async page read [ 2010.398845][T21294] usb 2-1: config 0 descriptor?? [ 2010.408704][T21294] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 2010.417180][T30418] Buffer I/O error on dev loop6, logical block 0, async page read [ 2010.425809][T21294] dvb-usb: bulk message failed: -22 (4/0) [ 2010.434280][T21294] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2010.447221][T30418] Buffer I/O error on dev loop6, logical block 0, async page read [ 2010.455589][T21294] dvb-usb: bulk message failed: -22 (5/0) [ 2010.461712][T11779] hub 1-1:0.0: bad descriptor, ignoring hub [ 2010.468240][T11779] hub 1-1:0.0: probe with driver hub failed with error -5 [ 2010.475660][T30418] Buffer I/O error on dev loop6, logical block 0, async page read [ 2010.487011][T21294] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2010.502358][T30418] ldm_validate_partition_table(): Disk read failed. [ 2010.513398][T11779] usb 1-1: USB disconnect, device number 118 [ 2010.524666][T30418] Buffer I/O error on dev loop6, logical block 0, async page read [ 2010.541892][T30418] Buffer I/O error on dev loop6, logical block 0, async page read [ 2010.542727][T21294] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2010.564665][T21294] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 2010.573156][T21294] usb 2-1: media controller created [ 2010.597200][T21294] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2010.597705][T30418] Dev loop6: unable to read RDB block 0 [ 2010.608987][T30410] ttusb2: more than 2 i2c messages at a time is not handled yet. TODO. [ 2010.621442][T30410] dvb-usb: bulk message failed: -22 (7/0) [ 2010.631839][T30418] loop6: unable to read partition table [ 2010.643144][T30418] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 2010.656449][T30410] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 2010.666938][T21294] usb 2-1: selecting invalid altsetting 3 [ 2010.673785][T21294] ttusb2: set interface to alts=3 failed [ 2010.690277][T30410] ttusb2: i2c transfer failed. [ 2010.794289][T21294] DVB: Unable to find symbol tda10086_attach() [ 2010.810228][T21294] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 2010.849376][T21294] dvb-usb: bulk message failed: -22 (4/0) [ 2010.862039][T21294] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2010.874559][T21294] dvb-usb: bulk message failed: -22 (5/0) [ 2010.880333][T21294] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2010.904630][T21294] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 2010.946567][T21294] usb 2-1: USB disconnect, device number 123 [ 2011.037849][T21294] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 2011.300978][T30453] xt_hashlimit: size too large, truncated to 1048576 [ 2011.366712][T30456] sch_tbf: peakrate 3206195945111084456 is lower than or equals to rate 16161744310129335974 ! [ 2011.395096][T30456] /dev/nullb0: Can't open blockdev [ 2011.453409][T28834] usb 1-1: new low-speed USB device number 119 using dummy_hcd [ 2011.622793][T28834] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 2011.630983][T28834] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2011.641244][T28834] usb 1-1: config 0 has no interface number 0 [ 2011.647382][T28834] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2011.658425][T28834] usb 1-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2011.672021][T28834] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2011.681311][T28834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2011.694041][T28834] usb 1-1: config 0 descriptor?? [ 2011.710506][T28834] ldusb 1-1:0.55: Interrupt in endpoint not found [ 2011.810134][T28834] kernel write not supported for file /snd/seq (pid: 28834 comm: kworker/1:14) [ 2011.926724][T28833] usb 1-1: USB disconnect, device number 119 [ 2012.761608][T28834] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 2012.961569][T28834] usb 6-1: Using ep0 maxpacket: 32 [ 2012.961606][ T5727] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 2013.005998][T28834] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 2013.027954][T28834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2013.046161][T28834] usb 6-1: Product: syz [ 2013.059933][T28834] usb 6-1: Manufacturer: syz [ 2013.074219][T28834] usb 6-1: SerialNumber: syz [ 2013.095216][T28834] usb 6-1: config 0 descriptor?? [ 2013.120878][T28834] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 2013.141879][ T5727] usb 3-1: Using ep0 maxpacket: 16 [ 2013.143055][T28834] dvb-usb: bulk message failed: -22 (4/0) [ 2013.167638][T28834] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2013.185271][T28834] dvb-usb: bulk message failed: -22 (5/0) [ 2013.185574][ T5727] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2013.222434][T28834] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2013.244986][ T5727] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 2013.252834][T28834] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2013.290346][T28834] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 2013.304752][ T5727] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2013.305256][T28834] usb 6-1: media controller created [ 2013.325049][T30478] ttusb2: more than 2 i2c messages at a time is not handled yet. TODO. [ 2013.347951][T30478] dvb-usb: bulk message failed: -22 (7/0) [ 2013.357162][ T5727] usb 3-1: config 0 descriptor?? [ 2013.381443][T30478] ttusb2: there might have been an error during control message transfer. (rlen = 32, was 0) [ 2013.382701][T28834] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2013.435620][T30478] ttusb2: i2c transfer failed. [ 2013.484742][T28834] usb 6-1: selecting invalid altsetting 3 [ 2013.504214][T28834] ttusb2: set interface to alts=3 failed [ 2013.582717][T28834] DVB: Unable to find symbol tda10086_attach() [ 2013.610699][T28834] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 2013.642741][T28834] dvb-usb: bulk message failed: -22 (4/0) [ 2013.662136][T28834] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2013.675289][ T5727] usbhid 3-1:0.0: can't add hid device: -71 [ 2013.690293][ T5727] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2013.706993][T28834] dvb-usb: bulk message failed: -22 (5/0) [ 2013.722858][T28834] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2013.751101][ T5727] usb 3-1: USB disconnect, device number 11 [ 2013.765605][T28834] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 2013.815031][T28834] usb 6-1: USB disconnect, device number 10 [ 2013.941760][T28834] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 2014.133221][ T30] audit: type=1400 audit(1783914622.864:1055): avc: denied { setopt } for pid=30510 comm="syz.0.6516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2014.231699][ T10] usb 7-1: new high-speed USB device number 110 using dummy_hcd [ 2014.396935][ T10] usb 7-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 2014.438327][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 