last executing test programs: 12.979571495s ago: executing program 4 (id=558): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/rt6_stats\x00') pread64(r0, &(0x7f00000000c0)=""/144, 0x90, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="b7000000000000006111900000e1f90006000000000000009500000000000000650881f86b2cc338df645e9fe3e06088f59a1804a0411223122b5edcdd5f6cd0ac52cd010001000000000042db7732b4e7f5318f7d072f289968935fe5143706d8a9dacef4e6"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) socket$kcm(0x2, 0xa, 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x9c, &(0x7f0000000500)=ANY=[@ANYBLOB="0180c2000001aab1aaaaaaaa3388a801008100110086dd65795382005e210100000000000000000000000000000000ff010000000000000000000000000001730201400000000000000000000000000000ffff000000004e244e2104419078a897c45f04021920e8ddf55627382a42ccb6c3dc3e79f2bb5e4a1ad8aa2bb0b07db321cc789c44"], 0x0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x3c, r4, 0x1, 0xffffbffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c1937}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10001}]}, 0x3c}}, 0x20000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f0000000c00)) sendmsg$NFT_BATCH(r5, 0x0, 0x20048045) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x24002801}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e22, 0x3, 'rr\x00', 0x1e, 0x4, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'lc\x00', 0x11, 0x3240, 0x3d}, {@loopback, 0x4e23, 0x4, 0x8628, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44) 10.703886263s ago: executing program 4 (id=561): socket$packet(0x11, 0x2, 0x300) socket$xdp(0x2c, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271b, &(0x7f0000000580)=""/102385, &(0x7f0000000000)=0x41) syz_usb_connect$uac2(0x2, 0x9d, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x46d, 0x8c6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b, 0x3, 0x1, 0x7, 0x70, 0xb, {0x8, 0xb, 0x1, 0x1, 0x1, 0xff, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x6, 0x3, 0x15, 0x7}, [@output_terminal={0xc, 0x24, 0x3, 0x5, 0x301, 0x5d, 0x2, 0x0, 0x8b, 0x20}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x3e}, @as_header={0x10, 0x24, 0x1, 0x5, 0xc4, 0x3, 0x3, 0x3, 0xd, 0xce}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0xc, 0x1d, {0x8, 0x25, 0x1, 0x83, 0x3f, 0x2, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x4, 0x1, 0xf2, {0x8, 0x25, 0x1, 0x2, 0xc, 0x4, 0x7}}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) 8.245965171s ago: executing program 0 (id=568): syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) unshare(0x20040600) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/uevent_seqnum', 0x648400, 0x82) fgetxattr(r0, &(0x7f0000000000)=ANY=[], 0x0, 0xffffffd6) 7.983516035s ago: executing program 0 (id=571): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x107842, 0xa) inotify_init() r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') syz_mount_image$fuse(&(0x7f0000000200), 0x0, 0x28a6420, &(0x7f0000000280)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=r0, @ANYRES8], 0x1, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x880) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x80000000020009) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r5, &(0x7f00000000c0)="01", 0x400000}]) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) 7.982183385s ago: executing program 4 (id=572): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000540)=""/22, 0x16}], 0x2}, 0x10001}], 0x1, 0x2003, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="b800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000080008400000ff1608001540000000000800048004"], 0xb8}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) 6.814270375s ago: executing program 4 (id=577): ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x10, 0xfff3}, {}, {0x6, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @mcast1}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x50}}, 0x40040) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r9 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000600), 0x8002, 0x0) ioctl$TCSETSW(r9, 0x5403, &(0x7f00000027c0)={0xab6, 0x3, 0xffffffc0, 0x80, 0x1, "e625b7fcf9fe176d572f93d8e16b493ad3f282"}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r8, @ANYBLOB="09000000001d00000020000180080003f3ffffff0014000200697076746e6ce582d81d300000000000"], 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x40000) add_key$keyring(&(0x7f0000000380), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x331002, 0x0) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, &(0x7f0000000100)={0x60, 0xf0, 0x60, 0x0, 0x0, 0x4db, 0x8, 0x0, {0x5, 0x40}, {0x0, 0x1}, {0x8000}, {0x3, 0x0, 0x1}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffc00, 0x0, 0x400, 0x0, 0x0, 0x21, 0x0, 0x0, 0x7}) 6.693867871s ago: executing program 1 (id=579): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYRES32, @ANYBLOB="0200"/15, @ANYRES32, @ANYBLOB="01000000050000000100000000000000000000000000000000000000c25c904b13780666090e54c405"], 0x50) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001400)={0x2c, 0x0, 0x200, 0x70bd28, 0x8, {}, [@HEADER={0x4}, @HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336be", 0x95}, {0x0}, {&(0x7f00000005c0)="f2b3", 0x2}], 0x3}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000034000000040000000000000014000000000000002900000034000000fdffffff0000000000010000000000002900000004000000041c000000000000fe72f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc00f3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5801409e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad0738000000010c7a0180050000000000000009000000000000000400000000000000060000000000000000040000000000000b0000000000000005020a7e00010005020bf4c910fc0200000000000000000000780e000000000000000000140000000000000029000000340000000000000000000000700100000000000029000000360000005e2a000000000000ff4150d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70000100000100010800000000000000000708000000030000ff0f07100000000002070600ff7f00000000000008c6c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd"], 0x340}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78", 0x69}, {&(0x7f00000006c0)="138b9f8300af1d793c8e", 0xa}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5e", 0x1b}, {&(0x7f0000000e80)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e045dc31db292f5ab26a8f1466d90f0f98ff1a0e2b1018", 0x55}], 0x5}}], 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.18527452s ago: executing program 1 (id=581): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8206, 0x110}}, 0x20}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) syz_open_dev$vim2m(0x0, 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x60840, 0x5a) fcntl$setlease(r2, 0x400, 0x0) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) fanotify_init(0x40, 0x8000) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') 4.120950625s ago: executing program 3 (id=582): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000140), 0x0, 0x0, 0x1) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008060000", @ANYRES64=r1], 0xfdef) 4.080139418s ago: executing program 1 (id=583): bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xe, &(0x7f0000001080)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x78, 0x29, 0x4, {0x4, 0xb, '\x00', [@generic={0x80, 0xa, "09e12e5f0b6bdcf72f2e"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x4, 0x400, 0xb]}}, @hao={0xc9, 0x10, @private2}, @generic={0x93}]}}}, @hoplimit={{0x14}}, @hopopts={{0x18, 0x29, 0x36, {0x5e}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x148}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.078476948s ago: executing program 2 (id=584): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0xc0, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x94, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_virt_wifi\x00'}, @TCA_U32_LINK={0x8}, @TCA_U32_SEL={0x74, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0x1, 0xfffffffb, 0x100, 0x3ff}, {0x9, 0x7, 0x3e, 0x800}, {0x7, 0x10, 0x5, 0x7}, {0x40, 0x80000001, 0xfffffffe, 0xffffffff}, {0x1, 0x5, 0x5127, 0x10001}]}}]}}]}, 0xc0}}, 0x20044004) 3.84194831s ago: executing program 0 (id=585): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) write$P9_RAUTH(r1, &(0x7f0000001040)={0x14, 0x67, 0x1, {0x4, 0x4}}, 0x14) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) shutdown(r2, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 3.83590249s ago: executing program 2 (id=586): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001480)=""/4096, 0x1000}], 0x1) 3.561472694s ago: executing program 3 (id=587): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@newtaction={0x104, 0x30, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [{0xf0, 0x1, [@m_skbmod={0xc0, 0x1f, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0x67, 0x6, "f81782037c8e1f7fce7d04f75d2d01876efef68b43bf9d7429e02add52bbc63558b0e66dedf8acc979dd8b9447688285bceab64aea3c8eb6e322349d54cf03a098a41d902f8a3750d12c17b057bb5e5cc95da9f4101b041a8d70a1e6490ff3b3715a4d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x2c, 0x17, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x24008804, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 3.561100494s ago: executing program 0 (id=588): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000540)=""/22, 0x16}], 0x2}, 0x10001}], 0x1, 0x2003, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="b800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000080008400000ff1608001540000000000800048004"], 0xb8}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) 3.331965526s ago: executing program 3 (id=589): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x3fffffffffffe, {0x0, 0x200000000, 0x1, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x200000000000, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x80000000, 0x0, 0xd, r2, 0x0, 0x7, 0xa0}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f00000001c0)='./file0/file0\x00', 0x108) r3 = syz_create_resource$binfmt(&(0x7f0000000080)='./file0/file0\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x41, 0x1ff) umount2(&(0x7f0000000000)='./file0\x00', 0x3) 2.497210839s ago: executing program 0 (id=590): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000140)={0x4, 0x7, 0x8}) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r2, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r3, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r4, 0x1) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4000, r0}, 0x18) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000040)=""/70, 0x46}], 0x1, 0xbb21, 0x3) 2.460873111s ago: executing program 3 (id=591): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYRES32, @ANYBLOB="0200"/15, @ANYRES32, @ANYBLOB="01000000050000000100000000000000000000000000000000000000c25c904b13780666090e54c405"], 0x50) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001400)={0x2c, 0x0, 0x200, 0x70bd28, 0x8, {}, [@HEADER={0x4}, @HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336be", 0x95}, {0x0}, {&(0x7f00000005c0)="f2b3", 0x2}], 0x3}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78", 0x69}, {&(0x7f00000006c0)="138b9f8300af1d793c8e", 0xa}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5e", 0x1b}, {&(0x7f0000000e80)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e045dc31db292f5ab26a8f1466d90f0f98ff1a0e2b1018", 0x55}], 0x5}}], 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.375861156s ago: executing program 1 (id=592): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000b80)=[{&(0x7f00000003c0)="bc", 0x1}, {0x0}], 0x2) close(0x3) 2.237905373s ago: executing program 2 (id=593): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c000000020605000000000000000000000000000900020073797a310000c7000c000300686173683a697000050005000a0000000500040001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03400000000000000000010000000900010073797a300000000040000000160a07000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000038000000160a09010000000000000000010000"], 0xc0}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000240)={r10, 0xfb7b}, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000200)={r10, 0x8a, 0x6, 0x8}, &(0x7f0000000240)=0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050007000000140004"], 0x58}}, 0x0) 2.150421897s ago: executing program 4 (id=594): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0xe, 0x2000) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000200)=""/182) 1.290172302s ago: executing program 0 (id=595): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x4, 0x5, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f00000001c0)="bad00466ed440f20c0663501000000440f22c0baf80c66b8fc69eb8566efbafc0c66b80050000066ef440f20c0663501000000440f22c00f20e06635080000000f22e066b8f7ffffff0f23c00f21f86635020003000f23f82ef3a5baf80c66b87eb10c8d66efbafc0ced0f01c4ba2000ec", 0x71}], 0x1, 0x21, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$vsock_stream(0x28, 0x1, 0x0) getrlimit(0x1d, 0x0) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000c40)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a0900000000000000001d020000000900010073797a30000000000900030073797a32"], 0x54}}, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000100)={0x1, 0x6d, 0x2, &(0x7f0000000240)={0xa1, "1a9c66bf2f615e427b2644e953449f6c12f206b2855cd8c82b1b9951cf5a1dee93"}}) r6 = socket$kcm(0xa, 0x922000000003, 0x11) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r7, 0x0, 0xcd, &(0x7f0000000200)={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffe, "a1e96e2678b0afa605953ab4536f70c05f8f3c96fc304c0472ec0a7f01a413b4", 0x1, 0x848, 0xff, 0x10001}, 0x3c) setsockopt$sock_attach_bpf(r6, 0x29, 0x24, &(0x7f00000000c0), 0x4) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f00000002c0)={0xfffff679, 0x6, 0x5, 0x1, 0x6, "b0cfc518474653f921e31ed71453439c21edd0", 0xfffffffa, 0xc}) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9, 0x3}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b40011", 0x29}], 0x1}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r8, 0x0, 0x800) r9 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r9, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000280)=[{0x14, '\x00', @st={0x4, [{0x3, @svalue=0xa}, {0x2, @svalue=0x7fffffff}, {0x0, @uvalue=0xd00}, {0x1, @svalue=0x2}]}, 0x4}, {0x2, '\x00', @data=0x2646585b, 0x9}, {0x34, '\x00', @st={0x4, [{0x2, @svalue=0x1}, {0x0, @uvalue=0xffffffffffffffff}, {0x3, @uvalue=0x3}, {0x1, @svalue=0x50}]}, 0xe6}]}) 1.226506856s ago: executing program 3 (id=596): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x107842, 0xa) inotify_init() r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') syz_mount_image$fuse(&(0x7f0000000200), 0x0, 0x28a6420, &(0x7f0000000280)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=r0, @ANYRES8], 0x1, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x880) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x80000000020009) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r5, &(0x7f00000000c0)="01", 0x400000}]) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) 764.20307ms ago: executing program 1 (id=597): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0xc0, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x94, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_virt_wifi\x00'}, @TCA_U32_LINK={0x8}, @TCA_U32_SEL={0x74, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0x1, 0xfffffffb, 0x100, 0x3ff}, {0x9, 0x7, 0x3e, 0x800}, {0x7, 0x10, 0x5, 0x7}, {0x40, 0x80000001, 0xfffffffe, 0xffffffff}, {0x1, 0x5, 0x5127, 0x10001}]}}]}}]}, 0xc0}}, 0x20044004) 533.893382ms ago: executing program 1 (id=598): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000140)={0x4, 0x7, 0x8}) flock(r0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r2, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r3, 0x1) 242.594026ms ago: executing program 2 (id=599): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@newtaction={0x104, 0x30, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [{0xf0, 0x1, [@m_skbmod={0xc0, 0x1f, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0x67, 0x6, "f81782037c8e1f7fce7d04f75d2d01876efef68b43bf9d7429e02add52bbc63558b0e66dedf8acc979dd8b9447688285bceab64aea3c8eb6e322349d54cf03a098a41d902f8a3750d12c17b057bb5e5cc95da9f4101b041a8d70a1e6490ff3b3715a4d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x2c, 0x17, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x24008804, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 163.226591ms ago: executing program 4 (id=600): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x20402) readv(r0, &(0x7f0000002680)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000002500)=""/74, 