last executing test programs: 10m1.547937063s ago: executing program 1 (id=32): syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x40441, 0x0) io_submit(r0, 0x0, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x20, 0x1, 0x3ffc, r1, 0x0, 0x0, 0x7, 0x0, 0x2}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x21000006, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x10, &(0x7f0000000000), 0x4) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e21, 0x103, @empty, 0xb}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) sendto$inet6(r5, 0x0, 0x0, 0xb97, 0x0, 0xfffffd76) signalfd4(0xffffffffffffffff, &(0x7f0000000500)={[0x800]}, 0x8, 0x0) 9m56.504712624s ago: executing program 1 (id=43): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r6, 0x400, 0x0) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r7, 0x400, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmmsg$unix(r9, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="c8", 0x1}], 0x1, 0x0, 0x0, 0x40044}}], 0x1, 0x4) recvmmsg(r8, &(0x7f0000000080)=[{{0x0, 0xfffffffffffffee1, 0x0, 0x0, 0x0, 0xffffffffffffff35}, 0x9}], 0x49, 0x2382, 0x0) 9m53.881137191s ago: executing program 1 (id=48): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cgroup\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$x25(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x129a02, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000002c0)={0x10000, 0x8, 0x4, {0xb, @raw_data="e19f9753b68204d8a9cb54a2f1525cd97a77aa87994fd7fc519331d37860ab699f407b7829874e6c88a54472893680ad673634ff124b144d24c0668aaea5aba0b96ebbf3b3d210173c0438380441488a600c9363cd7204075ea8d9137a86e3257418e84274190f8575b4cb4fa44d5f20d3fd2689ff93ef2fcf28db825ff209f9156ee928e63dc9760208d6d8d2911762be5baeaef07d8853728915598bd06e9436afc187ecb5741c6680232b3c6643970c80a6e87882d230c52b8bee772f49f5417c56c927448dcb"}, 0xf2b9}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)=0x1ff, 0x4) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x20000000}) 9m51.872006175s ago: executing program 1 (id=50): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32], 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r4, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9m50.682912441s ago: executing program 1 (id=52): io_setup(0x80000000, &(0x7f0000003880)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x7ffffffe, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1200) r0 = socket$inet6(0xa, 0x3, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x400c010) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) syz_open_procfs(0x0, 0x0) 9m40.661046239s ago: executing program 1 (id=75): socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x20000cc, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg1\x00'}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r3, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 9m25.092758603s ago: executing program 32 (id=75): socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x20000cc, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg1\x00'}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r3, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 11.66252689s ago: executing program 0 (id=1762): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff], [0x10000, 0x0, 0x0, 0x0, 0x8001], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]], '\x00', [{}, {0xfffffffd}, {}, {0x0, 0xfffffffc, 0x0, 0x1, 0x1}, {0x80000009, 0x0, 0x0, 0x1, 0x1}, {0x7fff, 0xfffffffa}, {}, {0x8000000, 0x8f96}], '\x00', 0x1000}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="f8000000190001000000000000000000e0000002000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000001000001"], 0xf8}}, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002500000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11.312426871s ago: executing program 2 (id=1766): syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x40441, 0x0) io_submit(r0, 0x0, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x20, 0x1, 0x3ffc, r1, 0x0, 0x0, 0x7, 0x0, 0x2}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x21000006, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x10, &(0x7f0000000000), 0x4) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e21, 0x103, @empty, 0xb}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) sendto$inet6(r5, 0x0, 0x0, 0xb97, 0x0, 0xfffffd76) signalfd4(0xffffffffffffffff, &(0x7f0000000500)={[0x800]}, 0x8, 0x0) 9.406352312s ago: executing program 4 (id=1768): socket$nl_generic(0x10, 0x3, 0x10) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$I2C(0x0, 0x0, 0x189802) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xc3, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) 8.854617983s ago: executing program 4 (id=1770): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x121301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000480)=""/82, 0x52, 0x0) socket(0x1d, 0x2, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x18, 0x0, 0x1, 0xfffffffe, 0x10000, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x30, r4, 0x1, 0x0, 0x4000000, {{}, {}, {0x14, 0x17, {0x0, 0x401, @l2={'ib', 0x3a, 'wg1\x00'}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24008044}, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aeb2, &(0x7f0000000640)={0x2, 0x12c, @ioapic={0x2000, 0x73, 0x2, 0x2a, 0x0, [{0x94, 0x4, 0x1, '\x00', 0x1}, {0x6, 0xe5, 0x3, '\x00', 0x5}, {0x4, 0x0, 0x4, '\x00', 0x2}, {0x97, 0xff, 0x8, '\x00', 0x4}, {0x0, 0x9, 0x6, '\x00', 0x7}, {0x0, 0x1, 0xb, '\x00', 0x2}, {0x7, 0x40, 0x4, '\x00', 0x7f}, {0x6, 0xe, 0x4, '\x00', 0x5}, {0x21, 0x80, 0x1, '\x00', 0x7}, {0x9, 0x40, 0xd8, '\x00', 0x9}, {0x41, 0x3, 0x3, '\x00', 0xff}, {0x7, 0x8, 0x78, '\x00', 0x8}, {0xe6, 0xf0, 0x6, '\x00', 0x6c}, {0xba, 0x8, 0x77, '\x00', 0x7}, {0xf9, 0x90, 0xf1, '\x00', 0x8}, {0x9, 0xff, 0x4, '\x00', 0xd7}, {0xcd, 0x1, 0x0, '\x00', 0x8}, {0x53, 0x6, 0x80, '\x00', 0x7}, {0x6, 0x2, 0x0, '\x00', 0x2}, {0x4, 0x7, 0xff, '\x00', 0x8}, {0x5, 0x4, 0x3, '\x00', 0x9}, {0x2, 0x3, 0x7f, '\x00', 0x1}, {0x8, 0x9, 0x64}, {0x8, 0x9}]}}) r5 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r5, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f00000000c0), 0xf00) 8.710961646s ago: executing program 0 (id=1771): syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b010203010902120001"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000140)={&(0x7f0000000a00)=[{0x9, 0x1211, 0x13, &(0x7f0000000280)="744cd20e6401b5424c9efe3056e624c39dbc30"}, {0x89, 0xb201, 0x0, 0x0}], 0x2}) 8.485915831s ago: executing program 5 (id=1772): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) getpgrp(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x6, 0x6, 0x1000002, 0x87, 0xffffffff, 0x3fe}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.83309894s ago: executing program 5 (id=1773): inotify_init() socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xb, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x10, 0x2}, 0x94) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x1, 0x8001, 0x0, 0xb49, 0x200000000002, 0x9, 0x8, 0x5}, 0x0) timer_create(0x0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000340)={0x1, 0x6, 0x8, 0xffffffffffff72aa, 0xab, 0x2, 0x5, 0x5}, &(0x7f00000003c0)={0x9, 0xfffffffffffffff1, 0x9, 0x6, 0xd3, 0x8, 0x7fffffffffffffff, 0xff}, &(0x7f0000000400), &(0x7f0000000580)={&(0x7f0000000540)={[0xfffffffffffffffd]}, 0x8}) r2 = socket$netlink(0x10, 0x3, 0x15) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) recvmmsg(r2, 0x0, 0x0, 0x40010000, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)=@xdp={0x2c, 0xdd86, 0x0, 0x3}, 0x80, &(0x7f0000000600)=[{&(0x7f00000001c0)="00030200f0ff000000002d3922ff65b4355e953d23d27c69e074889fa8e7ee962184588e5fd8c5ee00a7472916f510027afb3654", 0x34}, {&(0x7f00000003c0)="60a75dc565ef116aa412580445034943beea59637ecdd8a174caf38d7adc18f6b256e8be", 0x24}, {&(0x7f0000000140)}, {&(0x7f0000000540)="d6cbcbd01a9287bce454d54ecea0f66b7367fbf6880d", 0x16}], 0x4}, 0x40011) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc010) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0x2, 0x0, 0x4, {0xc, 0x1000, 0x9, 0x240}}) 7.778343489s ago: executing program 3 (id=1774): bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001400)="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", 0x305}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="10000000001d83000744d63c000100000008"], 0x10}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 7.603183262s ago: executing program 3 (id=1775): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1700000007000000c25e00000500000000200000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=r0, @ANYRES32, @ANYBLOB="01000000050000000100000000000000000000000000000000000000c25c904b13780666090e54c4055c98"], 0x50) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001400)={0x64, 0x0, 0x200, 0x70bd28, 0x8, {}, [@HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336be", 0x95}, {0x0}, {&(0x7f00000005c0)="f2b3", 0x2}], 0x3}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000034000000040000000000000014000000000000002900000034000000fdffffff0000000000010000000000002900000004000000041c000000000000fe72f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc00f3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5801409e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad0738000000010c7a0180050000000000000009000000000000000400000000000000060000000000000000040000000000000b0000000000000005020a7e00010005020bf4c910fc0200000000000000000000780e000000000000000000140000000000000029000000340000000000000000000000700100000000000029000000360000005e2a000000000000ff4150d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70000100000100010800000000000000000708000000030000ff0f07100000000002070600ff7f00000000000008c6c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab3030700008000000000000001082bdb86d1ce6a20c2000000000020000000000000002900000037000000730000000000000000010000000000001400000000000000290000000b0000000000000200000000180000000000000029000000390000000000000000000000380000000000000029000000390000003a04027000000000ff010000000000000000000000000001ff020000000000000000000000000001"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be", 