last executing test programs: 11.279894107s ago: executing program 0 (id=4107): sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20009005}, 0x2000c000) socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400"], 0x2c}}, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @local}, 0x2, 0x2, 0x3, 0x0, 0x0, 0x4}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) clock_gettime(0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) 10.863600271s ago: executing program 4 (id=4110): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 10.287726981s ago: executing program 4 (id=4112): socket$netlink(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000003c0)={r1, &(0x7f0000000300)}, 0x20) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000001200)=0x6d7c, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd5e, 0x240000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, 0xffffffffffffffff, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read(r5, &(0x7f0000000040)=""/148, 0xffffff96) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 10.132245029s ago: executing program 0 (id=4113): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000080)=0x29cb, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0), 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000580)={@remote, @local}, &(0x7f00000005c0)=0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="8500000008000000760000000000000027000000000000009500000000000000d9e029f8c1652bc575bc1dc3a9fa16094393337a693d6504978ceb558b41537525a394249a1506da9ac69561c187afa3ba7ebc3af563e1e94ceec996695d1d26bbfb2feebab62478775a18852a3359fb20d4d020daf585b85d18b24cf00e3ac10552a5c9acddcb10eae4445de245fe9c7bf90262293683e504b59ef6d4568f30efe6465b5e0aeb3c6f9f5c6ad0a0891670e48b75f800"/192], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001b00)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, &(0x7f00000016c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014100000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r3}, &(0x7f0000000100), &(0x7f0000000140)=r1}, 0x20) sendmsg(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x0) 8.535808329s ago: executing program 0 (id=4116): openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x174, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0xb}, [@IFLA_AF_SPEC={0x154, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0x0, 0x0, 0x0, 0x38}]}}, @AF_INET6={0x40, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x88, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_MPLS={0x4}]}]}, 0x174}}, 0x0) 8.532453633s ago: executing program 2 (id=4117): add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, 0x0, 0x0, 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) fsopen(0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x81, 0x6, 0x1, 0xe7}, {0x2, 0xcc, 0x5, 0xd}]}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) writev(r5, &(0x7f0000000200), 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, 0x0, 0x4080) 7.769215174s ago: executing program 4 (id=4119): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3], 0x28}}, 0x0) 7.223025817s ago: executing program 0 (id=4120): r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) write$nci(r0, 0x0, 0x0) 7.213052036s ago: executing program 2 (id=4121): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000080)=0x29cb, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0), 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000580)={@remote, @local}, &(0x7f00000005c0)=0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="8500000008000000760000000000000027000000000000009500000000000000d9e029f8c1652bc575bc1dc3a9fa16094393337a693d6504978ceb558b41537525a394249a1506da9ac69561c187afa3ba7ebc3af563e1e94ceec996695d1d26bbfb2feebab62478775a18852a3359fb20d4d020daf585b85d18b24cf00e3ac10552a5c9acddcb10eae4445de245fe9c7bf90262293683e504b59ef6d4568f30efe6465b5e0aeb3c6f9f5c6ad0a0891670e48b75f800"/192], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001b00)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, &(0x7f00000016c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014100000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r3}, &(0x7f0000000100), &(0x7f0000000140)=r1}, 0x20) sendmsg(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x0) 6.802129895s ago: executing program 0 (id=4123): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}, @int]}}, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client1\x00', 0xffffffff80000004, "00000000ffffffe3", "e4a18560d99f00", 0x800000}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket(0x1, 0x803, 0x0) socket(0x10, 0x3, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xbc44) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r6 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r6) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000083667d1040206402d14e01020301090212000100000000090400000090f19c00682072f4bdc2b37c0f825d4bc41bfc78abea69b70d16442fece8a5ffa968cec6bbf13ba3bdf6e6b3f6946e75baff68e9d72dc62478bd1351025e5dadb737783035f27537e3866da73cf95e605def0252f152d3905c2d1bf646b70a627e08a720b003ddf13c8ef80f5d"], 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) pwrite64(r7, 0x0, 0x0, 0x3) 5.860285376s ago: executing program 2 (id=4124): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x3, "0062ba7d820000a75e0000000000fcff00"}) r5 = syz_open_pts(r4, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x44) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xffbc) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) 5.776392568s ago: executing program 1 (id=4125): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000080)=0x29cb, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0), 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000580)={@remote, @local}, &(0x7f00000005c0)=0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="8500000008000000760000000000000027000000000000009500000000000000d9e029f8c1652bc575bc1dc3a9fa16094393337a693d6504978ceb558b41537525a394249a1506da9ac69561c187afa3ba7ebc3af563e1e94ceec996695d1d26bbfb2feebab62478775a18852a3359fb20d4d020daf585b85d18b24cf00e3ac10552a5c9acddcb10eae4445de245fe9c7bf90262293683e504b59ef6d4568f30efe6465b5e0aeb3c6f9f5c6ad0a0891670e48b75f800"/192], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001b00)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, &(0x7f00000016c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014100000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r3}, &(0x7f0000000100), &(0x7f0000000140)=r1}, 0x20) sendmsg(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x0) 5.754536367s ago: executing program 4 (id=4126): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="01001000000000005e00000000000000440f704e0d85642e410f21"], 0x5e}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000200)={0xf0003, 0x0, [0xfffffffffffffff8, 0x6, 0x200000000000000, 0x5, 0x3, 0x0, 0x10000, 0xa3f]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x10000000000000, 0x180, 0xffffffff, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x20000000000000, 0x5, 0x0, 0x7d], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.729095013s ago: executing program 2 (id=4127): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa, 0x86, 0xf3, 0x40, 0x1110, 0x9024, 0xdb24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xe9, 0x50, 0x9, [{{0x9, 0x4, 0x62, 0x4, 0x0, 0x6f, 0x6f, 0x49, 0x5}}]}}]}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03", 0x47}], 0x1}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) io_setup(0x2007, &(0x7f0000000200)=0x0) r3 = eventfd2(0x0, 0x1) io_submit(r2, 0x2, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r3}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f00000001c0)="5f18ab32505b5506", 0x8}]) shutdown(r1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f0000000380)=0x68) r4 = socket$inet6(0xa, 0x3, 0xff) bind$inet6(r4, &(0x7f0000000880)={0xa, 0x80, 0x0, @local, 0x14}, 0x1c) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x14, 0x2, 0x6, 0x301}, 0x14}}, 0x0) dup2(r4, r4) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(r6, &(0x7f0000000480)=[{0x0}], 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1}}, 0x3c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_open_dev$evdev(&(0x7f0000000180), 0x400, 0x6a00) 4.670073459s ago: executing program 3 (id=4128): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r0, &(0x7f00000011c0)=""/4117, 0x200021d5) 4.618369749s ago: executing program 1 (id=4129): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x700, 0x0, [@sadb_key={0x4, 0x9, 0x98, 0x0, "01d78771b90bd8a3b4914783c50400003d5b95"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x70}, 0x1, 0x7}, 0x0) 4.61328119s ago: executing program 4 (id=4130): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) 4.526319849s ago: executing program 1 (id=4131): openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x174, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0xb}, [@IFLA_AF_SPEC={0x154, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0x0, 0x0, 0x0, 0x38}]}}, @AF_INET6={0x40, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x88, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_MPLS={0x4}]}]}, 0x174}}, 0x0) 4.382165277s ago: executing program 4 (id=4132): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_disconnect(r0) 3.762095864s ago: executing program 3 (id=4133): r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) write$nci(r0, 0x0, 0x0) 3.698844915s ago: executing program 3 (id=4134): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x700, 0x0, [@sadb_key={0x4, 0x9, 0x98, 0x0, "01d78771b90bd8a3b4914783c50400003d5b95"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x70}, 0x1, 0x7}, 0x0) 3.698198658s ago: executing program 3 (id=4135): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000080)=0x29cb, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0), 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000580)={@remote, @local}, &(0x7f00000005c0)=0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="8500000008000000760000000000000027000000000000009500000000000000d9e029f8c1652bc575bc1dc3a9fa16094393337a693d6504978ceb558b41537525a394249a1506da9ac69561c187afa3ba7ebc3af563e1e94ceec996695d1d26bbfb2feebab62478775a18852a3359fb20d4d020daf585b85d18b24cf00e3ac10552a5c9acddcb10eae4445de245fe9c7bf90262293683e504b59ef6d4568f30efe6465b5e0aeb3c6f9f5c6ad0a0891670e48b75f800"/192], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001b00)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37) close(r1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, &(0x7f00000016c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014100000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r3}, &(0x7f0000000100), &(0x7f0000000140)=r1}, 0x20) sendmsg(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x0) 3.589689321s ago: executing program 1 (id=4136): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x28}}, 0x0) 3.18522387s ago: executing program 1 (id=4137): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$nfs(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000140)) mount(0x0, 0x0, &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(0x0) 3.149297152s ago: executing program 3 (id=4138): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 3.002562552s ago: executing program 3 (id=4139): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.991453953s ago: executing program 1 (id=4140): r0 = socket$kcm(0x10, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = syz_open_dev$media(&(0x7f0000000080), 0x10001, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000780)="580000001400192340834b80040d8c560a117436c379000000000100000058008f7f36b5f50b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000001e32a5ff19710000224e0000", 0x63}], 0x1) syz_genetlink_get_family_id$team(&(0x7f0000000040), r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f00000002c0), 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000440)=0x2402a, 0x4) syz_usb_connect(0x6, 0x24, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, 0x0, 0x40012100) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) socket$kcm(0x29, 0x5, 0x0) 1.989423069s ago: executing program 2 (id=4141): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)="5490", 0x2}], 0x1}, 0x4048841) r1 = fsopen(&(0x7f0000000040)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000004c0)='Y\'\x01\xfe\xac\xa4\x04W\x01?\x1f\x13\x14\x1cK}\x00\x82\xccg\xa8wF\xd5\xb5\xb0=-\xb3\x97x', &(0x7f00000003c0)='\xff\\\'X\x1bO\xc4\x9e\x98\n\x9a\xf0\x13\xd4\xbb\a\xce\a\xa7v\xe53\xee\x95\x9a\xb5\xc2\xe7\xa1\x93\x05\xc14\xe0\xa7\t\xfd\xe2!,\f\x84\xaf[\x93\x93\xc1\xa2\xa4a\x06<\xac\x1b\xe0\xf7\xfc\x8c\x15m\x9f\xbf!q\xb1\xdbt\xc5\nv+K Q(\v\x9e\xe6\x9a\xc5\xeb\x80\xd9\x82\xcfM\x91J\xcf\x9c\xe3I\x87\xd9\x98\xbb\x00\x12\x00\xc2@.\x8c\xe6\xff\x00z\xc4\xe8^\x1a\x00\xb9`h\xa1\x1a;\xde\xfcn\xee\r\xe6=v\xbe\x1c2\xe6\x13\xd4\xe8\xbcF~!Z\xbbH.\x9ei\x1aq\xf2t\x1b\xdb\xb3Q\x8fg\xf0nDC\xbf\xd8L!\x9d\xd2\xff\xdfG\xb8$\xc0~F\x15\xdb\n\x90N\nn\x85\x8f\x88O\x1d\xa2<\xab\xf2M\xbfpC\xf0\x14!\xa1k@\x83R\xa8', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="0200000008000c0000000000", @ANYRES32=0x0, @ANYBLOB="040000000000007f26ae950010000300000000002000000088"], 0x2c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019640)=""/102392, 0x18ff8) r3 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000300), 0x4) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x2c, r6, 0x1, 0x4, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x8, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004014}, 0x4004000) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x2c, r6, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x3b}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="e261681546c5"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x41) socket(0x848000000015, 0x805, 0x0) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$SIOCAX25ADDUID(r7, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) 239.178456ms ago: executing program 0 (id=4142): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[@ANYRES64, @ANYBLOB="44a837b4012b18a47d01872e42ba27df6fcd8ed404f2a8f480f04048ea693cd7ce5da6ec8d384c7d1aad3083b1a43ee2bec297b5047b0819438a106eab643e82c6503b6c27d0b82482568a35253741de9cf3223f17508862d111b3e3fa9c27c90671fffed0199ba8aa1d7608cf23409f2af5b3ef271c8a2ddc249f7c8aeae6c44be15c5401be5f02b5c1dbb05928c61853cb0c41b78e0271b1f74f0fbf410479caeb61ab29560a3c683509a2ae7ae3cc289a4ad24e664123a1afcd0f0e53d104ead941905d3655413b014a3f17437b55f47f7067fb74d08700a80e19ba77ee8e8e22bd2ff003", @ANYRES16, @ANYRESOCT=r3], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) fsopen(0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xb8) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r7, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) writev(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, 0x0, 0x8, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x16}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4080) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000d80)="0000000000000004ff6943b80007000800003fecf20000000086070000", 0x4000, r0) 0s ago: executing program 2 (id=4143): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x480d0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELOBJ={0x2c, 0x14, 0xa, 0x307, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}], {0x14}}, 0x68}}, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002) kernel console output (not intermixed with test programs): [ 1120.093980][T18318] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1120.139377][T18318] syz.2.3472: attempt to access beyond end of device [ 1120.139377][T18318] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1120.179628][T18318] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1120.202548][T18318] syz.2.3472: attempt to access beyond end of device [ 1120.202548][T18318] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1120.218061][T18318] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1120.228054][T18318] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1120.245084][T18318] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 1125.168791][T18384] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3486'. [ 1125.672742][T18387] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 1126.853907][T18403] input: syz0 as /devices/virtual/input/input21 [ 1127.359600][T18415] netlink: 332 bytes leftover after parsing attributes in process `syz.2.3494'. [ 1127.369390][T18415] netlink: 'syz.2.3494': attribute type 9 has an invalid length. [ 1127.377174][T18415] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3494'. [ 1127.386296][T18415] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3494'. [ 1127.411877][T18415] Cannot find add_set index 0 as target [ 1127.806775][T15679] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1127.822475][T15679] Bluetooth: hci0: command 0x0c1a tx timeout [ 1128.179083][T18404] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1128.439086][T18426] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1128.586305][T18433] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18433 comm=syz.1.3496 [ 1130.790220][T15679] Bluetooth: hci0: command 0x0c1a tx timeout [ 1130.797116][T18432] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1130.880904][T18441] netlink: 332 bytes leftover after parsing attributes in process `syz.2.3499'. [ 1130.890088][T18441] netlink: 'syz.2.3499': attribute type 9 has an invalid length. [ 1130.897871][T18441] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3499'. [ 1130.906904][T18441] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3499'. [ 1130.922723][T18441] Cannot find add_set index 0 as target [ 1132.975269][T17330] Bluetooth: hci0: command 0x0c1a tx timeout [ 1133.695179][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 1133.695194][ T30] audit: type=1326 audit(1750537571.828:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18452 comm="syz.4.