0x4a}, {&(0x7f0000002640)=""/56, 0x38}], 0x5) 129.516303ms ago: executing program 2 (id=601): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x3fffffffffffe, {0x0, 0x200000000, 0x1, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x200000000000, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x80000000, 0x0, 0xd, r2, 0x0, 0x7, 0xa0}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f00000001c0)='./file0/file0\x00', 0x108) r3 = syz_create_resource$binfmt(&(0x7f0000000080)='./file0/file0\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x41, 0x1ff) umount2(&(0x7f0000000000)='./file0\x00', 0x3) 733.48µs ago: executing program 2 (id=602): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) sendmsg$kcm(r2, &(0x7f00000002c0)={&(0x7f0000000440)=@xdp={0x2c, 0x8, r4, 0x9}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000700)="88d0c683cd0360f18b4b39f53616b2802c1423", 0x13}], 0x1}, 0x20008110) 0s ago: executing program 3 (id=603): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000540)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x20040001}, 0x40810) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) kernel console output (not intermixed with test programs): ][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.566053][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.574262][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.584038][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.593678][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.603317][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.612897][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.621584][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.642486][ T4275] device veth1_vlan entered promiscuous mode [ 75.663327][ T4280] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.673557][ T4280] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.684097][ T4280] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.693545][ T4280] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.705416][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.714097][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.724410][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.733391][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.742374][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.762503][ T4279] device veth1_vlan entered promiscuous mode [ 75.783619][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.793075][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.811301][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.819449][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.834275][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.848065][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.862327][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.895999][ T4275] device veth0_macvtap entered promiscuous mode [ 75.929264][ T4279] device veth0_macvtap entered promiscuous mode [ 75.965247][ T4275] device veth1_macvtap entered promiscuous mode [ 75.992712][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.025443][ T4346] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.031977][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.092764][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.107231][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.122936][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.143085][ T4279] device veth1_macvtap entered promiscuous mode [ 76.161387][ T4346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 76.187160][ T4346] device veth0 entered promiscuous mode [ 76.202699][ T4346] device veth0 left promiscuous mode [ 76.286729][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.299504][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.310606][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.322038][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.332497][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.343288][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.356736][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.375416][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.387394][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.398646][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.411835][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.422312][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.433276][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.464178][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.479043][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.491303][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.504696][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.517235][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.533153][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.548442][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.559833][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.574094][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.584335][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.599712][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.634303][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.647466][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.663541][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.673399][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.683141][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.700104][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.714694][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.725125][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.735557][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.744821][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.755878][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.766159][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.777085][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.788404][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.799857][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.812159][ T4270] Bluetooth: hci1: command 0x0419 tx timeout [ 76.819137][ T4270] Bluetooth: hci2: command 0x0419 tx timeout [ 76.819849][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 76.835231][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.846877][ T4279] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.858411][ T4279] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.869230][ T4279] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.884755][ T4279] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.910758][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.938447][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.961419][ T48] Bluetooth: hci3: command 0x0419 tx timeout [ 76.967878][ T4278] Bluetooth: hci4: command 0x0419 tx timeout [ 76.981955][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.004775][ T4275] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.014154][ T4275] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.023694][ T4275] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.041223][ T4275] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.175508][ T4331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.259428][ T4331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.319740][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.386477][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.415502][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.471236][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.489091][ T4331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.499061][ T4331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.532069][ T1075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.566353][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.581490][ T1075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.646067][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.661499][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.691356][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.717313][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.091670][ T4281] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 78.225968][ T26] audit: type=1326 audit(1776771897.098:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4373 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e639c819 code=0x7ffc0000 [ 78.313554][ T4281] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 78.332369][ T26] audit: type=1326 audit(1776771897.098:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4373 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e639c819 code=0x7ffc0000 [ 78.332747][ T4281] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 78.378897][ T4281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.413869][ T4281] usb 2-1: config 0 descriptor?? [ 78.433462][ T26] audit: type=1326 audit(1776771897.098:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4373 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e639c819 code=0x7ffc0000 [ 78.455933][ T14] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 78.545823][ T26] audit: type=1326 audit(1776771897.098:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4373 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f50e639c819 code=0x7ffc0000 [ 78.634436][ T26] audit: type=1326 audit(1776771897.098:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4373 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e639c819 code=0x7ffc0000 [ 78.680384][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 78.688270][ T14] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 78.717342][ T14] usb 1-1: config 0 has no interface number 0 [ 78.724373][ T4313] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 78.732890][ T14] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 78.783537][ T26] audit: type=1326 audit(1776771897.098:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4373 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f50e635d04e code=0x7ffc0000 [ 78.807672][ T14] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 78.810339][ T4281] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 78.833427][ T14] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 78.847208][ T26] audit: type=1326 audit(1776771897.098:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4373 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e639c819 code=0x7ffc0000 [ 78.881338][ T14] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 78.900328][ T4313] usb 5-1: device descriptor read/64, error -71 [ 78.906817][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.936452][ T26] audit: type=1326 audit(1776771897.118:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4373 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e639c819 code=0x7ffc0000 [ 78.980804][ T14] usb 1-1: config 0 descriptor?? [ 78.987003][ T26] audit: type=1326 audit(1776771897.118:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4373 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e639c819 code=0x7ffc0000 [ 79.023708][ T14] ldusb 1-1:0.55: Interrupt in endpoint not found [ 79.061733][ T26] audit: type=1326 audit(1776771897.128:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4373 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f50e639c819 code=0x7ffc0000 [ 79.124325][ T4281] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.147359][ T4281] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 79.181102][ T4313] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 79.186334][ T4281] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 79.239593][ T4281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.249460][ T4281] usb 3-1: Product: syz [ 79.262072][ T4281] usb 3-1: Manufacturer: syz [ 79.277986][ T4281] usb 3-1: SerialNumber: syz [ 79.332075][ T4281] cdc_mbim 3-1:1.0: skipping garbage [ 79.362704][ T4313] usb 5-1: device descriptor read/64, error -71 [ 79.501370][ T4313] usb usb5-port1: attempt power cycle [ 79.513313][ T4311] usb 1-1: USB disconnect, device number 2 [ 79.529199][ T4384] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 79.860271][ T4361] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 79.950308][ T4313] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 79.998007][ T4313] usb 5-1: device descriptor read/8, error -71 [ 80.063758][ T4361] usb 4-1: unable to get BOS descriptor or descriptor too short [ 80.075127][ T4361] usb 4-1: not running at top speed; connect to a high speed hub [ 80.089697][ T4361] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 80.119571][ T4361] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 80.143161][ T4361] usb 4-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 80.159891][ T4384] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 80.174943][ T4281] cdc_mbim 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 80.178819][ T4361] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.191827][ T4394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'. [ 80.205110][ T4281] cdc_mbim 3-1:1.0: setting rx_max = 2048 [ 80.207014][ T4361] usb 4-1: Product: syz [ 80.219504][ T4361] usb 4-1: Manufacturer: syz [ 80.243816][ T4361] usb 4-1: SerialNumber: syz [ 80.270463][ T4313] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 80.313198][ T4313] usb 5-1: device descriptor read/8, error -71 [ 80.376760][ T4281] cdc_mbim 3-1:1.0: setting tx_max = 184 [ 80.416117][ T4281] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 80.441221][ T4313] usb usb5-port1: unable to enumerate USB device [ 80.466344][ T4281] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, fe:7d:4d:e0:b7:dd [ 80.742575][ T4389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10'. [ 80.787995][ T4281] usb 2-1: USB disconnect, device number 2 [ 81.024342][ T4361] usb 4-1: USB disconnect, device number 2 [ 81.136942][ T4281] usb 3-1: USB disconnect, device number 2 [ 81.154277][ T4281] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 81.493606][ T4312] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 81.620796][ T4412] kvm [4411]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x7020 [ 81.629485][ T4412] kvm [4411]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 81.654302][ T4412] kvm [4411]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x5920 [ 81.691743][ T4312] usb 2-1: Using ep0 maxpacket: 16 [ 81.699443][ T4412] kvm [4411]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 81.711731][ T4312] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 81.750264][ T4312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.758383][ T4312] usb 2-1: Product: syz [ 81.773466][ T4412] kvm [4411]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x3000 [ 81.795125][ T4312] usb 2-1: Manufacturer: syz [ 81.799794][ T4312] usb 2-1: SerialNumber: syz [ 82.025234][ T4312] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 82.071451][ T4312] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 82.105838][ T4312] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 82.141013][ T4312] usb 2-1: media controller created [ 82.223826][ T4312] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 82.480301][ T14] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 82.515345][ T4433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17'. [ 82.525488][ T4312] zl10353_read_register: readreg error (reg=127, ret==-110) [ 82.623707][ T4312] dvb_usb_gl861: probe of 2-1:157.0 failed with error -5 [ 82.680446][ T14] usb 3-1: Using ep0 maxpacket: 16 [ 82.687779][ T4312] usb 2-1: USB disconnect, device number 3 [ 82.699686][ T14] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.783709][ T14] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.846148][ T14] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 82.865219][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.232922][ T4445] tipc: Started in network mode [ 83.258762][ T4445] tipc: Node identity d2a0d457e781, cluster identity 4711 [ 83.333087][ T4445] tipc: Enabled bearer , priority 0 [ 83.532868][ T4442] tipc: Disabling bearer [ 83.768476][ T4463] netlink: 'syz.0.19': attribute type 7 has an invalid length. [ 85.272036][ T4472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22'. [ 85.315117][ T4481] syz.4.23 uses obsolete (PF_INET,SOCK_PACKET) [ 85.390347][ T4462] process 'syz.3.20' launched './file1' with NULL argv: empty string added [ 86.509247][ T4497] device syzkaller0 entered promiscuous mode [ 86.886406][ T129] cfg80211: failed to load regulatory.db [ 86.958467][ T4508] Zero length message leads to an empty skb [ 87.254577][ T4512] tipc: Failed to remove unknown binding: 66,0,0/0:2880544049/2880544050 [ 87.278126][ T4512] tipc: Failed to remove unknown binding: 