0x8b}, {&(0x7f00000006c0)="138b9f8300af1d793c8e", 0xa}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5ede789aa995461e91d2", 0x24}, {&(0x7f0000000e80)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e045dc31db292f5ab26a8f1466d90f0f98ff1a0e2b1018604ef19bc70a", 0x5b}], 0x5}}], 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/684], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7.416238127s ago: executing program 3 (id=1776): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x8, 0x34, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1700000007000000c25e00000500000000200000", @ANYRES32, @ANYBLOB="0200"/15, @ANYRES32=r0, @ANYRES32, @ANYBLOB="01000000050000000100000000000000000000000000000000000000c25c904b13780666090e"], 0x50) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001400)={0x4c, 0x0, 0x200, 0x70bd28, 0x8, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336be", 0x95}, {0x0}, {&(0x7f00000005c0)="f2b314", 0x3}], 0x3}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000540)}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be", 0x8b}, {&(0x7f00000006c0)="138b9f8300af1d793c8e", 0xa}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5ede789aa995461e91d2", 0x24}, {&(0x7f0000000e80)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e045dc31db292f5ab26a8f1466d90f0f98ff1a0e2b1018604ef19bc70a", 0x5b}], 0x6}}], 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7.209986975s ago: executing program 3 (id=1777): syz_usb_connect(0x5, 0xe4, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d2000100004000", @ANYBLOB="4ad8"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$userio(0xffffff9c, 0x0, 0x24001, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[], 0x0) r2 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f00000004c0)=0xffffffff, 0x4) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r3, 0x0, 0x0}) 6.596417171s ago: executing program 4 (id=1778): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) tkill(0x0, 0x13) tkill(0x0, 0x12) wait4(0x0, 0x0, 0x8, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e23, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, 0x1c) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 6.558674027s ago: executing program 0 (id=1779): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff], [0x10000, 0x0, 0x0, 0x0, 0x8001], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]], '\x00', [{}, {0xfffffffd}, {}, {0x0, 0xfffffffc, 0x0, 0x1, 0x1}, {0x80000009, 0x0, 0x0, 0x1, 0x1}, {0x7fff, 0xfffffffa}, {}, {0x8000000, 0x8f96}], '\x00', 0x1000}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="f8000000190001000000000000000000e0000002000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000100000144000500"], 0xf8}}, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002500000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.504100565s ago: executing program 2 (id=1780): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="030080"], 0x8, 0x800) msgrcv(r1, 0x0, 0x0, 0x2, 0x3800) syz_pidfd_open(0x0, 0x0) pipe2(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r4, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000400)={0x4, {{0xa, 0x4e23, 0xca63, @mcast2, 0x100fbb}}, 0x1, 0x61}, 0x8c) ppoll(&(0x7f0000000140)=[{r3, 0x20}, {0xffffffffffffffff, 0x1300}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x200}, {r5, 0x1040}, {r6}, {}], 0x7, &(0x7f0000000280)={0x77359400}, &(0x7f00000002c0)={[0x7ff]}, 0x8) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) msgctl$MSG_STAT_ANY(r1, 0xd, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800621060090390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffff800}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0xc040}, 0x40800) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff0000000002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) 5.105415648s ago: executing program 0 (id=1781): syz_usb_connect$midi(0x5, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="120110030000002030144b4740000102030109022e00010118100409040000020103000609058e0b20000fd702052501012709058c0200066df780052501013a"], &(0x7f0000000640)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x9, 0x9, 0xe, 0x40, 0x40}, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x60}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) 5.009243307s ago: executing program 4 (id=1782): openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xa02, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) pipe2(&(0x7f0000000300), 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32, @ANYBLOB="0000006f00f000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a01020000000000000000020000090900010073797a300000000074000000160a030000000000000000000200000a4000038008000140000000002c00038014000100776c616e3000000000000000000000001400010070696d367265673100000000e1ff000008000240000000020900020073797a31000000000900010073797a3000000000080007400000"], 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x19, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000500000018110000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 4.951681024s ago: executing program 2 (id=1783): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010126bd7000000000", @ANYRES32=r2, @ANYBLOB="1e009400004010290300000000000070001900140000000f000a0000004a000005003400a9000000080026006c09"], 0x74}, 0x1, 0x0, 0x0, 0x4890}, 0x4010) 4.861867451s ago: executing program 5 (id=1784): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) getpgrp(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x6, 0x6, 0x1000002, 0x87, 0xffffffff, 0x3fe}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.82219918s ago: executing program 2 (id=1785): ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f00000019c0)={0x2020}, 0x2020) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24008004) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000680)={"e2859501099928bfcfb4fde644bcab2c", 0x0, 0x0, {0xc, 0x3ff}, {0xfff, 0x5}, 0x8000000000, [0xffffffff, 0x1, 0x1, 0x6, 0x6, 0x0, 0x5, 0xe99, 0x0, 0x8e, 0x6, 0x9, 0x0, 0xfffffffffffffffa, 0x5, 0x9]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000040)={r0, 0x3, {0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x2, 0x2, 0x15, "5f9375be473862906df623e9a134335101feff1d342c7ee864e46d8f13ee42405489d0742e8031cc48a0124be6a5b5ff8d368d166cb945a65f46414093a142f7", "42df62bfa3d2cfdbcda182017ab32acffe839a6cded7e21a05a49df0f930a65940788fd229f218def2b6dcdd4c17d6050aefa2d4c02f5cb81e8bc09ad83c7a6a", "75f421a4ecabf3391375496be6b9c86c71695a900b3adeca089712d7ec33d056", [0x3, 0x4]}}) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x6, @mcast2, 0x6}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 3.885536517s ago: executing program 3 (id=1786): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$xdp(0x2c, 0x3, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = gettid() sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x20000, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0xb, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x400000000000235, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) fspick(0xffffffffffffff9c, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(r6, 0xc01c586b, &(0x7f0000010240)={r2, 0x0, 0xc00, &(0x7f0000010180)={@align=0x6, {0x6, 0xff, 0x2, 0x21e}}, 0x2ed, &(0x7f00000101c0), &(0x7f0000010200)=0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fsopen(0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0) 3.884780375s ago: executing program 5 (id=1787): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) getpgrp(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x6, 0x6, 0x1000002, 0x87, 0xffffffff, 0x3fe}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r3, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.415236689s ago: executing program 2 (id=1788): syz_usb_connect(0x5, 0xe4, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d2000100004000", @ANYBLOB="4ad8"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$userio(0xffffff9c, 0x0, 0x24001, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f00000004c0)=0xffffffff, 0x4) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r3, 0x0, 0x0}) 3.404541541s ago: executing program 4 (id=1789): syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000140)={&(0x7f0000000a00)=[{0x9, 0x1211, 0x13, &(0x7f0000000280)="744cd20e6401b5424c9efe3056e624c39dbc30"}, {0x89, 0xb201, 0x0, 0x0}], 0x2}) 1.99304458s ago: executing program 5 (id=1790): socket$nl_generic(0x10, 0x3, 0x10) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$I2C(0x0, 0x0, 0x189802) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xc3, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) 1.645443346s ago: executing program 0 (id=1791): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={0x0, 0x0, 0x20}, 0x18) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0xa, 0x8, 0x5}, 0x0) unshare(0x26020480) unshare(0x22020400) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x20050800) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x13b) syz_open_dev$tty1(0xc, 0x4, 