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b078e929 code=0x7ffc0000 [ 1134.553616][ T30] audit: type=1326 audit(1750537571.828:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18452 comm="syz.4.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b078e929 code=0x7ffc0000 [ 1134.586473][ T30] audit: type=1326 audit(1750537571.828:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18452 comm="syz.4.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f73b078e929 code=0x7ffc0000 [ 1134.613479][ T30] audit: type=1326 audit(1750537571.828:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18452 comm="syz.4.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b078e929 code=0x7ffc0000 [ 1134.644053][ T30] audit: type=1326 audit(1750537571.828:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18452 comm="syz.4.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f73b078e929 code=0x7ffc0000 [ 1134.667614][ T30] audit: type=1326 audit(1750537571.828:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18452 comm="syz.4.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b078e929 code=0x7ffc0000 [ 1134.724123][T18457] random: crng reseeded on system resumption [ 1134.803967][ T30] audit: type=1326 audit(1750537571.828:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18452 comm="syz.4.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f73b078e929 code=0x7ffc0000 [ 1135.084172][ T30] audit: type=1326 audit(1750537571.828:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18452 comm="syz.4.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b078e929 code=0x7ffc0000 [ 1135.353615][ T30] audit: type=1326 audit(1750537571.828:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18452 comm="syz.4.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f73b078e929 code=0x7ffc0000 [ 1135.520819][ T30] audit: type=1326 audit(1750537571.828:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18452 comm="syz.4.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b078e929 code=0x7ffc0000 [ 1137.669948][T18478] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 1138.176472][T18497] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1140.105448][T15679] Bluetooth: hci0: command 0x0c1a tx timeout [ 1140.188375][T17330] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1140.964678][T17039] usb 2-1: [UEAGLE-ATM] firmware is not available [ 1141.027044][T18520] netlink: 'syz.1.3520': attribute type 13 has an invalid length. [ 1141.145120][T18524] random: crng reseeded on system resumption [ 1142.227492][T17330] Bluetooth: hci0: command 0x0c1a tx timeout [ 1142.600846][ T43] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1142.613684][ T43] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1144.875431][T18551] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 1145.655834][T18558] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1146.803792][T17330] Bluetooth: hci0: command 0x0c1a tx timeout [ 1146.810293][T15679] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1148.905694][T15679] Bluetooth: hci0: command 0x0c1a tx timeout [ 1149.411548][T18596] input: syz0 as /devices/virtual/input/input22 [ 1149.611958][T18597] bio_check_eod: 2 callbacks suppressed [ 1149.611974][T18597] syz.4.3538: attempt to access beyond end of device [ 1149.611974][T18597] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1149.714834][T18597] syz.4.3538: attempt to access beyond end of device [ 1149.714834][T18597] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1149.730447][T18597] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1149.745841][T18597] syz.4.3538: attempt to access beyond end of device [ 1149.745841][T18597] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1149.761518][T18597] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1149.774723][T18597] syz.4.3538: attempt to access beyond end of device [ 1149.774723][T18597] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1149.791638][T18597] syz.4.3538: attempt to access beyond end of device [ 1149.791638][T18597] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1149.804992][T18597] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1149.815309][T18597] syz.4.3538: attempt to access beyond end of device [ 1149.815309][T18597] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1149.828592][T18597] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1149.858933][T18597] syz.4.3538: attempt to access beyond end of device [ 1149.858933][T18597] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1149.872597][T18597] syz.4.3538: attempt to access beyond end of device [ 1149.872597][T18597] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1149.892650][T18597] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1149.902649][T18597] syz.4.3538: attempt to access beyond end of device [ 1149.902649][T18597] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1149.918804][T18597] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1149.931674][T18597] syz.4.3538: attempt to access beyond end of device [ 1149.931674][T18597] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1149.945518][T18597] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1149.956735][T18597] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1149.968550][T18597] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 1150.409574][T18604] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 1150.858977][T18609] fuse: Bad value for 'fd' [ 1150.872661][T18609] Invalid source name [ 1150.877003][T18609] UBIFS error (pid: 18609): cannot open "./file0", error -22 [ 1150.904362][T18609] binder: 18606:18609 ioctl 40046210 0 returned -14 [ 1150.930390][T18609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3541'. [ 1150.959449][T17330] Bluetooth: hci0: command 0x0c1a tx timeout [ 1150.965617][T15679] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1151.248962][T18609] team0: Port device team_slave_1 removed [ 1152.130511][T18619] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3544'. [ 1152.807541][T18624] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 1153.143477][T15679] Bluetooth: hci0: command 0x0c1a tx timeout [ 1153.460257][T17330] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1155.240166][T17330] Bluetooth: hci0: command 0x0c1a tx timeout [ 1155.245385][T18644] bio_check_eod: 2 callbacks suppressed [ 1155.245398][T18644] syz.3.3552: attempt to access beyond end of device [ 1155.245398][T18644] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1155.601175][T18644] syz.3.3552: attempt to access beyond end of device [ 1155.601175][T18644] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1155.619645][T18644] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1155.663777][T18644] syz.3.3552: attempt to access beyond end of device [ 1155.663777][T18644] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1155.700992][T18644] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1155.715415][T18644] syz.3.3552: attempt to access beyond end of device [ 1155.715415][T18644] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1155.730734][T18644] syz.3.3552: attempt to access beyond end of device [ 1155.730734][T18644] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1155.744722][T18644] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1155.756193][T18644] syz.3.3552: attempt to access beyond end of device [ 1155.756193][T18644] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1155.769479][T18644] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1155.784132][T18644] syz.3.3552: attempt to access beyond end of device [ 1155.784132][T18644] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1155.799784][T18644] syz.3.3552: attempt to access beyond end of device [ 1155.799784][T18644] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1155.813128][T18644] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1155.823767][T18644] syz.3.3552: attempt to access beyond end of device [ 1155.823767][T18644] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1155.837115][T18644] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1155.848892][T18644] syz.3.3552: attempt to access beyond end of device [ 1155.848892][T18644] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1155.862617][T18644] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1155.872842][T18644] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1155.882439][T18644] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 1157.363483][T17330] Bluetooth: hci0: command 0x0c1a tx timeout [ 1157.412275][T18672] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3557'. [ 1158.614264][T18682] input: syz1 as /devices/virtual/input/input23 [ 1158.694621][T18683] input: syz1 as /devices/virtual/input/input24 [ 1159.452615][T17330] Bluetooth: hci0: command 0x0c1a tx timeout [ 1160.618480][T18696] input: syz0 as /devices/virtual/input/input25 [ 1161.324218][T18702] bio_check_eod: 2 callbacks suppressed [ 1161.324228][T18702] syz.1.3564: attempt to access beyond end of device [ 1161.324228][T18702] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1161.352914][T18702] syz.1.3564: attempt to access beyond end of device [ 1161.352914][T18702] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1161.372277][T18702] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1161.386440][T18702] syz.1.3564: attempt to access beyond end of device [ 1161.386440][T18702] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1161.442448][T18702] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1162.011448][T18702] syz.1.3564: attempt to access beyond end of device [ 1162.011448][T18702] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1162.025245][T18702] syz.1.3564: attempt to access beyond end of device [ 1162.025245][T18702] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1162.039444][T18702] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1162.284012][T18702] syz.1.3564: attempt to access beyond end of device [ 1162.284012][T18702] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1162.298575][T18702] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1162.329623][T18702] syz.1.3564: attempt to access beyond end of device [ 1162.329623][T18702] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1162.345222][T18702] syz.1.3564: attempt to access beyond end of device [ 1162.345222][T18702] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1162.361211][T18702] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1162.372031][T18702] syz.1.3564: attempt to access beyond end of device [ 1162.372031][T18702] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1162.387401][T18702] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1162.413714][T18702] syz.1.3564: attempt to access beyond end of device [ 1162.413714][T18702] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1162.427298][T18702] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1162.438680][T18702] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1162.449502][T18702] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 1162.813508][T18718] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 1164.873680][T17330] Bluetooth: hci0: command 0x0c1a tx timeout [ 1164.943870][T15679] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1165.037925][T18725] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1165.354478][T18734] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1166.959514][T17330] Bluetooth: hci0: command 0x0c1a tx timeout [ 1166.969663][T15679] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1167.586868][T18767] bio_check_eod: 2 callbacks suppressed [ 1167.586883][T18767] syz.4.3580: attempt to access beyond end of device [ 1167.586883][T18767] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1167.638161][T18767] syz.4.3580: attempt to access beyond end of device [ 1167.638161][T18767] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1167.973862][T18767] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1168.006857][T18767] syz.4.3580: attempt to access beyond end of device [ 1168.006857][T18767] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1168.032247][T18767] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1168.143310][T18767] syz.4.3580: attempt to access beyond end of device [ 1168.143310][T18767] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1168.163665][T18767] syz.4.3580: attempt to access beyond end of device [ 1168.163665][T18767] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1168.199732][T18767] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1168.264195][T18767] syz.4.3580: attempt to access beyond end of device [ 1168.264195][T18767] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1168.277732][T18767] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1168.293771][T18767] syz.4.3580: attempt to access beyond end of device [ 1168.293771][T18767] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1168.307506][T18767] syz.4.3580: attempt to access beyond end of device [ 1168.307506][T18767] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1168.322061][T18767] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1168.331941][T18767] syz.4.3580: attempt to access beyond end of device [ 1168.331941][T18767] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1168.345315][T18767] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1168.357006][T18767] syz.4.3580: attempt to access beyond end of device [ 1168.357006][T18767] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1168.498221][T18767] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1168.508387][T18767] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1168.518737][T18767] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 1169.071993][T15679] Bluetooth: hci0: command 0x0c1a tx timeout [ 1169.730424][T16082] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1170.100345][T16082] usb 4-1: config 0 has an invalid interface number: 98 but max is 0 [ 1170.110156][T16082] usb 4-1: config 0 has no interface number 0 [ 1170.117530][T16082] usb 4-1: config 0 interface 98 has no altsetting 0 [ 1170.141203][T16082] usb 4-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 1170.151964][T18790] input: syz1 as /devices/virtual/input/input26 [ 1170.168606][T16082] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.178375][T16082] usb 4-1: Product: syz [ 1170.239961][T16082] usb 4-1: Manufacturer: syz [ 1170.246022][T16082] usb 4-1: SerialNumber: syz [ 1170.254245][T16082] usb 4-1: config 0 descriptor?? [ 1170.769075][T16082] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 1171.212423][T15679] Bluetooth: hci0: command 0x0c1a tx timeout [ 1171.665178][T16082] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 1171.673165][T16082] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 1171.682211][ T5928] usb 4-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 1171.693969][ T5928] usb 4-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 1171.721878][T16082] usb 4-1: USB disconnect, device number 47 [ 1171.875080][T18818] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3593'. [ 1172.743057][T18811] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1172.876836][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1172.876851][ T30] audit: type=1800 audit(1750537610.998:785): pid=18819 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.3594" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1173.494071][T15679] Bluetooth: hci0: command 0x0c1a tx timeout [ 1173.650856][T18830] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3596'. [ 1174.046099][T18837] netlink: 332 bytes leftover after parsing attributes in process `syz.4.3597'. [ 1174.055562][T18837] netlink: 'syz.4.3597': attribute type 9 has an invalid length. [ 1174.063316][T18837] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3597'. [ 1174.072434][T18837] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3597'. [ 1174.936139][T18833] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1175.603604][T15679] Bluetooth: hci0: command 0x0c1a tx timeout [ 1175.605710][T18852] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 1176.801360][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.591738][T18871] input: syz1 as /devices/virtual/input/input27 [ 1177.673492][T15679] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1177.833771][T15679] Bluetooth: hci0: command 0x0c1a tx timeout [ 