2014.500456][ T10] usb 7-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 2014.549659][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2014.598800][ T10] usb 7-1: Product: syz [ 2014.655326][ T10] usb 7-1: Manufacturer: syz [ 2014.707075][ T10] usb 7-1: SerialNumber: syz [ 2015.013263][ T10] usb 7-1: config 0 descriptor?? [ 2015.300122][T30527] netlink: 'syz.1.6520': attribute type 1 has an invalid length. [ 2015.321767][ T10] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 2015.355312][T30527] 8021q: adding VLAN 0 to HW filter on device bond9 [ 2015.372932][T30533] bond9: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 2015.916013][ T10] gspca_sunplus: reg_r err -110 [ 2015.920940][ T10] sunplus 7-1:0.0: probe with driver sunplus failed with error -110 [ 2015.930298][T30527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6520'. [ 2015.947518][ T30] audit: type=1400 audit(1783914624.174:1056): avc: denied { bind } for pid=30528 comm="syz.5.6522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2015.968651][T30533] bond9: entered allmulticast mode [ 2015.987889][T30527] bond9: left allmulticast mode [ 2016.003250][T28834] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 2016.011612][T30527] 8021q: adding VLAN 0 to HW filter on device bond9 [ 2016.184301][T28834] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2016.195373][T28834] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2016.205266][T28834] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2016.219131][T28834] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2016.228872][T28834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2016.242354][T28834] usb 3-1: config 0 descriptor?? [ 2016.348838][T30547] program syz.5.6527 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2016.664709][T28834] plantronics 0003:047F:FFFF.008C: unknown main item tag 0x0 [ 2016.677288][T28834] plantronics 0003:047F:FFFF.008C: unknown main item tag 0x0 [ 2016.688798][T28834] plantronics 0003:047F:FFFF.008C: unknown main item tag 0x0 [ 2016.696418][T28834] plantronics 0003:047F:FFFF.008C: unknown main item tag 0x0 [ 2016.704109][T28834] plantronics 0003:047F:FFFF.008C: unknown main item tag 0x0 [ 2016.712081][T21294] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 2016.730837][T28834] plantronics 0003:047F:FFFF.008C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2016.873917][T21294] usb 6-1: config 0 has an invalid interface number: 48 but max is 0 [ 2016.892106][T21294] usb 6-1: config 0 has no interface number 0 [ 2016.898280][T21294] usb 6-1: too many endpoints for config 0 interface 48 altsetting 49: 55, using maximum allowed: 30 [ 2016.917099][T21294] usb 6-1: config 0 interface 48 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 55 [ 2016.951133][T28834] usb 3-1: USB disconnect, device number 12 [ 2016.957048][T21294] usb 6-1: config 0 interface 48 has no altsetting 0 [ 2016.957084][T21294] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 2016.957106][T21294] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2016.982580][T21294] usb 6-1: config 0 descriptor?? [ 2017.073739][ T10] usb 7-1: USB disconnect, device number 110 [ 2017.273020][T30560] netlink: 'syz.1.6532': attribute type 1 has an invalid length. [ 2017.324659][T21294] usb 6-1: string descriptor 0 read error: -32 [ 2017.337258][T21294] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 2017.356819][T30560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6532'. [ 2018.090443][T21294] usb 6-1: USB disconnect, device number 11 [ 2018.271402][T30579] program syz.2.6538 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2018.547494][ T30] audit: type=1804 audit(1783914627.254:1057): pid=30582 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.6539" name="/newroot/591/file1" dev="fuse" ino=1 res=1 errno=0 [ 2018.652022][ T30] audit: type=1800 audit(1783914627.304:1058): pid=30582 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.6539" name="/" dev="fuse" ino=1 res=0 errno=0 [ 2018.991618][T28834] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 2019.104349][T28836] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 2019.151730][T28834] usb 3-1: Using ep0 maxpacket: 16 [ 2019.161194][T28834] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 2019.171022][T28834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2019.180166][T28834] usb 3-1: Product: syz [ 2019.185052][T28834] usb 3-1: Manufacturer: syz [ 2019.189642][T28834] usb 3-1: SerialNumber: syz [ 2019.273580][T28836] usb 7-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 2019.283116][T28836] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 2019.293790][T28836] usb 7-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 2019.303182][T28836] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2019.311161][T28836] usb 7-1: Product: syz [ 2019.315363][T28836] usb 7-1: Manufacturer: syz [ 2019.319957][T28836] usb 7-1: SerialNumber: syz [ 2019.326091][T28836] usb 7-1: config 0 descriptor?? [ 2019.334914][T28836] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 2019.371651][T28833] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 2019.532967][T28833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2019.544045][T28833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2019.553812][T28833] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2019.567875][T28833] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2019.577082][T28833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2019.587215][T28833] usb 1-1: config 0 descriptor?? [ 2019.609859][T28834] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 2019.633149][T28834] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2019.643773][T28834] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 2019.663262][T28834] usb 3-1: media controller created [ 2019.682685][T28834] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2019.720515][T28834] zl10353_read_register: readreg error (reg=127, ret==-71) [ 2019.757637][T28834] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 2019.771143][T28834] usb 3-1: USB disconnect, device number 13 [ 2020.017197][T28833] plantronics 0003:047F:FFFF.008D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 2020.162993][T30602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6547'. [ 2020.198133][T30604] loop6: detected capacity change from 0 to 2640 [ 2020.204983][T30604] buffer_io_error: 11 callbacks suppressed [ 2020.204995][T30604] Buffer I/O error on dev loop6, logical block 0, async page read [ 2020.215331][T28833] usb 1-1: USB disconnect, device number 120 [ 2020.219130][T30604] Buffer I/O error on dev loop6, logical block 0, async page read [ 2020.232714][T30604] Buffer I/O error on dev loop6, logical block 0, async page read [ 2020.240830][T30604] Buffer I/O error on dev loop6, logical block 0, async page read [ 2020.248830][T30604] Buffer