0x3) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r7, &(0x7f0000000000), 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000340)={0x2000, r6}, 0x0) 1.38949163s ago: executing program 4 (id=1792): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) unlink(&(0x7f0000000000)='./bus/\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000e7000000000000000900000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000065090100000000006600000020207025180100002020702500000000002020207b9a00fe000000005e9100000000000037010000f8ffffffb702000008000000b7030000ffffffff56000000060000002c93000000000000b5030000000000008500000076000000b70000000000000095000000000000"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 761.107091ms ago: executing program 3 (id=1793): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff], [0x10000, 0x0, 0x0, 0x0, 0x8001], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]], '\x00', [{}, {0xfffffffd}, {}, {0x0, 0xfffffffc, 0x0, 0x1, 0x1}, {0x80000009, 0x0, 0x0, 0x1, 0x1}, {0x7fff, 0xfffffffa}, {}, {0x8000000, 0x8f96}], '\x00', 0x1000}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="f8000000190001000000000000000000e0000002000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000100000144000500200106"], 0xf8}}, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002500000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 684.838849ms ago: executing program 5 (id=1794): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f0000000040)=[{0xfffa, 0x8000, 0xfe, &(0x7f00000003c0)="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"}], 0x1}) syz_usb_control_io(r0, 0x0, 0x0) 403.478508ms ago: executing program 0 (id=1795): syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000140)={&(0x7f0000000a00)=[{0x9, 0x1211, 0x0, 0x0}, {0x89, 0xb201, 0x0, 0x0}], 0x2}) 0s ago: executing program 2 (id=1796): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={0x0, 0x0, 0x20}, 0x18) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0xa, 0x8, 0x5}, 0x0) unshare(0x26020480) unshare(0x22020400) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20050800) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x13b) syz_open_dev$tty1(0xc, 0x4, 0x3) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r7, &(0x7f0000000000), 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000340)={0x2000, r6}, 0x0) landlock_restrict_self(r5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r8, &(0x7f0000003e80)={0x0, 0x0, &(0x7f0000003e40)={&(0x7f00000002c0)=@newtaction={0x44, 0x32, 0x103, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) kernel console output (not intermixed with test programs): 224] tipc: Enabling of bearer rejected, already enabled [ 480.341287][T10234] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1122'. [ 480.723706][ T5832] usb 4-1: USB disconnect, device number 30 [ 480.758660][ T5832] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 480.805948][ T5832] cypress_m8 4-1:0.35: device disconnected [ 480.855960][T10241] tipc: Enabling of bearer rejected, already enabled [ 483.588196][T10275] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 484.066588][T10287] tipc: Enabling of bearer rejected, already enabled [ 484.078577][T10287] tipc: Enabling of bearer rejected, already enabled [ 484.625418][T10302] tipc: Enabling of bearer rejected, already enabled [ 484.635419][T10302] tipc: Enabling of bearer rejected, already enabled [ 485.421246][ T5832] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 485.659544][T10315] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1143'. [ 485.700661][ T5832] usb 1-1: Using ep0 maxpacket: 8 [ 485.724702][ T5832] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 485.741127][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.761724][ T5832] usb 1-1: Product: syz [ 486.105406][ T5832] usb 1-1: Manufacturer: syz [ 486.141120][ T5832] usb 1-1: SerialNumber: syz [ 486.158167][ T5832] usb 1-1: config 0 descriptor?? [ 486.374178][ T5832] gspca_main: se401-2.14.0 probing 047d:5003 [ 486.798360][T10331] tipc: Started in network mode [ 486.803333][T10331] tipc: Node identity ac1414aa, cluster identity 4711 [ 486.814222][T10331] tipc: Enabled bearer , priority 10 [ 486.826406][T10331] tipc: Enabled bearer , priority 0 [ 487.551225][ T5832] usb 1-1: reset high-speed USB device number 29 using dummy_hcd [ 487.701183][ T5832] usb 1-1: device descriptor read/64, error -32 [ 487.937862][ T1611] tipc: Node number set to 2886997162 [ 487.983673][ T5858] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 487.983737][ T5832] usb 1-1: reset high-speed USB device number 29 using dummy_hcd [ 488.242630][ T5858] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 488.259371][ T5858] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 488.384124][ T5858] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 488.451828][ T5858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.496102][ T5858] usb 6-1: config 0 descriptor?? [ 488.511201][ T5832] usb 1-1: device descriptor read/64, error -32 [ 488.640569][T10355] tipc: Enabling of bearer rejected, already enabled [ 488.751195][ T5832] usb 1-1: reset high-speed USB device number 29 using dummy_hcd [ 488.875277][T10362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.884635][T10362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.161821][ T5832] usb 1-1: device descriptor read/8, error -32 [ 489.411567][ T5832] usb 1-1: reset high-speed USB device number 29 using dummy_hcd [ 489.546547][T10304] raw-gadget.0 gadget.0: failed to queue suspend event [ 489.558314][ T5832] usb 1-1: device descriptor read/8, error -32 [ 489.626192][T10304] raw-gadget.0 gadget.0: failed to queue disconnect event [ 489.735516][ T5832] gspca_se401: read req failed req 0x06 error -19 [ 489.849571][ T5832] usb 1-1: USB disconnect, device number 29 [ 490.028550][T10367] tipc: Started in network mode [ 490.033563][T10367] tipc: Node identity ac1414aa, cluster identity 4711 [ 490.041283][T10367] tipc: Enabled bearer , priority 10 [ 490.053828][T10367] tipc: Enabled bearer , priority 0 [ 491.151470][ T47] tipc: Node number set to 2886997162 [ 491.995270][T10394] netlink: 'syz.0.1163': attribute type 2 has an invalid length. [ 492.026285][T10394] !: entered promiscuous mode [ 492.054288][T10394] netlink: 'syz.0.1163': attribute type 2 has an invalid length. [ 492.063754][T10394] !: left promiscuous mode [ 492.194135][ T5832] usb 6-1: USB disconnect, device number 15 [ 492.638348][T10404] fuse: Bad value for 'rootmode' [ 492.902342][T10409] random: crng reseeded on system resumption [ 494.778776][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 494.778788][ T29] audit: type=1400 audit(2000000174.600:585): avc: denied { bind } for pid=10425 comm="syz.4.1172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 494.890523][T10436] tipc: Enabling of bearer rejected, already enabled [ 494.916677][ T29] audit: type=1400 audit(2000000174.600:586): avc: denied { node_bind } for pid=10425 comm="syz.4.1172" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 495.039525][T10438] netlink: 'syz.0.1174': attribute type 2 has an invalid length. [ 495.066938][T10438] !: entered promiscuous mode [ 495.106231][T10438] netlink: 'syz.0.1174': attribute type 2 has an invalid length. [ 495.115612][T10438] !: left promiscuous mode [ 495.819397][ T29] audit: type=1400 audit(2000000175.640:587): avc: denied { listen } for pid=10439 comm="syz.5.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 495.888874][ T29] audit: type=1400 audit(2000000175.680:588): avc: denied { accept } for pid=10439 comm="syz.5.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 495.974480][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 495.981181][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.694536][ T5832] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 496.954031][ T5832] usb 1-1: Using ep0 maxpacket: 32 [ 497.015665][ T5832] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 497.016851][ T29] audit: type=1800 audit(2000000176.810:589): pid=10467 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1184" name="bus" dev="overlay" ino=1293 res=0 errno=0 [ 497.024818][ T5832] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 497.301826][ T5832] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 497.320748][ T5832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 497.425151][ T5832] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 497.524146][ T5832] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 497.635224][ T5832] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 497.712139][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.921986][ T5832] usb 1-1: config 0 descriptor?? [ 498.177762][ T5832] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 498.311210][ T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 498.354545][ T29] audit: type=1326 audit(2000000178.170:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10485 comm="syz.2.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563d99c799 code=0x7ffc0000 [ 498.395739][ T29] audit: type=1326 audit(2000000178.170:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10485 comm="syz.2.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f563d99c799 code=0x7ffc0000 [ 498.501034][ T29] audit: type=1326 audit(2000000178.170:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10485 comm="syz.2.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563d99c799 code=0x7ffc0000 [ 498.507802][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 498.525634][ T29] audit: type=1326 audit(2000000178.170:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10485 comm="syz.2.