1177.952775][T18876] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18876 comm=syz.4.3606 [ 1180.428896][T15679] Bluetooth: hci0: command 0x0c1a tx timeout [ 1181.681911][T18902] bio_check_eod: 2 callbacks suppressed [ 1181.681922][T18902] syz.0.3612: attempt to access beyond end of device [ 1181.681922][T18902] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1181.840022][T18902] syz.0.3612: attempt to access beyond end of device [ 1181.840022][T18902] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1182.440702][T18902] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1182.452601][T18902] syz.0.3612: attempt to access beyond end of device [ 1182.452601][T18902] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1182.474700][T15679] Bluetooth: hci0: command 0x0c1a tx timeout [ 1183.100707][T18902] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1183.348624][T18902] syz.0.3612: attempt to access beyond end of device [ 1183.348624][T18902] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1183.361658][T18902] syz.0.3612: attempt to access beyond end of device [ 1183.361658][T18902] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1183.375062][T18902] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1183.384965][T18902] syz.0.3612: attempt to access beyond end of device [ 1183.384965][T18902] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1183.397965][T18902] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1183.725444][T18902] syz.0.3612: attempt to access beyond end of device [ 1183.725444][T18902] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1183.749238][T18902] syz.0.3612: attempt to access beyond end of device [ 1183.749238][T18902] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1184.078197][T18902] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1184.092749][T18902] syz.0.3612: attempt to access beyond end of device [ 1184.092749][T18902] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1184.170952][T18902] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1184.508799][T18902] syz.0.3612: attempt to access beyond end of device [ 1184.508799][T18902] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1184.542275][T18902] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1184.552625][T18902] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1184.562560][T18902] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 1185.135908][T18941] netlink: 332 bytes leftover after parsing attributes in process `syz.0.3621'. [ 1185.145222][T18941] netlink: 'syz.0.3621': attribute type 9 has an invalid length. [ 1185.152996][T18941] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3621'. [ 1185.162116][T18941] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3621'. [ 1185.177667][T18941] Cannot find add_set index 0 as target [ 1185.793128][T18928] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1186.566920][T18950] fuse: Unknown parameter '0x0000000000000007' [ 1186.574104][T18950] Invalid source name [ 1186.578072][T18950] UBIFS error (pid: 18950): cannot open "./file0", error -22 [ 1186.580308][T18950] binder: 18946:18950 ioctl 40046210 0 returned -14 [ 1186.600173][T18950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3624'. [ 1186.614545][T18949] overlayfs: failed to resolve './file0': -2 [ 1186.626623][T15679] Bluetooth: hci0: command 0x0c1a tx timeout [ 1187.265918][T18958] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18958 comm=syz.1.3625 [ 1187.363160][T18950] team0: Port device team_slave_1 removed [ 1191.029672][T18970] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1191.094447][T18977] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3629'. [ 1191.606379][T18982] bio_check_eod: 2 callbacks suppressed [ 1191.606396][T18982] syz.1.3631: attempt to access beyond end of device [ 1191.606396][T18982] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1191.725628][T18982] syz.1.3631: attempt to access beyond end of device [ 1191.725628][T18982] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1191.913433][T15679] Bluetooth: hci0: command 0x0c1a tx timeout [ 1192.039027][T18982] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1192.039584][T18988] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3632'. [ 1192.073081][T18988] block nbd0: not configured, cannot reconfigure [ 1192.110430][T18982] syz.1.3631: attempt to access beyond end of device [ 1192.110430][T18982] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1192.149679][T18982] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1192.180668][T18982] syz.1.3631: attempt to access beyond end of device [ 1192.180668][T18982] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1192.194734][T18982] syz.1.3631: attempt to access beyond end of device [ 1192.194734][T18982] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1192.533057][T18998] netlink: 332 bytes leftover after parsing attributes in process `syz.2.3635'. [ 1192.542168][T18998] netlink: 'syz.2.3635': attribute type 9 has an invalid length. [ 1192.549892][T18998] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3635'. [ 1192.559287][T18998] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3635'. [ 1192.569017][T18999] netlink: 332 bytes leftover after parsing attributes in process `syz.3.3634'. [ 1192.571900][T18998] Cannot find add_set index 0 as target [ 1192.578101][T18999] netlink: 'syz.3.3634': attribute type 9 has an invalid length. [ 1192.591611][T18999] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3634'. [ 1192.600671][T18999] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3634'. [ 1192.617306][T18982] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1192.629963][T18982] syz.1.3631: attempt to access beyond end of device [ 1192.629963][T18982] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1192.643242][T18982] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1192.654354][T18982] syz.1.3631: attempt to access beyond end of device [ 1192.654354][T18982] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1192.670512][T18982] syz.1.3631: attempt to access beyond end of device [ 1192.670512][T18982] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1192.684266][T18982] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1192.694651][T18982] syz.1.3631: attempt to access beyond end of device [ 1192.694651][T18982] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1192.707885][T18982] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1192.719623][T18982] syz.1.3631: attempt to access beyond end of device [ 1192.719623][T18982] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1192.733487][T18982] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1192.744810][T18982] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1192.754373][T18982] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 1194.125564][T19019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3638'. [ 1195.610380][T19030] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19030 comm=syz.3.3642 [ 1199.063413][T17039] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1199.365030][T17039] usb 2-1: config 0 has an invalid interface number: 98 but max is 0 [ 1199.373265][T17039] usb 2-1: config 0 has no interface number 0 [ 1199.379758][T17039] usb 2-1: config 0 interface 98 has no altsetting 0 [ 1199.389450][T17039] usb 2-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 1199.396410][T19059] bio_check_eod: 2 callbacks suppressed [ 1199.396422][T19059] syz.2.3650: attempt to access beyond end of device [ 1199.396422][T19059] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1199.399009][T17039] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.460778][T17039] usb 2-1: Product: syz [ 1199.469352][T17039] usb 2-1: Manufacturer: syz [ 1199.469500][T19059] syz.2.3650: attempt to access beyond end of device [ 1199.469500][T19059] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1199.603589][T17039] usb 2-1: SerialNumber: syz [ 1199.624476][T17039] usb 2-1: config 0 descriptor?? [ 1199.639372][T19059] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1199.674153][T19059] syz.2.3650: attempt to access beyond end of device [ 1199.674153][T19059] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1199.713531][T19059] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1199.727107][T19059] syz.2.3650: attempt to access beyond end of device [ 1199.727107][T19059] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1199.744218][T19059] syz.2.3650: attempt to access beyond end of device [ 1199.744218][T19059] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1199.758474][T19059] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1199.770108][T19059] syz.2.3650: attempt to access beyond end of device [ 1199.770108][T19059] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1199.783443][T19059] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1199.800640][T19059] syz.2.3650: attempt to access beyond end of device [ 1199.800640][T19059] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1199.813899][T19059] syz.2.3650: attempt to access beyond end of device [ 1199.813899][T19059] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1199.827679][T19059] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1199.853087][T19059] syz.2.3650: attempt to access beyond end of device [ 1199.853087][T19059] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1199.866998][T19059] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1199.880040][T19059] syz.2.3650: attempt to access beyond end of device [ 1199.880040][T19059] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1199.896503][T19059] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1199.909339][T19059] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1199.919473][T19059] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 1200.351860][T17039] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 1201.264110][T17039] usb 2-1: [ueagle-atm] pre-firmware device, uploading firmware [ 1201.275188][T17039] usb 2-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 1201.785944][T19077] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1201.854814][T17039] usb 2-1: USB disconnect, device number 82 [ 1202.704948][T19090] input: syz1 as /devices/virtual/input/input28 [ 1203.203528][T15679] Bluetooth: hci0: command 0x0c1a tx timeout [ 1203.326379][T19087] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 1203.383474][T17039] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1203.878045][T17039] usb 5-1: config 0 has an invalid interface number: 98 but max is 0 [ 1203.900534][T17039] usb 5-1: config 0 has no interface number 0 [ 1203.917428][T17039] usb 5-1: config 0 interface 98 has no altsetting 0 [ 1203.958166][T17039] usb 5-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 1203.974376][T17039] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.991916][T17039] usb 5-1: Product: syz [ 1203.997808][T17039] usb 5-1: Manufacturer: syz [ 1204.005756][T17039] usb 5-1: SerialNumber: syz [ 1204.109620][T17039] usb 5-1: config 0 descriptor?? [ 1204.511463][T19116] input: syz1 as /devices/virtual/input/input29 [ 1205.433543][T15679] Bluetooth: hci0: command 0x0c1a tx timeout [ 1205.470262][T19113] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 1205.597419][T17039] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 1206.970730][T19135] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1206.978208][T19135] IPv6: NLM_F_CREATE should be set when creating new route [ 1207.257089][T17039] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware [ 1207.283492][T17039] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 1207.306080][T17039] usb 5-1: USB disconnect, device number 44 [ 1207.533711][T15679] Bluetooth: hci0: command 0x0c1a tx timeout [ 1209.116820][T19154] netlink: 332 bytes leftover after parsing attributes in process `syz.4.3673'. [ 1209.126056][T19154] netlink: 'syz.4.3673': attribute type 9 has an invalid length. [ 1209.133872][T19154] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3673'. [ 1209.143459][T19154] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3673'. [ 1209.595527][T19148] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1209.937288][T19159] binder: 19155:19159 ioctl c018620c 200000000380 returned -22 [ 1210.613443][T15679] Bluetooth: hci0: command 0x0c1a tx timeout [ 1210.619668][T19166] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 1211.407278][T19170] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19170 comm=syz.3.3677 [ 1211.488350][T19173] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19173 comm=syz.4.3679 [ 1212.643807][T15679] Bluetooth: hci0: command 0x0c1a tx timeout [ 1214.470673][T19192] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1214.634668][T19197] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3684'. [ 1214.648955][T19197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3684'. [ 1214.742526][T19199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3685'. [ 1214.766964][T19199] block nbd0: not configured, cannot reconfigure [ 1214.778657][T19197] hsr_slave_1 (unregistering): left promiscuous mode [ 1214.953410][ T9029] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1215.123464][ T9029] usb 5-1: Using ep0 maxpacket: 8 [ 1215.133141][ T9029] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1215.152315][T19205] binder: 19200:19205 ioctl c018620c 200000000380 returned -22 [ 1215.535628][ T9029] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1215.922083][ T9029] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1215.945262][ T9029] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1215.969296][ T9029] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1215.996143][ T9029] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.023033][ T9029] hub 5-1:1.0: bad descriptor, ignoring hub [ 1216.037763][ T9029] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1216.053846][ T9029] cdc_wdm 5-1:1.0: skipping garbage [ 1216.061025][ T9029] cdc_wdm 5-1:1.0: skipping garbage [ 1216.228118][ T9029] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1216.234147][ T9029] cdc_wdm 5-1:1.0: Unknown control protocol [ 1216.242647][ C0] wdm_int_callback: 6266 callbacks suppressed [ 1216.242666][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1216.255318][ C0] wdm_int_callback: 6266 callbacks suppressed [ 1216.255335][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1216.273455][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1216.280062][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1216.293421][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1216.300021][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1216.306290][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1216.312890][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1216.313739][T19216] binder: 19210:19216 ioctl 40046210 0 returned -14 [ 1216.324075][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1216.332111][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1216.343807][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1216.350407][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1216.357059][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1216.363648][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1216.369935][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1216.376533][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1216.383428][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1216.387626][T19217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3689'. [ 1216.390014][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1216.413633][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1216.420231][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1217.259697][ T9029] usb 5-1: Failed to suspend device, error -71 [ 1217.647522][ T9029] usb 5-1: USB disconnect, device number 45 [ 1218.018163][T19224] Invalid source name [ 1218.022199][T19224] UBIFS error (pid: 19224): cannot open "./file0", error -22 [ 1218.047234][T19224] binder: 19212:19224 ioctl 40046210 0 returned -14 [ 1218.149320][T19226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3690'. [ 1218.234379][ T9029] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1218.661948][T19229] binder: 19223:19229 ioctl 40046210 0 returned -14 [ 1218.776145][T19231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3691'. [ 1219.600213][T19246] binder: 19232:19246 ioctl 40046210 0 returned -14 [ 1219.688596][T19247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3692'. [ 1221.203050][T19263] bio_check_eod: 2 callbacks suppressed [ 1221.203067][T19263] syz.4.3699: attempt to access beyond end of device [ 1221.203067][T19263] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1221.236955][T19263] syz.4.3699: attempt to access beyond end of device [ 1221.236955][T19263] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1221.579888][T19263] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1221.590532][T19263] syz.4.3699: attempt to access beyond end of device [ 1221.590532][T19263] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1221.623691][T19263] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1221.689234][T19263] syz.4.3699: attempt to