66,0,0/0:2880544049/2880544050 [ 87.392510][ T14] usbhid 3-1:128.0: can't add hid device: -71 [ 87.414702][ T14] usbhid: probe of 3-1:128.0 failed with error -71 [ 87.460440][ T129] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 87.490089][ T14] usb 3-1: USB disconnect, device number 3 [ 87.730263][ T129] usb 2-1: Using ep0 maxpacket: 16 [ 87.740501][ T129] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 87.792797][ T129] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 87.812257][ T129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.830255][ T129] usb 2-1: Product: syz [ 87.834750][ T129] usb 2-1: Manufacturer: syz [ 87.852046][ T129] usb 2-1: SerialNumber: syz [ 87.998634][ T129] r8152-cfgselector 2-1: config 0 descriptor?? [ 88.731433][ T4516] kvm [4515]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x7020 [ 88.747677][ T4529] device syzkaller0 entered promiscuous mode [ 88.793457][ T4516] kvm [4515]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 90.570344][ T4281] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 90.780340][ T4281] usb 1-1: Using ep0 maxpacket: 8 [ 90.791264][ T4281] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 90.831972][ T4281] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 90.860252][ T4281] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.899974][ T4281] usb 1-1: Product: syz [ 90.910977][ T4281] usb 1-1: Manufacturer: syz [ 90.930383][ T4281] usb 1-1: SerialNumber: syz [ 90.958524][ T4281] usb 1-1: config 0 descriptor?? [ 90.989389][ T4281] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 91.018793][ T4281] usb 1-1: setting power ON [ 91.030002][ T4281] dvb-usb: bulk message failed: -22 (2/0) [ 91.130293][ T14] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 91.152549][ T4281] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 91.189235][ T4553] dvb-usb: bulk message failed: -22 (3/0) [ 91.205627][ T4281] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 91.220303][ T4553] dvb-usb: bulk message failed: -22 (4/0) [ 91.240912][ T4281] usb 1-1: media controller created [ 91.248648][ T4553] cxusb: i2c read failed [ 91.299605][ T129] r8152-cfgselector 2-1: Unknown version 0x0000 [ 91.314389][ T129] r8152-cfgselector 2-1: bad CDC descriptors [ 91.332033][ T14] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 91.357523][ T4281] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 91.361094][ T14] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 91.377650][ T4553] dvb-usb: bulk message failed: -22 (3/0) [ 91.390685][ T129] r8152-cfgselector 2-1: Unknown version 0x0000 [ 91.411602][ T129] r8152-cfgselector 2-1: USB disconnect, device number 4 [ 91.427709][ T4553] dvb-usb: bulk message failed: -22 (3/0) [ 91.470380][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.481932][ T4281] usb 1-1: selecting invalid altsetting 6 [ 91.508573][ T4281] usb 1-1: digital interface selection failed (-22) [ 91.522655][ T4281] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 91.561486][ T14] usb 4-1: config 0 descriptor?? [ 91.574887][ T4281] usb 1-1: setting power OFF [ 91.590481][ T4281] dvb-usb: bulk message failed: -22 (2/0) [ 91.606408][ T4281] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 91.642645][ T4281] (NULL device *): no alternate interface [ 91.709405][ T4567] tipc: Failed to remove unknown binding: 66,0,0/0:2531846595/2531846596 [ 91.773740][ T4569] tipc: Failed to remove unknown binding: 66,0,0/0:2531846595/2531846596 [ 92.279052][ T4281] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 92.409933][ T4281] usb 1-1: USB disconnect, device number 3 [ 92.976299][ T4583] loop4: detected capacity change from 0 to 16 [ 93.034246][ T4583] erofs: (device loop4): mounted with root inode @ nid 36. [ 93.135823][ T4585] netlink: 36 bytes leftover after parsing attributes in process `syz.4.46'. [ 93.420544][ T4278] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[9000] [ 93.474614][ T4585] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 93.592825][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 93.592841][ T26] audit: type=1800 audit(1776771912.468:13): pid=4585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.46" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 93.978468][ T14] usb 4-1: USB disconnect, device number 3 [ 93.998645][ T4585] syz.4.46 (4585) used greatest stack depth: 20312 bytes left [ 94.321635][ T4599] loop4: detected capacity change from 0 to 512 [ 94.405148][ T4599] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 94.420455][ T4599] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 94.495332][ T4599] EXT4-fs (loop4): 1 truncate cleaned up [ 94.530380][ T14] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 94.570940][ T4599] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 94.800296][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 94.815017][ T14] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1088, setting to 1024 [ 94.864577][ T14] usb 1-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 94.888097][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.907316][ T14] usb 1-1: Product: syz [ 94.918528][ T14] usb 1-1: Manufacturer: syz [ 94.928706][ T14] usb 1-1: SerialNumber: syz [ 95.060295][ T129] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 95.178719][ T14] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 95.198763][ T14] usb 1-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8204); report any issues to g@b4.vu [ 95.220223][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 95.244261][ T14] usb 1-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 95.272957][ T129] usb 5-1: unable to get BOS descriptor or descriptor too short [ 95.285059][ T129] usb 5-1: not running at top speed; connect to a high speed hub [ 95.310397][ T129] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 95.314879][ T14] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 95.356178][ T129] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 95.383772][ T129] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.404798][ T129] usb 5-1: Product: syz [ 95.409566][ T129] usb 5-1: Manufacturer: syz [ 95.415236][ T129] usb 5-1: SerialNumber: syz [ 95.422628][ T4404] udevd[4404]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.441479][ T14] usb 1-1: USB disconnect, device number 4 [ 96.342444][ T26] audit: type=1326 audit(1776771915.218:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4626 comm="syz.3.57" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ac399c819 code=0x0 [ 96.368421][ T4624] tipc: Failed to remove unknown binding: 66,0,0/0:2099985066/2099985067 [ 96.457605][ T4624] tipc: Failed to remove unknown binding: 66,0,0/0:2099985066/2099985067 [ 97.323953][ T129] usb 5-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 97.382009][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 97.392803][ T129] usb 5-1: found format II with max.bitrate = 512, frame size=4095 [ 97.439589][ T129] usb 5-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 97.475724][ T129] usb 5-1: found format II with max.bitrate = 512, frame size=4095 [ 97.518197][ T4635] loop1: detected capacity change from 0 to 16 [ 97.535516][ T129] usb 5-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 97.574299][ T4635] erofs: (device loop1): mounted with root inode @ nid 36. [ 97.750202][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 97.825689][ T4278] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[9000] [ 97.867980][ T129] usb 5-1: USB disconnect, device number 6 [ 97.938591][ T4637] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 98.062842][ T26] audit: type=1800 audit(1776771916.938:15): pid=4637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.61" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 98.164159][ T4638] udevd[4638]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 98.671046][ T4637] syz.1.61 (4637) used greatest stack depth: 19536 bytes left [ 99.162080][ T4653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.65'. [ 99.173427][ T4653] netlink: 84 bytes leftover after parsing attributes in process `syz.1.65'. [ 99.855439][ T22] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 100.046836][ T22] usb 5-1: not running at top speed; connect to a high speed hub [ 100.067405][ T22] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 100.113721][ T22] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 100.166031][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.221864][ T22] usb 5-1: Product: syz [ 100.258381][ T22] usb 5-1: Manufacturer: syz [ 100.280362][ T22] usb 5-1: SerialNumber: syz [ 100.450043][ T4665] device syzkaller0 entered promiscuous mode [ 100.550449][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 100.582108][ T4673] netlink: 168 bytes leftover after parsing attributes in process `syz.4.63'. [ 100.619653][ T4646] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 100.807828][ T22] usb 5-1: 1:1 : unknown format tag 0x2 is detected. processed as MPEG. [ 100.843116][ T22] usb 5-1: found format II with max.bitrate = 256, frame size=6 [ 100.884258][ T22] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 100.936480][ T22] usb 5-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 100.994166][ T22] usb 5-1: found format II with max.bitrate = 0, frame size=2 [ 101.036086][ T22] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 101.151389][ T22] usb 5-1: USB disconnect, device number 7 [ 101.402494][ T4679] loop0: detected capacity change from 0 to 512 [ 101.462740][ T4404] udevd[4404]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.575274][ T4679] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 101.593902][ T4679] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 101.713629][ T4679] EXT4-fs (loop0): 1 truncate cleaned up [ 101.750456][ T4679] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 102.030270][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 102.050268][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 102.060212][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 102.460296][ T129] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 102.664135][ T129] usb 1-1: unable to get BOS descriptor or descriptor too short [ 102.682705][ T129] usb 1-1: not running at top speed; connect to a high speed hub [ 102.718387][ T129] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 102.756317][ T129] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 102.808637][ T129] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.837265][ T129] usb 1-1: Product: syz [ 102.860288][ T129] usb 1-1: Manufacturer: syz [ 102.864979][ T129] usb 1-1: SerialNumber: syz [ 103.794476][ T4708] tipc: Failed to remove unknown binding: 66,0,0/0:1915648257/1915648258 [ 103.803672][ T4708] tipc: Failed to remove unknown binding: 66,0,0/0:1915648257/1915648258 [ 104.750343][ T4314] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 104.962538][ T4314] usb 4-1: unable to get BOS descriptor or descriptor too short [ 104.978530][ T4314] usb 4-1: not running at top speed; connect to a high speed hub [ 104.990798][ T4314] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 105.007038][ T4314] usb 4-1: New USB device found, idVendor=046d, idProduct=08c6, bcdDevice= 0.40 [ 105.016967][ T4314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.027267][ T4314] usb 4-1: Product: syz [ 105.031975][ T4314] usb 4-1: Manufacturer: syz [ 105.036695][ T4314] usb 4-1: SerialNumber: syz [ 105.168566][ T4675] netlink: 32 bytes leftover after parsing attributes in process `syz.1.70'. [ 105.182826][ T4706] netlink: 12 bytes leftover after parsing attributes in process `syz.4.77'. [ 105.236685][ T4706] device vlan2 entered promiscuous mode [ 105.281576][ T4706] device team0 entered promiscuous mode [ 105.288130][ T4706] device team_slave_0 entered promiscuous mode [ 105.326357][ T4706] device team_slave_1 entered promiscuous mode [ 105.381506][ T129] usb 1-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 105.399086][ T129] usb 1-1: found format II with max.bitrate = 512, frame size=4095 [ 105.408296][ T129] usb 1-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 105.422500][ T129] usb 1-1: found format II with max.bitrate = 512, frame size=4095 [ 105.495617][ T129] usb 1-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 105.619636][ T4314] usb 4-1: 1:1 : sample bitwidth 62 in over sample bytes 4 [ 105.649541][ T4314] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 105.677760][ T129] usb 1-1: USB disconnect, device number 5 [ 105.742829][ T4314] usb 4-1: failed to enable PITCH for EP 0x1 [ 105.780361][ T4314] usb 4-1: unit 2 not found! [ 105.786976][ T4314] usb 4-1: unit 0 not found! [ 105.816767][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 105.859711][ T4722] device syzkaller0 entered promiscuous mode [ 105.916580][ T4314] usb 4-1: USB disconnect, device number 4 [ 106.133355][ T4398] udevd[4398]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.272404][ T4379] udevd[4379]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 106.496140][ T4734] xt_TPROXY: Can be used only with -p tcp or -p udp [ 106.550021][ T4734] netlink: 'syz.0.83': attribute type 10 has an invalid length. [ 106.656875][ T4734] team0: Device xfrm0 is of different type [ 106.758326][ T4745] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 107.046423][ T4753] netlink: 'syz.2.89': attribute type 7 has an invalid length. [ 107.960264][ T129] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 108.140262][ T4314] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 108.152371][ T129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.186275][ T129] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 108.218376][ T129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.282486][ T129] usb 4-1: config 0 descriptor?? [ 108.351342][ T129] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 108.359514][ T4314] usb 1-1: not running at top speed; connect to a high speed hub [ 108.372227][ T4314] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 108.443734][ T4314] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 108.470482][ T4314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.506245][ T4314] usb 1-1: Product: syz [ 108.529016][ T4314] usb 1-1: Manufacturer: syz [ 108.546717][ T4314] usb 1-1: SerialNumber: syz [ 108.669098][ T4762] netlink: 36 bytes leftover after parsing attributes in process `syz.4.92'. [ 108.795177][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 108.852571][ T4765] netlink: 168 bytes leftover after parsing attributes in process `syz.0.91'. [ 108.890343][ T4758] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 109.058391][ T4770] loop1: detected capacity change from 0 to 512 [ 109.072744][ T4314] usb 1-1: 1:1 : unknown format tag 0x2 is detected. processed as MPEG. [ 109.106723][ T4314] usb 1-1: found format II with max.bitrate = 256, frame size=6 [ 109.111430][ T4770] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 109.124624][ T4770] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 109.135413][ T4770] EXT4-fs (loop1): 1 truncate cleaned up [ 109.141290][ T4770] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 109.167637][ T4314] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 109.290524][ T4314] usb 1-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 109.299842][ T4314] usb 1-1: found format II with max.bitrate = 0, frame size=2 [ 109.311457][ T4314] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 109.372010][ T4314] usb 1-1: USB disconnect, device number 6 [ 109.651112][ T4778] device syzkaller0 entered promiscuous mode [ 109.660577][ T4311] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 109.682551][ T4404] udevd[4404]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.852994][ T4311] usb 2-1: unable to get BOS descriptor or descriptor too short [ 109.876770][ T4311] usb 2-1: not running at top speed; connect to a high speed hub [ 109.898015][ T4311] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 109.920795][ T4311] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 109.955681][ T4311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.035484][ T4311] usb 2-1: Product: syz [ 110.039815][ T4311] usb 2-1: Manufacturer: syz [ 110.074511][ T4311] usb 2-1: SerialNumber: syz [ 110.814364][ T4314] usb 4-1: USB disconnect, device number 5 [ 110.824988][ T4787] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.834214][ T4787] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.360333][ T4361] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 111.420540][ T4314] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 111.550511][ T4361] usb 5-1: Using ep0 maxpacket: 32 [ 111.565052][ T4361] usb 5-1: config 123 interface 