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563d99c799 code=0x7ffc0000 [ 498.581262][ T29] audit: type=1326 audit(2000000178.170:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10485 comm="syz.2.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f563d99c799 code=0x7ffc0000 [ 498.623724][ T10] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 498.728207][ T10] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 498.772241][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.779273][ T10] usb 6-1: config 0 descriptor?? [ 499.153953][T10479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.184777][T10479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.217343][ T5858] usb 6-1: USB disconnect, device number 16 [ 499.223505][ T10] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 499.382282][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 499.389333][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 499.402598][ T10] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 499.411922][ T10] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 499.420681][ T10] usb 4-1: Product: syz [ 499.426253][ T10] usb 4-1: Manufacturer: syz [ 499.461193][ T10] usb 4-1: SerialNumber: syz [ 499.484590][ T10] usb 4-1: config 0 descriptor?? [ 499.498914][T10498] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 499.771519][ T5832] usb 1-1: USB disconnect, device number 30 [ 499.811922][ T5832] usblp0: removed [ 499.897416][ T5858] usb 4-1: USB disconnect, device number 31 [ 500.981166][ T5832] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 501.821557][ T5832] usb 1-1: Using ep0 maxpacket: 32 [ 501.875046][ T5832] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 501.886222][ T5832] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 501.896233][ T5832] usb 1-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64 [ 501.906010][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.916233][ T5832] usb 1-1: config 0 descriptor?? [ 502.415991][T10540] bridge_slave_0: left allmulticast mode [ 502.461703][T10540] bridge_slave_0: left promiscuous mode [ 502.493909][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 502.585469][T10540] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.637197][T10540] bridge_slave_1: left allmulticast mode [ 502.644476][T10540] bridge_slave_1: left promiscuous mode [ 502.678890][T10540] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.784040][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 502.996126][ T10] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 503.016580][ T10] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 503.026323][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 503.039582][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 503.039836][T10540] bond0: (slave bond_slave_0): Releasing backup interface [ 503.057695][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 503.155080][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 503.188434][T10540] bond0: (slave bond_slave_1): Releasing backup interface [ 503.218515][ T10] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 503.241025][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.275769][T10540] team0: Port device team_slave_0 removed [ 503.297217][ T10] usb 6-1: config 0 descriptor?? [ 503.317632][T10540] team0: Port device team_slave_1 removed [ 503.352034][T10540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.415967][T10540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.485793][T10540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.521393][T10540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.642957][T10540] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 503.698615][T10553] netlink: 'syz.2.1208': attribute type 2 has an invalid length. [ 503.731409][ T10] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 503.758069][T10554] netlink: 'syz.2.1208': attribute type 2 has an invalid length. [ 503.781152][ T5885] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 503.833076][T10553] !: entered promiscuous mode [ 503.844114][T10554] !: left promiscuous mode [ 504.135955][ T47] usb 1-1: USB disconnect, device number 31 [ 504.171251][ T5885] usb 5-1: Using ep0 maxpacket: 32 [ 504.188008][ T5885] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 504.208998][ T5885] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 504.219614][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 504.249372][ T5885] usb 5-1: Product: syz [ 504.268968][ T5885] usb 5-1: Manufacturer: syz [ 504.274196][ T5885] usb 5-1: SerialNumber: syz [ 504.359453][T10562] tipc: Enabling of bearer rejected, already enabled [ 504.384619][ T5885] usb 5-1: config 0 descriptor?? [ 504.399046][T10552] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 504.761236][ T47] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 504.860561][T10570] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 504.915519][ T793] usb 5-1: USB disconnect, device number 20 [ 504.982069][ T47] usb 3-1: device descriptor read/64, error -71 [ 505.271170][ T47] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 505.291348][ T5858] usb 6-1: USB disconnect, device number 17 [ 505.346723][ T5858] usblp0: removed [ 505.495425][ T47] usb 3-1: device descriptor read/64, error -71 [ 505.623645][ T47] usb usb3-port1: attempt power cycle [ 505.983721][ T47] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 506.042591][ T47] usb 3-1: device descriptor read/8, error -71 [ 506.291158][ T47] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 506.311868][ T47] usb 3-1: device descriptor read/8, error -71 [ 506.453045][ T47] usb usb3-port1: unable to enumerate USB device [ 506.982498][T10593] netlink: 'syz.5.1217': attribute type 2 has an invalid length. [ 506.993176][T10593] !: entered promiscuous mode [ 507.022164][T10593] netlink: 'syz.5.1217': attribute type 2 has an invalid length. [ 507.037635][T10593] !: left promiscuous mode [ 507.993075][ T5832] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 508.051539][ T5858] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 508.151128][ T5832] usb 3-1: Using ep0 maxpacket: 32 [ 508.157689][ T5832] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.168563][ T5832] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 508.180826][ T5832] usb 3-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64 [ 508.190077][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.213316][ T5858] usb 6-1: Using ep0 maxpacket: 8 [ 508.232808][ T5858] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 508.242388][ T5858] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.249797][ T5832] usb 3-1: config 0 descriptor?? [ 508.260557][ T5858] usb 6-1: Product: syz [ 508.269114][ T5858] usb 6-1: Manufacturer: syz [ 508.276037][ T5858] usb 6-1: SerialNumber: syz [ 508.323537][ T5858] usb 6-1: config 0 descriptor?? [ 508.341508][ T5858] gspca_main: se401-2.14.0 probing 047d:5003 [ 508.595934][T10607] bridge_slave_0: left allmulticast mode [ 508.609732][T10607] bridge_slave_0: left promiscuous mode [ 508.638349][T10607] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.674478][T10607] bridge_slave_1: left allmulticast mode [ 508.700571][T10607] bridge_slave_1: left promiscuous mode [ 508.727990][T10607] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.807196][T10607] bond0: (slave bond_slave_0): Releasing backup interface [ 508.821825][T10607] bond0: (slave bond_slave_1): Releasing backup interface [ 508.839768][T10607] team0: Port device team_slave_0 removed [ 508.856257][T10607] team0: Port device team_slave_1 removed [ 508.878109][T10607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.911604][T10607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.948707][T10607] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 509.131096][ T5885] usb 3-1: USB disconnect, device number 26 [ 509.551212][ T5858] usb 6-1: reset high-speed USB device number 18 using dummy_hcd [ 509.807813][T10632] tipc: Enabling of bearer rejected, already enabled [ 510.062983][ T5858] usb 6-1: device descriptor read/64, error -32 [ 510.324629][ T5858] usb 6-1: reset high-speed USB device number 18 using dummy_hcd [ 510.530021][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 510.546589][ T5858] usb 6-1: device descriptor read/64, error -32 [ 510.714111][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 510.851144][ T5858] usb 6-1: reset high-speed USB device number 18 using dummy_hcd [ 510.901837][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 510.901854][ T29] audit: type=1326 audit(2000000190.610:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10648 comm="syz.3.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4c79c799 code=0x7ffc0000 [ 510.933368][ T5858] usb 6-1: device descriptor read/8, error -32 [ 510.944417][ T10] usb 3-1: no configurations [ 510.949044][ T10] usb 3-1: can't read configurations, error -22 [ 511.010695][T10630] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 511.106596][ T29] audit: type=1326 audit(2000000190.610:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10648 comm="syz.3.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4c79c799 code=0x7ffc0000 [ 511.132971][T10655] random: crng reseeded on system resumption [ 511.245069][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 511.252792][ T5858] usb 6-1: reset high-speed USB device number 18 using dummy_hcd [ 511.260643][ T29] audit: type=1326 audit(2000000190.620:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10648 comm="syz.3.