last executing test programs: 21m15.171075175s ago: executing program 2 (id=479): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c80)={0x18, &(0x7f0000000a00)={0x20, 0x7, 0x4, "99f70d04"}, 0x0, 0x0, 0x0, 0x0}) 21m12.613294083s ago: executing program 2 (id=486): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21m10.715270853s ago: executing program 2 (id=510): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000300)="3b997cb14adc5bc5894a75631e", 0xd}, {&(0x7f0000000000)="79f70a1f30b7c7c444dcb5c8e46c66d057a986", 0x13}], 0x2) 21m10.587663413s ago: executing program 2 (id=511): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 21m10.50951697s ago: executing program 2 (id=513): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x30, 0x0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'batadv_slave_1\x00'}}]}]}, 0x30}}, 0x0) 21m10.237162514s ago: executing program 2 (id=518): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x18, &(0x7f00000002c0)={0x0, 0xb, 0x1, 'b'}, 0x0, 0x0, 0x0, 0x0}) 21m10.111057599s ago: executing program 32 (id=518): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x18, &(0x7f00000002c0)={0x0, 0xb, 0x1, 'b'}, 0x0, 0x0, 0x0, 0x0}) 13m20.176585641s ago: executing program 0 (id=2106): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) syz_io_uring_setup(0x496, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010001fff00000000010000000000000083a23c4b125cd0cb66020d0dec68bdf2f631705b10ab2e1b4a166191b5a7a4bfb6e20d6413681b077a038ce5c447474bc4ded41e830e7eaf8371896209e2c8497aec4f52835c383b03ecc1a9be540ed47aa8228efe02cfe92a861419d5ec06bcf215d820515338549b3dad61ffbd7400e8db8093ea7b4a62b71fe7ec5f7169d937e5ebd0be5b8952dacb9aea7dff24e519", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3c000000100003042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000500000000000014003500776c616e30000000000000000000000008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r7) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c0001000000080007000100000008000600000100000800050002000000080013007cc4000008000d000400000005000b000400000008000e0081000000080006"], 0x74}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) r9 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x6, 0x10000, 0x800000, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0xfffffffffffffffe, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x241000}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x74000000) 13m17.743158706s ago: executing program 0 (id=2110): mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xa, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00ca67807e24000000000000000000000000040000000000078945721ef1c1d809017dc923e8ebc946a86a0881fe00fbc8cfd329d09d7d833090b76f2caf9a0c1d9a67a2e860fad37eb452bf2c55f42389a72d39b3880fcf6403b1a522f888e02a26c18f9cdc46a142c0b48b4419acc3d52a57e8e182ceb293dcf939903e9b114015e05ab9e0bc51b4c27cb3717f42869155aa7367c2493b62adca88455be16a9b0072bd4e50092bf9cd3f357b0aad55f147b605bdfde694b42eff254966b069b9d69b7e040b585f8fbe6e34aae60c14a55c71cd6001", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES8=r4, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000e000"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9a", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x20, 0x6) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f0000000100)='jfs\x00', 0x400080, &(0x7f00000001c0)='discard') syz_open_dev$ptys(0xc, 0x3, 0x1) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r6, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 13m16.776286482s ago: executing program 0 (id=2115): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 13m12.309262675s ago: executing program 0 (id=2128): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) syz_io_uring_setup(0x496, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010001fff00000000010000000000000083a23c4b125cd0cb66020d0dec68bdf2f631705b10ab2e1b4a166191b5a7a4bfb6e20d6413681b077a038ce5c447474bc4ded41e830e7eaf8371896209e2c8497aec4f52835c383b03ecc1a9be540ed47aa8228efe02cfe92a861419d5ec06bcf215d820515338549b3dad61ffbd7400e8db8093ea7b4a62b71fe7ec5f7169d937e5ebd0be5b8952dacb9aea7dff24e519", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3c000000100003042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000500000000000014003500776c616e30000000000000000000000008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r7) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c0001000000080007000100000008000600000100000800050002000000080013007cc4000008000d000400000005000b000400000008000e0081000000080006"], 0x74}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) r9 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x6, 0x10000, 0x800000, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0xfffffffffffffffe, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x241000}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000080)=0x74000000) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000100)) 13m6.791391331s ago: executing program 0 (id=2136): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00001800010061119800000000001800000000000000000000000000000095000000000000"], 0x0}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x10) mkdir(0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) r5 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000085000000070000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r3}, 0x94) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x33}}) 13m4.818120687s ago: executing program 0 (id=2143): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x1) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000180)=0x10, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019300)={0x11, 0x4, &(0x7f000001a5c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_getscheduler(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000300)=""/102392, 0x18ff8) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) socket(0x29, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x810) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000080)={{0x2, 0x4e23, @multicast2}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, 0x8, {0x2, 0x4ea2, @remote}, 'syz_tun\x00'}) 12m49.073203021s ago: executing program 33 (id=2143): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x1) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000180)=0x10, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019300)={0x11, 0x4, &(0x7f000001a5c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_getscheduler(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000300)=""/102392, 0x18ff8) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) socket(0x29, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x810) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000080)={{0x2, 0x4e23, @multicast2}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, 0x8, {0x2, 0x4ea2, @remote}, 'syz_tun\x00'}) 8m49.287859455s ago: executing program 1 (id=2768): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) syz_io_uring_setup(0x496, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYBLOB="01000000000000001c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010001fff00000000010000000000000083a23c4b125cd0cb66020d0dec68bdf2f631705b10ab2e1b4a166191b5a7a4bfb6e20d6413681b077a038ce5c447474bc4ded41e830e7eaf8371896209e2c8497aec4f52835c383b03ecc1a9be540ed47aa8228efe02cfe92a861419d5ec06bcf215d820515338549b3dad61ffbd7400e8db8093ea7b4a62b71fe7ec5f7169d937e5ebd0be5b8952dacb9aea7dff24e519", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3c000000100003042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000500000000000014003500776c616e30000000000000000000000008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r8) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c0001000000080007000100000008000600000100000800050002000000080013007cc4000008000d000400000005000b000400000008000e0081000000080006"], 0x74}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) r10 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x6, 0x10000, 0x800000, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0xfffffffffffffffe, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x241000}) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x74000000) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000100)) 8m46.168774235s ago: executing program 1 (id=2775): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) brk(0x9d1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYRES32=0x0], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1d, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) 8m44.33925887s ago: executing program 1 (id=2777): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00118008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10000, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000080)=0xf, 0x4) ioctl$COMEDI_CANCEL(r1, 0x6407) 8m44.129216326s ago: executing program 1 (id=2781): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = open(0x0, 0x80083, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) setsockopt$ax25_int(r2, 0x101, 0x1, 0x0, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000040)={{0x0, 0x3, 0x0, 0x0, 0x4}}) write$tcp_mem(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r7, 0x80585414, &(0x7f00000001c0)) fcntl$setsig(r1, 0xa, 0x40000021) write$dsp(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) 8m42.914855141s ago: executing program 1 (id=2787): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x42002) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x2, @tick=0x7ffe, 0x7, {0x3, 0xbb}, 0x3d, 0x2, 0x9}) 8m41.992239207s ago: executing program 1 (id=2789): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='3', 0x1}], 0x1) syz_emit_ethernet(0xfc1, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xfb3, 0x0, 0x0, 0x0, 0x84, 0x0, @empty, @broadcast}, "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"}}}}, 0x0) io_uring_setup(0x2bba, &(0x7f0000000000)={0x0, 0xc376, 0x8000, 0x0, 0x388}) 8m26.501823584s ago: executing program 34 (id=2789): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='3', 0x1}], 0x1) syz_emit_ethernet(0xfc1, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xfb3, 0x0, 0x0, 0x0, 0x84, 0x0, @empty, @broadcast}, "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"}}}}, 0x0) io_uring_setup(0x2bba, &(0x7f0000000000)={0x0, 0xc376, 0x8000, 0x0, 0x388}) 12.329424886s ago: executing program 7 (id=4319): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x20000006, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x7, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0xfffffffe, 0x400, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x35, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x200025, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0xffff, 0x6, 0x96, 0x9, 0x2, 0x0, 0x200, 0x401, 0xc, 0x2, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x5, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0x5, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x6, 0x5, 0x80, 0x9, 0x7ffe, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0xfffffffc, 0x8, 0x3, 0x3ff, 0x20000006, 0x9, 0x95e, 0xffffffff, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x10002, 0x3, 0x3, 0x88, 0x2, 0xffffff80, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xfffff734, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x82, 0x44, 0x409, 0x3, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x1f3, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r7, 0x5501) readv(r7, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r2, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r2, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x8, 0xf}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x11ca0a1}, 0xc, &(0x7f0000000180)={&(0x7f0000002d40)=ANY=[@ANYBLOB="902500001200020028bd7000fedbdf25260080204e234e200000010004000000ff070000080000000000000c060000000200000004000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x2590}, 0x1, 0x0, 0x0, 0xc814}, 0x0) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) 11.449658416s ago: executing program 7 (id=4323): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) 10.270203514s ago: executing program 7 (id=4328): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r2, 0x6, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x20000000, 0xfffffffc, 0x7ff}}]}, {0x4}, {0x2, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 9.09068916s ago: executing program 3 (id=4334): fanotify_init(0x200, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000880)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x8, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0xa, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c57, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x9, 0x4c74, 0x0, 0x7, 0x2, 0xe, 0x0, 0x400, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0xffff8001, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0x388000, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2b, 0xe, 0x312, 0x78, 0xea4, 0x0, 0xfff, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xf, 0xd86, 0x2, 0x4, 0x8, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x2, 0x200004, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x8, 0x8, 0x86, 0x3, 0x3038, 0xff, 0xb, 0x2, 0x2, 0x2, 0x7, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0xf, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x7, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x3, 0x5, 0x1b, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x80000000], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x1, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x3, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x10200016, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x3, 0x100, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x4, 0x6c1b, 0x8, 0x4, 0x5, 0x40b1e, 0xd7, 0x200, 0xffff3441, 0x4]}, 0x45c) read$eventfd(r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @ptr={0x0, 0x0, 0x0, 0x10, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x46}, 0x28) r5 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r5, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x40010102) syz_open_dev$vim2m(&(0x7f00000000c0), 0x5, 0x2) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x24, 0x0, 0x1, 0xffffffff, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x24}}, 0x0) 8.37061196s ago: executing program 7 (id=4335): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x88203, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x18, 0x3, 0x1) r5 = syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65d, 0x100, 0x8, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x10000, 0x0, {0x3, r8}}) io_uring_enter(r5, 0x47f6, 0xb277, 0x0, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a00100000000290000012", 0x2d}], 0x1}, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) get_mempolicy(0x0, 0x0, 0x481, &(0x7f000000d000/0x4000)=nil, 0x3) 7.833670135s ago: executing program 5 (id=4338): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) 7.265744987s ago: executing program 3 (id=4340): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0x541b, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) unshare(0x6a040000) r2 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r2, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000004a80)=""/4083, 0xff3}], 0x1}}], 0x1, 0x0, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}) ioctl$FBIOGET_FSCREENINFO(r7, 0x4602, &(0x7f0000000080)) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000004980)=[{&(0x7f00000034c0)="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", 0xfed}], 0x1}}], 0x1, 0x9200000000000004) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x9, 0x402) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 6.894178307s ago: executing program 6 (id=4341): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) read$hidraw(r2, &(0x7f0000002340)=""/147, 0x93) set_mempolicy(0x3, 0x0, 0xf9) r3 = fsopen(0x0, 0x0) fsmount(r3, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) 6.841744458s ago: executing program 5 (id=4342): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$alg(0x26, 0x5, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x121041, 0x0) fanotify_init(0xf00, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYRES64=r4], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x74, 0x0, 0x1, 0x72bd25, 0x25cfdbfe, {{}, {@void, @val={0xc, 0x99, {0xb7, 0xc}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e9ad6b8e4528"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}], @NL80211_ATTR_SSID={0x24, 0x34, @random="de6e3e04cec86c45dbc7d832bda304206143a4e84d682ce4fd53e46588f496aa"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x880) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f00000000c0)=0x32) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000a00)=0xd0) ioctl$SG_EMULATED_HOST(r4, 0x2203, &(0x7f0000000600)) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2000c450) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x24000850}, 0x24000840) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500142f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa000022eb53"], 0x0) sendto$inet6(r1, &(0x7f0000000480)="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", 0x79, 0x4000071, 0x0, 0x6a) 6.269186461s ago: executing program 7 (id=4343): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f0000000200)={0x0, 0x9ec, 0xcf, 0x5252}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@deltaction={0x24, 0x31, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x75, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}]}, 0x24}}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000003c0)={0x10000000, "8e17c9d0301b577c5708ab70d5011f82bcc14007f8f5cdec151e2a29dd1567ae"}) mkdir(&(0x7f0000000440)='./file1\x00', 0x20) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x1, 'client1\x00', 0xffffffff80000006, "d62e360d8f9179cf", "20e48560999fd132bff0000000000000000000000000000000000200", 0x7fffffff}) write$sndseq(r2, &(0x7f0000000340)=[{0x5, 0x1, 0x0, 0x0, @time, {}, {0x0, 0x81}, @connect={{0x6, 0x3}, {0xf9, 0x8}}}], 0x1c) quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000700, 0x0, &(0x7f0000000080)) 6.20187732s ago: executing program 7 (id=4344): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x1, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) 6.151081233s ago: executing program 5 (id=4345): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r2, 0x6, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x20000000, 0xfffffffc, 0x7ff}}]}, {0x4}, {0x2, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 5.908635931s ago: executing program 4 (id=4346): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e) close_range(r4, 0xffffffffffffffff, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, 0x0, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 4.430929939s ago: executing program 5 (id=4347): socket$inet6(0xa, 0x1, 0x8010000000000084) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0xb68, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) fsopen(&(0x7f0000000040)='cgroup\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rxrpc(0x21, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x42701, 0x192) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 4.196195317s ago: executing program 4 (id=4348): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) syz_io_uring_setup(0x496, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010001fff00000000010000000000000083a23c4b125cd0cb66020d0dec68bdf2f631705b10ab2e1b4a166191b5a7a4bfb6e20d6413681b077a038ce5c447474bc4ded41e830e7eaf8371896209e2c8497aec4f52835c383b03ecc1a9be540ed47aa8228efe02cfe92a861419d5ec06bcf215d820515338549b3dad61ffbd7400e8db8093ea7b4a62b71fe7ec5f7169d937e5ebd0be5b8952dacb9aea7dff24e5", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3c000000100003042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000500000000000014003500776c616e30000000000000000000000008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r8) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c0001000000080007000100000008000600000100000800050002000000080013007cc4000008000d000400000005000b000400000008000e0081000000080006"], 0x74}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) r10 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x6, 0x10000, 0x800000, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0xfffffffffffffffe, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x241000}) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x74000000) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000100)) 3.893810395s ago: executing program 3 (id=4349): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000001fc0)={@random="e90c610faca2", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x18, 0x0, @gue={{0x2, 0x1, 0x3, 0xc, 0x100}, "6788bdec07fb462f"}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000002140)=ANY=[@ANYBLOB="0180c200000ebbbbbbbbbbbb08004500001c00000002001190"], 0x0) 3.771788974s ago: executing program 5 (id=4350): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000040)={0x7, 0x20008b}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/19, @ANYRES32=r3, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x4008032, r0, 0x0) madvise(&(0x7f0000660000/0x2000)=nil, 0x2000, 0xc) r4 = syz_clone3(&(0x7f0000000340)={0x201180, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x19, 0x0, 0x0}, 0x58) get_robust_list(r4, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8060}, 0x4000040) read$msr(0xffffffffffffffff, &(0x7f000001aa40)=""/102400, 0x19000) syz_open_dev$sndctrl(0x0, 0x2, 0x4002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0}, 0x94) r5 = inotify_init() r6 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) poll(&(0x7f00000002c0)=[{r6, 0x2069}], 0x1, 0x100) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000280)={0x1, 0x0, [{0x40000118, 0x0, 0x2}]}) close_range(r5, 0xffffffffffffffff, 0x0) getrlimit(0x8, &(0x7f0000000080)) 3.669421869s ago: executing program 6 (id=4351): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) syz_io_uring_setup(0x496, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000000", @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010001fff00000000010000000000000083a23c4b125cd0cb66020d0dec68bdf2f631705b10ab2e1b4a166191b5a7a4bfb6e20d6413681b077a038ce5c447474bc4ded41e830e7eaf8371896209e2c8497aec4f52835c383b03ecc1a9be540ed47aa8228efe02cfe92a861419d5ec06bcf215d820515338549b3dad61ffbd7400e8db8093ea7b4a62b71fe7ec5f7169d937e5ebd0be5b8952dacb9aea7dff24e519", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3c000000100003042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000500000000000014003500776c616e30000000000000000000000008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r8) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c0001000000080007000100000008000600000100000800050002000000080013007cc4000008000d000400000005000b000400000008000e0081000000080006"], 0x74}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) r10 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x6, 0x10000, 0x800000, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0xfffffffffffffffe, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x241000}) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x74000000) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000100)) 2.682667692s ago: executing program 4 (id=4352): syz_io_uring_setup(0x29b0, &(0x7f0000000700)={0x0, 0x695d, 0x10000, 0x0, 0x1fb}, &(0x7f0000000080), &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000400000001000000090000000013a7feee55a430000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r3, @ANYBLOB="000000000000000018100000", @ANYRES32=r4, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f0000000200), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r5, 0x9, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c010000190001000000000001000000fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000080000005dec6de50d000000000000000000000000020000000000000000010000000000c4000500ac1414aa0000000000000000000000000000000033000000000000000a01010000000000000000000000000000000000000000000000000000000000400000007f000001000000ff0000000000000000000000006c00000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000ffee0001000000003c0000000a000000fc000000000000000000000000000000000000000500"/303], 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03c90000d61ee10ee7e786926e403d4adbb1abd5f2aa170969ac3cd123623a345b31520fa654f580"], 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000002000000", 0xfe60) 2.640559451s ago: executing program 3 (id=4353): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x88203, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x18, 0x3, 0x1) r5 = syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65d, 0x100, 0x8, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x10000, 0x0, {0x3, r8}}) io_uring_enter(r5, 0x47f6, 0xb277, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a00100000000290000012", 0x2d}], 0x1}, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) socket$nl_netfilter(0x10, 0x3, 0xc) get_mempolicy(0x0, 0x0, 0x481, &(0x7f000000d000/0x4000)=nil, 0x3) 1.681596637s ago: executing program 4 (id=4354): openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) syz_io_uring_setup(0x496, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010001fff00000000010000000000000083a23c4b125cd0cb66020d0dec68bdf2f631705b10ab2e1b4a166191b5a7a4bfb6e20d6413681b077a038ce5c447474bc4ded41e830e7eaf8371896209e2c8497aec4f52835c383b03ecc1a9be540ed47aa8228efe02cfe92a861419d5ec06bcf215d820515338549b3dad61ffbd7400e8db8093ea7b4a62b71fe7ec5f7169d937e5ebd0be5b8952dacb9aea7dff24e519", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3c000000100003042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000500000000000014003500776c616e30000000000000000000000008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r6) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c0001000000080007000100000008000600000100000800050002000000080013007cc4000008000d000400000005000b000400000008000e0081000000080006"], 0x74}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x6, 0x10000, 0x800000, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0xfffffffffffffffe, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x241000}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 1.445508897s ago: executing program 6 (id=4355): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$alg(0x26, 0x5, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x121041, 0x0) fanotify_init(0xf00, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYRES64=r4], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x74, 0x0, 0x1, 0x72bd25, 0x25cfdbfe, {{}, {@void, @val={0xc, 0x99, {0xb7, 0xc}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e9ad6b8e4528"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}], @NL80211_ATTR_SSID={0x24, 0x34, @random="de6e3e04cec86c45dbc7d832bda304206143a4e84d682ce4fd53e46588f496aa"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x880) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f00000000c0)=0x32) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000a00)=0xd0) ioctl$SG_EMULATED_HOST(r4, 0x2203, &(0x7f0000000600)) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2000c450) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000050900020073797a32000000001c000480180001800d00010073796e568e96df868acac400040002800900010073797a3100000000140000001100010000000000000000000e00000accb7cff73126b86c5723b95ae8ddec169d7f77d9c135367d8e97ee7f02e31ba2d880d8d8f50f2c55fd315179af0f31f610bb43210d8f85f25d28b918fe6be65cebfaaf139012b5a8d3aae59a22c479c6f65bb0844283132f2595dd5077d1f9bcfd8ca63f366ce586285f255c89efb70b0d7495b24feafbfcb45b7d2a1c1cab716b947efb97072b09cac2bfc2c324213ffb32bedf93b9c1444a6f4f29dab28613a3fc29e36b637caf982247e0462512db54e8678a5e31989cdbfc86b4fc39f8d09d9d14622d94c57220bb6fcb9e9cdc33d899bfaef319d1485561c751541a3b4495cdd1801d108b9f95008500db2f22db6db075a84152bc4afcc03b8ce36f74974948e205628dbb0c9c144533adce38a22e99512625b2328fb2b746af82affe68abfbd2791af525dcbbebbaccde184a77e72d3635919a833d447966a3d0960e0b932c0d197bda729c8fc5bdd7e362b425796bf54260f95e30b466bf8ff48de71a5e6154cd742e6a90743793c19fcc2fc7766f430ec1fb126d2c0cc79a3cd762ea2ba7af1fb5bdfda98ae56ca32d8a199c787e78a783892d87dc48ab526acc9d7a9a4ad2d555ca7c07e8ab0070b1d3ac333191bd978c6c9d37d38237baf7efb08534e33b56618bb81bf4c07639ef5023ba138f0a665282dfe6b003cf3d4b9bfcaca3c1dffa2e22d9dc165754e1df40ef7b1b7dad2c251cb1e5b59eaa3f1157e774b38411ac2c5afd6b470c9a1c45de034a389cf0a49ade0ecb731f427a77f06cf7fa377eb1ffbaf285fb249b6020115be35d1b224bb4ca9c23b1eb66f2cdad6e703fb25d525334769f1f0f28bac8667c09f92f195ae97550fbf45572f9a2a57b4e10e539793608aa76ebe5f1bf39930d70cc45896060a1307ab4cf2e5221249f295b0d2de16f5926bcda2b4e8c0abdd58d4a417937c39fe695f0e5b19e48c20e5bc91e5583ea8469efea88d6b223a2f96f2f5e"], 0x70}, 0x1, 0x0, 0x0, 0x24000850}, 0x24000840) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500142f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa000022eb53"], 0x0) sendto$inet6(r1, &(0x7f0000000480)="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", 0x79, 0x4000071, 0x0, 0x6a) 646.915827ms ago: executing program 5 (id=4356): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') read$FUSE(r3, 0x0, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000000c0)={0x3, 0x953}) write$sndseq(r2, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8) 314.702791ms ago: executing program 4 (id=4357): syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r0 = syz_open_dev$vbi(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='projid_map\x00') pselect6(0x40, &(0x7f00000000c0)={0x6, 0xfffffffffffffffd, 0x9, 0x40, 0x2, 0xd}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x5, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0x8}, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x2) 259.408617ms ago: executing program 6 (id=4358): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f0000000200)={0x0, 0x9ec, 0xcf, 0x5252}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@deltaction={0x24, 0x31, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x24}}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000003c0)={0x10000000, "8e17c9d0301b577c5708ab70d5011f82bcc14007f8f5cdec151e2a29dd1567ae"}) mkdir(&(0x7f0000000440)='./file1\x00', 0x20) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x1, 'client1\x00', 0xffffffff80000006, "d62e360d8f9179cf", "20e48560999fd132bff0000000000000000000000000000000000200", 0x7fffffff}) write$sndseq(r2, &(0x7f0000000340)=[{0x5, 0x1, 0x0, 0x0, @time, {}, {0x0, 0x81}, @connect={{0x6, 0x3}, {0xf9, 0x8}}}], 0x1c) quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000700, 0x0, &(0x7f0000000080)) 258.568257ms ago: executing program 3 (id=4359): mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0xffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) read$FUSE(r0, &(0x7f000000a380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000006c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004900)="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", 0x2000, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x78, 0x0, 0xfffffffffffffffd, {0xc, 0x40010, 0x0, {0x3, 0x6, 0x4030cf7f, 0x8000000000000001, 0x6a2, 0x4, 0x80000000, 0x9, 0xe29, 0x8000, 0xfffffffe, 0x0, 0x0, 0x7fdfffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(r2, 0x0, 0x2) 141.812428ms ago: executing program 3 (id=4360): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) 85.388354ms ago: executing program 4 (id=4361): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f00000000c0)=[{0x1e, 0x6000, 0x0, 0x0}, {0x6, 0x4001, 0x0, 0x0}], 0x2}) 61.93631ms ago: executing program 6 (id=4362): socket(0x1e, 0x4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) shmget$private(0x0, 0xc00000, 0x1000, &(0x7f00003fd000/0xc00000)=nil) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000005a001f001007f4d655c63589ce9e04020800038005000000ffc8bbb86ec81ffd", 0x24) 0s ago: executing program 6 (id=4363): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) syz_io_uring_setup(0x496, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010001fff00000000010000000000000083a23c4b125cd0cb66020d0dec68bdf2f631705b10ab2e1b4a166191b5a7a4bfb6e20d6413681b077a038ce5c447474bc4ded41e830e7eaf8371896209e2c8497aec4f52835c383b03ecc1a9be540ed47aa8228efe02cfe92a861419d5ec06bcf215d820515338549b3dad61ffbd7400e8db8093ea7b4a62b71fe7ec5f7169d937e5ebd0be5b8952dacb9aea7dff24e519", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x8000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r8) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c0001000000080007000100000008000600000100000800050002000000080013007cc4000008000d000400000005000b000400000008000e0081000000080006"], 0x74}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) r10 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x6, 0x10000, 0x800000, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0xfffffffffffffffe, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x241000}) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x74000000) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000100)) kernel console output (not intermixed with test programs): ce number 24 [ 1274.511669][T19824] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3700'. [ 1274.555659][ T5137] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 1274.748752][ T5137] Bluetooth: hci0: command 0x0c1a tx timeout [ 1274.824339][T19380] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 1274.857983][T19830] JFS: discard option not supported on device [ 1274.865733][T19830] Mount JFS Failure: -22 [ 1274.870042][T19830] jfs_mount failed w/return code = -22 [ 1274.994593][T19380] usb 7-1: Using ep0 maxpacket: 8 [ 1275.160039][T19380] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1275.191168][T19380] usb 7-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1275.205249][T19380] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.264545][T19380] usb 7-1: Product: syz [ 1275.268836][T19380] usb 7-1: Manufacturer: syz [ 1275.273474][T19380] usb 7-1: SerialNumber: syz [ 1275.348538][T19380] usb 7-1: config 0 descriptor?? [ 1276.331159][ T5137] Bluetooth: hci1: command 0x0c1a tx timeout [ 1276.368489][T19380] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1277.437112][T19380] gspca_zc3xx: reg_w_i err -110 [ 1277.890423][T19848] netlink: 'syz.6.3707': attribute type 1 has an invalid length. [ 1277.949248][T19850] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3707'. [ 1278.073196][T19848] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1278.125942][T19851] bond11: (slave wlan0): Enslaving as an active interface with a down link [ 1278.393583][T19380] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1278.444083][T19380] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1278.606118][T19380] usb 7-1: USB disconnect, device number 75 [ 1278.930390][T19854] input: syz1 as /devices/virtual/input/input146 [ 1279.694354][T19380] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1279.750479][T19874] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1279.754356][ T5891] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1279.778768][T19874] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3705'. [ 1279.802094][T19874] bond5: (slave wlan0): Enslaving as an active interface with an up link [ 1279.824516][T10402] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 1279.834838][T19504] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1280.084314][T19380] usb 6-1: Using ep0 maxpacket: 8 [ 1280.662249][T19380] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1280.673106][T19380] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1280.682738][T19380] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.693355][T19380] usb 6-1: Product: syz [ 1280.697947][T10402] usb 7-1: Using ep0 maxpacket: 8 [ 1280.704060][T19380] usb 6-1: Manufacturer: syz [ 1280.708756][T19380] usb 6-1: SerialNumber: syz [ 1280.804337][T19504] usb 5-1: Using ep0 maxpacket: 16 [ 1280.816706][T10402] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1280.826078][T19380] usb 6-1: config 0 descriptor?? [ 1280.833258][T10402] usb 7-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1280.842863][T19504] usb 5-1: config 5 has an invalid interface number: 164 but max is 1 [ 1280.852409][T19380] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1280.859076][ T5891] usb 8-1: Using ep0 maxpacket: 8 [ 1280.864211][T10402] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.872369][T19504] usb 5-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 1280.888386][T10402] usb 7-1: Product: syz [ 1280.896034][ T5891] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1280.907947][T19504] usb 5-1: config 5 has an invalid interface number: 121 but max is 1 [ 1280.918851][T10402] usb 7-1: Manufacturer: syz [ 1280.930936][T19880] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3714'. [ 1280.962092][T10402] usb 7-1: SerialNumber: syz [ 1280.975059][ T5891] usb 8-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1280.987860][T19504] usb 5-1: config 5 has no interface number 0 [ 1280.999394][T16490] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 1280.999766][ T5891] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.031490][T19504] usb 5-1: config 5 has no interface number 1 [ 1281.040199][T19504] usb 5-1: config 5 interface 121 altsetting 21 endpoint 0x2 has an invalid bInterval 130, changing to 7 [ 1281.054115][ T5891] usb 8-1: Product: syz [ 1281.074095][ T5891] usb 8-1: Manufacturer: syz [ 1281.080673][T19504] usb 5-1: config 5 interface 121 altsetting 21 has an invalid descriptor for endpoint zero, skipping [ 1281.102211][T10402] usb 7-1: config 0 descriptor?? [ 1281.128024][ T5891] usb 8-1: SerialNumber: syz [ 1281.138856][T10402] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1281.147211][T19504] usb 5-1: config 5 interface 121 altsetting 21 has an invalid descriptor for endpoint zero, skipping [ 1281.159379][ T5891] usb 8-1: config 0 descriptor?? [ 1281.166093][T19504] usb 5-1: config 5 interface 121 altsetting 21 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1281.181011][ T5891] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1281.188614][T19504] usb 5-1: config 5 interface 121 altsetting 21 has an invalid descriptor for endpoint zero, skipping [ 1281.199815][T19504] usb 5-1: config 5 interface 121 altsetting 21 has an invalid descriptor for endpoint zero, skipping [ 1281.210973][T19504] usb 5-1: config 5 interface 121 altsetting 21 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 1281.224507][T19504] usb 5-1: config 5 interface 164 