0 has no altsetting 0 [ 111.583899][ T4361] usb 5-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 111.603717][ T4361] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.623451][ T4361] usb 5-1: Product: syz [ 111.630273][ T4314] usb 4-1: Using ep0 maxpacket: 16 [ 111.645066][ T4361] usb 5-1: Manufacturer: syz [ 111.648757][ T4314] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 111.659727][ T4361] usb 5-1: SerialNumber: syz [ 111.661711][ T4314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.690460][ T4314] usb 4-1: Product: syz [ 111.694734][ T4314] usb 4-1: Manufacturer: syz [ 111.699403][ T4314] usb 4-1: SerialNumber: syz [ 111.888089][ T4361] usb 5-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 111.902081][ T4361] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 111.915338][ T4361] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 111.926548][ T4361] usb 5-1: media controller created [ 111.959707][ T4787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.965199][ T4361] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 111.979554][ T4314] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 112.085170][ T4311] usb 2-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 112.087001][ T4361] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 112.094398][ T4314] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 112.112190][ T4311] usb 2-1: found format II with max.bitrate = 512, frame size=4095 [ 112.123032][ T4311] usb 2-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 112.128706][ T4361] error writing reg: 0xff, val: 0x00 [ 112.132191][ T4314] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 112.147530][ T4311] usb 2-1: found format II with max.bitrate = 512, frame size=4095 [ 112.157183][ T4314] usb 4-1: media controller created [ 112.163782][ T4311] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 112.188741][ T4314] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 112.285519][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 112.293478][ T4311] usb 2-1: USB disconnect, device number 5 [ 112.315878][ T4796] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 112.358218][ T4796] error writing reg: 0x1a, val: 0x1e [ 112.385189][ T4787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.511510][ T4314] zl10353_read_register: readreg error (reg=127, ret==-110) [ 112.550485][ T4314] dvb_usb_gl861: probe of 4-1:157.0 failed with error -5 [ 112.573718][ T4811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.104'. [ 112.621562][ T4398] udevd[4398]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.199537][ T4823] kvm: pic: single mode not supported [ 113.201080][ T4823] kvm: pic: level sensitive irq not supported [ 113.218124][ T4823] kvm: pic: single mode not supported [ 113.250083][ T4823] kvm: pic: level sensitive irq not supported [ 113.272731][ T4823] kvm: pic: single mode not supported [ 113.286557][ T4823] kvm: pic: level sensitive irq not supported [ 113.293653][ T4823] kvm: pic: single mode not supported [ 113.299835][ T4823] kvm: pic: level sensitive irq not supported [ 113.307286][ T4823] kvm: pic: level sensitive irq not supported [ 113.313768][ T4823] kvm: pic: level sensitive irq not supported [ 113.320555][ T4823] kvm: pic: level sensitive irq not supported [ 113.327223][ T4823] kvm: pic: level sensitive irq not supported [ 113.333959][ T4823] kvm: pic: non byte write [ 113.344979][ T4823] kvm: pic: level sensitive irq not supported [ 113.352788][ T4787] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.369263][ T4787] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.390271][ T4787] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.400603][ T4787] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.530310][ T4311] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 113.575592][ T4361] dvb_usb_mxl111sf: probe of 5-1:123.0 failed with error -22 [ 113.610989][ T4361] usb 5-1: USB disconnect, device number 8 [ 113.628126][ T126] usb 4-1: USB disconnect, device number 6 [ 113.721594][ T4311] usb 3-1: not running at top speed; connect to a high speed hub [ 113.752741][ T4311] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 113.794930][ T4311] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 113.814348][ T4311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.874218][ T4311] usb 3-1: Product: syz [ 113.878467][ T4311] usb 3-1: Manufacturer: syz [ 113.920270][ T4311] usb 3-1: SerialNumber: syz [ 114.178122][ T4829] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 114.187601][ T4829] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 114.208894][ T4829] netlink: 168 bytes leftover after parsing attributes in process `syz.2.107'. [ 114.243388][ T4311] usb 3-1: 1:1 : unknown format tag 0x2 is detected. processed as MPEG. [ 114.272977][ T4311] usb 3-1: found format II with max.bitrate = 256, frame size=6 [ 114.290295][ T4311] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 114.307774][ T4311] usb 3-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 114.323642][ T4311] usb 3-1: found format II with max.bitrate = 0, frame size=2 [ 114.340288][ T4311] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 114.416452][ T4311] usb 3-1: USB disconnect, device number 4 [ 114.450267][ T22] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 114.579809][ T4842] loop4: detected capacity change from 0 to 512 [ 114.619015][ T4842] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 114.691387][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.728362][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.745833][ T4404] udevd[4404]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.027259][ T4842] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 115.083953][ T22] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 115.278615][ T4842] EXT4-fs (loop4): 1 truncate cleaned up [ 115.294476][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.320261][ T4842] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 115.395304][ T22] usb 1-1: config 0 descriptor?? [ 115.609343][ T4852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.116'. [ 115.680528][ T4313] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 115.865079][ T22] usbhid 1-1:0.0: can't add hid device: -71 [ 115.899591][ T22] usbhid: probe of 1-1:0.0 failed with error -71 [ 116.311389][ T22] usb 1-1: USB disconnect, device number 7 [ 116.381856][ T4314] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 116.629442][ T4313] usb 4-1: Using ep0 maxpacket: 32 [ 116.650283][ T4314] usb 5-1: unable to get BOS descriptor or descriptor too short [ 116.684616][ T4313] usb 4-1: config 123 interface 0 has no altsetting 0 [ 116.704612][ T4314] usb 5-1: not running at top speed; connect to a high speed hub [ 116.794751][ T4314] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 116.805964][ T4863] netlink: 24 bytes leftover after parsing attributes in process `syz.0.118'. [ 116.818596][ T4313] usb 4-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 116.841341][ T4314] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 116.907798][ T4313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.916414][ T4313] usb 4-1: Product: syz [ 116.922197][ T4313] usb 4-1: Manufacturer: syz [ 116.926926][ T4313] usb 4-1: SerialNumber: syz [ 116.932199][ T4314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.988147][ T4314] usb 5-1: Product: syz [ 117.004414][ T4314] usb 5-1: Manufacturer: syz [ 117.009129][ T4314] usb 5-1: SerialNumber: syz [ 117.146595][ T4313] usb 4-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 117.986941][ T4313] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 118.097171][ T4313] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 118.144668][ T4313] usb 4-1: media controller created [ 118.276133][ T4313] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 118.368263][ T4314] usb 5-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 118.382927][ T4314] usb 5-1: found format II with max.bitrate = 512, frame size=4095 [ 118.395395][ T4314] usb 5-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 118.404550][ T4314] usb 5-1: found format II with max.bitrate = 512, frame size=4095 [ 118.487956][ T4313] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 118.489427][ T4314] usb 5-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 118.516283][ T4313] error writing reg: 0xff, val: 0x00 [ 118.561575][ T4314] usb 5-1: USB disconnect, device number 9 [ 118.579876][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 118.627885][ T4313] dvb_usb_mxl111sf: probe of 4-1:123.0 failed with error -22 [ 118.696468][ T129] usb 4-1: USB disconnect, device number 7 [ 118.939899][ T4868] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.947405][ T4868] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.173808][ T4311] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 119.541876][ T4311] usb 5-1: Using ep0 maxpacket: 16 [ 119.553060][ T4311] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 119.562472][ T4311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.571646][ T4311] usb 5-1: Product: syz [ 119.576125][ T4311] usb 5-1: Manufacturer: syz [ 119.581953][ T4311] usb 5-1: SerialNumber: syz [ 120.318117][ T4311] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 120.368932][ T4311] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 120.417441][ T4311] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 120.456457][ T4311] usb 5-1: media controller created [ 120.477568][ T4311] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 120.584265][ T4912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.127'. [ 120.606129][ T4868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.701582][ T4868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.720841][ T4311] zl10353_read_register: readreg error (reg=127, ret==-110) [ 121.155137][ T4868] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.165907][ T4868] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.175752][ T4868] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.185212][ T4868] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.498109][ T4311] dvb_usb_gl861: probe of 5-1:157.0 failed with error -5 [ 121.532578][ T4311] usb 5-1: USB disconnect, device number 10 [ 121.651761][ T4936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.130'. [ 121.720253][ T4354] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 121.954638][ T4943] netlink: 84 bytes leftover after parsing attributes in process `syz.1.132'. [ 122.580208][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 122.590190][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 122.600197][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 122.610185][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 122.620186][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 122.701599][ T4354] usb 1-1: config index 0 descriptor too short (expected 8192, got 36) [ 122.753250][ T4354] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.914649][ T4354] usb 1-1: config 0 has no interfaces? [ 122.958288][ T4354] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 122.988122][ T4354] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.088845][ T4354] usb 1-1: config 0 descriptor?? [ 123.186647][ C0] vcan0: j1939_tp_rxtimer: 0xffff888029f78800: rx timeout, send abort [ 123.205951][ T4361] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 123.317730][ T4963] tipc: Failed to remove unknown binding: 66,0,0/0:1990200978/1990200979 [ 123.327510][ T4963] tipc: Failed to remove unknown binding: 66,0,0/0:1990200978/1990200979 [ 123.410256][ T4361] usb 3-1: Using ep0 maxpacket: 32 [ 123.417855][ T4361] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.445086][ T4361] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 123.458427][ T4361] usb 3-1: config 0 interface 0 has no altsetting 0 [ 123.465258][ T4361] usb 3-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 123.474581][ T4361] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.491654][ T4361] usb 3-1: config 0 descriptor?? [ 123.687184][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805696b000: rx timeout, send abort [ 123.696219][ C0] vcan0: j1939_tp_rxtimer: 0xffff888029f78800: abort rx timeout. Force session deactivation [ 123.921346][ T4954] capability: warning: `syz.2.136' uses deprecated v2 capabilities in a way that may be insecure [ 123.998393][ T4361] usbhid 3-1:0.0: can't add hid device: -71 [ 124.026826][ T4361] usbhid: probe of 3-1:0.0 failed with error -71 [ 124.035035][ T4960] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.042676][ T4960] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.128960][ T4361] usb 3-1: USB disconnect, device number 5 [ 124.195721][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805696b000: abort rx timeout. Force session deactivation [ 125.034124][ T4984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.146'. [ 125.205918][ T4960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.288381][ T4960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.359701][ T4281] usb 1-1: USB disconnect, device number 8 [ 125.566821][ T4980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.656441][ T4980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.685291][ T4980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.753242][ T4995] netlink: 84 bytes leftover after parsing attributes in process `syz.2.147'. [ 125.907641][ T4980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.572085][ T4960] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.604646][ T4960] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.679452][ T4960] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.692614][ T4960] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.125763][ T5037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.157'. [ 128.613582][ T5051] netlink: 84 bytes leftover after parsing attributes in process `syz.4.159'. [ 129.453905][ T5054] input: syz1 as /devices/virtual/input/input6 [ 130.976786][ T5075] tipc: Started in network mode [ 130.988967][ T5075] tipc: Node identity 1e713907a54b, cluster identity 4711 [ 130.996584][ T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 131.012605][ T5075] tipc: Enabled bearer , priority 0 [ 131.024715][ T5075] tipc: Resetting bearer [ 131.063819][ T5074] tipc: Disabling bearer [ 131.204266][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 131.223037][ T7] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 131.247838][ T7] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 131.269970][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.270009][ T5079] device syzkaller0 entered promiscuous mode [ 131.281145][ T7] usb 2-1: Product: syz [ 131.298044][ T7] usb 2-1: Manufacturer: syz [ 131.303324][ T7] usb 2-1: SerialNumber: syz [ 131.320495][ T7] usb 2-1: config 0 descriptor?? [ 131.328816][ T7] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 131.339076][ T5077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.171'. [ 131.342293][ T7] usb 2-1: setting power ON [ 131.353348][ T7] dvb-usb: bulk message failed: -22 (2/0) [ 131.371018][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 131.384918][ T7] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 131.395259][ T7] usb 2-1: media controller created [ 131.409647][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.447145][ T7] usb 2-1: selecting invalid altsetting 6 [ 131.453337][ T7] usb 2-1: digital interface selection failed (-22) [ 131.470710][ T7] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 131.489446][ T7] usb 2-1: setting power OFF [ 131.495617][ T7] dvb-usb: bulk message failed: -22 (2/0) [ 131.502634][ T7] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 131.514638][ T7] (NULL device *): no alternate interface [ 131.546648][ T5071] dvb-usb: bulk message failed: -22 (3/0) [ 131.588875][ T5084] loop4: detected capacity change from 0 to 16 [ 131.609694][ T5084] erofs: (device loop4): mounted with root inode @ nid 36. [ 131.660342][ T7] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 131.766406][ T5086] netlink: 16 bytes leftover after parsing attributes in process `syz.4.172'. [ 131.866599][ T4278] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[9000] [ 131.956975][ T7] usb 2-1: USB disconnect, device number 6 [ 132.318105][ T5096] netlink: 84 bytes leftover after parsing attributes in process `syz.0.173'. [ 132.817790][ T5086] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 132.902358][ T26] audit: type=1800 audit(1776771951.728:16): pid=5086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.172" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 