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f1f4c79c799 code=0x7ffc0000 [ 511.344996][ T5858] usb 6-1: device descriptor read/8, error -32 [ 511.430463][ T29] audit: type=1326 audit(2000000190.620:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10648 comm="syz.3.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4c79c799 code=0x7ffc0000 [ 511.461383][ T5858] raw-gadget.1 gadget.5: failed to queue suspend event [ 511.473893][ T5858] gspca_se401: read req failed req 0x06 error -19 [ 511.483558][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 511.492305][ T10] usb 3-1: no configurations [ 511.499061][ T10] usb 3-1: can't read configurations, error -22 [ 511.607795][ T5858] usb 6-1: USB disconnect, device number 18 [ 511.626098][ T29] audit: type=1326 audit(2000000190.620:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10648 comm="syz.3.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4c79c799 code=0x7ffc0000 [ 511.641647][ T10] usb usb3-port1: attempt power cycle [ 511.649768][ T29] audit: type=1326 audit(2000000190.620:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10648 comm="syz.3.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f1f4c79c799 code=0x7ffc0000 [ 511.666562][ T5858] raw-gadget.1 gadget.5: failed to queue reset event [ 511.813840][ T29] audit: type=1326 audit(2000000190.620:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10648 comm="syz.3.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4c79c799 code=0x7ffc0000 [ 511.871235][ T5858] raw-gadget.1 gadget.5: failed to queue resume event [ 511.885669][ T29] audit: type=1326 audit(2000000190.620:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10648 comm="syz.3.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f1f4c79c799 code=0x7ffc0000 [ 511.964024][ T29] audit: type=1326 audit(2000000190.620:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10648 comm="syz.3.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1f4c79c502 code=0x7ffc0000 [ 511.981214][ T5858] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 512.019821][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 512.028643][ T5858] raw-gadget.1 gadget.5: failed to queue reset event [ 512.063693][ T29] audit: type=1326 audit(2000000190.620:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10648 comm="syz.3.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1f4c79c502 code=0x7ffc0000 [ 512.101263][ T5858] raw-gadget.1 gadget.5: failed to queue resume event [ 512.111129][ T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 512.141693][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 512.148121][ T10] usb 3-1: no configurations [ 512.153121][ T10] usb 3-1: can't read configurations, error -22 [ 512.161676][ T5858] usb 6-1: device descriptor read/64, error -32 [ 512.271505][ T5858] raw-gadget.1 gadget.5: failed to queue suspend event [ 512.291203][ T10] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 512.321470][ T5858] raw-gadget.1 gadget.5: failed to queue reset event [ 512.351652][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 512.449973][ T5858] raw-gadget.1 gadget.5: failed to queue resume event [ 512.589656][ T10] usb 3-1: no configurations [ 512.594500][ T10] usb 3-1: can't read configurations, error -22 [ 513.406736][ T10] usb usb3-port1: unable to enumerate USB device [ 513.446995][T10609] raw-gadget.1 gadget.5: failed to queue suspend event [ 513.461226][ T5858] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 513.471190][T10609] raw-gadget.1 gadget.5: failed to queue disconnect event [ 513.881155][ T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 514.075052][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 514.108309][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 514.125443][ T10] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 514.140932][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.166143][ T10] usb 3-1: config 0 descriptor?? [ 514.264623][T10690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1248'. [ 514.282224][T10690] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 514.307329][T10690] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 514.812659][T10693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.927043][T10693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.542990][T10702] netlink: 'syz.0.1249': attribute type 2 has an invalid length. [ 515.567654][T10702] !: entered promiscuous mode [ 515.645320][T10705] random: crng reseeded on system resumption [ 515.662687][T10702] netlink: 'syz.0.1249': attribute type 2 has an invalid length. [ 515.670613][T10702] !: left promiscuous mode [ 516.592792][ T5832] usb 3-1: USB disconnect, device number 31 [ 516.661270][ T793] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 516.861362][ T793] usb 4-1: Using ep0 maxpacket: 8 [ 516.867290][ T793] usb 4-1: no configurations [ 517.035208][ T793] usb 4-1: can't read configurations, error -22 [ 517.671152][ T793] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 517.991531][ T793] usb 4-1: Using ep0 maxpacket: 8 [ 517.999596][ T793] usb 4-1: no configurations [ 518.011131][ T793] usb 4-1: can't read configurations, error -22 [ 518.032945][ T793] usb usb4-port1: attempt power cycle [ 518.420715][ T793] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 518.467505][ T793] usb 4-1: Using ep0 maxpacket: 8 [ 518.501908][ T793] usb 4-1: no configurations [ 518.506879][ T793] usb 4-1: can't read configurations, error -22 [ 518.661337][ T793] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 518.775421][ T793] usb 4-1: Using ep0 maxpacket: 8 [ 518.827347][ T793] usb 4-1: no configurations [ 518.838636][ T793] usb 4-1: can't read configurations, error -22 [ 518.857737][ T793] usb usb4-port1: unable to enumerate USB device [ 519.601164][ T5858] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 519.771309][T10555] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 519.782761][ T5858] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 519.792178][ T5858] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 519.821712][ T5858] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 519.831333][ T5858] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 519.873487][ T5858] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 519.884633][ T5858] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 519.893162][ T5858] usb 4-1: Product: syz [ 519.897396][ T5858] usb 4-1: Manufacturer: syz [ 519.937969][ T5858] cdc_wdm 4-1:1.0: skipping garbage [ 519.943335][T10555] usb 3-1: Using ep0 maxpacket: 8 [ 519.951596][T10555] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 519.964129][T10555] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.979023][ T5858] cdc_wdm 4-1:1.0: skipping garbage [ 519.984995][T10555] usb 3-1: Product: syz [ 519.989163][T10555] usb 3-1: Manufacturer: syz [ 519.994139][ T5858] cdc_wdm 4-1:1.0: skipping garbage [ 519.999515][ T5858] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 520.008022][T10555] usb 3-1: SerialNumber: syz [ 520.016499][T10555] usb 3-1: config 0 descriptor?? [ 520.030852][T10555] gspca_main: se401-2.14.0 probing 047d:5003 [ 520.262450][ T5832] usb 4-1: USB disconnect, device number 36 [ 521.201127][ T5832] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 521.221195][T10555] usb 3-1: reset high-speed USB device number 32 using dummy_hcd [ 521.384735][T10555] usb 3-1: device descriptor read/64, error -32 [ 521.385657][ T5832] usb 4-1: Using ep0 maxpacket: 8 [ 521.398075][ T5832] usb 4-1: no configurations [ 521.447873][ T5832] usb 4-1: can't read configurations, error -22 [ 521.591162][ T5832] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 521.706994][T10555] usb 3-1: reset high-speed USB device number 32 using dummy_hcd [ 521.923107][T10555] usb 3-1: device descriptor read/64, error -32 [ 521.941343][ T5832] usb 4-1: Using ep0 maxpacket: 8 [ 522.032122][T10773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.049606][T10773] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.107157][T10773] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 522.131471][ T5832] usb 4-1: no configurations [ 522.136294][ T5832] usb 4-1: can't read configurations, error -22 [ 522.154337][ T5832] usb usb4-port1: attempt power cycle [ 522.215943][T10555] usb 3-1: reset high-speed USB device number 32 using dummy_hcd [ 522.398384][T10555] usb 3-1: device descriptor read/8, error -32 [ 522.640884][T10792] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1275'. [ 522.711189][T10555] usb 3-1: reset high-speed USB device number 32 using dummy_hcd [ 522.782540][T10555] usb 3-1: device descriptor read/8, error -32 [ 522.921287][ T5832] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 522.953858][ T5832] usb 4-1: Using ep0 maxpacket: 8 [ 522.953928][T10555] raw-gadget.1 gadget.2: failed to queue suspend event [ 522.959529][ T5832] usb 4-1: no configurations [ 523.001518][T10555] gspca_se401: read req failed req 0x06 error -19 [ 523.003998][ T5832] usb 4-1: can't read configurations, error -22 [ 523.125821][T10555] usb 3-1: USB disconnect, device number 32 [ 523.160535][T10555] raw-gadget.1 gadget.2: failed to queue reset event [ 523.271214][T10555] raw-gadget.1 gadget.2: failed to queue resume event [ 523.281193][ T5832] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 523.307892][ T5832] usb 4-1: Using ep0 maxpacket: 8 [ 523.331231][T10555] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 523.355070][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 523.448800][T10555] raw-gadget.1 gadget.2: failed to queue reset event [ 523.503416][ T5832] usb 4-1: no configurations [ 523.509977][ T5832] usb 4-1: can't read configurations, error -22 [ 523.516935][ T5832] usb usb4-port1: unable to enumerate USB device [ 523.533582][T10555] raw-gadget.1 