access beyond end of device [ 1221.689234][T19263] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1221.761609][T19263] syz.4.3699: attempt to access beyond end of device [ 1221.761609][T19263] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1221.780535][T19263] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1221.793032][T19263] syz.4.3699: attempt to access beyond end of device [ 1221.793032][T19263] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1222.315523][T19263] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1222.334019][T19263] syz.4.3699: attempt to access beyond end of device [ 1222.334019][T19263] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1222.347318][T19263] syz.4.3699: attempt to access beyond end of device [ 1222.347318][T19263] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1223.019674][T19263] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1223.032284][T19263] syz.4.3699: attempt to access beyond end of device [ 1223.032284][T19263] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1223.051341][T19263] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1223.077386][T19263] syz.4.3699: attempt to access beyond end of device [ 1223.077386][T19263] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1223.095910][T19263] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1223.113141][T19263] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1223.123082][T19263] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 1223.243626][ T43] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1223.763965][ T43] usb 4-1: config 0 has an invalid interface number: 98 but max is 0 [ 1223.772046][ T43] usb 4-1: config 0 has no interface number 0 [ 1223.970696][ T43] usb 4-1: config 0 interface 98 has no altsetting 0 [ 1223.979517][ T43] usb 4-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 1223.997256][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.005320][ T43] usb 4-1: Product: syz [ 1224.009487][ T43] usb 4-1: Manufacturer: syz [ 1224.014123][ T43] usb 4-1: SerialNumber: syz [ 1224.028037][ T43] usb 4-1: config 0 descriptor?? [ 1225.667494][ T43] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 1225.740330][T19304] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19304 comm=syz.2.3707 [ 1228.648134][ T43] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 1228.786638][ T43] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 1228.871623][ T43] usb 4-1: USB disconnect, device number 48 [ 1230.255647][T19318] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1230.444884][T19326] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1231.363884][T15679] Bluetooth: hci0: command 0x0c1a tx timeout [ 1231.409721][T19338] bio_check_eod: 2 callbacks suppressed [ 1231.409732][T19338] syz.2.3716: attempt to access beyond end of device [ 1231.409732][T19338] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1231.912630][T19338] syz.2.3716: attempt to access beyond end of device [ 1231.912630][T19338] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1231.943853][T19338] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1232.664075][T19338] syz.2.3716: attempt to access beyond end of device [ 1232.664075][T19338] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1232.813914][T19338] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1233.018780][T19348] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1233.082738][T19338] syz.2.3716: attempt to access beyond end of device [ 1233.082738][T19338] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1233.117253][T17268] usb 2-1: [UEAGLE-ATM] firmware is not available [ 1233.117698][ T5927] usb 4-1: [UEAGLE-ATM] firmware is not available [ 1233.123885][ T9028] usb 5-1: [UEAGLE-ATM] firmware is not available [ 1233.130541][ T5928] usb 4-1: [UEAGLE-ATM] firmware is not available [ 1233.164466][T19338] syz.2.3716: attempt to access beyond end of device [ 1233.164466][T19338] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1233.177745][T19338] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1233.187906][T19338] syz.2.3716: attempt to access beyond end of device [ 1233.187906][T19338] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1233.201298][T19338] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1233.216248][T19338] syz.2.3716: attempt to access beyond end of device [ 1233.216248][T19338] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1233.229914][T19338] syz.2.3716: attempt to access beyond end of device [ 1233.229914][T19338] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1233.243919][T19338] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1233.254025][T19338] syz.2.3716: attempt to access beyond end of device [ 1233.254025][T19338] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1233.268290][T19338] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1233.283406][T19338] syz.2.3716: attempt to access beyond end of device [ 1233.283406][T19338] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1233.299185][T19338] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1233.310127][T19338] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1233.321049][T19338] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 1233.538135][T15679] Bluetooth: hci0: command 0x0c1a tx timeout [ 1234.199018][T19365] netlink: 332 bytes leftover after parsing attributes in process `syz.2.3722'. [ 1234.208354][T19365] netlink: 'syz.2.3722': attribute type 9 has an invalid length. [ 1234.216150][T19365] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3722'. [ 1234.225235][T19365] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3722'. [ 1234.242519][T19365] Cannot find add_set index 0 as target [ 1236.043589][T15679] Bluetooth: hci0: command 0x0c1a tx timeout [ 1236.182070][T19376] netlink: 332 bytes leftover after parsing attributes in process `syz.1.3725'. [ 1236.191308][T19376] netlink: 'syz.1.3725': attribute type 9 has an invalid length. [ 1236.199103][T19376] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3725'. [ 1236.208342][T19376] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3725'. [ 1236.780154][T19378] input: syz1 as /devices/virtual/input/input30 [ 1237.008087][T19382] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19382 comm=syz.1.3728 [ 1238.654847][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.926659][T19390] input: syz1 as /devices/virtual/input/input31 [ 1241.672973][T19415] Invalid source name [ 1241.677193][T19415] UBIFS error (pid: 19415): cannot open "./file0", error -22 [ 1241.693571][T19415] binder: 19410:19415 ioctl 40046210 0 returned -14 [ 1241.717048][T19415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3733'. [ 1242.004764][ T9028] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1242.051961][T19415] team0: Port device team_slave_1 removed [ 1242.175881][ T9028] usb 4-1: config 0 has an invalid interface number: 98 but max is 0 [ 1242.184022][ T9028] usb 4-1: config 0 has no interface number 0 [ 1242.197956][ T9028] usb 4-1: config 0 interface 98 has no altsetting 0 [ 1242.824046][ T9028] usb 4-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 1242.838439][ T9028] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.846645][ T9028] usb 4-1: Product: syz [ 1242.851707][ T9028] usb 4-1: Manufacturer: syz [ 1242.856497][ T9028] usb 4-1: SerialNumber: syz [ 1242.862784][ T9028] usb 4-1: config 0 descriptor?? [ 1242.951050][T19424] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19424 comm=syz.1.3737 [ 1244.918910][ T9028] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 1245.118127][T19436] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19436 comm=syz.0.3739 [ 1245.944008][ T9028] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 1245.951672][ T9028] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 1246.531798][T19442] netlink: 332 bytes leftover after parsing attributes in process `syz.4.3741'. [ 1246.541067][T19442] netlink: 'syz.4.3741': attribute type 9 has an invalid length. [ 1246.549032][T19442] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3741'. [ 1246.558303][T19442] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3741'. [ 1247.305435][T19448] netlink: 332 bytes leftover after parsing attributes in process `syz.1.3743'. [ 1247.314694][T19448] netlink: 'syz.1.3743': attribute type 9 has an invalid length. [ 1247.322483][T19448] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3743'. [ 1247.331574][T19448] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3743'. [ 1248.079703][ T9027] usb 4-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 1248.212513][ T9028] usb 4-1: USB disconnect, device number 49 [ 1248.218514][ T9027] usb 4-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 1248.581350][T19458] Invalid source name [ 1248.586083][T19458] UBIFS error (pid: 19458): cannot open "./file0", error -22 [ 1248.605703][T19458] binder: 19450:19458 ioctl 40046210 0 returned -14 [ 1248.703636][T19459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3744'. [ 1249.056681][T19455] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3745'. [ 1249.065709][T19455] nbd: must specify a device to reconfigure [ 1249.550060][T19470] input: syz1 as /devices/virtual/input/input32 [ 1252.397943][T19495] overlayfs: missing 'lowerdir' [ 1253.357470][T19500] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1253.806713][T19508] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1254.103424][ T9028] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1254.269319][ T9028] usb 1-1: config 0 has an invalid interface number: 98 but max is 0 [ 1254.282491][ T9028] usb 1-1: config 0 has no interface number 0 [ 1254.290053][ T9028] usb 1-1: config 0 interface 98 has no altsetting 0 [ 1254.301006][ T9028] usb 1-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 1254.311615][ T9028] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.378977][T19520] netlink: 332 bytes leftover after parsing attributes in process `syz.3.3762'. [ 1254.388242][T19520] netlink: 'syz.3.3762': attribute type 9 has an invalid length. [ 1254.396157][T19520] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3762'. [ 1254.405511][T19520] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3762'. [ 1254.829046][ T9028] usb 1-1: Product: syz [ 1254.833306][ T9028] usb 1-1: Manufacturer: syz [ 1254.837987][ T9028] usb 1-1: SerialNumber: syz [ 1254.844923][ T9028] usb 1-1: config 0 descriptor?? [ 1255.067752][T19532] netlink: 332 bytes leftover after parsing attributes in process `syz.2.3764'. [ 1255.077066][T19532] netlink: 'syz.2.3764': attribute type 9 has an invalid length. [ 1255.084920][T19532] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3764'. [ 1255.129054][T19532] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3764'. [ 1255.139799][T19533] Cannot find add_set index 0 as target [ 1255.608207][ T9028] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 1255.744634][T19543] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19543 comm=syz.4.3768 [ 1256.485264][ T9028] usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware [ 1256.492960][ T9028] usb 1-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 1257.654128][ T9028] usb 1-1: USB disconnect, device number 74 [ 1257.935830][T19550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3769'. [ 1258.389334][T19553] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1258.396562][T19553] IPv6: NLM_F_CREATE should be set when creating new route [ 1259.334198][T19558] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19558 comm=syz.3.3771 [ 1259.401448][T19568] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3774'. [ 1261.079387][T19571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3774'. [ 1261.643437][T17268] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1261.893410][T17268] usb 2-1: Using ep0 maxpacket: 8 [ 1261.904897][T17268] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1261.915435][T17268] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1261.928070][T17268] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1261.993386][T17268] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1262.023401][T17268] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1262.053071][T17268] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.089076][T17268] hub 2-1:1.0: bad descriptor, ignoring hub [ 1262.134844][T17268] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1262.142273][T17268] cdc_wdm 2-1:1.0: skipping garbage [ 1262.147815][T17268] cdc_wdm 2-1:1.0: skipping garbage [ 1262.160898][T17268] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1262.176445][T17268] cdc_wdm 2-1:1.0: Unknown control protocol [ 1262.233398][T16082] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1262.407265][T16082] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1262.529131][T16082] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.552219][T16082] usb 1-1: Product: syz [ 1262.562638][T16082] usb 1-1: Manufacturer: syz [ 1263.056847][T19568] usb 2-1: reset high-speed USB device number 83 using dummy_hcd [ 1263.066754][T16082] usb 1-1: SerialNumber: syz [ 1263.188146][T16082] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1263.319206][ T5928] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1263.623860][ T5927] usb 2-1: USB disconnect, device number 83 [ 1263.768240][T13403] usb 1-1: USB disconnect, device number 75 [ 1263.974597][T19595] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1264.147325][T19597] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1264.343452][T19600] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1264.678778][ T5928] usb 1-1: Service connection timeout for: 256 [ 1264.685113][ T5928] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1264.697718][ T5928] ath9k_htc: Failed to initialize the device [ 1264.769689][T13403] usb 1-1: ath9k_htc: USB layer deinitialized [ 1267.453442][ T5927] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1268.257410][ T5927] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1268.326920][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.353626][T19635] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3793'. [ 1268.383571][ T5927] usb 2-1: Product: syz [ 1268.388078][ T5927] usb 2-1: Manufacturer: syz [ 1268.392728][ T5927] usb 2-1: SerialNumber: syz [ 1268.423559][ T5927] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1268.455686][T19637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3793'. [ 1268.481798][T16082] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1268.631906][T19640] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1268.773433][ T43] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1268.952287][T19642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3795'. [ 1268.967196][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 1268.985349][ T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1269.031148][ T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1269.042526][ T5927] usb 2-1: USB disconnect, device number 84 [ 1269.073683][ T43] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1269.085524][ T43] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1269.096788][ T43] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1269.105857][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.180598][T19649] bio_check_eod: 2 callbacks suppressed [ 1269.180613][T19649] syz.0.3798: attempt to access beyond end of device [ 1269.180613][T19649] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1269.188223][ T43] hub 3-1:1.0: bad descriptor, ignoring hub [ 1269.204193][T19649] syz.0.3798: attempt to access beyond end of device [ 1269.204193][T19649] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1269.218295][T19649] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1269.229826][T19649] syz.0.3798: attempt to access beyond end of device [ 1269.229826][T19649] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1269.244679][T19649] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1269.260429][T19649] syz.0.3798: attempt to access beyond end of device [ 1269.260429][T19649] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1269.683293][T16082] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1269.697507][T19649] syz.0.3798: attempt to access beyond end of device [ 1269.697507][T19649] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1269.714117][ T43] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1269.717734][T19649] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1269.722378][T16082] ath9k_htc: Failed to initialize the device [ 1269.731583][T19649] syz.0.3798: attempt to access beyond end of device [ 1269.731583][T19649] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1269.744437][ T43] cdc_wdm 3-1:1.0: skipping garbage [ 1269.768771][ T5927] usb 2-1: ath9k_htc: USB layer deinitialized [ 1269.776745][ T43] cdc_wdm 3-1:1.0: skipping garbage [ 1269.810594][T19649] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1269.829651][ T43] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1270.024736][T19649] syz.0.3798: attempt to access beyond end of device [ 1270.024736][T19649] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1270.038166][T19649] syz.0.3798: attempt to access beyond end of device [ 1270.038166][T19649] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1270.051319][T19649] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1270.061255][T19649] syz.0.3798: attempt to access beyond end of device [ 1270.061255][T19649] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1270.099603][T19649] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1270.129853][T19649] syz.0.3798: attempt to access beyond end of device [ 1270.129853][T19649] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1270.144521][T19649] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1270.187940][T19649] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1270.197634][T19649] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 1270.403496][ T43] cdc_wdm 3-1:1.0: Unknown control protocol [ 1270.725048][ T43] usb 3-1: reset high-speed USB device number 71 using dummy_hcd [ 1271.612673][T19674] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3803'. [ 1271.661330][T19674] nbd: must specify a device to reconfigure [ 1271.676217][T17039] usb 3-1: USB disconnect, device number 71 [ 1272.218105][T17039] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1272.375010][T17039] usb 5-1: config 0 has an invalid interface number: 98 but max is 0 [ 1272.796798][T17039] usb 5-1: config 0 has no interface number 0 [ 1272.803170][T17039] usb 5-1: config 0 interface 98 has no altsetting 0 [ 1272.813610][T17039] usb 5-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 1272.822723][T17039] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.833980][T17039] usb 5-1: Product: syz [ 1272.839508][T17039] usb 5-1: Manufacturer: syz [ 1272.847127][T17039] usb 5-1: SerialNumber: syz [ 1272.860304][T17039] usb 5-1: config 0 descriptor?? [ 1273.174501][T17039] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 1273.363501][T19700] input: syz1 as /devices/virtual/input/input34 [ 1273.403422][T13403] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1273.593477][T13403] usb 3-1: Using ep0 maxpacket: 8 [ 1273.605517][T13403] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1273.629425][T13403] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.644374][T13403] usb 3-1: Product: syz [ 1273.646520][ T5927] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1273.648710][T13403] usb 3-1: Manufacturer: syz [ 1273.662035][T13403] usb 3-1: SerialNumber: syz [ 1273.669417][T13403] usb 3-1: config 0 descriptor?? [ 1273.843400][ T5927] usb 2-1: Using ep0 maxpacket: 8 [ 1273.883989][T13403] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1273.906486][ T5927] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1273.916002][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.975538][ T5927] usb 2-1: Product: syz [ 1273.979811][ T5927] usb 2-1: Manufacturer: syz [ 1273.984515][ T5927] usb 2-1: SerialNumber: syz [ 1273.986019][T17039] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware [ 1273.997250][T17039] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 1274.000848][ T5927] usb 2-1: config 0 descriptor?? [ 1274.027822][T17039] usb 5-1: USB disconnect, device number 47 [ 1274.374177][ T5927] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1274.439988][T19715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3814'. [ 1274.978623][T13403] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1275.082821][T13403] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 1275.091471][T13403] usb 3-1: media controller created [ 1275.102426][T19720] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1275.405858][T13403] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1275.507470][T13403] i2c i2c-1: Added multiplexed i2c bus 2 [ 1275.520061][T13403] rtl2830 1-0010: Realtek RTL2830 successfully attached [ 1275.528473][T13403] usb 3-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2830 (DVB-T))... [ 1275.545167][T13403] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2830 (DVB-T)' registered. [ 1276.617528][ T5927] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1276.667021][ T5927] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 1276.674998][T13403] DVB: Unable to find symbol mxl5005s_attach() [ 1276.715490][ T5927] usb 2-1: media controller created [ 1276.736885][ T5927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1276.738079][T19736] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3819'. [ 1276.807048][T19738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3820'. [ 1276.859046][T19745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3819'. [ 1276.860564][T13403] usb 3-1: USB disconnect, device number 72 [ 1276.900463][ T5927] i2c i2c-3: Added multiplexed i2c bus 1 [ 1276.986463][ T5927] rtl2830 3-0010: Realtek RTL2830 successfully attached [ 1277.111416][ T5927] usb 2-1: DVB: registering adapter 2 frontend 0 (Realtek RTL2830 (DVB-T))... [ 1277.243506][T16082] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1277.350514][ T5927] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2830 (DVB-T)' registered. [ 1277.602597][T16082] usb 5-1: Using ep0 maxpacket: 8 [ 1277.717613][T16082] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1277.728336][ T5927] DVB: Unable to find symbol mxl5005s_attach() [ 1277.854657][T16082] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1277.864779][T16082] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1277.878848][T16082] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1277.894163][T16082] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1277.914625][ T5927] usb 2-1: USB disconnect, device number 85 [ 1277.930432][T16082] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.942198][T19744] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3822'. [ 1277.960782][T16082] hub 5-1:1.0: bad descriptor, ignoring hub [ 1278.005635][T16082] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1278.036199][T16082] cdc_wdm 5-1:1.0: skipping garbage [ 1278.047039][T16082] cdc_wdm 5-1:1.0: skipping garbage [ 1278.136372][T16082] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1278.164480][T16082] cdc_wdm 5-1:1.0: Unknown control protocol [ 1278.295876][T16082] usb 5-1: USB disconnect, device number 48 [ 1278.563394][T17268] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1278.782864][T19772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3828'. [ 1278.802063][T16082] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1279.173514][T17268] usb 4-1: Using ep0 maxpacket: 8 [ 1279.181667][T17268] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1279.191271][T17268] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.206910][T17268] usb 4-1: Product: syz [ 1279.216204][T17268] usb 4-1: Manufacturer: syz [ 1279.226906][T17268] usb 4-1: SerialNumber: syz [ 1279.246148][T17268] usb 4-1: config 0 descriptor?? [ 1279.456039][T16082] usb 5-1: Using ep0 maxpacket: 8 [ 1279.471329][T17268] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1279.666598][T19781] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19781 comm=syz.0.3830 [ 1279.862058][T19783] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1280.874788][T17268] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1281.855901][ T5927] usb 4-1: USB disconnect, device number 50 [ 1281.910306][T16082] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1281.920224][T16082] usb 5-1: can't read configurations, error -71 [ 1282.319343][T19793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3832'. [ 1282.800901][T19795] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19795 comm=syz.3.3833 [ 1287.268179][T19827] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19827 comm=syz.0.3841 [ 1287.343475][ T5928] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1289.403886][T19835] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3842'. [ 1289.416406][ T5928] usb 4-1: Using ep0 maxpacket: 8 [ 1289.437068][ T5928] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1289.452756][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.481827][ T5928] usb 4-1: Product: syz [ 1289.482178][T19840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3842'. [ 1289.487533][ T5928] usb 4-1: Manufacturer: syz [ 1289.513541][ T5928] usb 4-1: SerialNumber: syz [ 1289.542421][ T5928] usb 4-1: config 0 descriptor?? [ 1289.684088][T17268] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1289.754227][T17039] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1289.761636][ T5928] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1289.854522][T17268] usb 2-1: Using ep0 maxpacket: 16 [ 1289.880168][T17268] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1289.893591][T17268] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1289.937487][T17268] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 1289.948170][T17268] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.960555][T17268] usb 2-1: Product: syz [ 1289.967888][T17268] usb 2-1: Manufacturer: syz [ 1289.972585][T17268] usb 2-1: SerialNumber: syz [ 1289.983683][T17268] usb 2-1: config 0 descriptor?? [ 1289.993585][T17039] usb 3-1: Using ep0 maxpacket: 8 [ 1290.003474][T17039] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1290.013763][T17039] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1290.022881][T17039] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1290.034415][T17039] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1290.046789][T17039] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1290.055893][T17039] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.069991][T17039] hub 3-1:1.0: bad descriptor, ignoring hub [ 1290.079195][T17039] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1290.089691][T17039] cdc_wdm 3-1:1.0: skipping garbage [ 1290.094959][T17039] cdc_wdm 3-1:1.0: skipping garbage [ 1290.101201][T17039] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1290.107227][T17039] cdc_wdm 3-1:1.0: Unknown control protocol [ 1290.223212][T17039] usb 2-1: USB disconnect, device number 86 [ 1290.407697][T19843] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1290.833142][T19835] usb 3-1: reset high-speed USB device number 73 using dummy_hcd [ 1290.870225][ T5928] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1290.976350][ T5928] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 1291.074684][ T5928] usb 4-1: media controller created [ 1291.351131][ T5928] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1291.748775][T15679] Bluetooth: hci0: command 0x0c1a tx timeout [ 1292.640441][ T5928] i2c i2c-1: Added multiplexed i2c bus 2 [ 1292.647493][ T5928] rtl2830 1-0010: Realtek RTL2830 successfully attached [ 1292.679492][ T5928] usb 4-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2830 (DVB-T))... [ 1292.688616][ T5927] usb 3-1: USB disconnect, device number 73 [ 1292.838456][ T5928] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2830 (DVB-T)' registered. [ 1292.997582][ T5928] DVB: Unable to find symbol mxl5005s_attach() [ 1293.455620][ T5928] usb 4-1: USB disconnect, device number 51 [ 1293.632887][T19882] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19882 comm=syz.2.3851 [ 1294.223525][T17039] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1294.231297][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 1294.391653][T17039] usb 5-1: device descriptor read/64, error -32 [ 1295.833534][ T5927] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1296.143410][T17039] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1296.296830][T17039] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1296.354969][T17039] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.456541][T19893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3854'. [ 1296.850906][T17039] usb 5-1: Product: syz [ 1296.859255][T17039] usb 5-1: Manufacturer: syz [ 1296.863916][T17039] usb 5-1: SerialNumber: syz [ 1296.896921][T17039] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1296.917222][T17268] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1297.609161][T19901] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1297.789053][ T5927] usb 5-1: USB disconnect, device number 52 [ 1298.232356][ T30] audit: type=1400 audit(1750540301.366:786): avc: denied { mount } for pid=19904 comm="syz.2.3857" name="/" dev="rpc_pipefs" ino=64697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1299.023878][T17268] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1299.074599][T17268] ath9k_htc: Failed to initialize the device [ 1299.083698][ T30] audit: type=1400 audit(1750540301.466:787): avc: denied { create } for pid=19904 comm="syz.2.3857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1299.105005][ T5927] usb 5-1: ath9k_htc: USB layer deinitialized [ 1299.111111][ T30] audit: type=1400 audit(1750540301.476:788): avc: denied { bind } for pid=19904 comm="syz.2.3857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1299.214900][T19912] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1299.251466][ T30] audit: type=1400 audit(1750540302.186:789): avc: denied { unmount } for pid=16958 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1299.634232][T17039] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1299.675434][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.771862][T17039] usb 2-1: Using ep0 maxpacket: 16 [ 1300.938293][T17039] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 1300.953301][T17039] usb 2-1: config 1 has no interface number 0 [ 1300.959568][T17039] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1300.973461][T17039] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1300.983539][T17039] usb 2-1: config 1 interface 105 has no altsetting 0 [ 1301.001824][T17039] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1301.011613][T17039] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.021694][T17039] usb 2-1: Product: syz [ 1301.041876][T17039] usb 2-1: Manufacturer: syz [ 1301.107320][T17039] usb 2-1: SerialNumber: syz [ 1301.156334][T19915] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1301.167113][T19915] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1301.281559][T17039] aqc111 2-1:1.105: probe with driver aqc111 failed with error -71 [ 1301.320593][T17039] usb 2-1: USB disconnect, device number 88 [ 1301.949108][T19939] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19939 comm=syz.4.3867 [ 1302.143769][T19936] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 1303.923405][T17330] Bluetooth: hci0: command 0x0c1a tx timeout [ 1303.929487][T15679] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1304.414395][T19949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3870'. [ 1304.562144][T19949] hsr_slave_1 (unregistering): left promiscuous mode [ 1305.053677][T13403] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1305.643447][T13403] usb 4-1: Using ep0 maxpacket: 8 [ 1305.656420][T13403] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1305.825121][T13403] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1305.864678][T19960] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1305.893385][T13403] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1305.928284][T13403] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1305.969809][T13403] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1306.002333][T15679] Bluetooth: hci0: command 0x0c1a tx timeout [ 1306.018581][T13403] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.065498][T13403] hub 4-1:1.0: bad descriptor, ignoring hub [ 1306.078494][T13403] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1306.173055][T13403] cdc_wdm 4-1:1.0: skipping garbage [ 1306.186707][T13403] cdc_wdm 4-1:1.0: skipping garbage [ 1306.262146][T19965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3874'. [ 1306.673131][T13403] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1306.684869][T13403] cdc_wdm 4-1:1.0: Unknown control protocol [ 1306.694624][ C0] wdm_int_callback: 4247 callbacks suppressed [ 1306.694638][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1306.707240][ C0] wdm_int_callback: 4247 callbacks suppressed [ 1306.707250][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1306.719588][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1306.726158][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1306.732536][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1306.739105][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1306.745421][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1306.751986][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1306.758247][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1306.764832][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1306.771287][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1306.777881][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1306.784294][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1306.790884][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1306.797220][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1306.803801][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1306.810059][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1306.816657][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1306.822925][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1306.829508][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1306.922921][T13403] usb 