132.964724][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.991540][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.223546][ T5103] binder: 5102:5103 ioctl 81e8943c 200000000c00 returned -22 [ 133.410280][ T4281] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 134.334413][ T5117] input: syz1 as /devices/virtual/input/input7 [ 134.574454][ T4281] usb 4-1: not running at top speed; connect to a high speed hub [ 134.589485][ T4281] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 134.641254][ T4281] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 134.652995][ T4281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.662874][ T4281] usb 4-1: Product: syz [ 134.668764][ T4281] usb 4-1: Manufacturer: syz [ 134.691629][ T4281] usb 4-1: SerialNumber: syz [ 134.915131][ T5101] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 134.968380][ T5129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.185'. [ 134.981488][ T5131] netlink: 168 bytes leftover after parsing attributes in process `syz.3.176'. [ 135.090968][ T4281] usb 4-1: 1:1 : unknown format tag 0x2 is detected. processed as MPEG. [ 135.107639][ T4281] usb 4-1: found format II with max.bitrate = 256, frame size=6 [ 135.137289][ T4281] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 135.161372][ T4281] usb 4-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 135.294810][ T4281] usb 4-1: found format II with max.bitrate = 0, frame size=2 [ 135.304059][ T4281] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 135.408116][ T5140] netlink: 84 bytes leftover after parsing attributes in process `syz.1.187'. [ 136.122373][ T4281] usb 4-1: USB disconnect, device number 8 [ 136.338337][ T5146] tipc: Started in network mode [ 136.357369][ T5146] tipc: Node identity 163480bcf7a4, cluster identity 4711 [ 136.370979][ T4728] udevd[4728]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.418789][ T5146] tipc: Enabled bearer , priority 0 [ 136.481655][ T5146] tipc: Resetting bearer [ 136.569819][ T5151] binder: 5150:5151 ioctl 81e8943c 200000000c00 returned -22 [ 136.631187][ T5143] tipc: Disabling bearer [ 136.663709][ T5153] loop3: detected capacity change from 0 to 16 [ 136.729263][ T5153] erofs: (device loop3): mounted with root inode @ nid 36. [ 136.867644][ T5156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.190'. [ 136.928042][ T4278] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[9000] [ 137.138662][ T5156] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 137.378467][ T26] audit: type=1800 audit(1776771956.028:17): pid=5156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.190" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 137.808779][ T5172] input: syz1 as /devices/virtual/input/input8 [ 138.799409][ T5175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.198'. [ 139.945425][ T5192] binder: 5191:5192 ioctl 81e8943c 200000000c00 returned -22 [ 140.081496][ T4361] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 140.132894][ T4310] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 140.208207][ T5199] tipc: Started in network mode [ 140.213664][ T5199] tipc: Node identity c2a5175be946, cluster identity 4711 [ 140.221226][ T5199] tipc: Enabled bearer , priority 0 [ 140.252779][ T5199] tipc: Resetting bearer [ 140.280909][ T5196] tipc: Disabling bearer [ 140.285079][ T4361] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 140.310278][ T4361] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.331609][ T4310] usb 3-1: not running at top speed; connect to a high speed hub [ 140.344659][ T4310] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 140.358376][ T4361] usb 2-1: config 0 descriptor?? [ 140.370012][ T4361] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 140.379344][ T4310] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 140.396674][ T4310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.436911][ T4310] usb 3-1: Product: syz [ 140.443856][ T4310] usb 3-1: Manufacturer: syz [ 140.449181][ T4310] usb 3-1: SerialNumber: syz [ 140.483723][ T5203] tipc: Failed to remove unknown binding: 66,0,0/0:346485776/346485777 [ 140.517053][ T5203] tipc: Failed to remove unknown binding: 66,0,0/0:346485776/346485777 [ 140.545335][ T5207] loop4: detected capacity change from 0 to 16 [ 140.567930][ T5207] erofs: (device loop4): mounted with root inode @ nid 36. [ 140.670507][ T5208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.209'. [ 140.759972][ T4278] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[9000] [ 140.777700][ T5185] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 140.794883][ T5185] netlink: 168 bytes leftover after parsing attributes in process `syz.2.201'. [ 140.835233][ T5208] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 140.847897][ T26] audit: type=1800 audit(1776771959.728:18): pid=5208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.209" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 141.049827][ T4310] usb 3-1: 1:1 : unknown format tag 0x2 is detected. processed as MPEG. [ 141.284279][ T4310] usb 3-1: found format II with max.bitrate = 256, frame size=6 [ 141.305794][ T4310] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 141.339143][ T4310] usb 3-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 141.382146][ T4310] usb 3-1: found format II with max.bitrate = 0, frame size=2 [ 141.400912][ T4310] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 141.546074][ T4310] usb 3-1: USB disconnect, device number 6 [ 142.147224][ T4361] usb 2-1: USB disconnect, device number 7 [ 142.336477][ T4639] udevd[4639]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.487111][ T5222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.213'. [ 142.527297][ T5225] binder: 5224:5225 ioctl 81e8943c 200000000c00 returned -22 [ 143.276148][ T5252] tipc: Enabled bearer , priority 0 [ 143.326187][ T5252] tipc: Resetting bearer [ 143.391241][ T5250] tipc: Disabling bearer [ 143.700231][ T4311] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 143.890268][ T4361] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 143.910277][ T4311] usb 2-1: Using ep0 maxpacket: 8 [ 143.918497][ T4311] usb 2-1: unable to get BOS descriptor or descriptor too short [ 143.978819][ T4311] usb 2-1: config 9 has an invalid interface number: 3 but max is 0 [ 144.016407][ T4311] usb 2-1: config 9 has no interface number 0 [ 144.039527][ T4311] usb 2-1: config 9 interface 3 has no altsetting 0 [ 144.090732][ T4311] usb 2-1: New USB device found, idVendor=09fb, idProduct=602e, bcdDevice=53.63 [ 144.110127][ T4311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.154360][ T4311] usb 2-1: Product: syz [ 144.160086][ T4361] usb 5-1: config index 0 descriptor too short (expected 8192, got 36) [ 144.169969][ T4311] usb 2-1: Manufacturer: syz [ 144.183971][ T4311] usb 2-1: SerialNumber: syz [ 144.202359][ T4361] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.329200][ T4361] usb 5-1: config 0 has no interfaces? [ 144.384399][ T4361] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 144.556785][ T4361] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.689877][ T4361] usb 5-1: config 0 descriptor?? [ 144.949383][ T4311] ftdi_sio 2-1:9.3: FTDI USB Serial Device converter detected [ 144.974855][ T4311] ftdi_sio ttyUSB0: unknown device type: 0x5363 [ 145.035858][ T4311] usb 2-1: USB disconnect, device number 8 [ 145.080065][ T4311] ftdi_sio 2-1:9.3: device disconnected [ 145.150407][ T7] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 145.370550][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 145.380124][ T7] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 145.437083][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.485504][ T7] usb 3-1: Product: syz [ 145.510277][ T7] usb 3-1: Manufacturer: syz [ 145.543953][ T7] usb 3-1: SerialNumber: syz [ 145.794159][ T7] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 145.881769][ T7] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 145.930114][ T7] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 145.970010][ T7] usb 3-1: media controller created [ 146.036946][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 146.203828][ T7] zl10353_read_register: readreg error (reg=127, ret==-32) [ 146.319100][ T7] dvb_usb_gl861: probe of 3-1:157.0 failed with error -5 [ 146.351620][ T7] usb 3-1: USB disconnect, device number 7 [ 146.389228][ T26] audit: type=1326 audit(1776771965.258:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5269 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3ac3996597 code=0x7fc00000 [ 146.527041][ T26] audit: type=1326 audit(1776771965.258:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5269 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3ac393db99 code=0x7fc00000 [ 146.582780][ T26] audit: type=1326 audit(1776771965.258:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5269 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f3ac393dc5d code=0x7fc00000 [ 146.642341][ T26] audit: type=1326 audit(1776771965.258:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5269 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac399c819 code=0x7fc00000 [ 146.680914][ T5287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.233'. [ 146.707523][ T26] audit: type=1326 audit(1776771965.258:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5269 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac399c819 code=0x7fc00000 [ 146.765037][ T26] audit: type=1326 audit(1776771965.258:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5269 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac399c819 code=0x7fc00000 [ 146.793858][ T26] audit: type=1326 audit(1776771965.258:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5269 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac399c819 code=0x7fc00000 [ 146.888543][ T26] audit: type=1326 audit(1776771965.258:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5269 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac399c819 code=0x7fc00000 [ 147.017396][ T26] audit: type=1326 audit(1776771965.258:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5269 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac399c819 code=0x7fc00000 [ 147.108041][ T5296] binder: 5294:5296 ioctl 81e8943c 200000000c00 returned -22 [ 147.136384][ T26] audit: type=1326 audit(1776771965.258:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5269 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac399c819 code=0x7fc00000 [ 148.165331][ T4354] usb 5-1: USB disconnect, device number 11 [ 148.421377][ T5322] netlink: 'syz.2.242': attribute type 7 has an invalid length. [ 148.614556][ T5325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.244'. [ 148.623740][ T22] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 148.811659][ T22] usb 2-1: not running at top speed; connect to a high speed hub [ 148.824758][ T22] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 148.851400][ T22] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 148.892530][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.935893][ T22] usb 2-1: Product: syz [ 148.959532][ T22] usb 2-1: Manufacturer: syz [ 148.977764][ T22] usb 2-1: SerialNumber: syz [ 149.083554][ T5331] tipc: Failed to remove unknown binding: 66,0,0/0:3914493891/3914493892 [ 149.228520][ T5318] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 149.256899][ T5318] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 149.289402][ T5332] netlink: 168 bytes leftover after parsing attributes in process `syz.1.241'. [ 149.389547][ T22] usb 2-1: 1:1 : unknown format tag 0x2 is detected. processed as MPEG. [ 149.410348][ T22] usb 2-1: found format II with max.bitrate = 256, frame size=6 [ 149.470876][ T22] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 149.510756][ T22] usb 2-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 149.540194][ T22] usb 2-1: found format II with max.bitrate = 0, frame size=2 [ 149.559405][ T22] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 149.612542][ T5335] binder: 5334:5335 ioctl 81e8943c 200000000c00 returned -22 [ 149.684266][ T22] usb 2-1: USB disconnect, device number 9 [ 150.051645][ T4404] udevd[4404]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.831979][ T5362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.255'. [ 152.105621][ T5373] tipc: Failed to remove unknown binding: 66,0,0/0:3313843536/3313843537 [ 152.129991][ T5374] binder: 5370:5374 ioctl 81e8943c 200000000c00 returned -22 [ 152.730262][ T4354] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 152.921618][ T4354] usb 1-1: not running at top speed; connect to a high speed hub [ 152.937213][ T4354] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 152.979841][ T4354] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 153.001641][ T4354] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.080384][ T4354] usb 1-1: Product: syz [ 153.094518][ T4354] usb 1-1: Manufacturer: syz [ 153.114253][ T4354] usb 1-1: SerialNumber: syz [ 153.409944][ T5386] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 153.463853][ T5402] netlink: 168 bytes leftover after parsing attributes in process `syz.0.263'. [ 153.489702][ T4354] usb 1-1: 1:1 : unknown format tag 0x2 is detected. processed as MPEG. [ 153.498940][ T4354] usb 1-1: found format II with max.bitrate = 256, frame size=6 [ 153.508468][ T4354] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 153.511003][ T5399] netlink: 'syz.1.266': attribute type 7 has an invalid length. [ 153.523263][ T4354] usb 1-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 153.533623][ T4354] usb 1-1: found format II with max.bitrate = 0, frame size=2 [ 153.541435][ T4354] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 153.585805][ T4354] usb 1-1: USB disconnect, device number 9 [ 153.904927][ T4404] udevd[4404]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 155.584770][ T5416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.271'. [ 155.757983][ T5423] binder: 5419:5423 ioctl 81e8943c 200000000c00 returned -22 [ 155.851297][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056aa9c00: rx timeout, send abort [ 156.354632][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807395d000: rx timeout, send abort [ 156.362974][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056aa9c00: abort rx timeout. Force session deactivation [ 157.212899][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807395d000: abort rx timeout. Force session deactivation [ 157.363566][ T5427] tipc: Failed to remove unknown binding: 66,0,0/0:2653430097/2653430098 [ 159.020266][ T7] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 159.877627][ T5460] input: syz1 as /devices/virtual/input/input12 [ 159.961323][ T7] usb 5-1: not running at top speed; connect to a high speed hub [ 160.669862][ T7] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 160.691076][ T7] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 160.701183][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.709224][ T7] usb 5-1: Product: syz [ 160.713634][ T7] usb 5-1: Manufacturer: syz [ 160.718275][ T7] usb 5-1: SerialNumber: syz [ 160.933751][ T5454] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 160.967126][ T5454] netlink: 168 bytes leftover after parsing attributes in process `syz.4.282'. [ 161.005102][ T7] usb 5-1: 1:1 : unknown format tag 0x2 is detected. processed as MPEG. [ 161.024108][ T7] usb 5-1: found format II with max.bitrate = 256, frame size=6 [ 161.032877][ T7] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 161.039480][ T7] usb 5-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 161.048739][ T7] usb 5-1: found format II with max.bitrate = 0, frame size=2 [ 161.056547][ T7] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 161.089911][ T7] usb 5-1: USB disconnect, device number 12 [ 161.800011][ T4404] udevd[4404]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.946987][ T5475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.289'. [ 162.019226][ T5477] loop0: detected capacity change from 0 to 16 [ 162.036231][ T5477] erofs: (device loop0): mounted with root inode @ nid 36. [ 162.307192][ T4278] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[9000] [ 162.318804][ T5479] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 162.470063][ T5478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.290'. [ 162.514168][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 162.514221][ T26] audit: type=1800 audit(1776771981.388:86): pid=5479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.290" name="file3" dev="loop0" ino=89 res=0 errno=0 [ 162.570399][ T4354] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 162.764232][ T4354] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.787296][ T4354] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.859965][ T4354] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 162.909650][ T4354] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.941043][ T4354] usb 5-1: config 0 descriptor?? [ 162.958373][ T5489] loop3: detected capacity change from 0 to 512 [ 163.019033][ T5487] device syzkaller0 entered promiscuous mode [ 163.101924][ T5489] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 163.130333][ T5489] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 163.693280][ T4354] usbhid 5-1:0.0: can't add hid device: -71 [ 163.725366][ T5489] EXT4-fs (loop3): 1 truncate cleaned up [ 163.774104][ T4354] usbhid: probe of 5-1:0.0 failed with error -71 [ 163.814210][ T5489] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 163.982113][ T4354] usb 5-1: USB disconnect, device number 13 [ 164.850398][ T4354] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 165.193509][ T4354] usb 4-1: unable to get BOS descriptor or descriptor too short [ 165.213943][ T4354] usb 4-1: not running at top speed; connect to a high speed hub [ 165.241737][ T4354] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 165.283332][ T5514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.299'. [ 165.294793][ T4354] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 165.324461][ T4354] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.332712][ T4354] usb 4-1: Product: syz [ 165.358742][ T4354] usb 4-1: Manufacturer: syz [ 165.383040][ T4354] usb 4-1: SerialNumber: syz [ 165.577534][ T5524] binder: 5520:5524 ioctl 81e8943c 200000000c00 returned -22 [ 166.821383][ T5523] input: syz1 as /devices/virtual/input/input13 [ 171.233406][ T4354] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 171.242173][ T4354] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 171.250356][ T4354] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 171.258911][ T4354] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 171.277227][ T4354] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 172.322672][ T5561] loop1: detected capacity change from 0 to 16 [ 172.374576][ T5561] erofs: (device loop1): mounted with root inode @ nid 36. [ 172.699657][ T4278] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[9000] [ 172.724284][ T5563] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 172.738605][ T26] audit: type=1800 audit(1776771991.608:87): pid=5563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.309" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 173.345372][ T22] usb 4-1: USB disconnect, device number 9 [ 173.350299][ T5562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.309'. [ 173.407883][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 173.541625][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.716019][ T5574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.313'. [ 173.944686][ T5583] binder: 5581:5583 ioctl 81e8943c 200000000c00 returned -22 [ 179.017423][ T5606] input: syz1 as /devices/virtual/input/input14 [ 179.325637][ T5615] loop2: detected capacity change from 0 to 16 [ 180.003464][ T5615] erofs: (device loop2): mounted with root inode @ nid 36. [ 180.143820][ T5618] loop1: detected capacity change from 0 to 512 [ 180.216990][ T5621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.324'. [ 180.561419][ T5618] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 180.603336][ T5618] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 180.933220][ T4278] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[9000] [ 180.944510][ T5628] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 181.283635][ T26] audit: type=1800 audit(1776772000.158:88): pid=5628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.324" name="file3" dev="loop2" ino=89 res=0 errno=0 [ 181.333780][ T5618] EXT4-fs (loop1): 1 truncate cleaned up [ 181.366815][ T5618] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 182.924787][ T5639] binder: 5635:5639 ioctl 81e8943c 200000000c00 returned -22 [ 183.218918][ T5641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.327'. [ 183.340304][ T7] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 183.552539][ T7] usb 2-1: unable to get BOS descriptor or descriptor too short [ 183.578621][ T7] usb 2-1: not running at top speed; connect to a high speed hub [ 183.608416][ T7] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 183.645909][ T7] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 183.675816][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.716305][ T7] usb 2-1: Product: syz [ 183.737781][ T7] usb 2-1: Manufacturer: syz [ 183.759611][ T7] usb 2-1: SerialNumber: syz [ 184.027015][ T7] usb 2-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 184.452050][ T7] usb 2-1: found format II with max.bitrate = 512, frame size=4095 [ 184.487261][ T7] usb 2-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 184.502505][ T7] usb 2-1: found format II with max.bitrate = 512, frame size=4095 [ 184.527377][ T7] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 184.578225][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 184.661232][ T7] usb 2-1: USB disconnect, device number 10 [ 186.023964][ T5674] input: syz1 as /devices/virtual/input/input15 [ 188.023420][ T5696] binder: 5686:5696 ioctl 81e8943c 200000000c00 returned -22 [ 189.521955][ T5700] loop0: detected capacity change from 0 to 16 [ 189.529950][ T5700] erofs: (device loop0): mounted with root inode @ nid 36. [ 189.541237][ T5699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.341'. [ 189.693356][ T5704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.342'. [ 189.863249][ T48] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[9000] [ 189.909775][ T5704] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 189.952916][ T26] audit: type=1800 audit(1776772008.798:89): pid=5704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.342" name="file3" dev="loop0" ino=89 res=0 errno=0 [ 190.596567][ T5709] loop1: detected capacity change from 0 to 512 [ 190.729858][ T5709] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 190.738715][ T5709] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 190.748513][ T5709] EXT4-fs (loop1): 1 truncate cleaned up [ 190.754431][ T5709] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 191.400001][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 191.408444][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 191.415713][ T4270] Bluetooth: hci0: command 0x0406 tx timeout [ 191.416486][ T4272] Bluetooth: hci3: command 0x0406 tx timeout [ 191.416790][ T4278] Bluetooth: hci1: command 0x0406 tx timeout [ 192.080154][ C0] sched: RT throttling activated [ 192.360834][ T7] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 192.573721][ T7] usb 2-1: unable to get BOS descriptor or descriptor too short [ 192.647281][ T7] usb 2-1: not running at top speed; connect to a high speed hub [ 192.714248][ T7] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 192.987018][ T7] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 193.190926][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.294466][ T7] usb 2-1: Product: syz [ 193.306290][ T7] usb 2-1: Manufacturer: syz [ 193.329125][ T7] usb 2-1: SerialNumber: syz [ 193.415129][ T7] usb 2-1: can't set config #1, error -71 [ 193.430912][ T7] usb 2-1: USB disconnect, device number 11 [ 193.552949][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 194.404837][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.411661][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.627364][ T5749] input: syz1 as /devices/virtual/input/input16 [ 195.669824][ T5757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.356'. [ 195.839925][ T5764] binder: 5759:5764 ioctl 81e8943c 200000000c00 returned -22 [ 199.243724][ T5779] loop1: detected capacity change from 0 to 16 [ 199.290517][ T5779] erofs: (device loop1): mounted with root inode @ nid 36. [ 199.384338][ T5783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.361'. [ 199.426600][ T5782] loop4: detected capacity change from 0 to 512 [ 199.490672][ T4270] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[9000] [ 199.573873][ T5783] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 199.902923][ T26] audit: type=1800 audit(1776772018.468:90): pid=5783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.361" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 199.986767][ T5782] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 200.066393][ T5782] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 200.103799][ T5782] EXT4-fs (loop4): 1 truncate cleaned up [ 200.146693][ T5782] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 201.900274][ T4310] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 201.972219][ T5816] input: syz1 as /devices/virtual/input/input17 [ 203.010977][ T5822] binder: 5810:5822 ioctl 81e8943c 200000000c00 returned -22 [ 203.133539][ T5814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'. [ 203.152335][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 203.550943][ T5833] loop1: detected capacity change from 0 to 16 [ 203.579689][ T5833] erofs: (device loop1): mounted with root inode @ nid 36. [ 204.464773][ T5839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.376'. [ 204.501902][ T4270] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[9000] [ 204.516269][ T5839] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 204.528203][ T26] audit: type=1800 audit(1776772023.398:91): pid=5839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.376" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 207.300530][ T5870] loop3: detected capacity change from 0 to 512 [ 207.442971][ T5870] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 207.479577][ T5870] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 207.573629][ T5870] EXT4-fs (loop3): 1 truncate cleaned up [ 207.593690][ T5870] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 207.714825][ T5878] binder: 5876:5878 ioctl 81e8943c 200000000c00 returned -22 [ 209.772595][ T5883] input: syz1 as /devices/virtual/input/input19 [ 209.779086][ T5883] input: failed to attach handler leds to device input19, error: -6 [ 210.060358][ T7] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 210.226877][ T5889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.386'. [ 210.312574][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 210.470286][ T7] usb 4-1: device not accepting address 10, error -71 [ 212.925426][ T5929] loop1: detected capacity change from 0 to 16 [ 212.986930][ T5929] erofs: (device loop1): mounted with root inode @ nid 36. [ 213.119925][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'. [ 213.143569][ T4270] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[9000] [ 213.156683][ T5930] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 213.174458][ T26] audit: type=1800 audit(1776772032.048:92): pid=5930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.395" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 214.053570][ T5937] binder: 5935:5937 ioctl 81e8943c 200000000c00 returned -22 [ 215.686642][ T5941] loop4: detected capacity change from 0 to 512 [ 215.763311][ T5941] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 215.782124][ T5941] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 215.817897][ T5941] EXT4-fs (loop4): 1 truncate cleaned up [ 215.867179][ T5941] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 216.036345][ T5951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.401'. [ 216.590306][ T4281] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 216.827296][ T4281] usb 5-1: unable to get BOS descriptor or descriptor too short [ 216.874411][ T4281] usb 5-1: not running at top speed; connect to a high speed hub [ 217.020239][ T4281] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 217.092176][ T4281] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 217.121666][ T4281] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.150565][ T4281] usb 5-1: Product: syz [ 217.155270][ T4281] usb 5-1: Manufacturer: syz [ 217.159906][ T4281] usb 5-1: SerialNumber: syz [ 217.302009][ T5958] input: syz1 as /devices/virtual/input/input21 [ 218.764518][ T4281] usb 5-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 219.056516][ T4281] usb 5-1: found format II with max.bitrate = 512, frame size=4095 [ 219.202877][ T4281] usb 5-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 219.240277][ T4281] usb 5-1: found format II with max.bitrate = 512, frame size=4095 [ 219.309797][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 219.331168][ T4281] usb 5-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 219.378199][ T5970] loop0: detected capacity change from 0 to 16 [ 219.386766][ T5970] erofs: (device loop0): mounted with root inode @ nid 36. [ 219.554866][ T5970] netlink: 36 bytes leftover after parsing attributes in process `syz.0.408'. [ 219.569801][ T4270] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[9000] [ 219.583211][ T5970] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 219.594504][ T26] audit: type=1800 audit(1776772038.468:93): pid=5970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.408" name="file3" dev="loop0" ino=89 res=0 errno=0 [ 219.610664][ T4281] usb 5-1: USB disconnect, device number 15 [ 220.526095][ T4379] udevd[4379]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 221.355598][ T6000] binder: 5991:6000 ioctl 81e8943c 200000000c00 returned -22 [ 223.611320][ T6008] loop1: detected capacity change from 0 to 512 [ 223.658882][ T6004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.413'. [ 223.661672][ T6008] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 223.686685][ T6008] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 223.757414][ T6016] input: syz1 as /devices/virtual/input/input22 [ 224.535781][ T6008] EXT4-fs (loop1): 1 truncate cleaned up [ 224.541766][ T6008] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 227.550603][ T4929] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 228.173926][ T4929] usb 2-1: unable to get BOS descriptor or descriptor too short [ 228.198277][ T4929] usb 2-1: not running at top speed; connect to a high speed hub [ 228.604711][ T6039] loop4: detected capacity change from 0 to 16 [ 228.676993][ T6039] erofs: (device loop4): mounted with root inode @ nid 36. [ 228.694049][ T4929] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 228.703611][ T4929] usb 2-1: can't read configurations, error -71 [ 228.704688][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 228.914294][ T6043] netlink: 36 bytes leftover after parsing attributes in process `syz.4.421'. [ 228.962283][ T4270] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[9000] [ 229.132947][ T6043] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 229.185217][ T26] audit: type=1800 audit(1776772048.048:94): pid=6043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.421" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 230.029725][ T6063] binder: 6058:6063 ioctl 81e8943c 200000000c00 returned -22 [ 233.010455][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.431'. [ 233.128319][ T6086] input: syz1 as /devices/virtual/input/input24 [ 235.024900][ T6095] loop0: detected capacity change from 0 to 512 [ 235.131197][ T6095] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 235.139680][ T6095] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 235.264225][ T6095] EXT4-fs (loop0): 1 truncate cleaned up [ 235.294527][ T6095] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 236.690205][ T4310] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 237.704815][ T6120] loop4: detected capacity change from 0 to 16 [ 237.775987][ T6120] erofs: (device loop4): mounted with root inode @ nid 36. [ 237.962785][ T6122] netlink: 36 bytes leftover after parsing attributes in process `syz.4.439'. [ 238.080340][ T4270] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[9000] [ 238.103756][ T4310] usb 1-1: device descriptor read/all, error -71 [ 238.168804][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 238.237229][ T6125] binder: 6123:6125 ioctl 81e8943c 200000000c00 returned -22 [ 239.697298][ T26] audit: type=1800 audit(1776772058.568:95): pid=6122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.439" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 241.339732][ T6147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.446'. [ 242.364418][ T6160] input: syz1 as /devices/virtual/input/input26 [ 244.459598][ T6177] loop0: detected capacity change from 0 to 512 [ 244.464740][ T6180] loop1: detected capacity change from 0 to 16 [ 244.493396][ T6180] erofs: (device loop1): mounted with root inode @ nid 36. [ 244.716163][ T4270] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[9000] [ 244.737322][ T6177] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 244.808502][ T6177] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 244.871830][ T6183] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 244.902386][ T26] audit: type=1800 audit(1776772063.778:96): pid=6183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.454" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 245.250364][ T6177] EXT4-fs (loop0): 1 truncate cleaned up [ 245.256197][ T6177] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 246.580231][ T4310] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 247.573175][ T6199] binder: 6193:6199 ioctl 81e8943c 200000000c00 returned -22 [ 247.625707][ T4310] usb 1-1: unable to get BOS descriptor or descriptor too short [ 247.736141][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 247.736681][ T4310] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 247.749652][ T4310] usb 1-1: can't read configurations, error -71 [ 247.904498][ T6207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.460'. [ 249.738855][ T6230] input: syz1 as /devices/virtual/input/input27 [ 250.697397][ T6236] loop2: detected capacity change from 0 to 16 [ 250.725863][ T6236] erofs: (device loop2): mounted with root inode @ nid 36. [ 250.905383][ T4270] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[9000] [ 250.987518][ T6237] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 251.001005][ T26] audit: type=1800 audit(1776772069.878:97): pid=6237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.467" name="file3" dev="loop2" ino=89 res=0 errno=0 [ 252.751787][ T6258] binder: 6255:6258 ioctl 81e8943c 200000000c00 returned -22 [ 253.525109][ T6257] loop3: detected capacity change from 0 to 512 [ 254.048781][ T6265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.475'. [ 254.075931][ T6257] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 254.141221][ T6257] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 254.215212][ T6257] EXT4-fs (loop3): 1 truncate cleaned up [ 254.229528][ T6257] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 255.853227][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.920196][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.944425][ T6290] loop0: detected capacity change from 0 to 16 [ 255.972812][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 255.983100][ T6290] erofs: (device loop0): mounted with root inode @ nid 36. [ 256.225667][ T4270] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[9000] [ 256.375031][ T6291] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 256.387990][ T26] audit: type=1800 audit(1776772075.258:98): pid=6291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.480" name="file3" dev="loop0" ino=89 res=0 errno=0 [ 256.480301][ T6298] netlink: 128 bytes leftover after parsing attributes in process `syz.3.482'. [ 256.489413][ T6298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.482'. [ 257.569833][ T6292] input: syz1 as /devices/virtual/input/input29 [ 258.506819][ T6317] binder: 6311:6317 ioctl 81e8943c 200000000c00 returned -22 [ 260.272296][ T6332] loop2: detected capacity change from 0 to 512 [ 260.306901][ T6326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.490'. [ 260.332468][ T6332] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 260.376957][ T6332] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 260.418555][ T6332] EXT4-fs (loop2): 1 truncate cleaned up [ 260.551994][ T6332] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 261.890542][ T4281] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 262.275596][ T6353] netlink: 128 bytes leftover after parsing attributes in process `syz.1.494'. [ 262.284956][ T6353] netlink: 12 bytes leftover after parsing attributes in process `syz.1.494'. [ 262.973332][ T4281] usb 3-1: unable to get BOS descriptor or descriptor too short [ 262.986786][ T4281] usb 3-1: not running at top speed; connect to a high speed hub [ 263.040425][ T6356] input: syz1 as /devices/virtual/input/input31 [ 263.061028][ T4281] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 263.325218][ T4281] usb 3-1: string descriptor 0 read error: -71 [ 263.427537][ T4281] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 263.558928][ T4281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.589067][ T6362] loop1: detected capacity change from 0 to 16 [ 263.609783][ T6362] erofs: (device loop1): mounted with root inode @ nid 36. [ 263.729985][ T4281] usb 3-1: can't set config #1, error -71 [ 263.763057][ T4270] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[9000] [ 263.763494][ T4281] usb 3-1: USB disconnect, device number 8 [ 263.807850][ T6364] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 263.845734][ T26] audit: type=1800 audit(1776772082.728:99): pid=6364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.498" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 264.261763][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 264.604855][ T6372] binder: 6367:6372 ioctl 81e8943c 200000000c00 returned -22 [ 267.754487][ T6387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.504'. [ 269.671161][ T6412] loop0: detected capacity change from 0 to 512 [ 269.899283][ T6415] netlink: 128 bytes leftover after parsing attributes in process `syz.3.509'. [ 269.908437][ T6415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.509'. [ 270.697105][ T6412] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 270.705749][ T6412] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 270.718691][ T6412] EXT4-fs (loop0): 1 truncate cleaned up [ 270.725741][ T6420] loop3: detected capacity change from 0 to 16 [ 270.735319][ T6420] erofs: (device loop3): mounted with root inode @ nid 36. [ 271.254765][ T4270] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[9000] [ 271.299328][ T6412] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 271.309097][ T6421] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 271.407725][ T6424] input: syz1 as /devices/virtual/input/input32 [ 272.230828][ T26] audit: type=1800 audit(1776772091.108:100): pid=6421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.512" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 273.763956][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 274.302920][ T4906] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 274.520235][ T4906] usb 2-1: Using ep0 maxpacket: 32 [ 274.537509][ T4906] usb 2-1: config 123 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 274.770642][ T4906] usb 2-1: config 123 interface 0 has no altsetting 0 [ 274.876881][ T6442] binder: 6438:6442 ioctl 81e8943c 200000000c00 returned -22 [ 275.651621][ T4906] usb 2-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 275.661295][ T4906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.670527][ T4906] usb 2-1: Product: syz [ 275.675065][ T4906] usb 2-1: Manufacturer: syz [ 275.680020][ T4906] usb 2-1: SerialNumber: syz [ 276.132429][ T4906] usb 2-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 276.199118][ T4906] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 276.259526][ T4906] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 276.296813][ T4906] usb 2-1: media controller created [ 276.970797][ T4906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 277.072015][ T4906] set interface failed [ 277.072054][ T4906] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 277.097448][ T4906] error writing reg: 0xff, val: 0x00 [ 277.098409][ T6455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.520'. [ 277.329249][ T4906] dvb_usb_mxl111sf: probe of 2-1:123.0 failed with error -22 [ 277.402114][ T6464] netlink: 112 bytes leftover after parsing attributes in process `syz.2.522'. [ 277.415837][ T4906] usb 2-1: USB disconnect, device number 14 [ 278.315239][ T6475] loop3: detected capacity change from 0 to 512 [ 278.488246][ T6475] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 278.518588][ T6475] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 278.623708][ T6475] EXT4-fs (loop3): 1 truncate cleaned up [ 278.637437][ T6475] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 278.690227][ T4906] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 280.084343][ T4906] usb 2-1: config index 0 descriptor too short (expected 8192, got 36) [ 280.092884][ T7] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 280.844126][ T4906] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.879642][ T4906] usb 2-1: config 0 has no interfaces? [ 280.896948][ T4906] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 280.913836][ T4906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.928536][ T4906] usb 2-1: config 0 descriptor?? [ 281.066238][ T6495] binder: 6493:6495 ioctl 81e8943c 200000000c00 returned -22 [ 281.173107][ T7] usb 4-1: unable to get BOS descriptor or descriptor too short [ 283.783446][ T7] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 283.829994][ T7] usb 4-1: can't read configurations, error -71 [ 283.842878][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 286.010764][ T4906] usb 2-1: can't set config #0, error -110 [ 286.460711][ T6519] netlink: 112 bytes leftover after parsing attributes in process `syz.3.534'. [ 287.288868][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.536'. [ 287.549119][ T22] usb 2-1: USB disconnect, device number 15 [ 288.549821][ T6536] overlayfs: missing 'lowerdir' [ 289.916675][ T6553] binder: 6551:6553 ioctl 81e8943c 200000000c00 returned -22 [ 291.940180][ T7] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 292.027958][ T6567] netlink: 112 bytes leftover after parsing attributes in process `syz.0.547'. [ 292.832470][ T7] usb 4-1: device descriptor read/all, error -71 [ 292.856368][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.549'. [ 292.890502][ T22] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 293.080350][ T22] usb 5-1: Using ep0 maxpacket: 32 [ 293.100461][ T4906] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 293.101802][ T22] usb 5-1: config 123 interface 0 has no altsetting 0 [ 293.228194][ T22] usb 5-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 293.238553][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.259789][ T22] usb 5-1: Product: syz [ 293.266802][ T22] usb 5-1: Manufacturer: syz [ 293.274856][ T22] usb 5-1: SerialNumber: syz [ 293.310359][ T4906] usb 2-1: Using ep0 maxpacket: 16 [ 293.317726][ T4906] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 293.345876][ T4906] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 293.400573][ T4929] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 293.410940][ T4906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.457264][ T4906] usb 2-1: Product: syz [ 293.477340][ T4906] usb 2-1: Manufacturer: syz [ 293.496254][ T4906] usb 2-1: SerialNumber: syz [ 293.522550][ T22] usb 5-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 293.554773][ T22] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 293.566829][ T22] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 293.589149][ T4906] r8152-cfgselector 2-1: config 0 descriptor?? [ 293.598676][ T22] usb 5-1: media controller created [ 293.623449][ T4929] usb 3-1: config index 0 descriptor too short (expected 8192, got 36) [ 293.657673][ T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 293.667931][ T4929] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.724174][ T22] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 293.742537][ T22] error writing reg: 0xff, val: 0x00 [ 293.865005][ T4929] usb 3-1: config 0 has no interfaces? [ 293.883115][ T4929] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 293.910401][ T4929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.945348][ T22] dvb_usb_mxl111sf: probe of 5-1:123.0 failed with error -22 [ 293.986429][ T4929] usb 3-1: config 0 descriptor?? [ 294.066416][ T22] usb 5-1: USB disconnect, device number 16 [ 295.390992][ T4906] r8152-cfgselector 2-1: Unknown version 0x0000 [ 295.423675][ T4906] r8152-cfgselector 2-1: Unknown version 0x0000 [ 295.483846][ T4906] r8152-cfgselector 2-1: bad CDC descriptors [ 295.525590][ T6601] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 295.559109][ T4906] r8152-cfgselector 2-1: Unknown version 0x0000 [ 295.577095][ T4906] r8152-cfgselector 2-1: USB disconnect, device number 16 [ 295.588835][ T6603] netlink: 168 bytes leftover after parsing attributes in process `syz.0.557'. [ 295.720699][ T6609] binder: 6602:6609 ioctl 81e8943c 200000000c00 returned -22 [ 297.780245][ T4354] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 298.008396][ T6616] netlink: 104 bytes leftover after parsing attributes in process `syz.0.560'. [ 298.781187][ T6619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.562'. [ 298.820235][ T4354] usb 2-1: Using ep0 maxpacket: 16 [ 298.853819][ T4354] usb 2-1: device descriptor read/all, error -71 [ 299.040411][ T22] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 299.169498][ T4929] usb 3-1: USB disconnect, device number 9 [ 299.242953][ T22] usb 5-1: unable to get BOS descriptor or descriptor too short [ 299.267996][ T22] usb 5-1: not running at top speed; connect to a high speed hub [ 299.348923][ T22] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 299.443754][ T22] usb 5-1: New USB device found, idVendor=046d, idProduct=08c6, bcdDevice= 0.40 [ 299.494880][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.535861][ T22] usb 5-1: Product: syz [ 299.559713][ T22] usb 5-1: Manufacturer: syz [ 299.597010][ T22] usb 5-1: SerialNumber: syz [ 299.834614][ T22] usb 5-1: 1:1 : sample bitwidth 62 in over sample bytes 4 [ 299.880591][ T22] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 299.964516][ T22] usb 5-1: failed to enable PITCH for EP 0x1 [ 300.002347][ T22] usb 5-1: unit 2 not found! [ 300.026751][ T22] usb 5-1: unit 0 not found! [ 300.162237][ T22] usb 5-1: USB disconnect, device number 17 [ 300.440875][ T4344] udevd[4344]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 300.561269][ T6649] raw_sendmsg: syz.2.570 forgot to set AF_INET. Fix it! [ 300.874799][ T6657] netlink: 104 bytes leftover after parsing attributes in process `syz.4.572'. [ 300.906423][ T6652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.574'. [ 301.750357][ T4281] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 301.875826][ T6677] syz.3.580: vmalloc error: size 18446744073699066186, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 301.902954][ T6678] netlink: 16 bytes leftover after parsing attributes in process `syz.4.577'. [ 301.961219][ T4281] usb 3-1: Using ep0 maxpacket: 16 [ 301.967782][ T4281] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 301.967805][ T4281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.967818][ T4281] usb 3-1: Product: syz [ 301.967827][ T4281] usb 3-1: Manufacturer: syz [ 301.967836][ T4281] usb 3-1: SerialNumber: syz [ 301.999584][ T6677] CPU: 0 PID: 6677 Comm: syz.3.580 Not tainted syzkaller #0 [ 301.999642][ T6677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 301.999655][ T6677] Call Trace: [ 301.999662][ T6677] [ 301.999673][ T6677] dump_stack_lvl+0x188/0x24e [ 301.999711][ T6677] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 301.999738][ T6677] ? show_regs_print_info+0x12/0x12 [ 301.999770][ T6677] ? load_image+0x400/0x400 [ 301.999801][ T6677] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 301.999827][ T6677] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 301.999854][ T6677] warn_alloc+0x242/0x330 [ 301.999884][ T6677] ? _end+0x683da14a/0x0 [ 301.999912][ T6677] ? zone_watermark_ok_safe+0x270/0x270 [ 301.999957][ T6677] __vmalloc_node_range+0x11e/0x13b0 [ 301.999983][ T6677] ? __mutex_trylock_common+0x155/0x260 [ 302.000008][ T6677] ? _end+0x683da14a/0x0 [ 302.000032][ T6677] ? trace_raw_output_contention_end+0xd0/0xd0 [ 302.000067][ T6677] ? rcu_is_watching+0x11/0xa0 [ 302.000101][ T6677] ? __mutex_lock+0x1ab/0xaf0 [ 302.000136][ T6677] ? free_vm_area+0x50/0x50 [ 302.000160][ T6677] ? dvb_demux_do_ioctl+0x313/0x530 [ 302.000188][ T6677] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 302.000217][ T6677] ? mutex_lock_nested+0x10/0x10 [ 302.000256][ T6677] ? _end+0x683da14a/0x0 [ 302.000280][ T6677] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 302.000309][ T6677] vmalloc+0x75/0x80 [ 302.000333][ T6677] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 302.000363][ T6677] ? _end+0x683da14a/0x0 [ 302.000388][ T6677] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 302.000426][ T6677] dvb_demux_do_ioctl+0x450/0x530 [ 302.000455][ T6677] ? _end+0x683da14a/0x0 [ 302.000490][ T6677] ? _end+0x683da14a/0x0 [ 302.000514][ T6677] dvb_usercopy+0x191/0x2b0 [ 302.000543][ T6677] ? _end+0x683da14a/0x0 [ 302.000568][ T6677] ? dvb_dmxdev_buffer_read+0x4c0/0x4c0 [ 302.000597][ T6677] ? dvb_generic_ioctl+0xb0/0xb0 [ 302.000643][ T6677] ? _end+0x683da14a/0x0 [ 302.000669][ T6677] ? _end+0x683da14a/0x0 [ 302.000693][ T6677] ? dvb_demux_poll+0x210/0x210 [ 302.000722][ T6677] ? _end+0x683da14a/0x0 [ 302.000747][ T6677] dvb_demux_ioctl+0x25/0x30 [ 302.000777][ T6677] __se_sys_ioctl+0xfa/0x170 [ 302.000808][ T6677] do_syscall_64+0x4c/0xa0 [ 302.000835][ T6677] ? clear_bhb_loop+0x60/0xb0 [ 302.000861][ T6677] ? clear_bhb_loop+0x60/0xb0 [ 302.000888][ T6677] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 302.000913][ T6677] RIP: 0033:0x7f3ac399c819 [ 302.000933][ T6677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.000951][ T6677] RSP: 002b:00007f3ac4882028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 302.000976][ T6677] RAX: ffffffffffffffda RBX: 00007f3ac3c15fa0 RCX: 00007f3ac399c819 [ 302.000992][ T6677] RDX: ffffffffff60014a RSI: 0000000000006f2d RDI: 0000000000000003 [ 302.001006][ T6677] RBP: 00007f3ac3a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 302.001018][ T6677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.001029][ T6677] R13: 00007f3ac3c16038 R14: 00007f3ac3c15fa0 R15: 00007ffc4a4a7b38 [ 302.001043][ T6677] ? _end+0x683da14a/0x0 [ 302.001069][ T6677] [ 302.019578][ T6677] Mem-Info: [ 302.019597][ T6677] active_anon:8349 inactive_anon:0 isolated_anon:0 [ 302.019597][ T6677] active_file:1339 inactive_file:40008 isolated_file:0 [ 302.019597][ T6677] unevictable:768 dirty:186 writeback:0 [ 302.019597][ T6677] slab_reclaimable:21200 slab_unreclaimable:93514 [ 302.019597][ T6677] mapped:31963 shmem:4080 pagetables:738 [ 302.019597][ T6677] sec_pagetables:0 bounce:0 [ 302.019597][ T6677] kernel_misc_reclaimable:0 [ 302.019597][ T6677] free:1334048 free_pcp:10839 free_cma:0 [ 302.019658][ T6677] Node 0 active_anon:33396kB inactive_anon:0kB active_file:5356kB inactive_file:159828kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127852kB dirty:744kB writeback:0kB shmem:14784kB shmem_thp: 2048kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11332kB pagetables:2952kB sec_pagetables:0kB all_unreclaimable? no [ 302.019720][ T6677] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 302.019776][ T6677] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 302.019843][ T6677] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 302.019895][ T6677] Node 0 DMA32 free:1417948kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:33396kB inactive_anon:0kB active_file:5356kB inactive_file:159828kB unevictable:1536kB writepending:744kB present:3129332kB managed:2592964kB mlocked:0kB bounce:0kB free_pcp:25076kB local_pcp:19188kB free_cma:0kB [ 302.019961][ T6677] lowmem_reserve[]: 0 0 1 1 1 [ 302.020010][ T6677] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 302.022789][ T6677] lowmem_reserve[]: 0 0 0 0 0 [ 302.022847][ T6677] Node 1 Normal free:3902884kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:18280kB local_pcp:7816kB free_cma:0kB [ 302.022913][ T6677] lowmem_reserve[]: 0 0 0 0 0 [ 302.024465][ T6677] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 302.024672][ T6677] Node 0 DMA32: 289*4kB (UME) 605*8kB (UE) 615*16kB (UE) 292*32kB (UME) 180*64kB (UME) 53*128kB (UME) 23*256kB (UM) 11*512kB (UME) 9*1024kB (ME) 3*2048kB (UME) 329*4096kB [ 302.321086][ C0] vkms_vblank_simulate: vblank timer overrun [ 302.425906][ C0] vkms_vblank_simulate: vblank timer overrun [ 302.459251][ C0] vkms_vblank_simulate: vblank timer overrun [ 302.490142][ C0] vkms_vblank_simulate: vblank timer overrun [ 302.554097][ C0] vkms_vblank_simulate: vblank timer overrun [ 302.585837][ C0] vkms_vblank_simulate: vblank timer overrun [ 302.620620][ C0] vkms_vblank_simulate: vblank timer overrun [ 302.704250][ T4281] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 302.762539][ T4281] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 302.812433][ T4281] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 302.858363][ T4281] usb 3-1: media controller created [ 302.887740][ T4281] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 302.906611][ T6677] (UM) = 1417948kB [ 302.916151][ T6677] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 302.941985][ T6677] Node 1 Normal: 229*4kB (UM) 48*8kB (UME) 27*16kB (UME) 23*32kB (UE) 12*64kB (UME) 10*128kB (UME) 4*256kB (UME) 2*512kB (ME) 1*1024kB (E) 2*2048kB (UE) 950*4096kB (M) = 3902884kB [ 302.968662][ T6677] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 302.989757][ T6677] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 303.011901][ T4281] zl10353_read_register: readreg error (reg=127, ret==-71) [ 303.079254][ T6677] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 303.148217][ T4281] dvb_usb_gl861: probe of 3-1:157.0 failed with error -5 [ 303.170359][ T6677] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 303.179816][ T6677] 44705 total pagecache pages [ 303.220426][ T4281] usb 3-1: USB disconnect, device number 10 [ 303.241797][ T6677] 250 pages in swap cache [ 303.246286][ T6677] Free swap = 122824kB [ 303.297732][ T6677] Total swap = 124996kB [ 303.302500][ T6677] 2097051 pages RAM [ 303.307229][ T6677] 0 pages HighMem/MovableOnly [ 303.318849][ T6677] 415209 pages reserved [ 303.328303][ T6677] 0 pages cma reserved [ 305.267337][ T6708] netlink: 104 bytes leftover after parsing attributes in process `syz.0.588'. [ 306.380221][ T4906] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 306.486142][ T6723] netlink: 36 bytes leftover after parsing attributes in process `syz.2.593'. [ 306.572488][ T4906] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 306.593292][ T4906] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 306.610782][ T6726] netlink: 'syz.2.593': attribute type 11 has an invalid length. [ 306.619292][ T4906] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 306.633378][ T4906] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.649107][ T4906] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 306.662639][ T4906] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 306.673506][ T4906] usb 2-1: Product: syz [ 306.677803][ T4906] usb 2-1: Manufacturer: syz [ 306.694442][ T4906] cdc_wdm 2-1:1.0: skipping garbage [ 306.699981][ T4906] cdc_wdm 2-1:1.0: skipping garbage [ 306.710219][ T4281] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 306.715439][ T4906] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 306.728471][ T4906] cdc_wdm 2-1:1.0: Unknown control protocol [ 306.913611][ T4281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.937257][ T4281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.968335][ T4281] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 306.980041][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 306.981144][ T4281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.986879][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 306.996778][ T4311] usb 2-1: USB disconnect, device number 19 [ 307.000964][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 307.002440][ C0] vkms_vblank_simulate: vblank timer overrun [ 307.034998][ T4281] usb 5-1: config 0 descriptor?? [ 307.479389][ T4281] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 307.490272][ T4906] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 307.507199][ T4281] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 307.531800][ T4281] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0001/input/input34 [ 307.586412][ T4281] cm6533_jd 0003:0D8C:0022.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 307.680202][ T4906] usb 1-1: Using ep0 maxpacket: 16 [ 307.699647][ T4281] usb 5-1: USB disconnect, device number 18 [ 307.703376][ T4906] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 307.776277][ T4906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.815528][ T4906] usb 1-1: Product: syz [ 307.819876][ T4906] usb 1-1: Manufacturer: syz [ 307.894432][ T4906] usb 1-1: SerialNumber: syz [ 307.977788][ T6735] fido_id[6735]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 308.159616][ T4906] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 308.176584][ T4906] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 308.187775][ T4906] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 308.198033][ T4906] usb 1-1: media controller created [ 308.224173][ T4906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 308.506784][ T4906] zl10353_read_register: readreg error (reg=127, ret==-110) [ 308.515076][ T6744] ------------[ cut here ]------------ [ 308.521401][ T6744] usb 1-1: BOGUS control dir, pipe 80000e80 doesn't match bRequestType c0 [ 308.558548][ T6744] WARNING: CPU: 1 PID: 6744 at drivers/usb/core/urb.c:413 usb_submit_urb+0x11ae/0x1920 [ 308.569101][ T6744] Modules linked in: [ 308.573118][ T6744] CPU: 1 PID: 6744 Comm: syz.4.600 Not tainted syzkaller #0 [ 308.580691][ T6744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 308.590828][ T6744] RIP: 0010:usb_submit_urb+0x11ae/0x1920 [ 308.596522][ T6744] Code: ff df 0f b6 44 05 00 84 c0 0f 85 6f 06 00 00 45 0f b6 07 48 c7 c7 20 ac 2e 8b 48 8b 74 24 18 4c 89 e2 44 89 f1 e8 c2 09 27 fb <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 93 f3 ff ff 89 e9 80 e1 07 [ 308.616448][ T6744] RSP: 0018:ffffc90004637508 EFLAGS: 00010246 [ 308.622622][ T6744] RAX: 4ad9f2c27a4f3000 RBX: ffff88814c161400 RCX: 0000000000080000 [ 308.631236][ T6744] RDX: ffffc9000e9a1000 RSI: 0000000000004db6 RDI: 0000000000004db7 [ 308.639263][ T6744] RBP: 1ffff1100f19fb1d R08: ffff8880b8e279db R09: 1ffff110171c4f3b [ 308.647416][ T6744] R10: dffffc0000000000 R11: ffffed10171c4f3c R12: ffff888027c868e8 [ 308.655750][ T6744] R13: ffff888059e1b0f8 R14: 0000000080000e80 R15: ffff888078cfd8e8 [ 308.663911][ T6744] FS: 00007f287a0916c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 308.672904][ T6744] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 308.679600][ T6744] CR2: 000020000000a038 CR3: 00000000564ef000 CR4: 00000000003526e0 [ 308.687833][ T6744] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 308.695976][ T6744] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 308.704036][ T6744] Call Trace: [ 308.707348][ T6744] [ 308.710448][ T6744] usb_start_wait_urb+0x13c/0x580 [ 308.715597][ T6744] ? usb_api_blocking_completion+0xb0/0xb0 [ 308.721574][ T6744] usb_control_msg+0x231/0x3e0 [ 308.726543][ T6744] gl861_ctrl_msg+0x211/0x3d0 [ 308.731323][ T6744] ? gl861_i2c_functionality+0x10/0x10 [ 308.736821][ T6744] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 308.742775][ T6744] ? _raw_spin_unlock+0x40/0x40 [ 308.747670][ T6744] gl861_i2c_master_xfer+0x430/0x640 [ 308.753020][ T6744] ? gl861_init+0x40/0x40 [ 308.757394][ T6744] __i2c_transfer+0x880/0x22b0 [ 308.762255][ T6744] ? i2c_cmd+0x110/0x110 [ 308.766546][ T6744] ? i2c_transfer+0x117/0x3a0 [ 308.771314][ T6744] i2c_transfer+0x25d/0x3a0 [ 308.775991][ T6744] ? aa_file_perm+0x112/0xf00 [ 308.780778][ T6744] ? __i2c_transfer+0x22b0/0x22b0 [ 308.785849][ T6744] ? memset+0x1e/0x40 [ 308.790048][ T6744] i2c_transfer_buffer_flags+0x10a/0x1a0 [ 308.795808][ T6744] ? i2c_transfer+0x3a0/0x3a0 [ 308.800606][ T6744] ? common_file_perm+0x171/0x1c0 [ 308.805864][ T6744] i2cdev_read+0x84/0x170 [ 308.810337][ T6744] do_iter_read+0x4b4/0xb20 [ 308.814918][ T6744] ? vfs_iter_read+0xa0/0xa0 [ 308.819581][ T6744] ? __import_iovec+0x315/0x500 [ 308.824655][ T6744] ? import_iovec+0x6f/0xa0 [ 308.829199][ T6744] do_readv+0x260/0x460 [ 308.833522][ T6744] ? generic_file_rw_checks+0x270/0x270 [ 308.839128][ T6744] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 308.845199][ T6744] ? lock_chain_count+0x20/0x20 [ 308.850154][ T6744] ? lockdep_hardirqs_on+0x94/0x140 [ 308.855381][ T6744] do_syscall_64+0x4c/0xa0 [ 308.859826][ T6744] ? clear_bhb_loop+0x60/0xb0 [ 308.864589][ T6744] ? clear_bhb_loop+0x60/0xb0 [ 308.869322][ T6744] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 308.875300][ T6744] RIP: 0033:0x7f287919c819 [ 308.879744][ T6744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.899518][ T6744] RSP: 002b:00007f287a091028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 308.908045][ T6744] RAX: ffffffffffffffda RBX: 00007f2879415fa0 RCX: 00007f287919c819 [ 308.916124][ T6744] RDX: 0000000000000005 RSI: 0000200000002680 RDI: 0000000000000003 [ 308.924241][ T6744] RBP: 00007f2879232c91 R08: 0000000000000000 R09: 0000000000000000 [ 308.932379][ T6744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.940519][ T6744] R13: 00007f2879416038 R14: 00007f2879415fa0 R15: 00007ffda72792d8 [ 308.948542][ T6744] [ 308.951630][ T6744] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 308.959209][ T6744] CPU: 1 PID: 6744 Comm: syz.4.600 Not tainted syzkaller #0 [ 308.966551][ T6744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 308.976635][ T6744] Call Trace: [ 308.980022][ T6744] [ 308.982971][ T6744] dump_stack_lvl+0x188/0x24e [ 308.987687][ T6744] ? memcpy+0x3c/0x60 [ 308.991669][ T6744] ? show_regs_print_info+0x12/0x12 [ 308.997009][ T6744] ? load_image+0x400/0x400 [ 309.001593][ T6744] panic+0x2e5/0x730 [ 309.005519][ T6744] ? bpf_jit_dump+0xd0/0xd0 [ 309.010095][ T6744] __warn+0x2f8/0x4f0 [ 309.014123][ T6744] ? usb_submit_urb+0x11ae/0x1920 [ 309.019187][ T6744] ? usb_submit_urb+0x11ae/0x1920 [ 309.024429][ T6744] report_bug+0x2ba/0x4f0 [ 309.029058][ T6744] ? usb_submit_urb+0x11ae/0x1920 [ 309.034102][ T6744] handle_bug+0x3a/0x70 [ 309.038343][ T6744] exc_invalid_op+0x16/0x40 [ 309.042853][ T6744] asm_exc_invalid_op+0x16/0x20 [ 309.047810][ T6744] RIP: 0010:usb_submit_urb+0x11ae/0x1920 [ 309.053545][ T6744] Code: ff df 0f b6 44 05 00 84 c0 0f 85 6f 06 00 00 45 0f b6 07 48 c7 c7 20 ac 2e 8b 48 8b 74 24 18 4c 89 e2 44 89 f1 e8 c2 09 27 fb <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 93 f3 ff ff 89 e9 80 e1 07 [ 309.073598][ T6744] RSP: 0018:ffffc90004637508 EFLAGS: 00010246 [ 309.079858][ T6744] RAX: 4ad9f2c27a4f3000 RBX: ffff88814c161400 RCX: 0000000000080000 [ 309.087977][ T6744] RDX: ffffc9000e9a1000 RSI: 0000000000004db6 RDI: 0000000000004db7 [ 309.096044][ T6744] RBP: 1ffff1100f19fb1d R08: ffff8880b8e279db R09: 1ffff110171c4f3b [ 309.104023][ T6744] R10: dffffc0000000000 R11: ffffed10171c4f3c R12: ffff888027c868e8 [ 309.112101][ T6744] R13: ffff888059e1b0f8 R14: 0000000080000e80 R15: ffff888078cfd8e8 [ 309.120296][ T6744] ? usb_submit_urb+0x11ae/0x1920 [ 309.125486][ T6744] usb_start_wait_urb+0x13c/0x580 [ 309.130564][ T6744] ? usb_api_blocking_completion+0xb0/0xb0 [ 309.136402][ T6744] usb_control_msg+0x231/0x3e0 [ 309.141278][ T6744] gl861_ctrl_msg+0x211/0x3d0 [ 309.146072][ T6744] ? gl861_i2c_functionality+0x10/0x10 [ 309.151540][ T6744] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 309.157449][ T6744] ? _raw_spin_unlock+0x40/0x40 [ 309.162462][ T6744] gl861_i2c_master_xfer+0x430/0x640 [ 309.167812][ T6744] ? gl861_init+0x40/0x40 [ 309.172173][ T6744] __i2c_transfer+0x880/0x22b0 [ 309.176952][ T6744] ? i2c_cmd+0x110/0x110 [ 309.181294][ T6744] ? i2c_transfer+0x117/0x3a0 [ 309.186022][ T6744] i2c_transfer+0x25d/0x3a0 [ 309.190557][ T6744] ? aa_file_perm+0x112/0xf00 [ 309.195339][ T6744] ? __i2c_transfer+0x22b0/0x22b0 [ 309.200484][ T6744] ? memset+0x1e/0x40 [ 309.204507][ T6744] i2c_transfer_buffer_flags+0x10a/0x1a0 [ 309.210168][ T6744] ? i2c_transfer+0x3a0/0x3a0 [ 309.214877][ T6744] ? common_file_perm+0x171/0x1c0 [ 309.219926][ T6744] i2cdev_read+0x84/0x170 [ 309.224754][ T6744] do_iter_read+0x4b4/0xb20 [ 309.229290][ T6744] ? vfs_iter_read+0xa0/0xa0 [ 309.233922][ T6744] ? __import_iovec+0x315/0x500 [ 309.238786][ T6744] ? import_iovec+0x6f/0xa0 [ 309.243299][ T6744] do_readv+0x260/0x460 [ 309.247649][ T6744] ? generic_file_rw_checks+0x270/0x270 [ 309.253209][ T6744] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 309.259212][ T6744] ? lock_chain_count+0x20/0x20 [ 309.264184][ T6744] ? lockdep_hardirqs_on+0x94/0x140 [ 309.269391][ T6744] do_syscall_64+0x4c/0xa0 [ 309.273825][ T6744] ? clear_bhb_loop+0x60/0xb0 [ 309.278517][ T6744] ? clear_bhb_loop+0x60/0xb0 [ 309.283319][ T6744] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 309.289239][ T6744] RIP: 0033:0x7f287919c819 [ 309.293676][ T6744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.313561][ T6744] RSP: 002b:00007f287a091028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 309.322306][ T6744] RAX: ffffffffffffffda RBX: 00007f2879415fa0 RCX: 00007f287919c819 [ 309.330311][ T6744] RDX: 0000000000000005 RSI: 0000200000002680 RDI: 0000000000000003 [ 309.338374][ T6744] RBP: 00007f2879232c91 R08: 0000000000000000 R09: 0000000000000000 [ 309.346346][ T6744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.354317][ T6744] R13: 00007f2879416038 R14: 00007f2879415fa0 R15: 00007ffda72792d8 [ 309.362317][ T6744] [ 309.365842][ T6744] Kernel Offset: disabled [ 309.370231][ T6744] Rebooting in 86400 seconds..