has no altsetting 0 [ 1281.231340][T19504] usb 5-1: config 5 interface 121 has no altsetting 0 [ 1281.240191][T19504] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=d1.f9 [ 1281.249578][T19504] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.257671][T19504] usb 5-1: Product: syz [ 1281.262016][T19504] usb 5-1: Manufacturer: syz [ 1281.266720][T19504] usb 5-1: SerialNumber: syz [ 1281.327186][T19380] gspca_zc3xx: reg_w_i err -71 [ 1281.482220][T19871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1281.492982][T19871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1281.507745][T19871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1281.517029][T19871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1281.542762][T19504] uvcvideo 5-1:5.164: Found UVC 0.00 device syz (046d:08c1) [ 1281.550538][T19504] uvcvideo 5-1:5.164: No valid video chain found. [ 1281.571526][T19504] usb 5-1: USB disconnect, device number 46 [ 1281.674661][T10402] gspca_zc3xx: reg_w_i err -110 [ 1281.694622][ T5891] gspca_zc3xx: reg_w_i err -110 [ 1281.858882][T19886] JFS: discard option not supported on device [ 1281.866361][T19886] Mount JFS Failure: -22 [ 1281.870648][T19886] jfs_mount failed w/return code = -22 [ 1281.914583][T19380] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1281.959141][T19380] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1282.043133][T19380] usb 6-1: USB disconnect, device number 37 [ 1282.352315][T19891] netlink: 'syz.5.3716': attribute type 1 has an invalid length. [ 1282.460475][T19894] input: syz1 as /devices/virtual/input/input147 [ 1282.593363][T19895] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3716'. [ 1282.687136][T19891] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1282.699485][T10402] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1282.868807][T19896] bond1: (slave wlan0): Releasing backup interface [ 1282.900649][ T5891] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1284.287345][T10402] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1284.299939][ T5891] gspca_zc3xx 8-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1284.318992][T10402] usb 7-1: USB disconnect, device number 76 [ 1284.326935][ T5891] usb 8-1: USB disconnect, device number 30 [ 1285.401806][T19913] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1285.409747][T19913] F2FS-fs (loop11): Can't find valid F2FS filesystem in 1th superblock [ 1285.418570][T19913] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1285.426615][T19913] F2FS-fs (loop11): Can't find valid F2FS filesystem in 2th superblock [ 1285.437819][T19913] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3724'. [ 1285.634155][T19920] input: syz1 as /devices/virtual/input/input148 [ 1286.165839][T19928] netlink: 196 bytes leftover after parsing attributes in process `syz.5.3725'. [ 1286.176183][T16490] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1286.534367][T19504] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 1286.712616][T19938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3720'. [ 1286.784573][T19940] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3720'. [ 1286.803894][T19927] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1286.916057][T19940] bond5: (slave wlan0): Releasing backup interface [ 1287.123646][T19504] usb 7-1: Using ep0 maxpacket: 8 [ 1287.446270][T19927] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1287.455564][T19504] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1287.466884][T19504] usb 7-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1287.476250][T19504] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.484307][T19504] usb 7-1: Product: syz [ 1287.488469][T19504] usb 7-1: Manufacturer: syz [ 1287.493057][T19504] usb 7-1: SerialNumber: syz [ 1287.498482][T19927] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1287.521034][T19504] usb 7-1: config 0 descriptor?? [ 1288.671626][ T5137] Bluetooth: hci0: command 0x0c1a tx timeout [ 1288.704480][T19504] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1288.711410][T19504] gspca_zc3xx: reg_w_i err -71 [ 1288.886309][T19954] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19954 comm=syz.5.3729 [ 1288.947443][T19953] netlink: 'syz.3.3731': attribute type 1 has an invalid length. [ 1289.189653][T19953] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1289.203216][T19956] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3731'. [ 1289.324378][T19504] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1289.354907][T19953] bond6: (slave wlan0): Enslaving as an active interface with a down link [ 1289.396774][T19504] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1289.532602][T19504] usb 7-1: USB disconnect, device number 77 [ 1289.549729][ T5137] Bluetooth: hci1: command 0x0c1a tx timeout [ 1290.804336][ T5137] Bluetooth: hci0: command 0x0c1a tx timeout [ 1291.037000][T19974] input: syz1 as /devices/virtual/input/input149 [ 1291.593916][T19976] input: syz1 as /devices/virtual/input/input150 [ 1291.829783][T19980] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1291.837951][T19980] F2FS-fs (loop11): Can't find valid F2FS filesystem in 1th superblock [ 1291.846588][T19980] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1291.854432][T19980] F2FS-fs (loop11): Can't find valid F2FS filesystem in 2th superblock [ 1291.877458][T19980] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3736'. [ 1292.237164][T19986] netlink: 'syz.3.3740': attribute type 1 has an invalid length. [ 1292.303182][T19989] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3740'. [ 1292.508217][T19986] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1292.626192][T19993] netlink: 196 bytes leftover after parsing attributes in process `syz.5.3739'. [ 1292.677401][ T5137] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1292.837959][T19991] bond6: (slave wlan0): Releasing active interface [ 1294.554339][T18367] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1294.724723][ T6079] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 1294.756242][T18367] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1294.831332][T18367] usb 8-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1294.905084][ T6079] usb 7-1: Using ep0 maxpacket: 8 [ 1294.981027][T20014] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3745'. [ 1295.156164][T20009] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1295.162300][T20009] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1295.168917][T20009] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1295.217892][T18367] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.234323][ T6079] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1295.443468][T18367] usb 8-1: config 0 descriptor?? [ 1295.508223][ T6079] usb 7-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1295.630007][ T6079] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.759789][ T6079] usb 7-1: Product: syz [ 1295.811470][ T6079] usb 7-1: Manufacturer: syz [ 1295.862800][ T6079] usb 7-1: SerialNumber: syz [ 1295.928910][ T6079] usb 7-1: config 0 descriptor?? [ 1296.028857][ T6079] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1296.164430][T18367] lg-g15 0003:046D:C222.005C: unbalanced delimiter at end of report description [ 1296.217793][T18367] lg-g15 0003:046D:C222.005C: probe with driver lg-g15 failed with error -22 [ 1297.259178][ T6079] gspca_zc3xx: reg_w_i err -110 [ 1297.259605][ T5137] Bluetooth: hci1: command 0x0c1a tx timeout [ 1297.274330][T16490] Bluetooth: hci0: command 0x0c1a tx timeout [ 1297.464439][T20027] netlink: 'syz.3.3748': attribute type 1 has an invalid length. [ 1297.476506][T20027] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3748'. [ 1297.850049][ T6079] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1297.906200][ T6079] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1298.056851][ T6079] usb 7-1: USB disconnect, device number 78 [ 1298.779671][ T6079] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1298.791707][T20001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1299.041991][T20001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1299.298600][T20042] input: syz1 as /devices/virtual/input/input151 [ 1299.433538][T16490] Bluetooth: hci0: command 0x0c1a tx timeout [ 1299.717456][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.766836][ T5988] usb 8-1: USB disconnect, device number 31 [ 1300.194640][T20051] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3754'. [ 1300.339427][T20048] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1300.515831][T20050] netlink: 196 bytes leftover after parsing attributes in process `syz.7.3755'. [ 1300.585193][T20053] bond8: (slave wlan0): Enslaving as an active interface with an up link [ 1302.706871][T20064] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1302.715173][T20064] F2FS-fs (loop11): Can't find valid F2FS filesystem in 1th superblock [ 1302.723839][T20064] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1302.732035][T20064] F2FS-fs (loop11): Can't find valid F2FS filesystem in 2th superblock [ 1302.754989][T20064] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3749'. [ 1303.016242][T20063] cgroup: subsys name conflicts with all [ 1303.921481][T10402] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1303.990957][T20077] Mount JFS Failure: -22 [ 1303.995303][T20077] jfs_mount failed w/return code = -22 [ 1304.998039][T10402] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1305.014338][T10402] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1305.025251][T10402] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.053004][T10402] usb 4-1: config 0 descriptor?? [ 1306.379719][T10402] usbhid 4-1:0.0: can't add hid device: -71 [ 1306.389072][T10402] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1306.419438][T10402] usb 4-1: USB disconnect, device number 25 [ 1306.436353][T16490] Bluetooth: hci1: unexpected event for opcode 0x0803 [ 1306.495271][T19504] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1306.964689][T19504] usb 8-1: Using ep0 maxpacket: 8 [ 1306.969944][T20099] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3768'. [ 1306.971415][T19504] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1307.280324][T16490] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 1307.766754][T19504] usb 8-1: string descriptor 0 read error: -71 [ 1307.780753][T19504] usb 8-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1307.789934][T19504] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.801645][T19504] usb 8-1: config 0 descriptor?? [ 1307.807396][T19504] usb 8-1: can't set config #0, error -71 [ 1307.815731][T19504] usb 8-1: USB disconnect, device number 32 [ 1308.048801][T20103] JFS: discard option not supported on device [ 1308.056069][T20103] Mount JFS Failure: -22 [ 1308.060348][T20103] jfs_mount failed w/return code = -22 [ 1308.554443][T20108] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3772'. [ 1308.590270][T20106] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1308.752978][T20109] bond3: (slave wlan0): Enslaving as an active interface with an up link [ 1309.594643][T20113] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20113 comm=syz.3.3773 [ 1310.525165][T16490] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1310.534917][T16490] Bluetooth: hci1: Injecting HCI hardware error event [ 1310.543398][T18907] Bluetooth: hci1: hardware error 0x00 [ 1311.465319][T20121] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3764'. [ 1311.737495][T16490] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1311.796929][T20127] bond11: (slave wlan0): Releasing active interface [ 1312.066286][T20128] bridge0: entered allmulticast mode [ 1312.174667][ T9779] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1312.604337][T18907] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1312.753106][ T9779] usb 5-1: Using ep0 maxpacket: 8 [ 1313.141685][ T9779] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1313.173342][ T9779] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1313.186065][ T9779] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.206009][ T9779] usb 5-1: Product: syz [ 1313.221984][ T9779] usb 5-1: Manufacturer: syz [ 1313.239811][ T9779] usb 5-1: SerialNumber: syz [ 1313.265683][ T9779] usb 5-1: config 0 descriptor?? [ 1313.299976][ T9779] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1313.624994][T18367] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 1314.710786][ T9779] gspca_zc3xx: reg_w_i err -110 [ 1314.796442][T18367] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1314.808359][T18367] usb 7-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1314.818844][T18367] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.840334][T18367] usb 7-1: config 0 descriptor?? [ 1315.884353][ T9779] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1315.938843][ T9779] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1315.990600][ T9779] usb 5-1: USB disconnect, device number 48 [ 1317.115054][T18367] usbhid 7-1:0.0: can't add hid device: -71 [ 1317.121044][T18367] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1317.141613][T18367] usb 7-1: USB disconnect, device number 79 [ 1318.527257][T18907] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1319.232117][T20175] input: syz1 as /devices/virtual/input/input152 [ 1319.498768][T20177] input: syz1 as /devices/virtual/input/input153 [ 1319.874407][T20183] netlink: 'syz.4.3789': attribute type 1 has an invalid length. [ 1319.972476][T20185] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3789'. [ 1320.175128][T20183] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1320.318425][T20191] netlink: 'syz.5.3779': attribute type 1 has an invalid length. [ 1320.491810][T20192] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3779'. [ 1320.818193][T20191] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1320.837664][T20194] bond3: (slave wlan0): Enslaving as an active interface with an up link [ 1324.469621][T20211] netlink: 'syz.5.3793': attribute type 1 has an invalid length. [ 1324.477570][T20211] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3793'. [ 1324.504363][ T9779] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1325.572009][ T9779] usb 8-1: Using ep0 maxpacket: 8 [ 1325.625302][ T9779] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1325.636345][ T9779] usb 8-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1325.645855][ T9779] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.653874][ T9779] usb 8-1: Product: syz [ 1325.662877][ T9779] usb 8-1: Manufacturer: syz [ 1325.668417][ T9779] usb 8-1: SerialNumber: syz [ 1325.677450][ T9779] usb 8-1: config 0 descriptor?? [ 1325.700981][ T9779] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1325.928865][ T9779] gspca_zc3xx: reg_w_i err -71 [ 1326.444400][T16490] Bluetooth: hci0: command 0x0c1a tx timeout [ 1326.774390][ T9779] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1326.781844][ T9779] gspca_zc3xx 8-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1326.811562][ T9779] usb 8-1: USB disconnect, device number 33 [ 1326.962214][T20236] netlink: 88 bytes leftover after parsing attributes in process `syz.7.3801'. [ 1327.114307][ T89] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1327.190329][T20243] netlink: 'syz.6.3802': attribute type 1 has an invalid length. [ 1327.232001][T20243] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1327.269837][T20243] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3802'. [ 1327.922023][T20245] bond12: (slave wlan0): Enslaving as an active interface with an up link [ 1327.959405][ T89] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1329.357053][T18907] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1329.368018][T18907] Bluetooth: hci0: command 0x0c1a tx timeout [ 1330.160655][ T89] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1330.173769][ T89] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.186356][ T89] usb 5-1: config 0 descriptor?? [ 1330.192380][ T89] usb 5-1: can't set config #0, error -71 [ 1330.200059][ T89] usb 5-1: USB disconnect, device number 49 [ 1330.534371][T20267] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3808'. [ 1330.612806][T16490] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 1331.179004][T20259] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 1331.569989][T20281] JFS: discard option not supported on device [ 1331.577382][T20281] Mount JFS Failure: -22 [ 1331.581692][T20281] jfs_mount failed w/return code = -22 [ 1332.036842][T20288] netlink: 'syz.5.3807': attribute type 1 has an invalid length. [ 1332.047526][T20288] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3807'. [ 1333.252503][T20296] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3817'. [ 1333.340182][T20299] netlink: 'syz.3.3819': attribute type 1 has an invalid length. [ 1333.363093][T20301] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3817'. [ 1333.443672][T20299] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3819'. [ 1333.574477][T20299] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3819'. [ 1333.637124][T20299] netlink: 658 bytes leftover after parsing attributes in process `syz.3.3819'. [ 1337.188112][T16943] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 1337.414353][T16943] usb 7-1: Using ep0 maxpacket: 16 [ 1337.432481][T16943] usb 7-1: config 5 has an invalid interface number: 164 but max is 1 [ 1337.809730][T16943] usb 7-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 1337.839982][T16943] usb 7-1: config 5 has an invalid interface number: 121 but max is 1 [ 1337.865021][T16943] usb 7-1: config 5 has no interface number 0 [ 1337.884427][T16943] usb 7-1: config 5 has no interface number 1 [ 1337.890943][T16943] usb 7-1: config 5 interface 121 altsetting 21 endpoint 0x2 has an invalid bInterval 130, changing to 7 [ 1337.905188][T16943] usb 7-1: config 5 interface 121 altsetting 21 has an invalid descriptor for endpoint zero, skipping [ 1337.917823][T16943] usb 7-1: config 5 interface 121 altsetting 21 has an invalid descriptor for endpoint zero, skipping [ 1337.932237][T16943] usb 7-1: config 5 interface 121 altsetting 21 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1337.943594][T16943] usb 7-1: config 5 interface 121 altsetting 21 has an invalid descriptor for endpoint zero, skipping [ 1337.955166][T16943] usb 7-1: config 5 interface 121 altsetting 21 has an invalid descriptor for endpoint zero, skipping [ 1337.966472][T16943] usb 7-1: config 5 interface 121 altsetting 21 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 1337.985190][T16943] usb 7-1: config 5 interface 164 has no altsetting 0 [ 1337.992842][T16943] usb 7-1: config 5 interface 121 has no altsetting 0 [ 1338.044992][T16943] usb 7-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=d1.f9 [ 1338.054788][T16943] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.159941][T16943] usb 7-1: Product: syz [ 1339.132407][T16943] usb 7-1: Manufacturer: syz [ 1339.138536][T16943] usb 7-1: SerialNumber: syz [ 1339.233622][T20350] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20350 comm=syz.5.3833 [ 1339.464567][T19380] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1339.467927][T20327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1339.514645][T20327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1339.565730][T16943] uvcvideo 