I/O error on dev loop6, logical block 0, async page read [ 2020.260525][T30604] Buffer I/O error on dev loop6, logical block 0, async page read [ 2020.269702][T30604] Buffer I/O error on dev loop6, logical block 0, async page read [ 2020.280621][T30604] Buffer I/O error on dev loop6, logical block 0, async page read [ 2020.293024][T30604] ldm_validate_partition_table(): Disk read failed. [ 2020.299790][T30604] Buffer I/O error on dev loop6, logical block 0, async page read [ 2020.307989][T30604] Buffer I/O error on dev loop6, logical block 0, async page read [ 2020.317044][T30604] Dev loop6: unable to read RDB block 0 [ 2020.323098][T30604] loop6: unable to read partition table [ 2020.329142][T30604] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 2020.728850][T30618] syzkaller0: entered promiscuous mode [ 2020.734599][T30618] syzkaller0: entered allmulticast mode [ 2020.933603][ C0] bridge0: port 1(1¾x9ÿ) entered forwarding state [ 2020.940161][ C0] bridge0: topology change detected, propagating [ 2021.188334][T28836] gspca_sunplus: reg_r err -71 [ 2021.200118][T28836] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 2021.212630][T28836] usb 7-1: USB disconnect, device number 111 [ 2021.438853][ T30] audit: type=1400 audit(1783914630.134:1059): avc: denied { mount } for pid=30622 comm="syz.2.6556" name="/" dev="ramfs" ino=123670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 2021.573573][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2021.580836][ C1] bridge0: topology change detected, propagating [ 2021.921780][T30634] loop6: detected capacity change from 0 to 2640 [ 2021.941090][T30634] ldm_validate_partition_table(): Disk read failed. [ 2021.963284][T30634] Dev loop6: unable to read RDB block 0 [ 2021.970958][T30634] loop6: unable to read partition table [ 2021.980391][T30634] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 2022.066167][ T4978] ldm_validate_partition_table(): Disk read failed. [ 2022.144964][ T4978] Dev loop6: unable to read RDB block 0 [ 2022.240712][ T4978] loop6: unable to read partition table [ 2022.971621][T28833] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 2023.143224][T28833] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2023.166514][T28833] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2023.184337][ T30] audit: type=1804 audit(1783914631.914:1060): pid=30659 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.6568" name="/newroot/552/file1" dev="fuse" ino=1 res=1 errno=0 [ 2023.206044][T28833] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2023.221583][T28833] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2023.233063][ T30] audit: type=1800 audit(1783914631.914:1061): pid=30659 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.6568" name="/" dev="fuse" ino=1 res=0 errno=0 [ 2023.256600][T28833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2023.269719][T28833] usb 7-1: config 0 descriptor?? [ 2023.761805][T28833] plantronics 0003:047F:FFFF.008E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 2024.313340][T28833] usb 7-1: USB disconnect, device number 112 [ 2024.411135][T30672] fido_id[30672]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 2025.129673][T30688] 9p: Bad value for 'rfdno' [ 2025.361605][T28836] usb 2-1: new full-speed USB device number 124 using dummy_hcd [ 2025.401628][ T29] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 2025.485017][T30701] binder: 30699:30701 ioctl c0306201 0 returned -14 [ 2025.591653][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 2025.604497][T28836] usb 2-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 2025.616071][T30709] loop4: detected capacity change from 0 to 7 [ 2025.616690][T28836] usb 2-1: config 0 interface 0 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2025.637316][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2025.662340][ T29] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 2025.663139][T30709] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 2025.671432][T28836] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2025.683892][T28834] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 2025.692394][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2025.701304][T28836] usb 2-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 2025.713489][ T29] usb 6-1: config 0 descriptor?? [ 2025.719005][T28836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2025.723724][T30712] binder: 30699:30712 ioctl c0306201 0 returned -14 [ 2025.729242][ T29] pxrc 6-1:0.0: Could not find endpoint [ 2025.742225][ T29] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2025.751066][T28836] usb 2-1: config 0 descriptor?? [ 2025.760093][T30709] loop4: partition table partially beyond EOD, truncated [ 2025.769379][T30709] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 2025.770278][T28836] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2025.801706][T30714] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6588'. [ 2025.825687][T30714] syzkaller1: entered promiscuous mode [ 2025.836745][T30714] syzkaller1: entered allmulticast mode [ 2025.872690][T28834] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 2025.882594][T28834] usb 3-1: config 0 has no interface number 0 [ 2025.888667][T28834] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2025.899561][T28834] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 2025.911250][T28834] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2025.922726][T28834] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2025.944869][ T10] usb 6-1: USB disconnect, device number 12 [ 2025.953085][T28834] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2025.964804][T28834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2025.987966][T28834] usb 3-1: config 0 descriptor?? [ 2025.995140][T30697] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2026.009449][T28834] ldusb 3-1:0.55: Interrupt in endpoint not found [ 2026.218906][T28834] usb 3-1: USB disconnect, device number 14 [ 2026.629161][ T30] audit: type=1326 audit(1783914635.354:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30728 comm="syz.5.6593" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f861d79de59 code=0x0 [ 2026.815544][T30738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2026.830687][T30738] 8021q: adding VLAN 0 to HW filter on device team0 [ 2026.859695][T30738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2026.974551][T30738] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2026.987006][T30738] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2027.014922][T30738] veth1_vlan: left promiscuous mode [ 2027.045800][T30738] veth0_vlan: left promiscuous mode [ 2027.074774][T30738] veth0_vlan: entered promiscuous mode [ 2027.119575][T30738] veth1_vlan: entered promiscuous mode [ 2027.144775][T30738] veth1_macvtap: left promiscuous mode [ 2027.159449][T30738] veth0_macvtap: left