gadget.2: failed to queue resume event [ 523.591133][T10555] usb 3-1: device descriptor read/64, error -32 [ 523.701192][T10555] raw-gadget.1 gadget.2: failed to queue suspend event [ 523.711623][T10555] raw-gadget.1 gadget.2: failed to queue reset event [ 523.792598][T10555] raw-gadget.1 gadget.2: failed to queue resume event [ 523.871523][T10555] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 523.880498][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 523.889552][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 523.898158][T10555] raw-gadget.1 gadget.2: failed to queue reset event [ 523.971926][T10555] raw-gadget.1 gadget.2: failed to queue resume event [ 524.031760][T10555] usb 3-1: device descriptor read/64, error -32 [ 524.061216][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 524.115784][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 524.158400][T10555] raw-gadget.1 gadget.2: failed to queue suspend event [ 524.295069][T10555] usb usb3-port1: attempt power cycle [ 524.301406][T10555] raw-gadget.1 gadget.2: failed to queue disconnect event [ 524.319407][T10555] raw-gadget.1 gadget.2: failed to queue reset event [ 524.357620][ T10] usb 5-1: config 4 interface 0 has no altsetting 0 [ 524.389110][T10823] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 524.389110][T10823] program syz.3.1285 not setting count and/or reply_len properly [ 524.598935][ T10] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 524.608181][ T10] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 524.650555][ T10] usb 5-1: Manufacturer: syz [ 524.655331][T10555] raw-gadget.1 gadget.2: failed to queue resume event [ 524.663818][T10555] raw-gadget.1 gadget.2: failed to queue reset event [ 524.671337][ T10] usb 5-1: SerialNumber: syz [ 524.797861][T10773] raw-gadget.1 gadget.2: failed to queue disconnect event [ 525.033223][ T10] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 525.046022][ T10] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 525.063802][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 525.169851][ T10] usb 5-1: media controller created [ 525.355679][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 525.410584][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 525.526786][ T10] usb 5-1: USB disconnect, device number 21 [ 525.624100][ T47] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 525.814074][ T47] usb 6-1: Using ep0 maxpacket: 32 [ 525.823928][ T47] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 525.840272][ T47] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 525.851169][ T47] usb 6-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64 [ 525.887856][ T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.921674][ T47] usb 6-1: config 0 descriptor?? [ 526.233762][T10836] bridge_slave_0: left allmulticast mode [ 526.239500][T10836] bridge_slave_0: left promiscuous mode [ 526.298091][T10836] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.315344][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 526.315375][ T29] audit: type=1800 audit(2000000206.140:637): pid=10850 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1291" name="bus" dev="overlay" ino=1465 res=0 errno=0 [ 526.349273][T10836] bridge_slave_1: left allmulticast mode [ 526.355737][T10836] bridge_slave_1: left promiscuous mode [ 526.361412][ T10] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 526.369192][T10836] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.386886][T10836] bond0: (slave bond_slave_0): Releasing backup interface [ 526.430140][T10836] bond0: (slave bond_slave_1): Releasing backup interface [ 526.536591][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 526.546786][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 526.558760][ T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 526.563023][T10836] team0: Port device team_slave_0 removed [ 526.568011][ T10] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 526.607794][ T10] usb 1-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 526.617337][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.624571][T10836] team0: Port device team_slave_1 removed [ 526.625838][ T10] usb 1-1: Product: syz [ 526.638606][T10836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.647031][T10836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.711595][ T10] usb 1-1: Manufacturer: syz [ 526.723380][T10836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.734191][ T10] usb 1-1: SerialNumber: syz [ 526.749050][T10836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.785400][T10836] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 527.094851][T10555] usb 6-1: USB disconnect, device number 21 [ 527.269451][ T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 527.323505][ T5813] udevd[5813]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 527.342096][ T10] usb 1-1: USB disconnect, device number 32 [ 527.471122][ T793] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 527.701112][ T793] usb 3-1: Using ep0 maxpacket: 8 [ 527.732852][ T793] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 527.758360][ T793] usb 3-1: config 0 has no interfaces? [ 527.783598][ T793] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 527.804821][ T793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.827641][ T793] usb 3-1: Product: syz [ 527.843021][ T793] usb 3-1: Manufacturer: syz [ 527.857574][ T793] usb 3-1: SerialNumber: syz [ 527.875254][ T793] usb 3-1: config 0 descriptor?? [ 528.238381][ T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 528.544483][T10873] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1298'. [ 528.554342][T10873] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1298'. [ 528.601123][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 528.608898][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 528.641183][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 528.708044][ T10] usb 1-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 528.721685][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.738309][ T10] usb 1-1: Product: syz [ 528.744948][ T10] usb 1-1: Manufacturer: syz [ 528.759117][ T10] usb 1-1: SerialNumber: syz [ 528.769251][ T10] usb 1-1: config 0 descriptor?? [ 529.081397][T10870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1297'. [ 529.103851][ T29] audit: type=1400 audit(2000000208.900:638): avc: denied { ioctl } for pid=10865 comm="syz.0.1297" path="socket:[38444]" dev="sockfs" ino=38444 ioctlcmd=0x8930 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 529.363963][T10892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1301'. [ 529.581452][T10893] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1299'. [ 530.237930][ T5832] usb 3-1: USB disconnect, device number 36 [ 530.890153][T10908] tipc: Enabling of bearer rejected, already enabled [ 531.530344][T10915] tipc: Enabling of bearer rejected, already enabled [ 531.879619][ T10] usb 1-1: USB disconnect, device number 33 [ 533.491954][T10936] netlink: 'syz.0.1311': attribute type 2 has an invalid length. [ 533.575982][T10936] !: entered promiscuous mode [ 533.722872][T10936] netlink: 'syz.0.1311': attribute type 2 has an invalid length. [ 533.730975][T10936] !: left promiscuous mode [ 534.392244][ T29] audit: type=1326 audit(2000000214.110:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10949 comm="syz.3.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4c79c799 code=0x7ffc0000 [ 534.505353][ T29] audit: type=1326 audit(2000000214.110:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10949 comm="syz.3.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f1f4c79c799 code=0x7ffc0000 [ 534.657155][ T29] audit: type=1326 audit(2000000214.110:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10949 comm="syz.3.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4c79c799 code=0x7ffc0000 [ 534.690757][ T29] audit: type=1326 audit(2000000214.110:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10949 comm="syz.3.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f1f4c79c799 code=0x7ffc0000 [ 534.746547][ T29] audit: type=1326 audit(2000000214.110:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10949 comm="syz.3.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4c79c799 code=0x7ffc0000 [ 534.816726][ T29] audit: type=1326 audit(2000000214.110:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10949 comm="syz.3.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f1f4c79c799 code=0x7ffc0000 [ 534.878908][ T29] audit: type=1326 audit(2000000214.110:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10949 comm="syz.3.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4c79c799 code=0x7ffc0000 [ 534.953105][ T29] audit: type=1326 audit(2000000214.110:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10949 comm="syz.3.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f1f4c79c799 code=0x7ffc0000 [ 535.001535][ T29] audit: type=1326 audit(2000000214.120:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10949 comm="syz.3.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1f4c79c502 code=0x7ffc0000 [ 535.040621][ T29] audit: type=1326 audit(2000000214.120:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10949 comm="syz.3.