7-1:5.164: Found UVC 0.00 device syz (046d:08c1) [ 1339.573052][T16943] uvcvideo 7-1:5.164: No valid video chain found. [ 1339.614416][T19380] usb 5-1: Using ep0 maxpacket: 8 [ 1339.626546][T16943] usb 7-1: USB disconnect, device number 81 [ 1339.632981][T19380] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1339.657215][T19380] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1339.685800][T19380] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.631704][T19380] usb 5-1: Product: syz [ 1340.654480][T19380] usb 5-1: Manufacturer: syz [ 1340.659102][T19380] usb 5-1: SerialNumber: syz [ 1340.677960][T19380] usb 5-1: config 0 descriptor?? [ 1340.688874][T19380] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1340.904692][T19380] gspca_zc3xx: reg_w_i err -71 [ 1341.508803][T19380] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1341.525549][T19380] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1341.707008][T20369] F2FS-fs (loop15): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1341.715128][T20369] F2FS-fs (loop15): Can't find valid F2FS filesystem in 1th superblock [ 1341.723701][T20369] F2FS-fs (loop15): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1341.731673][T20369] F2FS-fs (loop15): Can't find valid F2FS filesystem in 2th superblock [ 1341.754405][T20369] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3834'. [ 1342.022330][T16943] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 1342.023350][T20366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20366 comm=syz.4.3840 [ 1342.111951][T19380] usb 5-1: USB disconnect, device number 50 [ 1342.391233][T16943] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1342.445149][T16943] usb 7-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1342.465080][T16943] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.496903][T16943] usb 7-1: config 0 descriptor?? [ 1344.123242][T16943] lg-g15 0003:046D:C222.005D: unbalanced delimiter at end of report description [ 1344.133488][T16943] lg-g15 0003:046D:C222.005D: probe with driver lg-g15 failed with error -22 [ 1344.163567][T20386] input: syz1 as /devices/virtual/input/input154 [ 1344.680859][T17459] usb 7-1: USB disconnect, device number 82 [ 1345.964851][T20399] netlink: 'syz.6.3849': attribute type 1 has an invalid length. [ 1345.972599][T20399] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3849'. [ 1346.014311][T20399] netlink: 1 bytes leftover after parsing attributes in process `syz.6.3849'. [ 1346.035162][T20399] netlink: 658 bytes leftover after parsing attributes in process `syz.6.3849'. [ 1346.534319][T16943] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1347.654704][T16943] usb 8-1: Using ep0 maxpacket: 8 [ 1347.661210][T16943] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1347.673088][T16943] usb 8-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1347.682757][T16943] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.691026][T16943] usb 8-1: Product: syz [ 1347.695628][T16943] usb 8-1: Manufacturer: syz [ 1347.700231][T16943] usb 8-1: SerialNumber: syz [ 1347.711113][T16943] usb 8-1: config 0 descriptor?? [ 1347.726087][T16943] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1347.934341][T19965] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1348.429383][T16943] gspca_zc3xx: reg_w_i err -71 [ 1348.516288][T19965] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1348.528990][T19965] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1348.550244][T19965] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.569792][T19965] usb 6-1: config 0 descriptor?? [ 1349.415230][T16943] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1350.165675][T16943] gspca_zc3xx 8-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1350.188561][T18907] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1350.219651][T16943] usb 8-1: USB disconnect, device number 34 [ 1350.361784][T19965] lg-g15 0003:046D:C222.005E: unbalanced delimiter at end of report description [ 1350.384353][T19965] lg-g15 0003:046D:C222.005E: probe with driver lg-g15 failed with error -22 [ 1350.515652][T16490] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1350.521976][T16490] Bluetooth: hci0: command 0x0c1a tx timeout [ 1351.827058][T20413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1351.844692][T20413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1351.897935][ T9779] usb 6-1: USB disconnect, device number 38 [ 1351.983775][T20449] input: syz1 as /devices/virtual/input/input155 [ 1356.514612][T16490] Bluetooth: hci0: command 0x0c1a tx timeout [ 1356.535331][T18907] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1356.617662][T20486] netlink: 'syz.7.3868': attribute type 1 has an invalid length. [ 1356.684522][T20490] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3868'. [ 1356.779418][T20486] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1357.030502][T20491] bond3: (slave wlan0): Releasing backup interface [ 1357.146913][T20491] bond4: (slave wlan0): Enslaving as an active interface with an up link [ 1358.614330][ T5824] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 1358.858807][T20513] netlink: 196 bytes leftover after parsing attributes in process `syz.4.3878'. [ 1359.118264][ T5824] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 1359.126567][ T5824] usb 4-1: config 0 has no interface number 0 [ 1359.132731][ T5824] usb 4-1: config 0 interface 41 has no altsetting 0 [ 1359.141243][ T5824] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1359.596395][ T5824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.604517][ T5824] usb 4-1: Product: syz [ 1359.608736][ T5824] usb 4-1: Manufacturer: syz [ 1359.613368][ T5824] usb 4-1: SerialNumber: syz [ 1359.644340][T18907] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1359.650552][T16490] Bluetooth: hci0: command 0x0c1a tx timeout [ 1359.677968][ T5824] usb 4-1: config 0 descriptor?? [ 1360.854615][ T5824] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 1360.879706][ T5824] usb 4-1: USB disconnect, device number 26 [ 1360.889990][T20530] netlink: 88 bytes leftover after parsing attributes in process `syz.7.3883'. [ 1360.924367][T17459] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1361.159825][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.634321][T17459] usb 5-1: Using ep0 maxpacket: 16 [ 1361.641642][T17459] usb 5-1: config 5 has an invalid interface number: 164 but max is 1 [ 1361.650779][T17459] usb 5-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 1361.660298][T20537] netlink: 'syz.6.3877': attribute type 1 has an invalid length. [ 1361.668188][T17459] usb 5-1: config 5 has an invalid interface number: 121 but max is 1 [ 1361.676470][T17459] usb 5-1: config 5 has no interface number 0 [ 1361.687105][T20537] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3877'. [ 1361.696282][T17459] usb 5-1: config 5 has no interface number 1 [ 1361.702515][T17459] usb 5-1: config 5 interface 121 altsetting 21 endpoint 0x2 has an invalid bInterval 130, changing to 7 [ 1361.717316][T20537] netlink: 1 bytes leftover after parsing attributes in process `syz.6.3877'. [ 1361.727402][T17459] usb 5-1: config 5 interface 121 altsetting 21 has an invalid descriptor for endpoint zero, skipping [ 1361.739117][T20537] netlink: 658 bytes leftover after parsing attributes in process `syz.6.3877'. [ 1361.748234][T17459] usb 5-1: config 5 interface 121 altsetting 21 has an invalid descriptor for endpoint zero, skipping [ 1361.775127][T17459] usb 5-1: config 5 interface 121 altsetting 21 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1361.840267][T17459] usb 5-1: config 5 interface 121 altsetting 21 has an invalid descriptor for endpoint zero, skipping [ 1361.898289][T17459] usb 5-1: config 5 interface 121 altsetting 21 has an invalid descriptor for endpoint zero, skipping [ 1361.916659][T17459] usb 5-1: config 5 interface 121 altsetting 21 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 1361.934159][T17459] usb 5-1: config 5 interface 164 has no altsetting 0 [ 1361.941312][T17459] usb 5-1: config 5 interface 121 has no altsetting 0 [ 1362.865458][T17459] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=d1.f9 [ 1362.874550][T17459] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.882537][T17459] usb 5-1: Product: syz [ 1362.886959][T17459] usb 5-1: Manufacturer: syz [ 1362.891556][T17459] usb 5-1: SerialNumber: syz [ 1363.917659][T17459] usb 5-1: can't set config #5, error -71 [ 1363.960604][T17459] usb 5-1: USB disconnect, device number 51 [ 1366.286475][T18907] Bluetooth: hci0: command 0x0c1a tx timeout [ 1366.292720][T16490] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1368.008286][T20573] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3889'. [ 1368.075124][T20579] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3889'. [ 1368.185188][T20583] netlink: 'syz.5.3897': attribute type 1 has an invalid length. [ 1368.258959][T20585] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3897'. [ 1368.703884][T20583] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1370.147576][T20586] bond3: (slave wlan0): Releasing backup interface [ 1370.259456][T20586] bond4: (slave wlan0): Enslaving as an active interface with an up link [ 1370.317656][ T89] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1370.514514][ T89] usb 8-1: Using ep0 maxpacket: 16 [ 1371.599878][ T89] usb 8-1: config 5 has an invalid interface number: 164 but max is 1 [ 1371.611365][ T89] usb 8-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 1371.624122][ T89] usb 8-1: config 5 has an invalid interface number: 121 but max is 1 [ 1371.632373][ T89] usb 8-1: config 5 has no interface number 0 [ 1371.639039][ T89] usb 8-1: config 5 has no interface number 1 [ 1371.662162][ T89] usb 8-1: config 5 interface 121 altsetting 21 endpoint 0x2 has an invalid bInterval 130, changing to 7 [ 1371.688640][ T89] usb 8-1: config 5 interface 121 altsetting 21 has an invalid descriptor for endpoint zero, skipping [ 1371.864319][ T89] usb 8-1: config 5 interface 121 altsetting 21 has an invalid descriptor for endpoint zero, skipping [ 1371.911284][T20614] JFS: discard option not supported on device [ 1371.918551][T20614] Mount JFS Failure: -22 [ 1371.922824][T20614] jfs_mount failed w/return code = -22 [ 1372.266575][ T89] usb 8-1: config 5 interface 121 altsetting 21 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1372.311144][ T89] usb 8-1: config 5 interface 121 altsetting 21 has an invalid descriptor for endpoint zero, skipping [ 1372.342658][ T89] usb 8-1: config 5 interface 121 altsetting 21 has an invalid descriptor for endpoint zero, skipping [ 1372.366164][ T89] usb 8-1: config 5 interface 121 altsetting 21 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 1372.393965][ T89] usb 8-1: config 5 interface 164 has no altsetting 0 [ 1372.410374][ T89] usb 8-1: config 5 interface 121 has no altsetting 0 [ 1372.426420][ T89] usb 8-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=d1.f9 [ 1372.441826][ T89] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.450212][T20613] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1372.462546][T20613] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1372.474280][ T89] usb 8-1: Product: syz [ 1372.484703][ T89] usb 8-1: Manufacturer: syz [ 1372.499468][ T89] usb 8-1: SerialNumber: syz [ 1372.849961][T20598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1372.873002][T20618] input: syz1 as /devices/virtual/input/input156 [ 1374.000157][T20598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1374.288333][T16490] Bluetooth: hci0: command 0x0c1a tx timeout [ 1374.295935][ T89] uvcvideo 8-1:5.164: Found UVC 0.00 device syz (046d:08c1) [ 1374.319527][ T89] uvcvideo 8-1:5.164: No valid video chain found. [ 1374.336128][ T89] usb 8-1: USB disconnect, device number 35 [ 1376.284830][T20643] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3911'. [ 1376.364305][T16490] Bluetooth: hci0: command 0x0c1a tx timeout [ 1378.469176][T20661] netlink: 'syz.4.3914': attribute type 1 has an invalid length. [ 1378.487893][T20661] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3914'. [ 1378.972606][T20669] input: syz1 as /devices/virtual/input/input157 [ 1378.987586][ T5864] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1379.245650][ T5864] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1379.262793][ T5864] usb 8-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1379.272819][ T5864] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.284111][ T5864] usb 8-1: config 0 descriptor?? [ 1379.580968][T20676] input: syz1 as /devices/virtual/input/input158 [ 1380.487517][T18907] Bluetooth: hci0: command 0x0c1a tx timeout [ 1380.545350][T19965] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1380.582934][ T5864] lg-g15 0003:046D:C222.005F: unbalanced delimiter at end of report description [ 1380.614656][ T5864] lg-g15 0003:046D:C222.005F: probe with driver lg-g15 failed with error -22 [ 1380.704452][T19965] usb 4-1: Using ep0 maxpacket: 16 [ 1380.720659][T19965] usb 4-1: config 5 has an invalid interface number: 164 but max is 1 [ 1380.774428][T19965] usb 4-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 1380.832048][T19965] usb 4-1: config 5 has an invalid interface number: 121 but max is 1 [ 1380.865188][T19965] usb 4-1: config 5 has no interface number 0 [ 1380.871374][T19965] usb 4-1: config 5 has no interface number 1 [ 1380.880391][T19965] usb 4-1: config 5 interface 121 altsetting 21 endpoint 0x2 has an invalid bInterval 130, changing to 7 [ 1380.921925][T19965] usb 4-1: config 5 interface 121 altsetting 21 has an invalid descriptor for endpoint zero, skipping [ 1380.976583][T19965] usb 4-1: config 5 interface 121 altsetting 21 has an invalid descriptor for endpoint zero, skipping [ 1380.989689][T19965] usb 4-1: config 5 interface 121 altsetting 21 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1381.006758][T19965] usb 4-1: config 5 interface 121 altsetting 21 has an invalid descriptor for endpoint zero, skipping [ 1381.020412][T19965] usb 4-1: config 5 interface 121 altsetting 21 has an invalid descriptor for endpoint zero, skipping [ 1381.085133][T19965] usb 4-1: config 5 interface 121 altsetting 21 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 1381.100250][T19965] usb 4-1: config 5 interface 164 has no altsetting 0 [ 1381.123346][T19965] usb 4-1: config 5 interface 121 has no altsetting 0 [ 1381.156493][T19965] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=d1.f9 [ 1381.172119][T19965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.190870][T19965] usb 4-1: Product: syz [ 1381.201404][T19965] usb 4-1: Manufacturer: syz [ 1381.206243][T19965] usb 4-1: SerialNumber: syz [ 1382.288881][T10402] usb 7-1: new full-speed USB device number 83 using dummy_hcd [ 1382.376848][T19965] uvcvideo 4-1:5.164: Found UVC 0.00 device syz (046d:08c1) [ 1382.384186][T19965] uvcvideo 4-1:5.164: No valid video chain found. [ 1382.401464][T17459] usb 8-1: USB disconnect, device number 36 [ 1382.429985][T19965] usb 4-1: USB disconnect, device number 27 [ 1382.552138][T10402] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 1382.571205][T10402] usb 7-1: config 0 has no interface number 0 [ 1382.585066][T10402] usb 7-1: config 0 interface 41 has no altsetting 0 [ 1382.604416][T10402] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1382.623958][T10402] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.657579][T10402] usb 7-1: Product: syz [ 1382.661734][T10402] usb 7-1: Manufacturer: syz [ 1382.684316][T10402] usb 7-1: SerialNumber: syz [ 1382.690444][T10402] usb 7-1: config 0 descriptor?? [ 1382.765676][T20703] netlink: 196 bytes leftover after parsing attributes in process `syz.4.3926'. [ 1384.469927][T20714] netlink: 'syz.3.3927': attribute type 1 has an invalid length. [ 1384.485184][T20714] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3927'. [ 1384.514708][T10402] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 1384.545367][T10402] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -71 [ 1384.590160][T10402] usb 7-1: USB disconnect, device number 83 [ 1384.814019][T20722] input: syz1 as /devices/virtual/input/input159 [ 1386.512832][ T5824] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 1386.664354][T17459] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1386.804385][ T5824] usb 7-1: Using ep0 maxpacket: 8 [ 1387.162344][ T5824] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1387.195651][ T5824] usb 7-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1387.224316][ T5824] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.311391][ T5824] usb 7-1: Product: syz [ 1387.316108][ T5824] usb 7-1: Manufacturer: syz [ 1387.320714][ T5824] usb 7-1: SerialNumber: syz [ 1387.328074][ T5824] usb 7-1: config 0 descriptor?? [ 1387.335982][ T5824] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1387.506068][T17459] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1387.516295][T17459] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1387.525601][T17459] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1387.546202][T17459] usb 4-1: config 0 descriptor?? [ 1387.588018][T20747] input: syz1 as /devices/virtual/input/input160 [ 1387.945619][ T5824] gspca_zc3xx: reg_w_i err -110 [ 1388.165286][T17459] lg-g15 0003:046D:C222.0060: unbalanced delimiter at end of report description [ 1388.176327][T17459] lg-g15 0003:046D:C222.0060: probe with driver lg-g15 failed with error -22 [ 1388.291923][T20758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20758 comm=syz.5.3939 [ 1388.324451][T19965] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1389.236317][ T5824] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1389.242646][ T5824] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1389.278129][ T5824] usb 7-1: USB disconnect, device number 84 [ 1389.296764][T20737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1389.324691][T19965] usb 8-1: Using ep0 maxpacket: 16 [ 1389.336422][T20737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1389.356332][T19965] usb 8-1: config 5 has an invalid interface number: 164 but max is 1 [ 1389.376951][T19965] usb 8-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 1389.399361][T19965] usb 8-1: config 5 has an invalid interface number: 121 but max is 1 [ 1389.409334][T20528] usb 4-1: USB disconnect, device number 28 [ 1389.538577][T19965] usb 8-1: config 5 has no interface number 0 [ 1389.544983][T19965] usb 8-1: config 5 has no interface number 1 [ 1389.551109][T19965] usb 8-1: config 5 interface 121 altsetting 21 endpoint 0x2 has an invalid bInterval 130, changing to 7 [ 1389.562573][T19965] usb 8-1: config 5 interface 121 altsetting 21 has an invalid descriptor for endpoint zero, skipping [ 1389.577651][T19965] usb 8-1: config 5 interface 121 altsetting 21 has an invalid descriptor for endpoint zero, skipping [ 1389.589975][T19965] usb 8-1: config 5 interface 121 altsetting 21 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1389.610093][ T5864] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1389.618584][T19965] usb 8-1: config 5 interface 121 altsetting 21 has an invalid descriptor for endpoint zero, skipping [ 1389.632403][T19965] usb 8-1: config 5 interface 121 altsetting 21 has an invalid descriptor for endpoint zero, skipping [ 1389.643983][T19965] usb 8-1: config 5 interface 121 altsetting 