promiscuous mode [ 2027.175933][T30738] veth0_macvtap: entered promiscuous mode [ 2027.188493][T30738] veth1_macvtap: entered promiscuous mode [ 2027.206476][T30738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2027.219736][T30738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2027.236428][T30738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2027.251091][T30738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2027.291586][T21294] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 2027.292756][T30738] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2027.377051][T30741] syzkaller0: entered promiscuous mode [ 2027.383061][T30741] syzkaller0: entered allmulticast mode [ 2027.389971][T23069] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2027.401188][T23069] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2027.445512][T28833] usb 2-1: USB disconnect, device number 124 [ 2027.464531][T21294] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2027.491471][T21294] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2027.518064][T23069] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2027.544164][T21294] usb 3-1: Product: syz [ 2027.553227][T21294] usb 3-1: Manufacturer: syz [ 2027.557874][T23069] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2027.575991][T21294] usb 3-1: SerialNumber: syz [ 2027.597828][T21294] usb 3-1: config 0 descriptor?? [ 2027.829524][T28834] usb 3-1: USB disconnect, device number 15 [ 2027.897050][ T5734] usb 7-1: new low-speed USB device number 113 using dummy_hcd [ 2027.913936][ T10] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 2027.961730][T28833] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 2028.055051][ T5734] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 2028.065913][ T5734] usb 7-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 2028.079257][ T10] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2028.089126][ T5734] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 2028.100101][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2028.109803][ T5734] usb 7-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 2028.121028][ T10] usb 2-1: config 0 descriptor?? [ 2028.127425][ T5734] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 2028.138480][ T5734] usb 7-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 2028.139794][ T10] cp210x 2-1:0.0: cp210x converter detected [ 2028.149457][T28833] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 2028.166729][ T5734] usb 7-1: string descriptor 0 read error: -22 [ 2028.173495][ T5734] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2028.182734][T28833] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 2028.184487][T28833] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 2028.192529][ T5734] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2028.202656][T28833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2028.217389][T28833] usb 6-1: Product: syz [ 2028.221951][T28833] usb 6-1: Manufacturer: syz [ 2028.226509][ T5734] usb 7-1: rejected 3 configurations due to insufficient available bus power [ 2028.232389][T28833] usb 6-1: SerialNumber: syz [ 2028.248531][ T5734] usb 7-1: no configuration chosen from 3 choices [ 2028.250539][T28833] usb 6-1: config 0 descriptor?? [ 2028.269768][T28833] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 2029.053613][T30792] syzkaller0: entered promiscuous mode [ 2029.059088][T30792] syzkaller0: entered allmulticast mode [ 2029.165658][T30794] loop6: detected capacity change from 0 to 2640 [ 2029.176731][T30794] buffer_io_error: 48 callbacks suppressed [ 2029.176741][T30794] Buffer I/O error on dev loop6, logical block 0, async page read [ 2029.193402][T21336] Buffer I/O error on dev loop6, logical block 0, async page read [ 2029.203337][T21336] Buffer I/O error on dev loop6, logical block 0, async page read [ 2029.215911][T30794] Buffer I/O error on dev loop6, logical block 0, async page read [ 2029.224116][T30794] Buffer I/O error on dev loop6, logical block 0, async page read [ 2029.233501][T30794] Buffer I/O error on dev loop6, logical block 0, async page read [ 2029.241414][T30794] Buffer I/O error on dev loop6, logical block 0, async page read [ 2029.262372][T28836] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 2029.272527][ T10] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 2029.278864][T30794] Buffer I/O error on dev loop6, logical block 0, async page read [ 2029.281278][ T10] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 2029.304424][T21336] Buffer I/O error on dev loop6, logical block 0, async page read [ 2029.306341][ T10] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2029.323677][T30794] Buffer I/O error on dev loop6, logical block 0, async page read [ 2029.323916][ T10] usb 2-1: USB disconnect, device number 125 [ 2029.343305][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2029.360471][T30794] ldm_validate_partition_table(): Disk read failed. [ 2029.369190][ T10] cp210x 2-1:0.0: device disconnected [ 2029.384048][T30794] Dev loop6: unable to read RDB block 0 [ 2029.401923][T30794] loop6: unable to read partition table [ 2029.410184][T30794] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 2029.423892][T30797] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6613'. [ 2029.444297][T28836] usb 3-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 2029.444618][T30797] syzkaller1: entered promiscuous mode [ 2029.460165][T30797] syzkaller1: entered allmulticast mode [ 2029.486235][T28836] usb 3-1: config 0 interface 0 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2029.516871][T28836] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2029.524544][T28836] usb 3-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 2029.535946][T28836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2029.553631][T28836] usb 3-1: config 0 descriptor?? [ 2029.553653][T30799] fuse: Bad value for 'group_id' [ 2029.553669][T30799] fuse: Bad value for 'group_id' [ 2029.575593][T28836] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2029.660364][ T5727] hid-generic 0000:0000:0000.008F: unknown main item tag 0x0 [ 2029.675213][ T5727] hid-generic 0000:0000:0000.008F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2029.835346][ T5623] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2029.855515][ T5623] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2029.863849][ T5623] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2029.873334][ T5623] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2029.880982][ T5623] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2029.897688][T23074] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2030.108744][T28833] gspca_sunplus: reg_r err -71 [ 2030.119694][T28833] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 2030.155654][T28833] usb 6-1: USB disconnect, device number 13 [ 