4-1: Failed to suspend device, error -71 [ 1306.934565][T13403] usb 4-1: USB disconnect, device number 52 [ 1307.613391][T13403] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1308.675423][T13403] usb 4-1: Using ep0 maxpacket: 8 [ 1308.692353][T13403] usb 4-1: device descriptor read/all, error -71 [ 1309.914926][ T9028] usb 5-1: [UEAGLE-ATM] firmware is not available [ 1309.921572][ T9029] usb 1-1: [UEAGLE-ATM] firmware is not available [ 1309.932966][T13403] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1309.984840][ T9027] usb 4-1: [UEAGLE-ATM] firmware is not available [ 1310.053448][T19967] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1310.223612][T13403] usb 4-1: Using ep0 maxpacket: 16 [ 1310.244719][T13403] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 1310.313744][T13403] usb 4-1: config 1 has no interface number 0 [ 1310.323278][T13403] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1310.334381][T19967] usb 5-1: Using ep0 maxpacket: 8 [ 1310.365111][T19967] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1310.396664][T13403] usb 4-1: config 1 interface 105 has no altsetting 0 [ 1311.250929][T19967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.282317][T19967] usb 5-1: Product: syz [ 1311.287117][T19967] usb 5-1: Manufacturer: syz [ 1311.291747][T19967] usb 5-1: SerialNumber: syz [ 1311.300986][T19967] usb 5-1: config 0 descriptor?? [ 1311.308042][T13403] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1311.319826][T13403] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.331599][T13403] usb 4-1: Product: syz [ 1311.337399][T13403] usb 4-1: Manufacturer: syz [ 1311.352190][T13403] usb 4-1: SerialNumber: syz [ 1311.372284][T19986] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1311.487502][T20012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3890'. [ 1311.617762][ T9027] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1311.676674][T13403] aqc111 4-1:1.105: probe with driver aqc111 failed with error -22 [ 1311.684863][T19967] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1311.696587][T20015] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1311.728511][T20012] hsr_slave_1 (unregistering): left promiscuous mode [ 1311.826652][ T9027] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1311.856315][ T9027] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.873038][ T9027] usb 3-1: Product: syz [ 1311.873461][ T43] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1311.889519][ T9027] usb 3-1: Manufacturer: syz [ 1311.897305][ T9027] usb 3-1: SerialNumber: syz [ 1311.912949][ T9027] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1311.928354][T13403] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1312.053363][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 1312.061597][ T43] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1312.073582][ T43] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1312.082726][ T43] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1312.095059][ T43] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1312.106633][ T43] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1312.116456][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.138447][ T43] hub 2-1:1.0: bad descriptor, ignoring hub [ 1312.144681][ T43] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1312.152265][ T43] cdc_wdm 2-1:1.0: skipping garbage [ 1312.158401][ T43] cdc_wdm 2-1:1.0: skipping garbage [ 1312.167387][ T43] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1312.182735][ T43] cdc_wdm 2-1:1.0: Unknown control protocol [ 1312.360390][T19967] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1312.369230][T20019] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1312.464474][T19967] usb 5-1: USB disconnect, device number 53 [ 1312.693430][ T5928] usb 3-1: USB disconnect, device number 74 [ 1313.084742][T20012] usb 2-1: reset high-speed USB device number 89 using dummy_hcd [ 1313.112338][T19967] usb 4-1: USB disconnect, device number 54 [ 1313.196082][T13403] usb 3-1: Service connection timeout for: 256 [ 1313.202641][T13403] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1313.215164][T13403] ath9k_htc: Failed to initialize the device [ 1313.222683][ T5928] usb 3-1: ath9k_htc: USB layer deinitialized [ 1313.877129][T20040] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1314.675168][ T9029] usb 2-1: USB disconnect, device number 89 [ 1314.793845][T13403] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1315.370091][T20054] input: syz1 as /devices/virtual/input/input36 [ 1315.483506][T13403] usb 1-1: Using ep0 maxpacket: 32 [ 1315.496546][T13403] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1315.507324][T13403] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.533023][T13403] usb 1-1: Product: syz [ 1315.548800][T13403] usb 1-1: Manufacturer: syz [ 1315.553931][T13403] usb 1-1: SerialNumber: syz [ 1315.561152][T13403] usb 1-1: config 0 descriptor?? [ 1315.569501][T13403] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1316.104328][T20063] input: syz1 as /devices/virtual/input/input37 [ 1316.531972][T20067] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3906'. [ 1316.633163][T20070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3906'. [ 1316.780732][T13403] gspca_topro: reg_w err -71 [ 1316.813531][T13403] gspca_topro: Sensor soi763a [ 1316.821173][T13403] usb 1-1: USB disconnect, device number 76 [ 1316.893381][ T9029] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1317.113486][ T9029] usb 3-1: Using ep0 maxpacket: 8 [ 1317.132163][ T9029] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1317.144203][ T9029] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1317.155429][ T9029] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1317.167177][ T9029] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1317.179154][ T9029] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1317.190359][ T9029] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.220925][ T9029] hub 3-1:1.0: bad descriptor, ignoring hub [ 1317.228165][ T9029] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1317.248185][ T9029] cdc_wdm 3-1:1.0: skipping garbage [ 1317.254075][ T9029] cdc_wdm 3-1:1.0: skipping garbage [ 1317.262302][ T9029] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1317.269245][ T9029] cdc_wdm 3-1:1.0: Unknown control protocol [ 1317.485346][T20083] 9pnet_fd: Insufficient options for proto=fd [ 1317.518538][T20084] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20084 comm=syz.3.3911 [ 1319.588711][T20096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3913'. [ 1319.613188][T20067] usb 3-1: reset high-speed USB device number 75 using dummy_hcd [ 1319.875523][T20101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3914'. [ 1319.898354][ T5928] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1320.563359][ T5928] usb 5-1: Using ep0 maxpacket: 8 [ 1320.597930][ T5928] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1320.608510][ T5928] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1320.732164][ T5928] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1320.743351][ T5928] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1320.754824][ T5928] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1320.770019][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.807839][ T5928] hub 5-1:1.0: bad descriptor, ignoring hub [ 1321.280933][ T5928] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1321.294843][ T5928] cdc_wdm 5-1:1.0: skipping garbage [ 1321.300448][ T5928] cdc_wdm 5-1:1.0: skipping garbage [ 1321.721967][T20113] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 1323.098874][T20132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3923'. [ 1323.673378][T17330] Bluetooth: hci0: command 0x0c1a tx timeout [ 1323.679708][T15679] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1324.168750][T13403] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1324.333390][ T5927] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1324.373369][T13403] usb 1-1: Using ep0 maxpacket: 8 [ 1324.386066][T13403] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 1324.394237][T13403] usb 1-1: config 2 has no interface number 0 [ 1324.405861][T13403] usb 1-1: config 2 interface 31 has no altsetting 0 [ 1324.416240][T13403] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1324.426191][T13403] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.009257][T13403] usb 1-1: Product: syz [ 1325.013853][T13403] usb 1-1: Manufacturer: syz [ 1325.018476][T13403] usb 1-1: SerialNumber: syz [ 1325.037763][T13403] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [ 1325.113845][ T5927] usb 2-1: Using ep0 maxpacket: 8 [ 1325.130643][ T5927] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1325.143208][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.159346][ T5927] usb 2-1: Product: syz [ 1325.169476][ T5927] usb 2-1: Manufacturer: syz [ 1325.184537][T20067] usb 3-1: device descriptor read/64, error -110 [ 1325.185873][ T5927] usb 2-1: SerialNumber: syz [ 1325.202500][ T5927] usb 2-1: config 0 descriptor?? [ 1325.364077][T13403] usb 1-1: USB disconnect, device number 77 [ 1325.407531][T19967] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1325.427701][T20067] usb 3-1: reset high-speed USB device number 75 using dummy_hcd [ 1325.431170][ T5927] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1325.564371][T20067] usb 3-1: device descriptor read/64, error -32 [ 1325.594692][T19967] usb 4-1: Using ep0 maxpacket: 8 [ 1325.638712][T19967] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1325.648744][T19967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.657188][T19967] usb 4-1: Product: syz [ 1325.748935][T19967] usb 4-1: Manufacturer: syz [ 1325.755101][T19967] usb 4-1: SerialNumber: syz [ 1325.763498][T15679] Bluetooth: hci0: command 0x0c1a tx timeout [ 1325.795699][T19967] usb 4-1: config 0 descriptor?? [ 1325.875134][T20067] usb 3-1: reset high-speed USB device number 75 using dummy_hcd [ 1325.903719][T20067] usb 3-1: device descriptor read/8, error -32 [ 1326.053402][T19967] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1326.062613][ C1] raw-gadget.3 gadget.1: ignoring, device is not running [ 1326.070659][ T5927] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1326.089336][ T5927] usb 2-1: USB disconnect, device number 90 [ 1326.153526][T20067] usb 3-1: reset high-speed USB device number 75 using dummy_hcd [ 1326.183806][T20067] usb 3-1: device descriptor read/8, error -32 [ 1326.294958][ T9029] usb 3-1: USB disconnect, device number 75 [ 1326.300909][T20067] cdc_wdm 3-1:1.0: Error autopm - -16 [ 1326.315274][T20093] cdc_wdm 3-1:1.0: Error autopm - -16 [ 1326.318056][ T5928] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 1326.344666][ T5928] cdc_wdm 5-1:1.0: Unknown control protocol [ 1326.399329][T20067] raw-gadget.0 gadget.2: failed to queue disconnect event [ 1326.591767][T20160] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20160 comm=syz.2.3931 [ 1327.303955][ T5928] usb 5-1: reset high-speed USB device number 54 using dummy_hcd [ 1327.321022][ T5928] usb 5-1: device reset changed ep0 maxpacket size! [ 1327.329477][ T5928] usb 5-1: USB disconnect, device number 54 [ 1327.604766][T19967] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1327.643624][T19967] usb 4-1: USB disconnect, device number 55 [ 1327.773419][ T5928] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1327.997221][ T5928] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1328.006402][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.014795][ T5928] usb 5-1: Product: syz [ 1328.019041][ T5928] usb 5-1: Manufacturer: syz [ 1328.023966][ T5928] usb 5-1: SerialNumber: syz [ 1328.034308][ T5928] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1328.055794][ T5872] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1328.183387][T19967] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 1328.334971][T19967] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1328.347300][T19967] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1328.360351][T19967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1328.374855][T19967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1328.386451][T19967] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1328.402892][T19967] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1328.414982][T19967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1328.425028][T19967] usb 1-1: Product: syz [ 1328.429308][T19967] usb 1-1: Manufacturer: syz [ 1328.434207][T19967] usb 1-1: SerialNumber: syz [ 1328.461729][T19967] usb 1-1: config 0 descriptor?? [ 1328.693472][ T9029] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1328.784592][ T5927] usb 5-1: USB disconnect, device number 55 [ 1328.840644][T19967] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1328.867833][T19967] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 1328.918313][T19967] usb 1-1: USB disconnect, device number 78 [ 1329.023524][ T9029] usb 4-1: Using ep0 maxpacket: 8 [ 1329.036377][ T9029] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 1329.045337][ T9029] usb 4-1: config 2 has no interface number 0 [ 1329.068013][ T9029] usb 4-1: config 2 interface 31 has no altsetting 0 [ 1329.101440][ T9029] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1329.177153][ T9029] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.257974][ T9029] usb 4-1: Product: syz [ 1329.273395][ T9029] usb 4-1: Manufacturer: syz [ 1329.282741][ T9029] usb 4-1: SerialNumber: syz [ 1329.459768][ T5872] usb 5-1: Service connection timeout for: 256 [ 1329.479053][ T5872] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1329.639015][T20187] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1329.649345][T20187] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1329.720614][ T5872] ath9k_htc: Failed to initialize the device [ 1330.280857][ T5927] usb 5-1: ath9k_htc: USB layer deinitialized [ 1330.526373][ T9029] ch9200 4-1:2.31: probe with driver ch9200 failed with error -22 [ 1330.753603][T19967] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1330.937879][T20202] input: syz1 as /devices/virtual/input/input38 [ 1330.955455][T19967] usb 5-1: Using ep0 maxpacket: 32 [ 1330.976672][T19967] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1330.986058][T19967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.018372][T19967] usb 5-1: Product: syz [ 1331.125836][T20206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3949'. [ 1331.158316][T19967] usb 5-1: Manufacturer: syz [ 1331.174957][T19967] usb 5-1: SerialNumber: syz [ 1331.181506][T19967] usb 5-1: config 0 descriptor?? [ 1331.190886][T19967] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1331.229885][T20211] input: syz1 as /devices/virtual/input/input39 [ 1331.403463][ T9029] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1331.643428][ T9029] usb 2-1: Using ep0 maxpacket: 32 [ 1331.663982][ T9029] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1331.673214][ T9029] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.688359][ T9029] usb 2-1: Product: syz [ 1331.692551][ T9029] usb 2-1: Manufacturer: syz [ 1331.713538][ T9029] usb 2-1: SerialNumber: syz [ 1331.736100][ T9029] usb 2-1: config 0 descriptor?? [ 1331.743540][ T9029] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1332.663722][ T9028] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1332.721020][T19967] gspca_topro: reg_w err -71 [ 1332.753661][T19967] gspca_topro: Sensor soi763a [ 1332.813533][ T9028] usb 3-1: Using ep0 maxpacket: 8 [ 1332.900210][T19967] usb 5-1: USB disconnect, device number 56 [ 1332.944298][ T9028] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1333.473792][ T9029] gspca_topro: reg_w err -110 [ 1333.547404][ T9028] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.568445][ T9028] usb 3-1: Product: syz [ 1333.572643][ T9028] usb 3-1: Manufacturer: syz [ 1333.577933][ T9029] gspca_topro: Sensor soi763a [ 1333.600499][ T9027] usb 4-1: USB disconnect, device number 56 [ 1333.627236][ T9028] usb 3-1: SerialNumber: syz [ 1333.632325][ T9029] usb 2-1: USB disconnect, device number 91 [ 1333.678246][ T9028] usb 3-1: config 0 descriptor?? [ 1333.736893][T20236] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20236 comm=syz.0.3957 [ 1334.244655][ T9028] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1335.964579][T20253] input: syz1 as /devices/virtual/input/input40 [ 1336.612189][ T9028] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1336.621919][ T9029] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1336.645316][ T9028] usb 3-1: USB disconnect, device number 77 [ 1336.777050][ T9029] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1336.849739][ T9029] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.864307][ T9029] usb 5-1: Product: syz [ 1336.869959][ T9029] usb 5-1: Manufacturer: syz [ 1336.875432][ T9029] usb 5-1: SerialNumber: syz [ 1337.014529][ T9029] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1337.045720][ T9028] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1338.357051][T20277] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20277 