21 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 1389.658097][T19965] usb 8-1: config 5 interface 164 has no altsetting 0 [ 1389.665095][T19965] usb 8-1: config 5 interface 121 has no altsetting 0 [ 1389.679047][T19965] usb 8-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=d1.f9 [ 1389.894811][ T5864] usb 6-1: Using ep0 maxpacket: 8 [ 1389.948897][ T5864] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1389.967751][T19965] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.054386][ T5864] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1390.070376][T19965] usb 8-1: Product: syz [ 1390.137757][T19965] usb 8-1: Manufacturer: syz [ 1390.507920][ T5864] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.563573][T19965] usb 8-1: SerialNumber: syz [ 1390.637619][ T5864] usb 6-1: Product: syz [ 1390.662696][ T5864] usb 6-1: Manufacturer: syz [ 1390.674308][ T5864] usb 6-1: SerialNumber: syz [ 1390.684857][ T5864] usb 6-1: config 0 descriptor?? [ 1390.697834][ T5864] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1391.022218][T19965] uvcvideo 8-1:5.164: Found UVC 0.00 device syz (046d:08c1) [ 1391.479433][ T5864] gspca_zc3xx: reg_w_i err -110 [ 1391.488901][T19965] uvcvideo 8-1:5.164: No valid video chain found. [ 1391.533508][T19965] usb 8-1: USB disconnect, device number 37 [ 1391.901132][T20785] input: syz1 as /devices/virtual/input/input161 [ 1392.141293][T20788] netlink: 196 bytes leftover after parsing attributes in process `syz.4.3942'. [ 1392.244347][ T5864] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1392.250925][ T5864] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1392.280413][ T5864] usb 6-1: USB disconnect, device number 39 [ 1392.530429][T20795] netlink: 116 bytes leftover after parsing attributes in process `syz.7.3948'. [ 1392.663403][T20795] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3948'. [ 1392.856468][T20803] input: syz1 as /devices/virtual/input/input162 [ 1393.369440][T20792] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1393.424298][T20259] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1393.586823][T20259] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 1393.595677][T20259] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1393.606568][T20259] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1393.634414][T20259] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1393.642673][T20259] usb 8-1: Manufacturer: syz [ 1393.648601][ T89] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1393.661110][T20259] usb 8-1: config 0 descriptor?? [ 1393.754304][T20259] rc_core: IR keymap rc-hauppauge not found [ 1393.760928][T20259] Registered IR keymap rc-empty [ 1393.771438][T20259] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1393.796151][T20259] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input163 [ 1393.807089][ T89] usb 4-1: Using ep0 maxpacket: 16 [ 1393.826795][ T89] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1393.836177][ T89] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 1393.846850][ T89] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 1393.864650][ T89] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1393.880624][ T89] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.888977][ T89] usb 4-1: Product: syz [ 1393.893160][ T89] usb 4-1: Manufacturer: syz [ 1393.897941][ T89] usb 4-1: SerialNumber: syz [ 1393.907530][ C0] igorplugusb 8-1:0.0: Error: urb status = -32 [ 1393.921240][T20259] usb 8-1: USB disconnect, device number 38 [ 1394.124304][T20528] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 1394.276165][T20528] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 1394.284381][T20528] usb 7-1: config 1 has no interface number 0 [ 1394.290477][T20528] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 1394.303085][T20528] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 1394.315617][T20528] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1394.324865][T20528] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.332847][T20528] usb 7-1: Product: syz [ 1394.337627][T20528] usb 7-1: Manufacturer: syz [ 1394.342224][T20528] usb 7-1: SerialNumber: syz [ 1394.349607][T20819] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1394.357386][T20819] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1394.367933][T20528] usb 7-1: Error in usbnet_get_endpoints (-22) [ 1394.421918][T20822] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1394.431267][T20822] macvtap0: entered promiscuous mode [ 1394.449296][T20822] macvtap0: entered allmulticast mode [ 1394.454787][T20822] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1394.571313][T20259] usb 7-1: USB disconnect, device number 85 [ 1394.687716][T20832] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3959'. [ 1394.704622][T20832] macvtap0: entered promiscuous mode [ 1394.710053][T20832] bridge0: entered promiscuous mode [ 1394.715651][T20832] macvtap0: entered allmulticast mode [ 1394.727537][T20832] bridge0: left promiscuous mode [ 1394.768360][ T30] audit: type=1400 audit(1766164279.580:819): avc: denied { name_bind } for pid=20833 comm="syz.7.3960" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1394.792878][ T30] audit: type=1400 audit(1766164279.580:820): avc: denied { node_bind } for pid=20833 comm="syz.7.3960" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1395.429893][ T89] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 1395.445783][ T89] cdc_ncm 4-1:1.0: bind() failure [ 1395.458387][ T89] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1395.470281][ T89] cdc_ncm 4-1:1.1: bind() failure [ 1395.488932][ T89] usb 4-1: USB disconnect, device number 29 [ 1395.554433][T20528] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1395.616323][T20860] netlink: 212328 bytes leftover after parsing attributes in process `syz.3.3969'. [ 1395.626463][T20860] netlink: Conntrack attr has 4 unknown bytes [ 1395.834857][T20528] usb 8-1: Using ep0 maxpacket: 16 [ 1395.842618][T20528] usb 8-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1395.900661][T20528] usb 8-1: config 0 has an invalid interface number: 137 but max is 128 [ 1395.941089][T20528] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1395.975510][T20528] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1396.056924][T20528] usb 8-1: config 0 has no interface number 0 [ 1396.097998][ T30] audit: type=1326 audit(1766164280.890:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20863 comm="syz.3.3971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53dbd8f749 code=0x7ffc0000 [ 1396.154551][T20528] usb 8-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 1396.169171][T20528] usb 8-1: New USB device strings: Mfr=1, Product=1, SerialNumber=3 [ 1396.242152][ T30] audit: type=1326 audit(1766164280.890:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20863 comm="syz.3.3971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f53dbd8f749 code=0x7ffc0000 [ 1396.290386][ T30] audit: type=1326 audit(1766164280.890:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20863 comm="syz.3.3971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53dbd8f749 code=0x7ffc0000 [ 1396.406652][ T30] audit: type=1326 audit(1766164280.890:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20863 comm="syz.3.3971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f53dbd8f749 code=0x7ffc0000 [ 1396.444399][T20528] usb 8-1: Product: syz [ 1396.448733][T20528] usb 8-1: Manufacturer: syz [ 1396.453314][T20528] usb 8-1: SerialNumber: syz [ 1396.522537][T20528] usb 8-1: config 0 descriptor?? [ 1396.595806][T20528] go7007 8-1:0.137: Sensoray 2250 found [ 1396.614796][T20528] go7007 8-1:0.137: probe with driver go7007 failed with error -12 [ 1396.820290][ T30] audit: type=1326 audit(1766164280.890:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20863 comm="syz.3.3971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53dbd8f749 code=0x7ffc0000 [ 1396.856528][T20528] usb 8-1: USB disconnect, device number 39 [ 1396.877428][ T30] audit: type=1326 audit(1766164280.890:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20863 comm="syz.3.3971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f53dbd91667 code=0x7ffc0000 [ 1397.034317][ T30] audit: type=1326 audit(1766164280.890:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20863 comm="syz.3.3971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f53dbd915dc code=0x7ffc0000 [ 1397.101104][ T30] audit: type=1326 audit(1766164280.890:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20863 comm="syz.3.3971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f53dbd91514 code=0x7ffc0000 [ 1397.669076][T20904] netlink: 'syz.6.3981': attribute type 10 has an invalid length. [ 1397.967435][T20904] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1398.055626][T20915] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3987'. [ 1398.238188][T20528] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1398.394313][T20528] usb 5-1: Using ep0 maxpacket: 32 [ 1398.405385][T20528] usb 5-1: config 8 has an invalid interface number: 35 but max is 0 [ 1398.453709][T20924] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3988'. [ 1398.462831][T20528] usb 5-1: config 8 has no interface number 0 [ 1398.462868][T20528] usb 5-1: config 8 interface 35 has no altsetting 0 [ 1398.464551][T20528] usb 5-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=83.3e [ 1398.494461][T20528] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.531979][T20924] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3988'. [ 1398.654313][T20528] usb 5-1: Product: syz [ 1398.665552][T20528] usb 5-1: Manufacturer: syz [ 1398.673170][T20528] usb 5-1: SerialNumber: syz [ 1399.054328][T19965] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1399.128909][T20528] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 1399.180010][T20528] usb 5-1: USB disconnect, device number 52 [ 1399.212092][T19965] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1399.223401][T19965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.241408][T19965] usb 4-1: Product: syz [ 1399.245973][T19965] usb 4-1: Manufacturer: syz [ 1399.250551][T19965] usb 4-1: SerialNumber: syz [ 1399.266540][T19965] usb 4-1: config 0 descriptor?? [ 1399.288643][T19965] hub 4-1:0.0: bad descriptor, ignoring hub [ 1399.296999][T19965] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1399.475752][T19965] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1399.498708][T19965] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1399.518336][T19965] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1399.536921][T19965] usb 4-1: media controller created [ 1399.561023][T19965] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1399.643621][T19965] DVB: Unable to find symbol dib7000p_attach() [ 1399.652782][T19965] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1399.694424][T20528] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1399.735253][T20949] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3997'. [ 1399.756926][T20949] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3997'. [ 1399.768697][T20949] tc_dump_action: action bad kind [ 1399.954548][T20528] usb 8-1: Using ep0 maxpacket: 8 [ 1399.972298][T20528] usb 8-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 1399.988566][T19965] rc_core: IR keymap rc-dib0700-rc5 not found [ 1400.000806][T20528] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.009756][T19965] Registered IR keymap rc-empty [ 1400.036862][T19965] dvb-usb: could not initialize remote control. [ 1400.048887][T20528] usb 8-1: config 0 descriptor?? [ 1400.057049][T19965] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1400.207604][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 1400.207619][ T30] audit: type=1400 audit(1766164285.020:848): avc: denied { setopt } for pid=20956 comm="syz.4.4000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1400.244650][ T30] audit: type=1326 audit(1766164285.020:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20956 comm="syz.4.4000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabdb78f749 code=0x7ffc0000 [ 1400.268109][ T30] audit: type=1326 audit(1766164285.020:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20956 comm="syz.4.4000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabdb78f749 code=0x7ffc0000 [ 1400.303699][ T30] audit: type=1326 audit(1766164285.020:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20956 comm="syz.4.4000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fabdb78df90 code=0x7ffc0000 [ 1400.327820][T17459] usb 8-1: USB disconnect, device number 40 [ 1400.353307][ T30] audit: type=1326 audit(1766164285.020:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20956 comm="syz.4.4000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabdb78f749 code=0x7ffc0000 [ 1400.450221][ T30] audit: type=1326 audit(1766164285.020:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20956 comm="syz.4.4000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabdb78f749 code=0x7ffc0000 [ 1400.699868][T19965] usb 4-1: USB disconnect, device number 30 [ 1400.715617][ T30] audit: type=1326 audit(1766164285.110:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20956 comm="syz.4.4000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fabdb78f749 code=0x7ffc0000 [ 1400.743381][T19965] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1400.762549][ T30] audit: type=1326 audit(1766164285.110:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20956 comm="syz.4.4000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabdb78f749 code=0x7ffc0000 [ 1400.795266][ T30] audit: type=1326 audit(1766164285.110:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20956 comm="syz.4.4000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabdb78f749 code=0x7ffc0000 [ 1400.881191][ T30] audit: type=1326 audit(1766164285.110:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20956 comm="syz.4.4000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fabdb78f749 code=0x7ffc0000 [ 1401.521924][T20976] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1401.532514][T20976] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1401.634525][T20325] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1401.894274][T20325] usb 5-1: Using ep0 maxpacket: 8 [ 1401.901437][T20325] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 1401.911996][T20325] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1401.921366][T20325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.930125][T20325] usb 5-1: Product: syz [ 1401.954392][T20325] usb 5-1: Manufacturer: syz [ 1401.965203][T20325] usb 5-1: SerialNumber: syz [ 1401.982826][T20325] usb 5-1: config 0 descriptor?? [ 1402.011070][T20325] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1402.146182][T20325] usb 5-1: setting power ON [ 1402.151062][T20325] dvb-usb: bulk message failed: -22 (2/0) [ 1402.173269][T20325] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1402.216372][T20971] dvb-usb: bulk message failed: -22 (3/0) [ 1402.249663][T20325] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1402.286978][T20325] usb 5-1: media controller created [ 1402.328349][T20325] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1402.432563][T20325] usb 5-1: selecting invalid altsetting 6 [ 1402.440461][T20325] usb 5-1: digital interface selection failed (-22) [ 1402.449010][T20325] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1402.476903][T20325] usb 5-1: setting power OFF [ 1402.481512][T20325] dvb-usb: bulk message failed: -22 (2/0) [ 1402.487337][T20325] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1402.498367][T20325] (NULL device *): no alternate interface [ 1402.512637][T20325] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1402.546145][T20325] usb 5-1: USB disconnect, device number 53 [ 1403.094372][T20528] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1403.254338][T20528] usb 6-1: Using ep0 maxpacket: 8 [ 1403.268297][T20528] usb 6-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 1403.277493][T20528] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1403.290594][T20528] usb 6-1: config 0 descriptor?? [ 1403.519781][T21008] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1403.542281][T21008] syzkaller0: entered promiscuous mode [ 1403.558591][T21008] syzkaller0: entered allmulticast mode [ 1403.591946][T21008] tipc: Started in network mode [ 1403.607972][T21008] tipc: Node identity 5ec634cebe6, cluster identity 4711 [ 1403.622565][T21008] tipc: Enabled bearer , priority 0 [ 1403.630760][T20259] usb 6-1: USB disconnect, device number 40 [ 1403.671498][T21007] tipc: Resetting bearer [ 1403.707511][T21007] tipc: Disabling bearer [ 1403.841297][T21014] : renamed from bridge_slave_0 (while UP) [ 1404.564312][T20528] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 1405.185129][T16943] hid_parser_main: 9 callbacks suppressed [ 1405.185149][T16943] hid-generic 0003:0003:0000.0061: unknown main item tag 0x0 [ 1405.202163][T16943] hid-generic 0003:0003:0000.0061: unknown main item tag 0x0 [ 1405.216143][T16943] hid-generic 0003:0003:0000.0061: unknown main item tag 0x0 [ 1405.232500][T16943] hid-generic 0003:0003:0000.0061: unknown main item tag 0x0 [ 1405.247672][T16943] hid-generic 0003:0003:0000.0061: unknown main item tag 0x0 [ 1405.259739][T16943] hid-generic 0003:0003:0000.0061: unknown main item tag 0x0 [ 1405.272229][T16943] hid-generic 0003:0003:0000.0061: unknown main item tag 0x0 [ 1405.284467][T16943] hid-generic 0003:0003:0000.0061: unknown main item tag 0x0 [ 1405.297478][T16943] hid-generic 0003:0003:0000.0061: unknown main item tag 0x0 [ 1405.309910][T16943] hid-generic 0003:0003:0000.0061: unknown main item tag 0x0 [ 1405.324565][T19965] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1406.068613][T16943] hid-generic 0003:0003:0000.0061: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1406.094454][T19965] usb 8-1: Using ep0 maxpacket: 8 [ 1406.111281][T19965] usb 8-1: config index 0 descriptor too short (expected 30, got 18) [ 1406.134416][T19965] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1406.170096][T19965] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.213206][T19965] usb 8-1: Product: syz [ 1406.286847][T19965] usb 8-1: Manufacturer: syz [ 1406.299713][T19965] usb 8-1: SerialNumber: syz [ 1406.325236][T19965] usb 8-1: config 0 descriptor?? [ 1406.341545][T21044] fido_id[21044]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1406.343692][T19965] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1406.519257][T19965] usb 8-1: setting power ON [ 1406.533249][T19965] dvb-usb: bulk message failed: -22 (2/0) [ 1406.567847][T19965] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1406.581457][T21036] dvb-usb: bulk message failed: -22 (3/0) [ 1406.587964][T21036] dvb-usb: bulk message failed: -22 (4/0) [ 1406.624513][T19965] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1406.663483][T19965] usb 8-1: media controller created [ 1406.728976][T19965] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1406.803495][T19965] usb 8-1: selecting invalid altsetting 6 [ 1406.812163][T19965] usb 8-1: digital interface selection failed (-22) [ 1406.833182][T19965] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1406.930325][T19965] usb 8-1: setting power OFF [ 1406.935115][T19965] dvb-usb: bulk message failed: -22 (2/0) [ 