2030.330412][T23074] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2030.344261][T23074] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 2030.506859][T23074] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2030.523392][T23074] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 2030.600409][T23074] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2030.611086][T23074] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 2030.637095][T30804] wlan0 speed is unknown, defaulting to 1000 [ 2030.659389][T28834] usb 7-1: USB disconnect, device number 113 [ 2030.827726][T23074] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2030.851201][T30822] netlink: 996 bytes leftover after parsing attributes in process `syz.5.6619'. [ 2030.862395][T23074] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 2030.982323][ T10] IPVS: starting estimator thread 0... [ 2031.092317][T30827] IPVS: using max 42 ests per chain, 100800 per kthread [ 2031.326451][T23074] bridge_slave_1: left promiscuous mode [ 2031.334938][T23074] bridge0: port 2(bridge_slave_1) entered disabled state [ 2031.346074][T23074] ¾x9ÿ: left allmulticast mode [ 2031.350932][T23074] ¾x9ÿ: left promiscuous mode [ 2031.356687][T23074] bridge0: port 1(1¾x9ÿ) entered disabled state [ 2031.401579][T21294] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 2031.574545][T21294] usb 1-1: Using ep0 maxpacket: 16 [ 2031.592596][T21294] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2031.612223][T21294] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2031.619102][T21294] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2031.629143][T21294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2031.648370][T21294] usb 1-1: config 0 descriptor?? [ 2031.767193][T23074] bond0 (unregistering): (slave ip6gretap1): Releasing backup interface [ 2031.814866][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 2031.823413][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 2031.940498][T28836] usb 3-1: USB disconnect, device number 16 [ 2031.971927][ T5623] Bluetooth: hci5: command tx timeout [ 2032.079470][ T30] audit: type=1400 audit(1783914640.804:1063): avc: denied { write } for pid=30838 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2032.138640][T23074] bond5 (unregistering): (slave geneve2): Releasing active interface [ 2032.155164][T21294] nzxt-smart2 0003:1E71:2009.0090: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 2032.159499][T30861] loop6: detected capacity change from 0 to 2640 [ 2032.194680][T30861] ldm_validate_partition_table(): Disk read failed. [ 2032.214907][T30861] Dev loop6: unable to read RDB block 0 [ 2032.228410][T30861] loop6: unable to read partition table [ 2032.258102][T30861] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 2032.327765][ T30] audit: type=1400 audit(1783914641.044:1064): avc: denied { write } for pid=30863 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2032.437784][T23074] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 2032.473383][T23074] bridge1 (unregistering): left promiscuous mode [ 2032.497110][T23074] bridge1 (unregistering): left allmulticast mode [ 2032.497300][T30867] fuse: Bad value for 'group_id' [ 2032.541459][T30867] fuse: Bad value for 'group_id' [ 2032.541469][ T5727] usb 1-1: USB disconnect, device number 121 [ 2032.577092][T23074] bond1 (unregistering): Released all slaves [ 2032.598436][T23074] bond0 (unregistering): Released all slaves [ 2032.626923][T23074] bond2 (unregistering): Released all slaves [ 2032.651809][T23074] bond3 (unregistering): Released all slaves [ 2032.684887][T23074] bond4 (unregistering): Released all slaves [ 2032.708305][T23074] bond5 (unregistering): Released all slaves [ 2032.732550][T23074] bond6 (unregistering): Released all slaves [ 2032.759358][T23074] bond7 (unregistering): Released all slaves [ 2032.799874][T23074] bond8 (unregistering): Released all slaves [ 2032.809956][ T30] audit: type=1400 audit(1783914641.534:1065): avc: denied { create } for pid=30872 comm="syz.5.6627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 2032.844685][T23074] bond9 (unregistering): Released all slaves [ 2032.957139][ T5273] 8021q: adding VLAN 0 to HW filter on device eth9 [ 2033.096027][ T5623] Bluetooth: hci2: unexpected event for opcode 0x0803 [ 2033.145891][T30804] bridge0: port 1(bridge_slave_0) entered blocking state [ 2033.154734][T30804] bridge0: port 1(bridge_slave_0) entered disabled state [ 2033.162357][T30804] bridge_slave_0: entered allmulticast mode [ 2033.175074][T30804] bridge_slave_0: entered promiscuous mode [ 2033.285343][T30804] bridge0: port 2(bridge_slave_1) entered blocking state [ 2033.302892][T30804] bridge0: port 2(bridge_slave_1) entered disabled state [ 2033.316705][T30804] bridge_slave_1: entered allmulticast mode [ 2033.324604][T30804] bridge_slave_1: entered promiscuous mode [ 2033.931638][ T5727] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 2034.051850][ T5623] Bluetooth: hci5: command tx timeout [ 2034.078834][T30804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2034.101584][ T5727] usb 1-1: Using ep0 maxpacket: 16 [ 2034.119826][ T5727] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2034.133663][ T5727] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 2034.152614][ T5727] usb 1-1: can't read configurations, error -71 [ 2034.288971][T30911] fuse: Bad value for 'group_id' [ 2034.303848][T30911] fuse: Bad value for 'group_id' [ 2034.347381][ T30] audit: type=1400 audit(1783914643.074:1066): avc: denied { write } for pid=30891 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2034.399578][T30804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2034.495549][T30804] team0: Port device team_slave_0 added [ 2034.553442][ T10] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 2035.100885][ T30] audit: type=1400 audit(1783914643.824:1067): avc: denied { write } for pid=30916 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2035.148138][T30804] team0: Port device team_slave_1 added [ 2035.224086][ T10] usb 6-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 2035.239702][T30804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2035.265637][T30804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2035.328353][ T10] usb 6-1: config 0 interface 0 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2035.333695][T30804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2035.383053][ T5273] 8021q: adding VLAN 0 to HW filter on device eth11 [ 2035.404305][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2035.408324][T30928] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6639'. [ 2035.438845][T30804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2035.456202][T30804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2035.486341][ T10] usb 6-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 2035.488510][T30804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2035.521573][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2035.553894][ T10] usb 6-1: config 0 descriptor?? [ 2035.567800][T23074] hsr_slave_0: left promiscuous mode [ 2035.575980][ T10] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2035.584864][T23074] hsr_slave_1: left promiscuous mode [ 2035.614117][T23074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2035.629448][T23074] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2035.687325][T30931] 9p: Bad value for 'wfdno' [ 2035.695834][T23074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2035.722572][T23074] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2035.747948][T23074] veth1_macvtap: left promiscuous mode [ 2035.753543][T23074] veth0_macvtap: left promiscuous mode [ 2035.759658][T23074] veth1_vlan: left promiscuous mode [ 2035.766209][T23074] veth0_vlan: left promiscuous mode [ 2035.942761][T28833] IPVS: starting estimator thread 0... [ 2036.042207][T30940] IPVS: using max 76 ests per chain, 182400 per kthread [ 2036.132333][ T5623] Bluetooth: hci5: command tx timeout [ 2036.205254][T23074] team0 (unregistering): Port device team_slave_1 removed [ 2036.218496][T23074] team0 (unregistering): Port device team_slave_0 removed [ 2036.490937][T30804] hsr_slave_0: entered promiscuous mode [ 2036.499401][T30804] hsr_slave_1: entered promiscuous mode [ 2036.505980][T30804] debugfs: 'hsr0' already exists in 'hsr' [ 2036.512619][T30804] Cannot create hsr debugfs directory [ 2036.767547][T30950] loop6: detected capacity change from 0 to 2640 [ 2036.777920][T30950] buffer_io_error: 32 callbacks suppressed [ 2036.777935][T30950] Buffer I/O error on dev loop6, logical block 0, async page read [ 2036.801708][T30950] Buffer I/O error on dev loop6, logical block 0, async page read [ 2036.846583][T30950] Buffer I/O error on dev loop6, logical block 0, async page read [ 2036.872457][T23074] IPVS: stop unused estimator thread 0... [ 2036.892156][T30950] Buffer I/O error on dev loop6, logical block 0, async page read [ 2036.927236][T30950] Buffer I/O error on dev loop6, logical block 0, async page read [ 2036.955268][T21336] Buffer I/O error on dev loop6, logical block 0, async page read [ 2036.970267][T21336] Buffer I/O error on dev loop6, logical block 0, async page read [ 2036.979178][T30950] Buffer I/O error on dev loop6, logical block 0, async page read [ 2036.988578][T21336] Buffer I/O error on dev loop6, logical block 0, async page read [ 2036.996684][T30950] Buffer I/O error on dev loop6, logical block 0, async page read [ 2037.008724][T30950] ldm_validate_partition_table(): Disk read failed. [ 2037.018107][T30950] Dev loop6: unable to read RDB block 0 [ 2037.036009][T30950] loop6: unable to read partition table [ 2037.057671][T30950] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 2037.091838][ T5623] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 2037.101741][ T5623] Bluetooth: hci2: Injecting HCI hardware error event [ 2037.115316][ T50] Bluetooth: hci2: hardware error 0x00 [ 2037.215525][T28833] usb 6-1: USB disconnect, device number 14 [ 2037.306056][ T5623] Bluetooth: hci3: unexpected event for opcode 0x0803 [ 2037.382141][T30968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6649'. [ 2037.438133][ T30] audit: type=1400 audit(1783914646.164:1068): avc: denied { write } for pid=30951 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2037.492967][ T10] usb 7-1: new high-speed USB device number 114 using dummy_hcd [ 2037.551428][ T30] audit: type=1400 audit(1783914646.274:1069): avc: denied { write } for pid=30974 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2037.643205][T30804] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2037.651655][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 2037.664862][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2037.670975][T30804] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2037.676503][ T10] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 2037.688203][ T10] usb 7-1: can't read configurations, error -71 [ 2037.689899][T30804] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2037.710120][T30804] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2037.717709][T30804] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2037.730171][T30804] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2037.738423][T30804] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2037.747575][T30804] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2037.772047][T28833] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 2037.914604][T30804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2037.931780][T28833] usb 6-1: Using ep0 maxpacket: 16 [ 2037.944474][T28833] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 2037.958633][T28833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2037.980305][T30804] 8021q: adding VLAN 0 to HW filter on device team0 [ 2037.983961][T30988] netlink: 'syz.0.6651': attribute type 10 has an invalid length. [ 2038.008446][T28833] usb 6-1: Product: syz [ 2038.016253][T28833] usb 6-1: Manufacturer: syz [ 2038.025255][T23075] bridge0: port 1(bridge_slave_0) entered blocking state [ 2038.032337][T23075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2038.045206][T28833] usb 6-1: SerialNumber: syz [ 2038.058249][T30988] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6651'. [ 2038.079211][T23075] bridge0: port 2(bridge_slave_1) entered blocking state [ 2038.086332][T23075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2038.157932][ T30] audit: type=1400 audit(1783914646.884:1070): avc: denied { write } for pid=30987 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2038.213528][ T5623] Bluetooth: hci5: command tx timeout [ 2038.277611][T28833] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 2038.323898][T28833] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2038.367999][T28833] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 2038.387172][T28833] usb 6-1: media controller created [ 2038.430264][T28833] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2038.464791][ T30] audit: type=1400 audit(1783914647.194:1071): avc: denied { write } for pid=31006 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2038.506201][T28833] zl10353_read_register: readreg error (reg=127, ret==-71) [ 2038.552366][T28833] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 2038.583497][T28833] usb 6-1: USB disconnect, device number 15 [ 2039.048456][T30804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2039.141098][ T30] audit: type=1400 audit(1783914647.864:1072): avc: denied { write } for pid=31013 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2039.171871][ T50] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 2039.194118][T30804] veth0_vlan: entered promiscuous mode [ 2039.263019][T30804] veth1_vlan: entered promiscuous mode [ 2039.385157][T21396] IPVS: starting estimator thread 0... [ 2039.404518][ T30] audit: type=1400 audit(1783914648.134:1073): avc: denied { write } for pid=31033 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2039.502401][T31035] IPVS: using max 40 ests per chain, 96000 per kthread [ 2039.523388][T30804] veth0_macvtap: entered promiscuous mode [ 2039.561180][T30804] veth1_macvtap: entered promiscuous mode [ 2039.646543][T30804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2039.686107][T30804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2039.749017][T23075] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2039.750342][ T50] Bluetooth: hci4: unexpected event for opcode 0x0803 [ 2039.798757][T23075] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2039.842420][T23075] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2039.920613][T23075] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2040.021744][ T10] usb 1-1: new low-speed USB device number 124 using dummy_hcd [ 2040.090283][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2040.091846][T21294] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 2040.126572][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2040.194741][ T10] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 2040.200473][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2040.217691][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2040.231375][ T10] usb 1-1: config 0 has no interface number 0 [ 2040.259575][ T10] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2040.279659][ T10] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 2040.292853][T21294] usb 3-1: Using ep0 maxpacket: 16 [ 2040.311682][T21294] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2040.320701][ T10] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2040.348142][T21294] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 2040.364735][T21294] usb 3-1: can't read configurations, error -71 [ 2040.371125][ T10] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 2040.407842][ T10] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 2040.427638][ T30] audit: type=1400 audit(1783914649.154:1074): avc: denied { write } for pid=31041 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2040.457786][ T10] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2040.494902][ T10] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2040.507793][T31060] kvm: pic: non byte write [ 2040.522613][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2040.549406][ T10] usb 1-1: config 0 descriptor?? [ 2040.567748][ T30] audit: type=1400 audit(1783914649.294:1075): avc: denied { write } for pid=31063 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2040.601155][T31048] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2040.631722][ T10] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2040.836261][T31048] ldusb 1-1:0.55: Couldn't submit interrupt_in_urb -90 [ 2040.874640][T21396] usb 1-1: USB disconnect, device number 124 [ 2040.882768][T28833] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 2040.894732][ T30] audit: type=1400 audit(1783914649.624:1076): avc: denied { write } for pid=31069 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2040.919161][T21396] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 2041.026492][T31085] netlink: 'syz.2.6665': attribute type 4 has an invalid length. [ 2041.041701][T28833] usb 6-1: Using ep0 maxpacket: 16 [ 2041.095530][T28833] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 2041.143156][T28833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2041.179352][T28833] usb 6-1: Product: syz [ 2041.219070][T28833] usb 6-1: Manufacturer: syz [ 2041.255708][T28833] usb 6-1: SerialNumber: syz [ 2041.334685][ T50] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 2041.347206][ T50] Bluetooth: hci3: Injecting HCI hardware error event [ 2041.356019][ T50] Bluetooth: hci3: hardware error 0x00 [ 2041.371179][ T30] audit: type=1400 audit(1783914650.084:1077): avc: denied { write } for pid=31086 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2041.586145][T28833] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 2041.619787][T28833] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2041.663565][T28833] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 2041.688898][T28833] usb 6-1: media controller created [ 2041.726332][T28833] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2041.812759][T21085] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2041.881443][T21085] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2041.890743][T21085] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2041.909421][T21085] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2041.922734][T21085] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2042.240627][T28833] zl10353_read_register: readreg error (reg=127, ret==-71) [ 2042.325400][T31104] ------------[ cut here ]------------ [ 2042.332072][T31104] usb 6-1: BOGUS control dir, pipe 80001080 doesn't match bRequestType c0 [ 2042.340597][T31104] WARNING: drivers/usb/core/urb.c:411 at usb_submit_urb+0x15ff/0x19b0, CPU#0: syz.1.6669/31104 [ 2042.351007][T31104] Modules linked in: [ 2042.355139][T31104] CPU: 0 UID: 0 PID: 31104 Comm: syz.1.6669 Tainted: G L syzkaller #0 PREEMPT(full) [ 2042.366141][T31104] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2042.370472][T31104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 2042.381011][T31104] RIP: 0010:usb_submit_urb+0x160d/0x19b0 [ 2042.387528][T31104] Code: 48 89 54 24 40 e8 e3 0b 8a fa 4c 89 e7 e8 8b fe db fe 48 89 c6 48 8d 3d a1 c7 af 09 44 8b 44 24 20 8b 4c 24 30 48 8b 54 24 40 <67> 48 0f b9 3a e9 28 ed ff ff e8 b4 0b 8a fa 89 ee bf ff 00 00 00 [ 2042.407569][T31104] RSP: 0018:ffffc900054776f0 EFLAGS: 00010283 [ 2042.413718][T31104] RAX: ffffffff8ca5e6a0 RBX: ffff8880321ff400 RCX: 0000000080001080 [ 2042.422282][T31104] RDX: ffff8880554b4fc0 RSI: ffffffff8ca5e6a0 RDI: ffffffff912f9870 [ 2042.430257][T31104] RBP: ffff888089488058 R08: 00000000000000c0 R09: 0000000000000000 [ 2042.438291][T31104] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880894880b0 [ 2042.447016][T31104] R13: ffff88806873ae20 R14: ffff88806873ae26 R15: ffff88806873ae27 [ 2042.455420][T31104] FS: 00007f4e453e76c0(0000) GS:ffff888123de8000(0000) knlGS:0000000000000000 [ 2042.465538][T31104] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2042.472508][T31104] CR2: 000000110c324940 CR3: 0000000054db4000 CR4: 00000000003526f0 [ 2042.480504][T31104] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 2042.488518][T31104] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2042.496624][T31104] Call Trace: [ 2042.499899][T31104] [ 2042.502890][T31104] ? __init_swait_queue_head+0xca/0x150 [ 2042.508461][T31104] usb_start_wait_urb+0x10e/0x580 [ 2042.513540][T31104] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2042.519121][T31104] ? trace_kmalloc+0xeb/0x110 [ 2042.523850][T31104] ? __asan_memset+0x23/0x50 [ 