comm=syz.0.3971 [ 1338.374533][T20272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3968'. [ 1338.406133][T20272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3968'. [ 1338.509479][T19967] usb 5-1: USB disconnect, device number 57 [ 1339.210401][ T9028] usb 5-1: Service connection timeout for: 256 [ 1339.216680][ T9028] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1339.226381][ T9028] ath9k_htc: Failed to initialize the device [ 1339.245044][T19967] usb 5-1: ath9k_htc: USB layer deinitialized [ 1339.528572][T20286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3974'. [ 1340.584269][T20302] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3979'. [ 1340.593947][T20302] netlink: zone id is out of range [ 1340.599252][T20302] netlink: zone id is out of range [ 1340.605754][T20302] netlink: get zone limit has 8 unknown bytes [ 1342.262733][ T5872] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1343.568110][ T5872] usb 2-1: Using ep0 maxpacket: 32 [ 1343.585655][ T5872] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1343.612404][ T5872] usb 2-1: config 0 has no interface number 0 [ 1343.632275][ T5872] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1343.664299][ T5872] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1343.704887][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.738515][ T5872] usb 2-1: Product: syz [ 1343.742698][ T5872] usb 2-1: Manufacturer: syz [ 1343.756024][ T5872] usb 2-1: SerialNumber: syz [ 1343.925704][ T5872] usb 2-1: config 0 descriptor?? [ 1343.949341][ T5872] smsc75xx v1.0.0 [ 1343.967806][T20337] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3988'. [ 1343.976810][ T5872] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1344.019697][ T5872] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 1344.065360][T20340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3989'. [ 1344.499730][T20147] usb 2-1: USB disconnect, device number 92 [ 1346.006655][T20360] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3994'. [ 1346.016670][T20360] netlink: zone id is out of range [ 1346.022119][T20360] netlink: zone id is out of range [ 1346.028998][T20360] netlink: get zone limit has 8 unknown bytes [ 1346.704474][T20374] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3998'. [ 1346.714310][T20374] netlink: zone id is out of range [ 1346.720131][T20374] netlink: zone id is out of range [ 1346.725415][T20374] netlink: get zone limit has 8 unknown bytes [ 1347.079230][T20376] input: syz1 as /devices/virtual/input/input41 [ 1347.244261][T20379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4002'. [ 1347.344555][T20382] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20382 comm=syz.2.4001 [ 1348.238090][T20390] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4003'. [ 1348.248891][T20390] netlink: zone id is out of range [ 1348.254355][T20390] netlink: zone id is out of range [ 1348.259547][T20390] netlink: get zone limit has 8 unknown bytes [ 1348.720852][T20395] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4007'. [ 1348.730589][T20395] netlink: zone id is out of range [ 1349.648689][T20403] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.4009'. [ 1350.120513][T20410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4008'. [ 1350.129478][T20410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4008'. [ 1350.174617][T20407] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1350.998564][T20419] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20419 comm=syz.1.4011 [ 1351.158362][T20422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4014'. [ 1351.167429][T20422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4014'. [ 1353.670524][T20426] Cache volume key already in use (9p,(null),) [ 1353.795096][T20433] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20433 comm=syz.3.4016 [ 1356.290670][T20442] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20442 comm=syz.0.4019 [ 1357.608242][T20456] binder: 20455:20456 ioctl c0306201 0 returned -14 [ 1357.970955][T20452] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20452 comm=syz.0.4021 [ 1361.104917][T20478] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1361.126262][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.613381][ T5927] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1361.813426][ T5927] usb 2-1: Using ep0 maxpacket: 8 [ 1362.032535][ T5927] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1362.046915][ T5927] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1362.056856][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.065265][ T5927] usb 2-1: Product: syz [ 1362.069839][ T5927] usb 2-1: Manufacturer: syz [ 1362.957354][ T5927] usb 2-1: SerialNumber: syz [ 1363.044675][ T5927] usb 2-1: config 0 descriptor?? [ 1363.064669][ T5927] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1363.100562][T20499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4033'. [ 1363.109618][T20499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4033'. [ 1363.607669][T20505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4036'. [ 1363.647909][ T30] audit: type=1400 audit(1750541905.785:790): avc: denied { connect } for pid=20506 comm="syz.3.4037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1363.893602][ T5872] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1364.163346][ T5872] usb 3-1: Using ep0 maxpacket: 8 [ 1364.170715][ T5872] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1364.184757][ T5872] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1364.198136][ T5872] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1364.210710][ T5872] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1364.222494][ T5872] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1364.233406][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.279984][ T5872] hub 3-1:1.0: bad descriptor, ignoring hub [ 1364.293395][ T5872] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1364.404095][ T5872] cdc_wdm 3-1:1.0: skipping garbage [ 1364.409350][ T5872] cdc_wdm 3-1:1.0: skipping garbage [ 1364.417139][ T5872] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1364.423416][ T5872] cdc_wdm 3-1:1.0: Unknown control protocol [ 1364.600136][ T5927] gspca_zc3xx: reg_w_i err -71 [ 1364.725880][T20517] gtp0: entered promiscuous mode [ 1365.215908][T20503] usb 3-1: reset high-speed USB device number 78 using dummy_hcd [ 1365.621213][ T30] audit: type=1400 audit(1750541907.755:791): avc: denied { append } for pid=20519 comm="syz.4.4040" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1365.733371][ T5927] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1365.739701][ T5927] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1365.785176][ T5927] usb 2-1: USB disconnect, device number 93 [ 1367.003369][ T9029] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1367.123620][ T9028] usb 3-1: USB disconnect, device number 78 [ 1367.184593][ T9029] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1368.043411][ T9029] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1368.052489][ T9029] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.094963][ T9029] usb 1-1: config 0 descriptor?? [ 1368.108740][ T9029] pwc: Askey VC010 type 2 USB webcam detected. [ 1368.433411][ T5927] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1369.367352][ T9029] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1369.387224][ T9029] pwc: recv_control_msg error -32 req 02 val 2700 [ 1369.397551][ T9029] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1369.408421][ T9029] pwc: recv_control_msg error -32 req 04 val 1000 [ 1369.424312][ T9029] pwc: recv_control_msg error -32 req 04 val 1300 [ 1369.453695][ T9029] pwc: recv_control_msg error -32 req 04 val 1400 [ 1369.460621][ T9029] pwc: recv_control_msg error -32 req 02 val 2000 [ 1369.477983][ T9029] pwc: recv_control_msg error -32 req 02 val 2100 [ 1369.499907][ T9029] pwc: recv_control_msg error -32 req 04 val 1500 [ 1369.515141][ T9029] pwc: recv_control_msg error -32 req 02 val 2500 [ 1369.515595][ T5927] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1369.553441][ T5927] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1369.563397][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.594257][ T9029] pwc: recv_control_msg error -32 req 02 val 2400 [ 1369.608874][ T9029] pwc: recv_control_msg error -32 req 02 val 2600 [ 1369.634273][ T5927] usb 2-1: config 0 descriptor?? [ 1369.657355][ T5927] pwc: Askey VC010 type 2 USB webcam detected. [ 1369.830871][ T9029] pwc: recv_control_msg error -71 req 02 val 2800 [ 1369.882083][ T9029] pwc: recv_control_msg error -71 req 04 val 1100 [ 1369.896080][ T9029] pwc: recv_control_msg error -71 req 04 val 1200 [ 1369.922217][ T9029] pwc: Registered as video103. [ 1369.927820][ T9028] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1369.971834][ T9029] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input42 [ 1370.089769][ T5927] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1370.099158][ T5927] pwc: recv_control_msg error -32 req 02 val 2700 [ 1370.110568][ T5927] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1370.118569][ T5927] pwc: recv_control_msg error -32 req 04 val 1000 [ 1370.134841][ T5927] pwc: recv_control_msg error -32 req 04 val 1300 [ 1370.165196][ T5927] pwc: recv_control_msg error -32 req 04 val 1400 [ 1370.173611][ T5927] pwc: recv_control_msg error -32 req 02 val 2000 [ 1370.182186][ T5927] pwc: recv_control_msg error -32 req 02 val 2100 [ 1370.961947][ T9028] usb 5-1: Using ep0 maxpacket: 8 [ 1370.976537][ T5927] pwc: recv_control_msg error -32 req 04 val 1500 [ 1371.007133][ T5927] pwc: recv_control_msg error -32 req 02 val 2500 [ 1371.013532][ T9029] usb 1-1: USB disconnect, device number 79 [ 1371.033850][ T9028] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 1371.065429][ T5927] pwc: recv_control_msg error -32 req 02 val 2400 [ 1371.086295][ T9028] usb 5-1: config 2 has no interface number 0 [ 1371.172004][T20567] input: syz0 as /devices/virtual/input/input43 [ 1371.339826][ T9028] usb 5-1: config 2 interface 31 has no altsetting 0 [ 1371.353063][ T5927] pwc: recv_control_msg error -32 req 02 val 2600 [ 1371.618268][ T5927] pwc: recv_control_msg error -71 req 02 val 2800 [ 1371.635033][ T5927] pwc: recv_control_msg error -71 req 04 val 1100 [ 1371.665633][ T5927] pwc: recv_control_msg error -71 req 04 val 1200 [ 1371.713387][ T9029] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1371.716233][ T5927] pwc: Registered as video103. [ 1371.743174][ T5927] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input44 [ 1371.743543][ T9028] usb 5-1: string descriptor 0 read error: -71 [ 1371.782896][ T9028] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1371.820368][ T5927] usb 2-1: USB disconnect, device number 94 [ 1371.846796][ T9028] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.882401][ T9028] usb 5-1: can't set config #2, error -71 [ 1371.905266][ T9028] usb 5-1: USB disconnect, device number 58 [ 1371.912015][ T9029] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1371.943263][ T9029] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1371.980555][ T9029] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.997131][ T5872] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1371.997908][ T9029] usb 1-1: config 0 descriptor?? [ 1372.020380][ T9029] pwc: Askey VC010 type 2 USB webcam detected. [ 1372.168090][ T5872] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1372.179810][ T5872] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1372.189339][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1372.243440][ T9028] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1372.419056][ T9028] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1372.471117][ T9029] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1372.492691][ T9028] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1372.520794][ T9029] pwc: recv_control_msg error -32 req 02 val 2700 [ 1372.542096][ T9028] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1372.566746][ T9029] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1372.610191][ T9029] pwc: recv_control_msg error -32 req 04 val 1000 [ 1372.661858][ T9028] usb 5-1: config 0 descriptor?? [ 1372.671207][ T9029] pwc: recv_control_msg error -32 req 04 val 1300 [ 1372.695197][ T5872] usb 3-1: config 0 descriptor?? [ 1372.727965][ T9029] pwc: recv_control_msg error -32 req 04 val 1400 [ 1372.762368][ T9028] pwc: Askey VC010 type 2 USB webcam detected. [ 1372.797089][ T9029] pwc: recv_control_msg error -32 req 02 val 2000 [ 1372.859371][ T9029] pwc: recv_control_msg error -32 req 02 val 2100 [ 1372.897789][ T9029] pwc: recv_control_msg error -32 req 04 val 1500 [ 1372.954995][ T9029] pwc: recv_control_msg error -32 req 02 val 2500 [ 1373.014516][ T9029] pwc: recv_control_msg error -32 req 02 val 2400 [ 1373.015758][ T5872] pwc: Askey VC010 type 2 USB webcam detected. [ 1373.065274][ T9029] pwc: recv_control_msg error -32 req 02 val 2600 [ 1373.149887][T20581] binder: 20580:20581 ioctl c0306201 0 returned -14 [ 1373.324845][ T9028] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1373.335659][ T9029] pwc: recv_control_msg error -71 req 02 val 2800 [ 1373.351180][ T9028] pwc: recv_control_msg error -32 req 02 val 2700 [ 1373.361839][ T9029] pwc: recv_control_msg error -71 req 04 val 1100 [ 1373.559342][ T9028] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1373.566210][ T9029] pwc: recv_control_msg error -71 req 04 val 1200 [ 1373.577501][ T5872] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1373.605280][ T9028] pwc: recv_control_msg error -32 req 04 val 1000 [ 1373.625907][ T9029] pwc: Registered as video103. [ 1373.647472][ T9028] pwc: recv_control_msg error -32 req 04 val 1300 [ 1373.710270][ T9028] pwc: recv_control_msg error -32 req 04 val 1400 [ 1373.736846][ T9029] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input45 [ 1373.799533][ T9028] pwc: recv_control_msg error -32 req 02 val 2000 [ 1373.864143][ T9028] pwc: recv_control_msg error -32 req 02 val 2100 [ 1373.963497][ T9028] pwc: recv_control_msg error -32 req 04 val 1500 [ 1374.002702][ T9029] usb 1-1: USB disconnect, device number 80 [ 1374.025617][ T9028] pwc: recv_control_msg error -32 req 02 val 2500 [ 1374.047062][ T9028] pwc: recv_control_msg error -32 req 02 val 2400 [ 1374.065578][ T5872] pwc: recv_control_msg error -32 req 02 val 2700 [ 1374.134616][ T9028] pwc: recv_control_msg error -32 req 02 val 2600 [ 1374.286085][ T9028] pwc: recv_control_msg error -32 req 02 val 2900 [ 1374.745382][ T5872] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1375.620847][T20599] fuse: Unknown parameter '0x0000000000000004' [ 1375.734668][ T30] audit: type=1400 audit(1750541917.775:792): avc: denied { block_suspend } for pid=20594 comm="syz.1.4062" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1375.892246][ T9028] pwc: recv_control_msg error -71 req 04 val 1100 [ 1375.910352][ T5872] pwc: recv_control_msg error -71 req 04 val 1000 [ 1375.925314][ T9028] pwc: recv_control_msg error -71 req 04 val 1200 [ 1375.956086][ T5872] pwc: recv_control_msg error -71 req 04 val 1300 [ 1375.973103][ T5872] pwc: recv_control_msg error -71 req 04 val 1400 [ 1375.976662][ T9028] pwc: Registered as video103. [ 1375.980262][ T5872] pwc: recv_control_msg error -71 req 02 val 2000 [ 1376.123510][T20605] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1376.457610][ T9028] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input46 [ 1376.973967][ T5872] pwc: recv_control_msg error -71 req 02 val 2100 [ 1376.981418][ T5872] pwc: recv_control_msg error -71 req 04 val 1500 [ 1376.988258][ T5872] pwc: recv_control_msg error -71 req 02 val 2500 [ 1376.995785][ T5872] pwc: recv_control_msg error -71 req 02 val 2400 [ 1377.002618][ T5872] pwc: recv_control_msg error -71 req 02 val 2600 [ 1377.023734][ T5872] pwc: recv_control_msg error -71 req 02 val 2900 [ 1377.030972][ T5872] pwc: recv_control_msg error -71 req 02 val 2800 [ 1377.045697][ T5872] pwc: recv_control_msg error -71 req 04 val 1100 [ 1377.053191][ T5872] pwc: recv_control_msg error -71 req 04 val 1200 [ 1377.057749][T20597] kvm: pic: non byte read [ 1377.059748][ T5872] videodev: could not get a free minor [ 1377.064292][ T9028] usb 5-1: USB disconnect, device number 59 [ 1377.069462][ T5872] pwc: Failed to register as video device (-23). [ 1377.070188][ T5872] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -23 [ 1377.105212][ T5872] usb 3-1: USB disconnect, device number 79 [ 1377.114342][T20597] kvm: pic: non byte read [ 1377.128164][T20597] kvm: pic: non byte read [ 1377.140194][T20597] kvm: pic: level sensitive irq not supported [ 1377.140281][T20597] kvm: pic: non byte read [ 1377.340221][T20621] netlink: 332 bytes leftover after parsing attributes in process `syz.4.4066'. [ 1377.349458][T20621] netlink: 'syz.4.4066': attribute type 9 has an invalid length. [ 1377.357529][T20621] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4066'. [ 1377.366690][T20621] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4066'. [ 1378.015366][ T5872] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1378.196385][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1378.231398][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1378.235584][T20635] fuse: Unknown parameter '0x0000000000000004' [ 1378.243049][ T5872] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1378.260534][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.302570][ T5872] usb 3-1: config 0 descriptor?? [ 1378.611777][ T30] audit: type=1400 audit(1750541920.735:793): avc: denied { create } for pid=20633 comm="syz.4.4071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1378.670365][ T30] audit: type=1400 audit(1750541920.765:794): avc: denied { ioctl } for pid=20633 comm="syz.4.4071" path="socket:[67725]" dev="sockfs" ino=67725 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1378.796400][T20638] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4072'. [ 1378.835760][T20640] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1379.049880][T20647] input: syz0 as /devices/virtual/input/input47 [ 1379.153841][T17268] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1379.493643][ T5872] uclogic 0003:256C:006D.0018: failed retrieving Huion firmware version: -71 [ 1379.493732][T17268] usb 1-1: Using ep0 maxpacket: 32 [ 1379.626147][ T5872] uclogic 0003:256C:006D.0018: failed probing parameters: -71 [ 1379.638434][T17268] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1379.659588][T17268] usb 1-1: config 0 has no interface number 0 [ 1379.665818][T17268] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1379.671529][ T5872] uclogic 0003:256C:006D.0018: probe with driver uclogic failed with error -71 [ 1379.679430][T17268] usb 1-1: config 0 interface 1 has no altsetting 0 [ 1379.734731][T17268] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1379.816913][T17268] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.830212][ T5872] usb 3-1: USB disconnect, device number 80 [ 1379.889546][T20657] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20657 comm=syz.1.4078 [ 1379.914810][T17268] usb 1-1: Product: syz [ 1379.919513][T17268] usb 1-1: Manufacturer: syz [ 1379.924174][T17268] usb 1-1: SerialNumber: syz [ 1379.931502][T17268] usb 1-1: config 0 descriptor?? [ 1381.118130][T17268] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1381.137529][T17268] cx231xx 1-1:0.1: Failed to read PCB config [ 1381.143880][T17268] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 1381.156382][T17268] usb 1-1: USB disconnect, device number 81 [ 1381.283353][ T5872] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1381.534636][ T5872] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1381.544975][ T5872] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1381.554166][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.572884][ T5872] usb 4-1: config 0 descriptor?? [ 1381.667905][T20691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4083'. [ 1382.141342][ T5872] pwc: Askey VC010 type 2 USB webcam detected. [ 1382.366808][ T5872] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1382.502756][ T5872] pwc: recv_control_msg error -32 req 02 val 2700 [ 1382.535356][ T5872] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1382.594866][ T5872] pwc: recv_control_msg error -32 req 04 val 1000 [ 1382.604415][ T5872] pwc: recv_control_msg error -32 req 04 val 1300 [ 1382.617655][ T5872] pwc: recv_control_msg error -32 req 04 val 1400 [ 1382.638149][ T5872] pwc: recv_control_msg error -32 req 02 val 2000 [ 1382.645852][ T5872] pwc: recv_control_msg error -32 req 02 val 2100 [ 1382.653216][ T5872] pwc: recv_control_msg error -32 req 04 val 1500 [ 1382.918447][T20704] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20704 comm=syz.4.4087 [ 1382.950078][ T5872] pwc: recv_control_msg error -32 req 02 val 2500 [ 1384.351781][ T5872] pwc: recv_control_msg error -71 req 02 val 2400 [ 1384.403188][ T5872] pwc: recv_control_msg error -71 req 02 val 2600 [ 1384.433809][ T5872] pwc: recv_control_msg error -71 req 02 val 2900 [ 1384.443107][ T5872] pwc: recv_control_msg error -71 req 02 val 2800 [ 1384.467621][ T5872] pwc: recv_control_msg error -71 req 04 val 1100 [ 1384.475606][ T5872] pwc: recv_control_msg error -71 req 04 val 1200 [ 1384.558046][ T5872] pwc: Registered as video103. [ 1384.820305][ T5872] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input48 [ 1385.559847][ T5872] usb 4-1: USB disconnect, device number 57 [ 1385.573477][T20718] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1385.827653][T20728] binder: 20727:20728 ioctl c0306201 0 returned -14 [ 1386.027033][T20732] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20732 comm=syz.1.4093 [ 1386.742503][T20736] input: syz0 as /devices/virtual/input/input49 [ 1387.898646][T20744] netlink: 332 bytes leftover after parsing attributes in process `syz.3.4098'. [ 1387.907711][T20744] netlink: 'syz.3.4098': attribute type 9 has an invalid length. [ 1387.915533][T20744] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4098'. [ 1387.924602][T20744] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4098'. [ 1387.933853][T17268] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1388.189335][T17268] usb 1-1: Using ep0 maxpacket: 8 [ 1388.243179][T17268] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1388.300449][T17268] usb 1-1: config 0 has no interfaces? [ 1388.402941][T17268] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1388.438631][T17268] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.468753][T20747] binder: 20746:20747 ioctl c0306201 0 returned -14 [ 1388.480451][T17268] usb 1-1: Product: syz [ 1388.503575][T17268] usb 1-1: Manufacturer: syz [ 1388.510662][T17268] usb 1-1: SerialNumber: syz [ 1388.637356][T17268] usb 1-1: config 0 descriptor?? [ 1390.428347][ T5927] usb 1-1: USB disconnect, device number 82 [ 1390.481457][T20769] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4106'. [ 1390.923029][T20776] netlink: 332 bytes leftover after parsing attributes in process `syz.3.4108'. [ 1390.932581][T20776] netlink: 'syz.3.4108': attribute type 9 has an invalid length. [ 1390.940626][T20776] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4108'. [ 1390.949813][T20776] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4108'. [ 1395.819457][T20823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4123'. [ 1396.013352][T20823] hsr_slave_1 (unregistering): left promiscuous mode [ 1396.143510][ T9029] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1396.943346][ T9029] usb 1-1: Using ep0 maxpacket: 8 [ 1396.966912][ T9029] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1397.049008][ T9029] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1397.099109][ T9029] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1397.123072][ T9029] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1397.138022][ T9029] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1397.147399][ T9029] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1397.174595][ T9029] hub 1-1:1.0: bad descriptor, ignoring hub [ 1397.180848][ T9029] hub 1-1:1.0: probe with driver hub failed with error -5 [ 1397.188991][ T9029] cdc_wdm 1-1:1.0: skipping garbage [ 1397.194996][ T9029] cdc_wdm 1-1:1.0: skipping garbage [ 1397.205558][ T9029] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1397.211468][ T9029] cdc_wdm 1-1:1.0: Unknown control protocol [ 1397.303430][ T5872] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1397.510856][ T5872] usb 3-1: config 0 has an invalid interface number: 98 but max is 0 [ 1397.592590][ T5872] usb 3-1: config 0 has no interface number 0 [ 1397.704540][ T5872] usb 3-1: config 0 interface 98 has no altsetting 0 [ 1397.826756][ T5872] usb 3-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 1397.836212][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.845381][ T5872] usb 3-1: Product: syz [ 1397.849806][ T5872] usb 3-1: Manufacturer: syz [ 1397.854621][ T5872] usb 3-1: SerialNumber: syz [ 1397.861875][ T5872] usb 3-1: config 0 descriptor?? [ 1397.943364][ T9029] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1398.103779][ T9029] usb 5-1: Using ep0 maxpacket: 8 [ 1398.179915][ T9029] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1398.235564][T20823] usb 1-1: reset high-speed USB device number 83 using dummy_hcd [ 1398.283183][ T9029] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1398.402260][ T9029] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.436098][ T5872] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 1398.441716][ T9029] usb 5-1: Product: syz [ 1398.517700][ T9029] usb 5-1: Manufacturer: syz [ 1398.522324][ T9029] usb 5-1: SerialNumber: syz [ 1398.546837][ T9029] usb 5-1: config 0 descriptor?? [ 1398.560422][ T9029] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1399.253583][ T9028] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1399.423927][ T9028] usb 4-1: Using ep0 maxpacket: 8 [ 1399.658758][ T9028] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1399.668004][ T9028] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.676499][ T9028] usb 4-1: Product: syz [ 1399.680686][ T9028] usb 4-1: Manufacturer: syz [ 1399.685644][ T9028] usb 4-1: SerialNumber: syz [ 1399.692904][ T9028] usb 4-1: config 0 descriptor?? [ 1399.869605][T20874] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20874 comm=syz.1.4140 [ 1400.137873][ T5872] usb 3-1: [ueagle-atm] pre-firmware device, uploading firmware [ 1400.156992][ T5872] usb 3-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 1400.157419][ T9028] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1400.165040][T20147] usb 3-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 1400.214473][T19967] usb 1-1: USB disconnect, device number 83 [ 1400.498835][ T5872] usb 3-1: USB disconnect, device number 81 [ 1400.987532][ T9029] gspca_zc3xx: reg_w_i err -110 [ 1401.142325][T20147] usb 3-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 1402.793993][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 1402.801286][ T9028] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1403.042219][T20147] ------------[ cut here ]------------ [ 1403.047914][T20147] WARNING: CPU: 1 PID: 20147 at fs/kernfs/dir.c:537 kernfs_get.part.0+0x6e/0x80 [ 1403.056988][T20147] Modules linked in: [ 1403.061057][T20147] CPU: 1 UID: 0 PID: 20147 Comm: kworker/1:2 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(full) [ 1403.073221][T20147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1403.083297][T20147] Workqueue: events request_firmware_work_func [ 1403.089563][T20147] RIP: 0010:kernfs_get.part.0+0x6e/0x80 [ 1403.095337][T20147] Code: 18 b3 5a ff 85 ed 74 1c e8 cf b7 5a ff be 04 00 00 00 48 89 df e8 b2 97 c1 ff f0 ff 03 5b 5d c3 cc cc cc cc e8 b3 b7 5a ff 90 <0f> 0b 90 eb d9 48 89 df e8 95 8f c1 ff eb c0 0f 1f 00 90 90 90 90 [ 1403.114970][T20147] RSP: 0018:ffffc90003e9f7d8 EFLAGS: 00010293 [ 1403.121043][T20147] RAX: 0000000000000000 RBX: ffff88806b495c30 RCX: ffffffff82616458 [ 1403.129169][T20147] RDX: ffff88802acea440 RSI: ffffffff8261647d RDI: 0000000000000005 [ 1403.137184][T20147] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1403.145889][T20147] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888061307c00 [ 1403.153896][T20147] R13: ffff88802508d038 R14: 0000000000000000 R15: ffff88802508d030 [ 1403.161887][T20147] FS: 0000000000000000(0000) GS:ffff888124853000(0000) knlGS:0000000000000000 [ 1403.170852][T20147] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1403.177466][T20147] CR2: 00007f8690b98945 CR3: 0000000048b19000 CR4: 00000000003526f0 [ 1403.185482][T20147] Call Trace: [ 1403.188763][T20147] [ 1403.191855][T20147] kernfs_get+0x1f/0x30 [ 1403.196291][T20147] kobject_add_internal+0x353/0x9b0 [ 1403.201499][T20147] ? kobject_add+0xc1/0x240 [ 1403.206062][T20147] kobject_add+0x16e/0x240 [ 1403.210491][T20147] ? __pfx_kobject_add+0x10/0x10 [ 1403.215470][T20147] ? kobject_put+0xab/0x5a0 [ 1403.219991][T20147] ? device_add+0x24f/0x1a70 [ 1403.224707][T20147] device_add+0x288/0x1a70 [ 1403.229131][T20147] ? __pfx_device_add+0x10/0x10 [ 1403.234055][T20147] ? __init_waitqueue_head+0xca/0x150 [ 1403.239475][T20147] firmware_fallback_sysfs+0x2ec/0xbe0 [ 1403.245002][T20147] _request_firmware+0xfe9/0x1470 [ 1403.250048][T20147] ? __pfx__request_firmware+0x10/0x10 [ 1403.255537][T20147] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1403.261355][T20147] ? debug_object_deactivate+0x1ec/0x3a0 [ 1403.267029][T20147] ? finish_task_switch.isra.0+0x221/0xc10 [ 1403.272849][T20147] request_firmware_work_func+0xea/0x250 [ 1403.278734][T20147] ? __pfx_request_firmware_work_func+0x10/0x10 [ 1403.285002][T20147] ? rcu_is_watching+0x12/0xc0 [ 1403.289784][T20147] process_one_work+0x9cc/0x1b70 [ 1403.294921][T20147] ? __pfx_process_one_work+0x10/0x10 [ 1403.300313][T20147] ? assign_work+0x1a0/0x250 [ 1403.305136][T20147] worker_thread+0x6c8/0xf10 [ 1403.309761][T20147] ? __kthread_parkme+0x19e/0x250 [ 1403.314840][T20147] ? __pfx_worker_thread+0x10/0x10 [ 1403.315914][ T9029] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1403.319942][T20147] kthread+0x3c2/0x780 [ 1403.330335][T20147] ? __pfx_kthread+0x10/0x10 [ 1403.334975][T20147] ? rcu_is_watching+0x12/0xc0 [ 1403.339749][T20147] ? __pfx_kthread+0x10/0x10 [ 1403.344397][T20147] ret_from_fork+0x5d4/0x6f0 [ 1403.344663][ T9029] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1403.348989][T20147] ? __pfx_kthread+0x10/0x10 [ 1403.349012][T20147] ret_from_fork_asm+0x1a/0x30 [ 1403.367174][T20147] [ 1403.369962][ T9029] usb 5-1: USB disconnect, device number 60 [ 1403.370184][T20147] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1403.370199][T20147] CPU: 1 UID: 0 PID: 20147 Comm: kworker/1:2 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(full) [ 1403.370220][T20147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1403.370231][T20147] Workqueue: events request_firmware_work_func [ 1403.370254][T20147] Call Trace: [ 1403.370261][T20147] [ 1403.370268][T20147] dump_stack_lvl+0x3d/0x1f0 [ 1403.370294][T20147] panic+0x71c/0x800 [ 1403.370317][T20147] ? __pfx_panic+0x10/0x10 [ 1403.370340][T20147] ? show_trace_log_lvl+0x29b/0x3e0 [ 1403.370370][T20147] ? check_panic_on_warn+0x1f/0xb0 [ 1403.370395][T20147] ? kernfs_get.part.0+0x6e/0x80 [ 1403.370418][T20147] check_panic_on_warn+0xab/0xb0 [ 1403.370442][T20147] __warn+0xf6/0x3c0 [ 1403.370464][T20147] ? kernfs_get.part.0+0x6e/0x80 [ 1403.370487][T20147] report_bug+0x3c3/0x580 [ 1403.370508][T20147] ? kernfs_get.part.0+0x6e/0x80 [ 1403.370530][T20147] handle_bug+0x184/0x210 [ 1403.370547][T20147] exc_invalid_op+0x17/0x50 [ 1403.370562][T20147] asm_exc_invalid_op+0x1a/0x20 [ 1403.370578][T20147] RIP: 0010:kernfs_get.part.0+0x6e/0x80 [ 1403.370600][T20147] Code: 18 b3 5a ff 85 ed 74 1c e8 cf b7 5a ff be 04 00 00 00 48 89 df e8 b2 97 c1 ff f0 ff 03 5b 5d c3 cc cc cc cc e8 b3 b7 5a ff 90 <0f> 0b 90 eb d9 48 89 df e8 95 8f c1 ff eb c0 0f 1f 00 90 90 90 90 [ 1403.370615][T20147] RSP: 0018:ffffc90003e9f7d8 EFLAGS: 00010293 [ 1403.370628][T20147] RAX: 0000000000000000 RBX: ffff88806b495c30 RCX: ffffffff82616458 [ 1403.370639][T20147] RDX: ffff88802acea440 RSI: ffffffff8261647d RDI: 0000000000000005 [ 1403.370650][T20147] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1403.370659][T20147] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888061307c00 [ 1403.370670][T20147] R13: ffff88802508d038 R14: 0000000000000000 R15: ffff88802508d030 [ 1403.370687][T20147] ? kernfs_get.part.0+0x48/0x80 [ 1403.370707][T20147] ? kernfs_get.part.0+0x6d/0x80 [ 1403.370732][T20147] ? kernfs_get.part.0+0x6d/0x80 [ 1403.370753][T20147] kernfs_get+0x1f/0x30 [ 1403.370774][T20147] kobject_add_internal+0x353/0x9b0 [ 1403.370789][T20147] ? kobject_add+0xc1/0x240 [ 1403.370807][T20147] kobject_add+0x16e/0x240 [ 1403.370823][T20147] ? __pfx_kobject_add+0x10/0x10 [ 1403.370841][T20147] ? kobject_put+0xab/0x5a0 [ 1403.370866][T20147] ? device_add+0x24f/0x1a70 [ 1403.370885][T20147] device_add+0x288/0x1a70 [ 1403.370902][T20147] ? __pfx_device_add+0x10/0x10 [ 1403.370915][T20147] ? __init_waitqueue_head+0xca/0x150 [ 1403.370942][T20147] firmware_fallback_sysfs+0x2ec/0xbe0 [ 1403.370968][T20147] _request_firmware+0xfe9/0x1470 [ 1403.370996][T20147] ? __pfx__request_firmware+0x10/0x10 [ 1403.371016][T20147] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1403.371039][T20147] ? debug_object_deactivate+0x1ec/0x3a0 [ 1403.371063][T20147] ? finish_task_switch.isra.0+0x221/0xc10 [ 1403.371100][T20147] request_firmware_work_func+0xea/0x250 [ 1403.371121][T20147] ? __pfx_request_firmware_work_func+0x10/0x10 [ 1403.371143][T20147] ? rcu_is_watching+0x12/0xc0 [ 1403.371166][T20147] process_one_work+0x9cc/0x1b70 [ 1403.371192][T20147] ? __pfx_process_one_work+0x10/0x10 [ 1403.371215][T20147] ? assign_work+0x1a0/0x250 [ 1403.371243][T20147] worker_thread+0x6c8/0xf10 [ 1403.371266][T20147] ? __kthread_parkme+0x19e/0x250 [ 1403.371289][T20147] ? __pfx_worker_thread+0x10/0x10 [ 1403.371305][T20147] kthread+0x3c2/0x780 [ 1403.371322][T20147] ? __pfx_kthread+0x10/0x10 [ 1403.371339][T20147] ? rcu_is_watching+0x12/0xc0 [ 1403.371358][T20147] ? __pfx_kthread+0x10/0x10 [ 1403.371374][T20147] ret_from_fork+0x5d4/0x6f0 [ 1403.371395][T20147] ? __pfx_kthread+0x10/0x10 [ 1403.371411][T20147] ret_from_fork_asm+0x1a/0x30 [ 1403.371439][T20147] [ 1403.376219][T20147] Kernel Offset: disabled