1406.940834][T19965] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1406.950145][T19965] (NULL device *): no alternate interface [ 1406.987421][T19965] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1407.441784][T19965] usb 8-1: USB disconnect, device number 41 [ 1407.466234][T20528] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1407.475552][T20528] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1407.483192][T20528] usb 5-1: can't read configurations, error -71 [ 1408.224734][T21073] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.4034'. [ 1408.485595][T21079] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4036'. [ 1408.793109][T21084] syz_tun: entered allmulticast mode [ 1409.864296][T20528] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1410.113614][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 1410.113627][ T30] audit: type=1326 audit(1766164294.780:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21108 comm="syz.4.4049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabdb78f749 code=0x7ffc0000 [ 1410.126220][T20528] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1410.168970][ T30] audit: type=1326 audit(1766164294.780:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21108 comm="syz.4.4049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabdb78f749 code=0x7ffc0000 [ 1410.254068][T20528] usb 4-1: config 0 has no interfaces? [ 1410.263427][T20528] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1410.277174][T20528] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.294650][ T30] audit: type=1326 audit(1766164294.780:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21108 comm="syz.4.4049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fabdb78f749 code=0x7ffc0000 [ 1410.319583][T20528] usb 4-1: config 0 descriptor?? [ 1410.500816][ T30] audit: type=1326 audit(1766164294.780:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21108 comm="syz.4.4049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabdb78f749 code=0x7ffc0000 [ 1410.603314][T20528] usb 4-1: USB disconnect, device number 31 [ 1410.772886][ T30] audit: type=1326 audit(1766164294.780:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21108 comm="syz.4.4049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabdb78f749 code=0x7ffc0000 [ 1410.894519][ T30] audit: type=1326 audit(1766164294.780:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21108 comm="syz.4.4049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fabdb78df90 code=0x7ffc0000 [ 1411.085998][ T30] audit: type=1326 audit(1766164294.780:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21108 comm="syz.4.4049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabdb78f749 code=0x7ffc0000 [ 1411.125930][ T30] audit: type=1326 audit(1766164294.780:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21108 comm="syz.4.4049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fabdb78f749 code=0x7ffc0000 [ 1411.209550][T21134] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4055'. [ 1411.278304][T21134] hub 9-0:1.0: USB hub found [ 1411.284389][T21134] hub 9-0:1.0: 1 port detected [ 1411.472641][ T30] audit: type=1326 audit(1766164294.780:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21108 comm="syz.4.4049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabdb78f749 code=0x7ffc0000 [ 1411.612753][ T30] audit: type=1326 audit(1766164294.790:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21108 comm="syz.4.4049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabdb78f749 code=0x7ffc0000 [ 1412.446501][T21170] trusted_key: encrypted_key: insufficient parameters specified [ 1412.477445][T19965] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1413.006387][T19965] usb 8-1: Using ep0 maxpacket: 16 [ 1413.013090][T19965] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1413.024848][T19965] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1413.031449][T19965] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1413.045257][T19965] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.067852][T19965] usb 8-1: config 0 descriptor?? [ 1413.165478][T16943] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 1413.488942][T19965] nzxt-smart2 0003:1E71:2009.0062: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.7-1/input0 [ 1413.532683][T16943] usb 4-1: config 0 has an invalid interface number: 160 but max is 0 [ 1413.549335][T16943] usb 4-1: config 0 has no interface number 0 [ 1413.564951][T16943] usb 4-1: config 0 interface 160 has no altsetting 0 [ 1413.628384][T16943] usb 4-1: New USB device found, idVendor=a6da, idProduct=1e78, bcdDevice=56.e4 [ 1413.638399][T16943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.689273][T16943] usb 4-1: Product: syz [ 1413.736159][T16943] usb 4-1: Manufacturer: syz [ 1413.754447][T16943] usb 4-1: SerialNumber: syz [ 1413.783211][T19965] usb 8-1: USB disconnect, device number 42 [ 1413.854639][T16943] usb 4-1: config 0 descriptor?? [ 1413.865101][T16943] usb-storage 4-1:0.160: USB Mass Storage device detected [ 1413.956864][T21187] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4070'. [ 1413.966298][T21187] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4070'. [ 1414.791924][T21199] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4075'. [ 1414.951609][T21205] netlink: 'syz.6.4077': attribute type 10 has an invalid length. [ 1414.980659][T21207] binder: BINDER_SET_CONTEXT_MGR already set [ 1414.988843][T21207] binder: 21200:21207 ioctl 4018620d 200000000040 returned -16 [ 1415.030485][T21205] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1415.379355][T16943] usb 4-1: USB disconnect, device number 32 [ 1415.514348][T19965] usb 7-1: new full-speed USB device number 86 using dummy_hcd [ 1415.668926][T20528] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1415.724278][T19965] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1415.804293][T19965] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1416.044083][T19965] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1416.054172][T19965] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1416.062300][T20528] usb 8-1: Using ep0 maxpacket: 8 [ 1416.080925][T20528] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1416.092814][T20528] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1416.175366][T20528] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1416.182406][T20528] pvrusb2: ********** [ 1416.186493][T20528] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1416.203586][T20528] pvrusb2: Important functionality might not be entirely working. [ 1416.231251][T20528] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1416.251635][T20528] pvrusb2: ********** [ 1416.293143][T19965] usb 7-1: usb_control_msg returned -32 [ 1416.303256][T19965] usbtmc 7-1:16.0: can't read capabilities [ 1416.340349][ T2337] pvrusb2: Invalid write control endpoint [ 1416.456814][ T2337] pvrusb2: Invalid write control endpoint [ 1416.473424][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1416.492361][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1416.502955][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1416.544451][ T2337] pvrusb2: Device being rendered inoperable [ 1416.561365][T21212] pvrusb2: Attempted to execute control transfer when device not ok [ 1416.575332][T20528] usb 8-1: USB disconnect, device number 43 [ 1416.586015][ T2337] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1416.604191][ T2337] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1416.631301][ T2337] pvrusb2: Attached sub-driver cx25840 [ 1416.644500][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1416.659822][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1416.815337][T21240] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4088'. [ 1416.849753][T21224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1416.867071][T21224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1417.095947][T17459] usb 7-1: USB disconnect, device number 86 [ 1417.197392][ T9779] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1417.443505][ T9779] usb 6-1: Using ep0 maxpacket: 8 [ 1417.465111][ T9779] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1417.481587][T19965] hid_parser_main: 8 callbacks suppressed [ 1417.481599][T19965] hid-generic 0003:0003:0000.0063: unknown main item tag 0x0 [ 1417.496157][T19965] hid-generic 0003:0003:0000.0063: unknown main item tag 0x0 [ 1417.503519][T19965] hid-generic 0003:0003:0000.0063: unknown main item tag 0x0 [ 1417.507368][ T9779] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1417.522920][T19965] hid-generic 0003:0003:0000.0063: unknown main item tag 0x0 [ 1417.539285][T19965] hid-generic 0003:0003:0000.0063: unknown main item tag 0x0 [ 1417.556630][ T9779] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1417.564369][T19965] hid-generic 0003:0003:0000.0063: unknown main item tag 0x0 [ 1417.564429][ T9779] pvrusb2: ********** [ 1417.571769][T19965] hid-generic 0003:0003:0000.0063: unknown main item tag 0x0 [ 1417.585351][ T9779] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1417.585411][T19965] hid-generic 0003:0003:0000.0063: unknown main item tag 0x0 [ 1417.605794][ T9779] pvrusb2: Important functionality might not be entirely working. [ 1417.615603][ T9779] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1417.615631][T19965] hid-generic 0003:0003:0000.0063: unknown main item tag 0x0 [ 1417.627318][ T9779] pvrusb2: ********** [ 1417.691523][T19965] hid-generic 0003:0003:0000.0063: unknown main item tag 0x0 [ 1417.715690][T19965] hid-generic 0003:0003:0000.0063: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1417.756185][T21240] overlayfs: missing 'lowerdir' [ 1417.782729][ T2337] pvrusb2: Invalid write control endpoint [ 1417.787738][ T9779] usb 6-1: USB disconnect, device number 41 [ 1417.850339][ T2337] pvrusb2: Invalid write control endpoint [ 1417.857591][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1417.866517][T21257] fido_id[21257]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1417.905716][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1417.923734][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1417.942290][ T2337] pvrusb2: Device being rendered inoperable [ 1417.952425][ T2337] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1417.962025][ T2337] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1417.971366][ T2337] pvrusb2: Attached sub-driver cx25840 [ 1418.012359][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1418.033173][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1418.134340][T17459] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1418.246240][T21266] netlink: 'syz.7.4097': attribute type 2 has an invalid length. [ 1418.267324][T21266] input: syz0 as /devices/virtual/input/input165 [ 1418.294303][T17459] usb 5-1: Using ep0 maxpacket: 16 [ 1418.301220][T17459] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1418.316351][T17459] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1418.328262][T17459] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1418.336461][T17459] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1418.349489][T17459] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1418.369810][T17459] usb 5-1: config 0 descriptor?? [ 1418.374829][ T9779] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1418.504280][ T9779] usb 6-1: device descriptor read/64, error -71 [ 1418.794315][ T9779] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1418.805883][T17459] nzxt-smart2 0003:1E71:2009.0064: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 1418.936764][T21279] netlink: 'syz.6.4101': attribute type 4 has an invalid length. [ 1418.975117][ T9779] usb 6-1: device descriptor read/64, error -71 [ 1419.018286][T17459] usb 5-1: USB disconnect, device number 56 [ 1419.136276][ T9779] usb usb6-port1: attempt power cycle [ 1419.447354][T21278] fido_id[21278]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1419.784280][ T9779] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1419.805381][ T9779] usb 6-1: device descriptor read/8, error -71 [ 1419.981921][T17459] hid-generic 0003:0003:0000.0065: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1420.081302][T21296] ipip0: entered promiscuous mode [ 1420.089342][T21296] ipip0: entered allmulticast mode [ 1420.131678][T21295] fido_id[21295]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1420.196465][T21299] bridge0: left allmulticast mode [ 1420.214291][T19965] usb 7-1: new full-speed USB device number 87 using dummy_hcd [ 1420.546713][T19965] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1420.557463][T19965] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1420.629263][T19965] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1420.653892][T19965] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1420.975405][T19965] usb 7-1: GET_CAPABILITIES returned 0 [ 1421.055585][T19965] usbtmc 7-1:16.0: can't read capabilities [ 1421.473506][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 1421.473516][ T30] audit: type=1400 audit(1766164306.280:1011): avc: denied { connect } for pid=21315 comm="syz.3.4111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1421.510893][ T30] audit: type=1400 audit(1766164306.320:1012): avc: denied { write } for pid=21315 comm="syz.3.4111" path="socket:[91760]" dev="sockfs" ino=91760 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1421.599420][T21321] netlink: 'syz.4.4114': attribute type 4 has an invalid length. [ 1421.609269][T21321] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4114'. [ 1421.700527][T21321] .`: renamed from bond0 (while UP) [ 1421.802880][ T30] audit: type=1326 audit(1766164306.600:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21326 comm="syz.5.4117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96dd8f749 code=0x7ffc0000 [ 1421.860682][T21331] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4117'. [ 1421.944506][ T30] audit: type=1326 audit(1766164306.600:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21326 comm="syz.5.4117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96dd8f749 code=0x7ffc0000 [ 1421.977280][ T30] audit: type=1326 audit(1766164306.600:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21326 comm="syz.5.4117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fa96dd8f749 code=0x7ffc0000 [ 1422.000808][ T30] audit: type=1326 audit(1766164306.600:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21326 comm="syz.5.4117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96dd8f749 code=0x7ffc0000 [ 1422.077950][ T30] audit: type=1326 audit(1766164306.600:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21326 comm="syz.5.4117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96dd8f749 code=0x7ffc0000 [ 1422.142026][ T30] audit: type=1326 audit(1766164306.600:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21326 comm="syz.5.4117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa96dd8f749 code=0x7ffc0000 [ 1422.214791][ T30] audit: type=1326 audit(1766164306.600:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21326 comm="syz.5.4117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96dd8f749 code=0x7ffc0000 [ 1422.266111][ T30] audit: type=1326 audit(1766164306.600:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21326 comm="syz.5.4117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa96dd91667 code=0x7ffc0000 [ 1422.618095][T21345] loop6: detected capacity change from 0 to 524288000 [ 1422.644064][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.983592][ T9779] usb 7-1: USB disconnect, device number 87 [ 1423.040389][T21345] support for the xor transformation has been removed. [ 1424.254321][T19965] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1424.927328][T19965] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1424.936575][T19965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.951300][T19965] usb 5-1: Product: syz [ 1424.965206][T19965] usb 5-1: Manufacturer: syz [ 1425.044353][T19965] usb 5-1: SerialNumber: syz [ 1425.050683][T19965] usb 5-1: config 0 descriptor?? [ 1425.073794][T19965] hub 5-1:0.0: bad descriptor, ignoring hub [ 1425.125655][T19965] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1425.408438][T19965] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1425.487483][T19965] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1425.603714][T19965] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1425.634068][T19965] usb 5-1: media controller created [ 1425.778007][T19965] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1425.908752][T19965] DVB: Unable to find symbol dib7000p_attach() [ 1425.915740][T19965] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1426.142313][T21401] fuse: Unknown parameter 'group_id400000000000000000000' [ 1426.489554][T19965] rc_core: IR keymap rc-dib0700-rc5 not found [ 1426.498273][T19965] Registered IR keymap rc-empty [ 1426.503232][T19965] dvb-usb: could not initialize remote control. [ 1426.510008][T19965] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1426.664635][T19965] usb 5-1: USB disconnect, device number 57 [ 1426.734575][T19965] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1426.778655][T21413] syz_tun: entered allmulticast mode [ 1426.905873][T21399] usb usb1: check_ctrlrecip: process 21399 (syz.5.4141) requesting ep 01 but needs 81 [ 1426.924136][T21399] usb usb1: usbfs: process 21399 (syz.5.4141) did not claim interface 0 before use [ 1427.504325][T17459] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1427.676109][T17459] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1427.705667][T17459] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1427.834950][T17459] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1427.887511][T17459] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1427.918989][T17459] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1427.938806][T17459] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1427.951839][T17459] usb 6-1: Manufacturer: syz [ 1427.985586][T17459] usb 6-1: config 0 descriptor?? [ 1428.210239][T21454] syz_tun: entered allmulticast mode [ 1428.410576][T17459] hid_parser_main: 31 callbacks suppressed [ 1428.410641][T17459] appleir 0003:05AC:8243.0066: unknown main item tag 0x0 [ 1428.456696][T17459] appleir 0003:05AC:8243.0066: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 1429.974171][T21495] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1430.426870][ T9779] usb 6-1: USB disconnect, device number 46 [ 1430.506695][T21510] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4171'. [ 1431.637962][T21523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4176'. [ 1431.759289][T21527] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4177'. [ 1432.084357][T19965] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1432.209896][T21544] tipc: Started in network mode [ 1432.215331][T21544] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 1432.227044][T21544] tipc: Enabling of bearer rejected, failed to enable media [ 1432.247490][T19965] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1432.315273][T21546] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4180'. [ 1432.347410][T19965] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1432.359292][T19965] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1432.374364][T19965] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1432.383505][T19965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.391580][T19965] usb 5-1: Product: syz [ 1432.396254][T19965] usb 5-1: Manufacturer: syz [ 1432.400903][T19965] usb 5-1: SerialNumber: syz [ 1432.412838][T19965] usb 5-1: config 0 descriptor?? [ 1432.473945][T21549] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4183'. [ 1432.576307][T19504] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 1432.746133][T19965] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1432.825045][T19504] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1432.838617][T19504] usb 6-1: not running at top speed; connect to a high speed hub [ 1432.884108][T19504] usb 6-1: config 251 has an invalid interface number: 156 but max is 0 [ 1432.892579][T19504] usb 6-1: config 251 has no interface number 0 [ 1432.902514][T19504] usb 6-1: config 251 interface 156 has no altsetting 0 [ 1432.918513][T19504] usb 6-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice=5b.c8 [ 1432.927749][T19504] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.071192][T19965] usb 5-1: USB disconnect, device number 58 [ 1433.108550][T19504] usb 6-1: Product: syz [ 1433.190778][T19504] usb 6-1: Manufacturer: syz [ 1433.196633][T19504] usb 6-1: SerialNumber: syz [ 1435.132709][ T9779] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 1435.296884][T19504] usb 6-1: unknown interface protocol 0x2c, assuming v1 [ 1435.298798][ T9779] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1435.307223][T19504] usb 6-1: cannot find UAC_HEADER [ 1435.324033][ T9779] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1435.337102][ T9779] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1435.346475][ T9779] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1435.368953][ T9779] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1435.398135][T19504] snd-usb-audio 6-1:251.156: probe with driver snd-usb-audio failed with error -22 [ 1435.406213][ T9779] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1435.431640][T19504] usb 6-1: USB disconnect, device number 47 [ 1435.441310][T17836] udevd[17836]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:251.