2042.528456][T31104] usb_control_msg+0x328/0x4b0 [ 2042.533445][T31104] ? __pfx_usb_control_msg+0x10/0x10 [ 2042.538756][T31104] ? finish_task_switch.isra.0+0x3b6/0x10c0 [ 2042.544691][T31104] gl861_ctrl_msg+0x1a5/0x4a0 [ 2042.549384][T31104] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 2042.554632][T31104] ? __lock_acquire+0x49f/0x1a40 [ 2042.559581][T31104] ? __lock_acquire+0x49f/0x1a40 [ 2042.564608][T31104] gl861_i2c_master_xfer+0x545/0x690 [ 2042.569903][T31104] __i2c_transfer+0x5d9/0x1740 [ 2042.574696][T31104] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2042.580486][T31104] ? __pfx___i2c_transfer+0x10/0x10 [ 2042.585694][T31104] ? rt_mutex_slowtrylock+0x93/0x100 [ 2042.590954][T31104] i2c_transfer+0x15f/0x380 [ 2042.595582][T31104] i2c_transfer_buffer_flags+0x10c/0x190 [ 2042.601221][T31104] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 2042.607415][T31104] ? selinux_file_permission+0x8f/0x6d0 [ 2042.613012][T31104] ? i2cdev_read+0xe4/0x2b0 [ 2042.617505][T31104] i2cdev_read+0x111/0x2b0 [ 2042.621956][T31104] ? __pfx_i2cdev_read+0x10/0x10 [ 2042.626879][T31104] vfs_readv+0x5d8/0x8d0 [ 2042.631109][T31104] ? __pfx_vfs_readv+0x10/0x10 [ 2042.635895][T31104] ? __fget_files+0x21f/0x3d0 [ 2042.640564][T31104] ? do_preadv+0x1ac/0x270 [ 2042.644972][T31104] do_preadv+0x1ac/0x270 [ 2042.649190][T31104] ? __pfx_do_preadv+0x10/0x10 [ 2042.653970][T31104] do_syscall_64+0x115/0x870 [ 2042.658538][T31104] ? clear_bhb_loop+0x40/0x90 [ 2042.663223][T31104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2042.669103][T31104] RIP: 0033:0x7f4e4459de59 [ 2042.673516][T31104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2042.693661][T31104] RSP: 002b:00007f4e453e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 2042.702499][T31104] RAX: ffffffffffffffda RBX: 00007f4e44825fa0 RCX: 00007f4e4459de59 [ 2042.710465][T31104] RDX: 0000000000000002 RSI: 0000200000000140 RDI: 0000000000000003 [ 2042.718480][T31104] RBP: 00007f4e44633e6f R08: 0000000000002bd6 R09: 0000000000000000 [ 2042.726478][T31104] R10: 00000000000008c0 R11: 0000000000000246 R12: 0000000000000000 [ 2042.734479][T31104] R13: 00007f4e44826038 R14: 00007f4e44825fa0 R15: 00007ffe27a820b8 [ 2042.742493][T31104] [ 2042.745507][T31104] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2042.752779][T31104] CPU: 0 UID: 0 PID: 31104 Comm: syz.1.6669 Tainted: G L syzkaller #0 PREEMPT(full) [ 2042.763691][T31104] Tainted: [L]=SOFTLOCKUP [ 2042.767990][T31104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 2042.778023][T31104] Call Trace: [ 2042.781278][T31104] [ 2042.784187][T31104] dump_stack_lvl+0x100/0x190 [ 2042.788850][T31104] vpanic+0x552/0x970 [ 2042.792810][T31104] ? __pfx_vpanic+0x10/0x10 [ 2042.797299][T31104] panic+0xd1/0xe0 [ 2042.800998][T31104] ? __pfx_panic+0x10/0x10 [ 2042.805404][T31104] check_panic_on_warn.cold+0x19/0x34 [ 2042.810755][T31104] ? usb_submit_urb+0x15ff/0x19b0 [ 2042.815767][T31104] __warn.cold+0x191/0x318 [ 2042.820164][T31104] __report_bug+0x30f/0x440 [ 2042.824653][T31104] ? usb_submit_urb+0x15ff/0x19b0 [ 2042.829662][T31104] ? __pfx___report_bug+0x10/0x10 [ 2042.834670][T31104] ? lockdep_hardirqs_on+0x78/0x100 [ 2042.839859][T31104] ? kasan_save_stack+0x3f/0x50 [ 2042.844687][T31104] ? kasan_save_stack+0x30/0x50 [ 2042.849522][T31104] report_bug_entry+0xe1/0x290 [ 2042.854270][T31104] ? usb_submit_urb+0x160d/0x19b0 [ 2042.859283][T31104] handle_bug+0x1cd/0x2a0 [ 2042.863595][T31104] exc_invalid_op+0x17/0x50 [ 2042.868077][T31104] asm_exc_invalid_op+0x1a/0x20 [ 2042.872906][T31104] RIP: 0010:usb_submit_urb+0x160d/0x19b0 [ 2042.878522][T31104] Code: 48 89 54 24 40 e8 e3 0b 8a fa 4c 89 e7 e8 8b fe db fe 48 89 c6 48 8d 3d a1 c7 af 09 44 8b 44 24 20 8b 4c 24 30 48 8b 54 24 40 <67> 48 0f b9 3a e9 28 ed ff ff e8 b4 0b 8a fa 89 ee bf ff 00 00 00 [ 2042.898108][T31104] RSP: 0018:ffffc900054776f0 EFLAGS: 00010283 [ 2042.904154][T31104] RAX: ffffffff8ca5e6a0 RBX: ffff8880321ff400 RCX: 0000000080001080 [ 2042.912106][T31104] RDX: ffff8880554b4fc0 RSI: ffffffff8ca5e6a0 RDI: ffffffff912f9870 [ 2042.920055][T31104] RBP: ffff888089488058 R08: 00000000000000c0 R09: 0000000000000000 [ 2042.928004][T31104] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880894880b0 [ 2042.935951][T31104] R13: ffff88806873ae20 R14: ffff88806873ae26 R15: ffff88806873ae27 [ 2042.943913][T31104] ? __init_swait_queue_head+0xca/0x150 [ 2042.949444][T31104] usb_start_wait_urb+0x10e/0x580 [ 2042.954454][T31104] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2042.959984][T31104] ? trace_kmalloc+0xeb/0x110 [ 2042.964649][T31104] ? __asan_memset+0x23/0x50 [ 2042.969231][T31104] usb_control_msg+0x328/0x4b0 [ 2042.973978][T31104] ? __pfx_usb_control_msg+0x10/0x10 [ 2042.979246][T31104] ? finish_task_switch.isra.0+0x3b6/0x10c0 [ 2042.985125][T31104] gl861_ctrl_msg+0x1a5/0x4a0 [ 2042.989789][T31104] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 2042.994972][T31104] ? __lock_acquire+0x49f/0x1a40 [ 2042.999893][T31104] ? __lock_acquire+0x49f/0x1a40 [ 2043.004814][T31104] gl861_i2c_master_xfer+0x545/0x690 [ 2043.010085][T31104] __i2c_transfer+0x5d9/0x1740 [ 2043.014834][T31104] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2043.020626][T31104] ? __pfx___i2c_transfer+0x10/0x10 [ 2043.025807][T31104] ? rt_mutex_slowtrylock+0x93/0x100 [ 2043.031076][T31104] i2c_transfer+0x15f/0x380 [ 2043.035561][T31104] i2c_transfer_buffer_flags+0x10c/0x190 [ 2043.041175][T31104] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 2043.047311][T31104] ? selinux_file_permission+0x8f/0x6d0 [ 2043.052841][T31104] ? i2cdev_read+0xe4/0x2b0 [ 2043.057335][T31104] i2cdev_read+0x111/0x2b0 [ 2043.061732][T31104] ? __pfx_i2cdev_read+0x10/0x10 [ 2043.066651][T31104] vfs_readv+0x5d8/0x8d0 [ 2043.070885][T31104] ? __pfx_vfs_readv+0x10/0x10 [ 2043.075646][T31104] ? __fget_files+0x21f/0x3d0 [ 2043.080315][T31104] ? do_preadv+0x1ac/0x270 [ 2043.084711][T31104] do_preadv+0x1ac/0x270 [ 2043.088938][T31104] ? __pfx_do_preadv+0x10/0x10 [ 2043.093699][T31104] do_syscall_64+0x115/0x870 [ 2043.098274][T31104] ? clear_bhb_loop+0x40/0x90 [ 2043.102935][T31104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2043.108807][T31104] RIP: 0033:0x7f4e4459de59 [ 2043.113205][T31104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2043.132797][T31104] RSP: 002b:00007f4e453e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 2043.141187][T31104] RAX: ffffffffffffffda RBX: 00007f4e44825fa0 RCX: 00007f4e4459de59 [ 2043.149136][T31104] RDX: 0000000000000002 RSI: 0000200000000140 RDI: 0000000000000003 [ 2043.157084][T31104] RBP: 00007f4e44633e6f R08: 0000000000002bd6 R09: 0000000000000000 [ 2043.165035][T31104] R10: 00000000000008c0 R11: 0000000000000246 R12: 0000000000000000 [ 2043.172984][T31104] R13: 00007f4e44826038 R14: 00007f4e44825fa0 R15: 00007ffe27a820b8 [ 2043.180942][T31104] [ 2043.184116][T31104] Kernel Offset: disabled [ 2043.188411][T31104] Rebooting in 86400 seconds..