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1435.485071][T16943] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1435.496875][ T9779] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1435.530442][ T9779] usb 8-1: Product: syz [ 1435.547289][ T9779] usb 8-1: Manufacturer: syz [ 1435.570522][ T9779] cdc_wdm 8-1:1.0: skipping garbage [ 1435.584360][T21603] trusted_key: encrypted_key: insufficient parameters specified [ 1435.616601][ T9779] cdc_wdm 8-1:1.0: skipping garbage [ 1435.646456][T16943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1435.647164][ T9779] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 1435.668188][T16943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1435.680447][ T9779] cdc_wdm 8-1:1.0: Unknown control protocol [ 1435.698727][T16943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1435.740976][T16943] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1435.751137][T16943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.767477][T16943] usb 5-1: Product: syz [ 1435.803393][T16943] usb 5-1: Manufacturer: syz [ 1435.834752][T16943] usb 5-1: SerialNumber: syz [ 1435.844876][T16943] usb 5-1: config 0 descriptor?? [ 1435.959735][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 1435.959751][ T30] audit: type=1326 audit(1766164320.770:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21611 comm="syz.3.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53dbd8f749 code=0x7ffc0000 [ 1436.001173][ T30] audit: type=1326 audit(1766164320.770:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21611 comm="syz.3.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53dbd8f749 code=0x7ffc0000 [ 1436.036169][ T30] audit: type=1326 audit(1766164320.810:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21611 comm="syz.3.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f53dbd8f749 code=0x7ffc0000 [ 1436.068853][ T30] audit: type=1326 audit(1766164320.810:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21611 comm="syz.3.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53dbd8f749 code=0x7ffc0000 [ 1436.092894][ T30] audit: type=1326 audit(1766164320.810:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21611 comm="syz.3.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f53dbd8f749 code=0x7ffc0000 [ 1436.093103][T16943] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux1 [ 1436.181039][ T30] audit: type=1326 audit(1766164320.810:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21611 comm="syz.3.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53dbd8f749 code=0x7ffc0000 [ 1436.314586][T21620] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1436.350007][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 4 bytes [ 1436.356712][ T30] audit: type=1326 audit(1766164320.810:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21611 comm="syz.3.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f53dbd8f749 code=0x7ffc0000 [ 1436.504282][ T30] audit: type=1326 audit(1766164320.810:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21611 comm="syz.3.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53dbd8f749 code=0x7ffc0000 [ 1436.552196][T17459] usb 5-1: USB disconnect, device number 59 [ 1436.580612][ T30] audit: type=1326 audit(1766164320.810:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21611 comm="syz.3.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53dbd8f749 code=0x7ffc0000 [ 1436.658509][ T30] audit: type=1400 audit(1766164321.160:1097): avc: denied { read write } for pid=21584 comm="syz.7.4194" name="cdc-wdm0" dev="devtmpfs" ino=4987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1437.221091][T17459] hid-generic 0003:0003:0000.0067: unknown main item tag 0x0 [ 1437.250502][T17459] hid-generic 0003:0003:0000.0067: unknown main item tag 0x0 [ 1437.284013][T17459] hid-generic 0003:0003:0000.0067: unknown main item tag 0x0 [ 1437.318728][T17459] hid-generic 0003:0003:0000.0067: unknown main item tag 0x0 [ 1437.371213][T17459] hid-generic 0003:0003:0000.0067: unknown main item tag 0x0 [ 1437.407430][T17459] hid-generic 0003:0003:0000.0067: unknown main item tag 0x0 [ 1437.503972][T17459] hid-generic 0003:0003:0000.0067: unknown main item tag 0x0 [ 1437.592439][T17459] hid-generic 0003:0003:0000.0067: unknown main item tag 0x0 [ 1437.622675][T17459] hid-generic 0003:0003:0000.0067: unknown main item tag 0x0 [ 1437.630256][T17459] hid-generic 0003:0003:0000.0067: unknown main item tag 0x0 [ 1437.639679][T17459] hid-generic 0003:0003:0000.0067: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1437.790500][T17459] usb 8-1: USB disconnect, device number 44 [ 1437.931453][T21641] fido_id[21641]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1438.089741][T21651] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4213'. [ 1438.100143][T21651] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4213'. [ 1438.425225][T17459] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1438.564294][T19965] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1438.584270][T17459] usb 8-1: Using ep0 maxpacket: 16 [ 1438.590775][T17459] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1438.602297][T17459] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1438.616645][T17459] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.630350][T17459] usb 8-1: Product: syz [ 1438.639241][T17459] usb 8-1: Manufacturer: syz [ 1438.646715][T17459] usb 8-1: SerialNumber: syz [ 1438.663978][T17459] usb 8-1: config 0 descriptor?? [ 1438.676821][T17459] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1438.691735][T17459] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 1438.716684][T19965] usb 5-1: config 0 interface 0 altsetting 60 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1438.728941][T19965] usb 5-1: config 0 interface 0 altsetting 60 endpoint 0xD has invalid wMaxPacketSize 0 [ 1438.740947][T19965] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1438.754333][T19965] usb 5-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=ae.ad [ 1438.764405][T19965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1438.775065][T19965] usb 5-1: config 0 descriptor?? [ 1439.005821][T21655] netlink: 384 bytes leftover after parsing attributes in process `syz.4.4215'. [ 1439.073123][T19965] usb 5-1: string descriptor 0 read error: -71 [ 1439.093957][T19965] usb 5-1: ucan: probing device on interface #0 [ 1439.100677][T19965] usb 5-1: ucan: invalid endpoint configuration [ 1439.107503][T19965] usb 5-1: ucan: probe failed; try to update the device firmware [ 1439.126650][T19965] usb 5-1: USB disconnect, device number 60 [ 1439.292354][T17459] em28xx 8-1:0.0: chip ID is em2765 [ 1439.303010][T21662] netdevsim netdevsim5 : renamed from netdevsim0 (while UP) [ 1439.365313][T21663] netlink: 'syz.5.4217': attribute type 10 has an invalid length. [ 1439.472228][T21663] team0: Port device dummy0 added [ 1439.541821][ T6079] hid-generic 0003:0003:0000.0068: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1439.762449][T21672] fido_id[21672]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1439.928680][T17459] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1439.963356][T17459] em28xx 8-1:0.0: board has no eeprom [ 1440.263222][T21689] syzkaller0: entered promiscuous mode [ 1440.264288][ T6079] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1440.284140][T21689] syzkaller0: entered allmulticast mode [ 1440.341694][T21689] tipc: Enabled bearer , priority 0 [ 1440.365299][T21688] tipc: Resetting bearer [ 1440.404015][T21688] tipc: Disabling bearer [ 1440.446176][ T6079] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1440.459270][ T6079] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1440.527845][ T6079] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1440.565888][ T6079] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1440.582922][ T6079] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.592277][ T6079] usb 5-1: Product: syz [ 1440.596895][ T6079] usb 5-1: Manufacturer: syz [ 1440.601548][ T6079] usb 5-1: SerialNumber: syz [ 1440.612372][ T6079] usb 5-1: config 0 descriptor?? [ 1440.830773][ T6079] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1441.015695][T21646] em28xx 8-1:0.0: reading from i2c device at 0xfffe failed (error=-5) [ 1441.067091][T17459] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1441.081673][T17459] em28xx 8-1:0.0: dvb set to bulk mode. [ 1441.094172][ T6079] em28xx 8-1:0.0: Binding DVB extension [ 1441.105188][T17459] usb 8-1: USB disconnect, device number 45 [ 1441.106120][T16943] usb 5-1: USB disconnect, device number 61 [ 1441.113147][T17459] em28xx 8-1:0.0: Disconnecting em28xx [ 1441.186293][ T6079] em28xx 8-1:0.0: Registering input extension [ 1441.202278][T17459] em28xx 8-1:0.0: Closing input extension [ 1441.244154][T17459] em28xx 8-1:0.0: Freeing device [ 1441.734320][ T6079] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 1441.994329][ T6079] usb 7-1: Using ep0 maxpacket: 16 [ 1442.006306][ T6079] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1442.036918][ T6079] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1442.192754][ T6079] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.221917][ T6079] usb 7-1: config 0 descriptor?? [ 1442.415117][T21729] netlink: 'syz.7.4239': attribute type 10 has an invalid length. [ 1442.496292][T21729] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1442.772100][ T6079] mcp2221 0003:04D8:00DD.0069: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 1442.787671][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1442.787687][ T30] audit: type=1400 audit(1766164327.520:1100): avc: denied { bind } for pid=21733 comm="syz.3.4242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1442.961208][ T6079] usb 7-1: USB disconnect, device number 88 [ 1443.538249][ T30] audit: type=1400 audit(1766164328.350:1101): avc: denied { map } for pid=21743 comm="syz.4.4244" path="socket:[93799]" dev="sockfs" ino=93799 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1443.723359][ T30] audit: type=1400 audit(1766164328.370:1102): avc: denied { read accept } for pid=21743 comm="syz.4.4244" path="socket:[93799]" dev="sockfs" ino=93799 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1443.794348][T21753] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4245'. [ 1444.185242][T17459] usb 7-1: new full-speed USB device number 89 using dummy_hcd [ 1444.375178][T17459] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1444.384162][T17459] usb 7-1: not running at top speed; connect to a high speed hub [ 1444.402430][T17459] usb 7-1: config 251 has an invalid interface number: 156 but max is 0 [ 1444.417807][T17459] usb 7-1: config 251 has no interface number 0 [ 1444.427355][T17459] usb 7-1: config 251 interface 156 has no altsetting 0 [ 1444.474872][T19965] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1444.512743][T17459] usb 7-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice=5b.c8 [ 1444.539771][T17459] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.580600][T21765] netlink: 164 bytes leftover after parsing attributes in process `syz.5.4250'. [ 1444.674564][T19965] usb 4-1: Using ep0 maxpacket: 16 [ 1444.687573][T19965] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1444.745388][T19965] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1444.752045][T19965] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1444.763427][T17459] usb 7-1: Product: syz [ 1444.776814][T19965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.804512][T17459] usb 7-1: Manufacturer: syz [ 1444.818737][T17459] usb 7-1: SerialNumber: syz [ 1444.835166][T19965] usb 4-1: config 0 descriptor?? [ 1445.034292][ T6079] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1445.215726][ T6079] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1445.228813][ T6079] usb 6-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1445.263441][T19965] nzxt-smart2 0003:1E71:2009.006A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 1445.278742][ T6079] usb 6-1: config 2 interface 0 has no altsetting 0 [ 1445.321846][ T6079] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 1445.331309][ T6079] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.339440][ T6079] usb 6-1: Product: syz [ 1445.344015][ T6079] usb 6-1: Manufacturer: syz [ 1445.348745][ T6079] usb 6-1: SerialNumber: syz [ 1445.490112][ T30] audit: type=1400 audit(1766164330.300:1103): avc: denied { open } for pid=21770 comm="syz.7.4253" path="/dev/ptyr2" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1445.510136][T21776] pimreg: entered allmulticast mode [ 1445.553523][ T30] audit: type=1400 audit(1766164330.310:1104): avc: denied { ioctl } for pid=21770 comm="syz.7.4253" path="/dev/ptyr2" dev="devtmpfs" ino=137 ioctlcmd=0x5402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1445.663885][ T6079] usb 6-1: USB disconnect, device number 48 [ 1446.041806][T21776] pimreg: left allmulticast mode [ 1446.759661][T21790] trusted_key: encrypted_key: insufficient parameters specified [ 1447.381091][T19965] usb 4-1: USB disconnect, device number 33 [ 1447.583907][T17459] usb 7-1: unknown interface protocol 0x2c, assuming v1 [ 1447.624674][T17459] usb 7-1: cannot find UAC_HEADER [ 1447.673672][T17459] snd-usb-audio 7-1:251.156: probe with driver snd-usb-audio failed with error -22 [ 1447.719089][T17459] usb 7-1: USB disconnect, device number 89 [ 1447.736690][T17836] udevd[17836]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:251.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1447.898068][T21799] netlink: 'syz.3.4256': attribute type 10 has an invalid length. [ 1447.912260][T21799] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1448.028875][T21796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1448.037850][T21796] batadv_slave_0: entered promiscuous mode [ 1448.345310][T17459] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 1448.554656][T17459] usb 7-1: Using ep0 maxpacket: 16 [ 1448.589699][T17459] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1448.654426][T17459] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1448.666725][T17459] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1448.680644][T17459] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1448.694002][T17459] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1448.829511][T17459] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1448.856767][T17459] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1448.865136][T17459] usb 7-1: Manufacturer: syz [ 1448.875459][T17459] usb 7-1: config 0 descriptor?? [ 1449.224321][T17459] rc_core: IR keymap rc-hauppauge not found [ 1449.230717][T17459] Registered IR keymap rc-empty [ 1449.246326][T17459] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1449.301956][T21803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1449.311224][T21803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1449.354597][T17459] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1449.399391][T17459] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1449.443944][T17459] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input168 [ 1449.481372][T17459] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1449.539168][T17459] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1449.591949][T17459] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1449.636295][T17459] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1449.656671][T17459] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1449.684350][T17459] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1449.704470][T17459] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1449.736761][T21835] pim6reg1: entered promiscuous mode [ 1449.742456][T21835] pim6reg1: entered allmulticast mode [ 1449.802849][T17459] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1449.864871][T17459] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1449.884545][T17459] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1449.924319][T17459] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1449.976680][T17459] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1449.998194][T17459] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1450.014656][T19965] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1450.322492][T19965] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1450.372694][T19965] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1450.392609][T19965] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1450.431387][T19965] usb 8-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1450.460735][T19965] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.478986][T19965] usb 8-1: Product: syz [ 1450.524117][T19965] usb 8-1: Manufacturer: syz [ 1450.530095][T19380] usb 7-1: USB disconnect, device number 90 [ 1450.556281][T19965] usb 8-1: SerialNumber: syz [ 1450.565468][T19965] usb 8-1: config 0 descriptor?? [ 1450.847082][T21843] netlink: 196 bytes leftover after parsing attributes in process `syz.5.4270'. [ 1451.094984][T19965] adutux 8-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1451.201562][T21851] JFS: discard option not supported on device [ 1451.208801][T21851] Mount JFS Failure: -22 [ 1451.213118][T21851] jfs_mount failed w/return code = -22 [ 1451.598657][T21854] cgroup: subsys name conflicts with all [ 1451.878369][T21866] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4276'. [ 1451.897237][T21871] trusted_key: encrypted_key: insufficient parameters specified [ 1451.913365][T21866] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4276'. [ 1452.174115][T17459] usb 8-1: USB disconnect, device number 46 [ 1454.413126][T21911] netlink: 196 bytes leftover after parsing attributes in process `syz.5.4289'. [ 1454.456803][T20148] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 1454.938751][T20148] usb 5-1: config 0 has an invalid interface number: 160 but max is 0 [ 1454.951324][T20148] usb 5-1: config 0 has no interface number 0 [ 1455.230944][T20148] usb 5-1: config 0 interface 160 has no altsetting 0 [ 1455.246219][T20148] usb 5-1: New USB device found, idVendor=a6da, idProduct=1e78, bcdDevice=56.e4 [ 1455.255946][T20148] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1455.267568][T20148] usb 5-1: Product: syz [ 1455.271735][T20148] usb 5-1: Manufacturer: syz [ 1455.319643][T20148] usb 5-1: SerialNumber: syz [ 1455.329344][T20148] usb 5-1: config 0 descriptor?? [ 1455.338561][T20148] usb-storage 5-1:0.160: USB Mass Storage device detected [ 1455.374293][T17459] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1455.526159][T17459] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1455.537248][T17459] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1455.547475][T17459] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1455.694527][T21932] input: syz1 as /devices/virtual/input/input169 [ 1456.287023][T17459] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1456.300031][T17459] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.391598][T17459] usb 4-1: Product: syz [ 1456.396024][T17459] usb 4-1: Manufacturer: syz [ 1456.418709][T17459] usb 4-1: SerialNumber: syz [ 1456.446336][T17459] usb 4-1: config 0 descriptor?? [ 1456.543579][T21941] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4299'. [ 1456.661682][T19504] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 1456.681026][T17459] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1456.834434][T19504] usb 7-1: Using ep0 maxpacket: 16 [ 1456.842266][T19504] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1456.852442][T19504] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1456.869611][T19504] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1456.882142][T19504] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.914280][T19504] usb 7-1: Product: syz [ 1456.926878][T19504] usb 7-1: Manufacturer: syz [ 1456.938763][T19504] usb 7-1: SerialNumber: syz [ 1457.393903][T19504] usb 7-1: 0:2 : does not exist [ 1457.420265][T19504] usb 7-1: USB disconnect, device number 91 [ 1457.548554][T17836] udevd[17836]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1457.641545][T17459] usb 4-1: USB disconnect, device number 34 [ 1457.658633][T19504] usb 5-1: USB disconnect, device number 62 [ 1457.994327][T19965] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1458.054676][T21961] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4304'. [ 1458.113894][T21963] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4304'. [ 1458.583929][T21971] netlink: 196 bytes leftover after parsing attributes in process `syz.6.4306'. [ 1458.609177][T21972] netlink: 196 bytes leftover after parsing attributes in process `syz.7.4305'. [ 1459.004256][T19965] usb 6-1: Using ep0 maxpacket: 16 [ 1459.195110][T19965] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1459.207481][T19965] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1459.216714][T19965] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.224730][T19965] usb 6-1: Product: syz [ 1459.228965][T19965] usb 6-1: Manufacturer: syz [ 1459.233564][T19965] usb 6-1: SerialNumber: syz [ 1459.240963][T19965] usb 6-1: config 0 descriptor?? [ 1459.252496][T19965] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1459.261829][T19965] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 1459.386781][T21974] syzkaller0: entered promiscuous mode [ 1459.392548][T21974] syzkaller0: entered allmulticast mode [ 1459.855504][T19965] em28xx 6-1:0.0: chip ID is em2765 [ 1460.466815][T21990] F2FS-fs (loop15): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1460.475201][T21990] F2FS-fs (loop15): Can't find valid F2FS filesystem in 1th superblock [ 1460.483824][T21990] F2FS-fs (loop15): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1460.492207][T21990] F2FS-fs (loop15): Can't find valid F2FS filesystem in 2th superblock [ 1460.517794][T21990] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4312'. [ 1460.863392][T19965] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1460.872727][T19965] em28xx 6-1:0.0: board has no eeprom [ 1461.147068][T19965] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1461.164290][T19965] em28xx 6-1:0.0: dvb set to bulk mode. [ 1461.184346][T19504] em28xx 6-1:0.0: Binding DVB extension [ 1461.209363][T19965] usb 6-1: USB disconnect, device number 49 [ 1461.243162][T19965] em28xx 6-1:0.0: Disconnecting em28xx [ 1461.852088][T19504] em28xx 6-1:0.0: Registering input extension [ 1461.866370][T19965] em28xx 6-1:0.0: Closing input extension [ 1461.896868][T19965] em28xx 6-1:0.0: Freeing device [ 1462.008261][T22010] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1462.076030][T22011] JFS: discard option not supported on device [ 1462.082960][T22011] Mount JFS Failure: -22 [ 1462.087803][T22011] jfs_mount failed w/return code = -22 [ 1462.604284][T19504] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1462.633912][T22015] input: syz1 as /devices/virtual/input/input171 [ 1462.794729][T19504] usb 4-1: Using ep0 maxpacket: 32 [ 1462.895992][T22024] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4321'. [ 1462.909436][T22024] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4321'. [ 1463.059995][T20148] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1463.119089][T22025] netlink: 196 bytes leftover after parsing attributes in process `syz.6.4322'. [ 1463.285027][T20148] usb 6-1: Using ep0 maxpacket: 32 [ 1463.298712][T20148] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1463.394045][T20148] usb 6-1: config 0 has no interface number 0 [ 1463.456404][T20148] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1463.483810][T20148] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.518262][T20148] usb 6-1: Product: syz [ 1463.538579][T20148] usb 6-1: Manufacturer: syz [ 1463.567399][T20148] usb 6-1: SerialNumber: syz [ 1463.641364][T20148] usb 6-1: config 0 descriptor?? [ 1463.726902][T20148] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1463.744436][T20148] usb 6-1: selecting invalid altsetting 1 [ 1463.759303][T20148] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1463.785304][T20148] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1463.787152][T19504] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1463.803789][T19504] usb 4-1: config 0 has no interface number 0 [ 1463.813052][T20148] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1463.815273][T19504] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1463.830490][T19504] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.833335][T20148] usb 6-1: media controller created [ 1463.838533][T19504] usb 4-1: Product: syz [ 1463.848325][T19504] usb 4-1: Manufacturer: syz [ 1463.852922][T19504] usb 4-1: SerialNumber: syz [ 1463.858349][T20148] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1463.868922][T19504] usb 4-1: config 0 descriptor?? [ 1463.883392][T19504] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1463.892986][T19504] usb 4-1: selecting invalid altsetting 1 [ 1463.898957][T19504] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1463.956248][T19504] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1463.967434][T19504] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1463.976060][T19504] usb 4-1: media controller created [ 1464.080054][T19504] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1464.914854][T20148] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1464.992617][T20148] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1464.993180][T19504] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1465.008075][T19504] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1465.015818][T19504] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1465.043735][T20148] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1465.222950][T19504] usb 4-1: USB disconnect, device number 35 [ 1465.406060][T20148] usb 6-1: USB disconnect, device number 50 [ 1465.560561][T22055] netlink: 212328 bytes leftover after parsing attributes in process `syz.4.4329'. [ 1465.604426][T22055] netlink: ct family unspecified [ 1465.800876][T22061] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4333'. [ 1465.865449][T22064] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4333'. [ 1466.138821][T22065] bond4: (slave wlan0): Releasing backup interface [ 1467.621193][T22091] netlink: 'syz.7.4335': attribute type 10 has an invalid length. [ 1468.314075][T20528] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 1468.514418][T20528] usb 7-1: Using ep0 maxpacket: 16 [ 1468.518417][T20528] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1468.518495][T20528] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1468.518627][T20528] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1468.518700][T20528] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1468.551173][T20528] usb 7-1: config 0 descriptor?? [ 1468.593607][T22101] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22101 comm=syz.5.4342 [ 1469.019077][T20528] nzxt-smart2 0003:1E71:2009.006B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0 [ 1469.144280][T17459] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1469.388178][T17459] usb 8-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1469.400330][T17459] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.431415][T17459] usb 8-1: Product: syz [ 1469.507104][T17459] usb 8-1: Manufacturer: syz [ 1469.537382][T17459] usb 8-1: SerialNumber: syz [ 1469.727549][T17459] usb 8-1: config 0 descriptor?? [ 1469.747382][T17459] hub 8-1:0.0: bad descriptor, ignoring hub [ 1469.765003][T17459] hub 8-1:0.0: probe with driver hub failed with error -5 [ 1469.956169][T17459] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1469.976642][T17459] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1470.004818][T17459] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1470.043790][T17459] usb 8-1: media controller created [ 1470.070526][T17459] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1470.453892][T17459] DVB: Unable to find symbol dib7000p_attach() [ 1470.481024][T17459] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1470.891467][T22128] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4348'. [ 1470.954303][T22130] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4348'. [ 1470.963637][T17459] rc_core: IR keymap rc-dib0700-rc5 not found [ 1471.046782][T17459] Registered IR keymap rc-empty [ 1471.108514][T18367] usb 7-1: USB disconnect, device number 92 [ 1471.928236][T22137] netlink: 88 bytes leftover after parsing attributes in process `syz.5.4350'. [ 1472.006290][T22138] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4351'. [ 1472.030241][T22138] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4351'. [ 1472.487056][T22148] netlink: 196 bytes leftover after parsing attributes in process `syz.4.4352'. [ 1472.581541][T22138] bond12: (slave wlan0): Releasing backup interface [ 1473.245209][T22156] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4354'. [ 1473.267164][T22156] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4354'. [ 1474.467594][T22159] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22159 comm=syz.6.4355 [ 1474.801269][T22173] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4362'. [ 1474.993070][T22180] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4363'. [ 1475.175263][T22175] ------------[ cut here ]------------ [ 1475.180779][T22175] usb 8-1: BOGUS control dir, pipe 80002f80 doesn't match bRequestType c0 [ 1475.189802][T22175] WARNING: drivers/usb/core/urb.c:412 at usb_submit_urb+0x153e/0x1970, CPU#0: syz.4.4361/22175 [ 1475.200874][T22175] Modules linked in: [ 1475.205444][T22175] CPU: 0 UID: 0 PID: 22175 Comm: syz.4.4361 Tainted: G L syzkaller #0 PREEMPT(full) [ 1475.216403][T22175] Tainted: [L]=SOFTLOCKUP [ 1475.220721][T22175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1475.231540][T22175] RIP: 0010:usb_submit_urb+0x1549/0x1970 [ 1475.237270][T22175] Code: 30 48 89 7c 24 38 e8 f6 b2 a8 fa 48 8b 7c 24 38 e8 6c 79 d0 fe 48 89 c6 48 8d 3d 32 3d 7e 09 48 8b 54 24 30 45 89 e8 44 89 f9 <67> 48 0f b9 3a e9 fd ed ff ff 48 89 7c 24 30 e8 c3 b2 a8 fa 48 8b [ 1475.257062][T22175] RSP: 0018:ffffc9000dfdf970 EFLAGS: 00010283 [ 1475.263307][T22175] RAX: ffffffff8c545500 RBX: ffff888056ae0300 RCX: 0000000080002f80 [ 1475.271516][T22175] RDX: ffff8880472fbba0 RSI: ffffffff8c545500 RDI: ffffffff909470e0 [ 1475.279685][T22175] RBP: ffff888077ecc058 R08: 00000000000000c0 R09: 0000000000000000 [ 1475.287734][T22175] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802a60d1e0 [ 1475.295751][T22175] R13: 00000000000000c0 R14: 0000000000000001 R15: 0000000080002f80 [ 1475.303718][T22175] FS: 00007fabdc6c16c0(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 1475.312681][T22175] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1475.319715][T22175] CR2: 00002000000bf030 CR3: 0000000064dfc000 CR4: 00000000003526f0 [ 1475.327839][T22175] Call Trace: [ 1475.331121][T22175] [ 1475.334051][T22175] ? __init_swait_queue_head+0xca/0x150 [ 1475.339631][T22175] usb_start_wait_urb+0x104/0x4e0 [ 1475.344704][T22175] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1475.350271][T22175] ? __asan_memset+0x23/0x50 [ 1475.354901][T22175] usb_control_msg+0x326/0x4a0 [ 1475.359655][T22175] ? __pfx_usb_control_msg+0x10/0x10 [ 1475.364959][T22175] dib0700_ctrl_rd+0x1b2/0x350 [ 1475.369711][T22175] dib0700_i2c_xfer+0xa9a/0xe40 [ 1475.374728][T22175] __i2c_transfer+0x6b6/0x2100 [ 1475.379476][T22175] ? task_blocks_on_rt_mutex.constprop.0.isra.0+0x1be7/0x1cc0 [ 1475.386942][T22175] ? __pfx___i2c_transfer+0x10/0x10 [ 1475.392120][T22175] i2c_transfer+0x1da/0x380 [ 1475.396647][T22175] i2cdev_ioctl_rdwr+0x373/0x710 [ 1475.401566][T22175] i2cdev_ioctl+0x628/0x840 [ 1475.406065][T22175] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1475.411067][T22175] ? selinux_file_ioctl+0x180/0x270 [ 1475.416287][T22175] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1475.421286][T22175] __x64_sys_ioctl+0x18e/0x210 [ 1475.426085][T22175] do_syscall_64+0xcd/0xf80 [ 1475.430567][T22175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1475.436449][T22175] RIP: 0033:0x7fabdb78f749 [ 1475.440836][T22175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1475.460476][T22175] RSP: 002b:00007fabdc6c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1475.468887][T22175] RAX: ffffffffffffffda RBX: 00007fabdb9e5fa0 RCX: 00007fabdb78f749 [ 1475.476967][T22175] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000003 [ 1475.484934][T22175] RBP: 00007fabdb813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1475.492878][T22175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1475.500839][T22175] R13: 00007fabdb9e6038 R14: 00007fabdb9e5fa0 R15: 00007fff1e2041d8 [ 1475.508808][T22175] [ 1475.511802][T22175] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1475.519054][T22175] CPU: 0 UID: 0 PID: 22175 Comm: syz.4.4361 Tainted: G L syzkaller #0 PREEMPT(full) [ 1475.529958][T22175] Tainted: [L]=SOFTLOCKUP [ 1475.534249][T22175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1475.544274][T22175] Call Trace: [ 1475.547528][T22175] [ 1475.550440][T22175] dump_stack_lvl+0x3d/0x1f0 [ 1475.555010][T22175] vpanic+0x640/0x6f0 [ 1475.558966][T22175] ? usb_submit_urb+0x153e/0x1970 [ 1475.563965][T22175] panic+0xca/0xd0 [ 1475.567659][T22175] ? __pfx_panic+0x10/0x10 [ 1475.572063][T22175] check_panic_on_warn+0xab/0xb0 [ 1475.576982][T22175] __warn+0x108/0x3c0 [ 1475.580936][T22175] __report_bug+0x2a0/0x520 [ 1475.585411][T22175] ? usb_submit_urb+0x153e/0x1970 [ 1475.590415][T22175] ? __pfx___report_bug+0x10/0x10 [ 1475.595418][T22175] ? kasan_save_stack+0x42/0x60 [ 1475.600245][T22175] ? kasan_save_stack+0x33/0x60 [ 1475.605067][T22175] report_bug_entry+0xe1/0x290 [ 1475.609803][T22175] ? usb_submit_urb+0x1549/0x1970 [ 1475.614799][T22175] handle_bug+0x18a/0x260 [ 1475.619109][T22175] exc_invalid_op+0x17/0x50 [ 1475.623586][T22175] asm_exc_invalid_op+0x1a/0x20 [ 1475.628420][T22175] RIP: 0010:usb_submit_urb+0x1549/0x1970 [ 1475.634030][T22175] Code: 30 48 89 7c 24 38 e8 f6 b2 a8 fa 48 8b 7c 24 38 e8 6c 79 d0 fe 48 89 c6 48 8d 3d 32 3d 7e 09 48 8b 54 24 30 45 89 e8 44 89 f9 <67> 48 0f b9 3a e9 fd ed ff ff 48 89 7c 24 30 e8 c3 b2 a8 fa 48 8b [ 1475.653608][T22175] RSP: 0018:ffffc9000dfdf970 EFLAGS: 00010283 [ 1475.659648][T22175] RAX: ffffffff8c545500 RBX: ffff888056ae0300 RCX: 0000000080002f80 [ 1475.667591][T22175] RDX: ffff8880472fbba0 RSI: ffffffff8c545500 RDI: ffffffff909470e0 [ 1475.675535][T22175] RBP: ffff888077ecc058 R08: 00000000000000c0 R09: 0000000000000000 [ 1475.683478][T22175] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802a60d1e0 [ 1475.691418][T22175] R13: 00000000000000c0 R14: 0000000000000001 R15: 0000000080002f80 [ 1475.699378][T22175] ? __init_swait_queue_head+0xca/0x150 [ 1475.704903][T22175] usb_start_wait_urb+0x104/0x4e0 [ 1475.709904][T22175] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1475.715429][T22175] ? __asan_memset+0x23/0x50 [ 1475.719992][T22175] usb_control_msg+0x326/0x4a0 [ 1475.724731][T22175] ? __pfx_usb_control_msg+0x10/0x10 [ 1475.729992][T22175] dib0700_ctrl_rd+0x1b2/0x350 [ 1475.734744][T22175] dib0700_i2c_xfer+0xa9a/0xe40 [ 1475.739590][T22175] __i2c_transfer+0x6b6/0x2100 [ 1475.744329][T22175] ? task_blocks_on_rt_mutex.constprop.0.isra.0+0x1be7/0x1cc0 [ 1475.751782][T22175] ? __pfx___i2c_transfer+0x10/0x10 [ 1475.756954][T22175] i2c_transfer+0x1da/0x380 [ 1475.761435][T22175] i2cdev_ioctl_rdwr+0x373/0x710 [ 1475.766357][T22175] i2cdev_ioctl+0x628/0x840 [ 1475.770844][T22175] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1475.775840][T22175] ? selinux_file_ioctl+0x180/0x270 [ 1475.781016][T22175] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1475.786012][T22175] __x64_sys_ioctl+0x18e/0x210 [ 1475.790754][T22175] do_syscall_64+0xcd/0xf80 [ 1475.795230][T22175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1475.801096][T22175] RIP: 0033:0x7fabdb78f749 [ 1475.805483][T22175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1475.825065][T22175] RSP: 002b:00007fabdc6c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1475.833450][T22175] RAX: ffffffffffffffda RBX: 00007fabdb9e5fa0 RCX: 00007fabdb78f749 [ 1475.841393][T22175] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000003 [ 1475.849339][T22175] RBP: 00007fabdb813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1475.857285][T22175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1475.865237][T22175] R13: 00007fabdb9e6038 R14: 00007fabdb9e5fa0 R15: 00007fff1e2041d8 [ 1475.873208][T22175] [ 1475.876525][T22175] Kernel Offset: disabled [ 1475.880826][T22175] Rebooting in 86400 seconds..