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1f4c79c502 code=0x7ffc0000 [ 536.169477][T10977] netlink: 'syz.0.1319': attribute type 2 has an invalid length. [ 536.222472][T10977] !: entered promiscuous mode [ 536.248526][T10979] netlink: 'syz.0.1319': attribute type 2 has an invalid length. [ 536.260594][T10979] !: left promiscuous mode [ 536.431144][ T5858] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 536.805462][ T5858] usb 4-1: Using ep0 maxpacket: 8 [ 536.861324][ T793] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 537.062304][ T5858] usb 4-1: unable to get BOS descriptor or descriptor too short [ 537.080178][ T5858] usb 4-1: config 4 interface 0 has no altsetting 0 [ 537.092415][ T5858] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 537.106806][ T5858] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 537.136059][T10990] netlink: 'syz.4.1324': attribute type 2 has an invalid length. [ 537.151601][T10990] !: entered promiscuous mode [ 537.164346][T10990] netlink: 'syz.4.1324': attribute type 2 has an invalid length. [ 537.172187][T10990] !: left promiscuous mode [ 537.281160][ T793] usb 6-1: Using ep0 maxpacket: 8 [ 537.401531][ T5858] usb 4-1: Manufacturer: syz [ 537.406180][ T5858] usb 4-1: SerialNumber: syz [ 537.415931][ T793] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 537.431083][ T793] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.461139][ T793] usb 6-1: Product: syz [ 537.471103][ T793] usb 6-1: Manufacturer: syz [ 537.475758][ T793] usb 6-1: SerialNumber: syz [ 537.501930][ T793] usb 6-1: config 0 descriptor?? [ 537.518151][ T793] gspca_main: se401-2.14.0 probing 047d:5003 [ 537.662997][ T5858] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 537.677317][ T5858] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 537.701268][ T5858] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 537.721233][ T5858] usb 4-1: media controller created [ 537.757206][ T5858] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 537.796628][ T5858] zl10353_read_register: readreg error (reg=127, ret==0) [ 537.910153][ T5858] usb 4-1: USB disconnect, device number 41 [ 538.124275][T10995] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1325'. [ 538.136056][T10995] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1325'. [ 538.419578][T11005] netlink: 'syz.0.1326': attribute type 2 has an invalid length. [ 538.453735][T11005] !: entered promiscuous mode [ 538.476972][T11005] netlink: 'syz.0.1326': attribute type 2 has an invalid length. [ 538.489808][T11005] !: left promiscuous mode [ 538.761147][ T793] usb 6-1: reset high-speed USB device number 22 using dummy_hcd [ 538.931949][ T793] usb 6-1: device descriptor read/64, error -32 [ 539.186177][T11009] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 539.241477][ T793] usb 6-1: reset high-speed USB device number 22 using dummy_hcd [ 539.671218][ T793] usb 6-1: device descriptor read/64, error -32 [ 540.001508][ T793] usb 6-1: reset high-speed USB device number 22 using dummy_hcd [ 540.029629][ T793] usb 6-1: device descriptor read/8, error -32 [ 540.079243][T11023] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1331'. [ 540.271193][ T793] usb 6-1: reset high-speed USB device number 22 using dummy_hcd [ 540.291587][ T793] usb 6-1: device descriptor read/8, error -32 [ 540.650658][T11031] netlink: 'syz.2.1330': attribute type 2 has an invalid length. [ 540.670710][T11031] !: entered promiscuous mode [ 540.681338][ T793] raw-gadget.1 gadget.5: failed to queue suspend event [ 540.689743][ T793] gspca_se401: read req failed req 0x06 error -19 [ 540.700593][T11000] raw-gadget.1 gadget.5: failed to queue disconnect event [ 540.703851][ T793] usb 6-1: USB disconnect, device number 22 [ 540.725952][T11031] netlink: 'syz.2.1330': attribute type 2 has an invalid length. [ 540.733894][T11031] !: left promiscuous mode [ 541.071848][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 541.071863][ T29] audit: type=1400 audit(2000000220.900:668): avc: denied { read } for pid=11035 comm="syz.4.1335" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 542.082037][T11054] tipc: Enabling of bearer rejected, already enabled [ 542.603352][T11073] tipc: Enabling of bearer rejected, already enabled [ 543.077881][T11078] fuse: Bad value for 'rootmode' [ 543.971288][ T47] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 544.141318][ T47] usb 5-1: Using ep0 maxpacket: 8 [ 544.164869][ T47] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 544.178724][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.189759][ T47] usb 5-1: Product: syz [ 544.195221][ T47] usb 5-1: Manufacturer: syz [ 544.200183][ T47] usb 5-1: SerialNumber: syz [ 544.217148][ T47] usb 5-1: config 0 descriptor?? [ 544.240540][ T47] gspca_main: se401-2.14.0 probing 047d:5003 [ 545.591167][ T47] usb 5-1: reset high-speed USB device number 22 using dummy_hcd [ 545.846969][ T47] usb 5-1: device descriptor read/64, error -32 [ 545.913320][T11111] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 546.131531][ T47] usb 5-1: reset high-speed USB device number 22 using dummy_hcd [ 546.301319][ T47] usb 5-1: device descriptor read/64, error -32 [ 546.541188][ T47] usb 5-1: reset high-speed USB device number 22 using dummy_hcd [ 546.655856][ T47] usb 5-1: device descriptor read/8, error -32 [ 547.015945][ T47] usb 5-1: reset high-speed USB device number 22 using dummy_hcd [ 547.101482][ T47] usb 5-1: device descriptor read/8, error -32 [ 547.221858][ T47] raw-gadget.0 gadget.4: failed to queue suspend event [ 547.260024][ T47] gspca_se401: read req failed req 0x06 error -19 [ 547.314905][T11099] raw-gadget.0 gadget.4: failed to queue disconnect event [ 547.324865][ T47] usb 5-1: USB disconnect, device number 22 [ 547.423613][T11137] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1357'. [ 547.584871][ T29] audit: type=1800 audit(2000000227.360:669): pid=11141 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1360" name="bus" dev="overlay" ino=1480 res=0 errno=0 [ 547.706926][T11142] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1359'. [ 547.725888][T11143] fuse: Invalid rootmode [ 551.765775][T11194] tipc: Enabling of bearer rejected, already enabled [ 552.451714][T11204] tipc: Enabling of bearer rejected, already enabled [ 553.583331][ T5858] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 553.821136][ T5858] usb 5-1: Using ep0 maxpacket: 8 [ 553.827900][ T5858] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.838362][ T5858] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 553.869929][ T5858] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 553.879443][ T5858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.888188][ T5858] usb 5-1: Product: syz [ 553.896603][ T5858] usb 5-1: Manufacturer: syz [ 553.908032][ T5858] usb 5-1: SerialNumber: syz [ 553.949193][ T5858] usb 5-1: config 0 descriptor?? [ 554.319388][T11229] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1384'. [ 555.463400][T11252] fuse: Unknown parameter 'user_00000000000000000000' [ 556.392418][T10555] usb 5-1: USB disconnect, device number 23 [ 556.783764][T10555] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 557.083212][T10555] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 557.093561][T10555] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 557.121112][T10555] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 557.165280][T10555] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.188333][T10555] usb 5-1: config 0 descriptor?? [ 557.415006][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.421986][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.634107][T11285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.642997][T11285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.751328][T11296] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1399'. [ 558.771796][T11296] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 558.780812][T11296] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 558.891885][T11300] syzkaller0: entered promiscuous mode [ 558.900185][T11300] syzkaller0: entered allmulticast mode [ 559.496517][ T5858] usb 5-1: USB disconnect, device number 24 [ 559.608606][T11311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1405'. [ 559.641817][T11312] netlink: 'syz.5.1402': attribute type 2 has an invalid length. [ 559.659195][T11312] !: entered promiscuous mode [ 559.670602][T11312] netlink: 'syz.5.1402': attribute type 2 has an invalid length. [ 559.715453][T11312] !: left promiscuous mode [ 560.157121][T11319] netlink: 'syz.0.1404': attribute type 2 has an invalid length. [ 560.193998][T11319] !: entered promiscuous mode [ 560.224796][T11319] netlink: 'syz.0.1404': attribute type 2 has an invalid length. [ 560.246546][T11319] !: left promiscuous mode [ 561.952198][ T793] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 562.111819][ T793] usb 1-1: Using ep0 maxpacket: 8 [ 562.127928][ T793] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 562.143380][ T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.171494][ T793] usb 1-1: Product: syz [ 562.469193][ T793] usb 1-1: Manufacturer: syz [ 562.475009][ T793] usb 1-1: SerialNumber: syz [ 562.616027][ T793] usb 1-1: config 0 descriptor?? [ 562.702526][ T793] gspca_main: se401-2.14.0 probing 047d:5003 [ 562.949135][T11355] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1416'. [ 562.970933][T11355] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 562.980611][T11355] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 563.010814][T11356] netlink: 'syz.3.1417': attribute type 2 has an invalid length. [ 563.691193][ T5832] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 563.908904][ T793] usb 1-1: reset high-speed USB device number 34 using dummy_hcd [ 563.918729][ T5832] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 563.927007][ T5832] usb 5-1: config 0 has no interface number 0 [ 563.950373][ T5832] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 563.959762][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.968209][ T5832] usb 5-1: Product: syz [ 563.972681][ T5832] usb 5-1: Manufacturer: syz [ 563.977271][ T5832] usb 5-1: SerialNumber: syz [ 563.990803][ T5832] usb 5-1: config 0 descriptor?? [ 564.008966][ T5832] usb 5-1: selecting invalid altsetting 1 [ 564.018364][ T5832] dvb_ttusb_budget: ttusb_init_controller: error [ 564.041317][ T793] usb 1-1: device descriptor read/64, error -32 [ 564.281310][ T793] usb 1-1: reset high-speed USB device number 34 using dummy_hcd [ 564.421275][ T793] usb 1-1: device descriptor read/64, error -32 [ 564.441810][ T5832] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 564.590001][ T5832] DVB: Unable to find symbol stv0299_attach() [ 564.647573][ T5832] DVB: Unable to find symbol tda8083_attach() [ 564.655454][ T5832] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 564.722114][ T793] usb 1-1: reset high-speed USB device number 34 using dummy_hcd [ 564.733614][ T5832] usb 5-1: USB disconnect, device number 25 [ 564.742646][ T793] usb 1-1: device descriptor read/8, error -32 [ 564.915255][ T29] audit: type=1800 audit(2000000244.740:670): pid=11379 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1423" name="bus" dev="overlay" ino=1584 res=0 errno=0 [ 565.138820][ T793] usb 1-1: reset high-speed USB device number 34 using dummy_hcd [ 565.171281][T11360] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 565.191550][ T793] usb 1-1: device descriptor read/8, error -32 [ 565.340297][T11380] tipc: Enabling of bearer rejected, already enabled [ 565.373647][ T793] raw-gadget.0 gadget.0: failed to queue suspend event [ 565.396544][ T793] gspca_se401: read req failed req 0x06 error -19 [ 565.404849][ T793] usb 1-1: USB disconnect, device number 34 [ 565.548997][ T793] raw-gadget.0 gadget.0: failed to queue reset event [ 565.811384][ T793] raw-gadget.0 gadget.0: failed to queue resume event [ 565.881235][ T793] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 565.889149][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 565.896890][ T793] raw-gadget.0 gadget.0: failed to queue reset event [ 565.971344][ T793] raw-gadget.0 gadget.0: failed to queue resume event [ 566.041343][ T793] usb 1-1: device descriptor read/64, error -32 [ 566.182762][ T793] raw-gadget.0 gadget.0: failed to queue suspend event [ 566.190398][ T793] raw-gadget.0 gadget.0: failed to queue reset event [ 566.274699][ T793] raw-gadget.0 gadget.0: failed to queue resume event [ 566.351366][ T793] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 566.373117][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 566.381209][ T793] raw-gadget.0 gadget.0: failed to queue reset event [ 566.453786][ T793] raw-gadget.0 gadget.0: failed to queue resume event [ 566.521435][ T793] usb 1-1: device descriptor read/64, error -32 [ 566.652773][ T793] raw-gadget.0 gadget.0: failed to queue suspend event [ 566.703789][ T793] usb usb1-port1: attempt power cycle [ 566.719567][ T793] raw-gadget.0 gadget.0: failed to queue disconnect event [ 566.740397][ T793] raw-gadget.0 gadget.0: failed to queue reset event [ 566.781828][T11332] raw-gadget.0 gadget.0: failed to queue disconnect event [ 567.055368][ T29] audit: type=1800 audit(2000000246.880:671): pid=11399 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.1429" name="bus" dev="overlay" ino=1471 res=0 errno=0 [ 567.330944][ T5832] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 567.514677][ T5832] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 567.528929][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 567.555380][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 567.587730][ T5832] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 567.609259][ T5832] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 567.628140][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.071908][ T5832] usb 4-1: config 0 descriptor?? [ 568.660840][ T5832] usbhid 4-1:0.0: can't add hid device: -71 [ 568.708213][ T5832] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 568.743355][ T5832] usb 4-1: USB disconnect, device number 42 [ 570.061242][T10555] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 570.391196][T10555] usb 1-1: Using ep0 maxpacket: 32 [ 570.400044][T10555] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 570.435267][T10555] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 570.451143][T10555] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 570.459456][T10555] usb 1-1: Product: syz [ 570.490242][T10555] usb 1-1: Manufacturer: syz [ 570.528159][T10555] usb 1-1: SerialNumber: syz [ 570.540964][T10555] usb 1-1: config 0 descriptor?? [ 570.555136][T11441] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 573.790449][ T5832] usb 1-1: USB disconnect, device number 38 [ 574.703687][T11505] tipc: Enabling of bearer rejected, already enabled [ 575.122888][T11507] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 575.486135][T11514] netlink: 'syz.5.1452': attribute type 2 has an invalid length. [ 575.518082][T11514] !: entered promiscuous mode [ 575.538657][T11514] netlink: 'syz.5.1452': attribute type 2 has an invalid length. [ 575.549548][T11514] !: left promiscuous mode [ 577.411226][ T5832] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 577.582662][ T5832] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 577.595429][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 577.607073][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 577.617773][ T5832] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 577.631271][ T5832] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 577.640504][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.718964][ T5832] usb 4-1: config 0 descriptor?? [ 578.241813][ T5832] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 578.772693][ T5832] usb 4-1: USB disconnect, device number 43 [ 578.798133][T11546] fido_id[11546]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 578.871137][ T793] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 579.213014][ T793] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 579.271174][ T793] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 579.331783][ T793] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 579.371856][ T793] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 579.589234][ T793] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 579.768303][ T793] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.802231][T11556] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1471'. [ 579.844747][T11564] overlayfs: failed to resolve './file0': -2 [ 579.876649][ T793] usb 6-1: config 0 descriptor?? [ 580.009475][T11575] netlink: 'syz.3.1474': attribute type 2 has an invalid length. [ 580.323830][ T793] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 580.386975][T11582] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1478'. [ 580.757037][ T29] audit: type=1400 audit(2000000260.500:672): avc: denied { name_bind } for pid=11547 comm="syz.5.1469" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 580.869257][ T29] audit: type=1326 audit(2000000260.510:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11585 comm="syz.4.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2cb79c799 code=0x7ffc0000 [ 580.869553][T10555] usb 6-1: USB disconnect, device number 23 [ 581.104658][ T29] audit: type=1326 audit(2000000260.510:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11585 comm="syz.4.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2cb79c799 code=0x7ffc0000 [ 581.214603][T11593] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1480'. [ 581.260340][ T29] audit: type=1326 audit(2000000260.520:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11585 comm="syz.4.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb2cb79c799 code=0x7ffc0000 [ 581.493498][ T29] audit: type=1326 audit(2000000260.520:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11585 comm="syz.4.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2cb79c799 code=0x7ffc0000 [ 581.544680][ T29] audit: type=1326 audit(2000000260.520:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11585 comm="syz.4.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fb2cb79c799 code=0x7ffc0000 [ 581.703218][ T29] audit: type=1326 audit(2000000260.520:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11585 comm="syz.4.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2cb79c799 code=0x7ffc0000 [ 581.874369][T11607] netlink: 'syz.0.1484': attribute type 2 has an invalid length. [ 581.891281][ T29] audit: type=1326 audit(2000000260.520:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11585 comm="syz.4.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2cb79c799 code=0x7ffc0000 [ 581.915359][ T29] audit: type=1326 audit(2000000260.520:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11585 comm="syz.4.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fb2cb79c799 code=0x7ffc0000 [ 581.964025][ T29] audit: type=1326 audit(2000000260.520:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11585 comm="syz.4.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2cb79c799 code=0x7ffc0000 [ 582.071480][T11606] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 583.313733][T11633] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1491'. [ 583.414121][T10555] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 583.479185][T11639] fuse: Bad value for 'rootmode' [ 583.485509][T11631] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 583.637534][T11645] netlink: 'syz.2.1492': attribute type 2 has an invalid length. [ 583.653126][T11645] !: entered promiscuous mode [ 583.664402][T10555] usb 6-1: Using ep0 maxpacket: 8 [ 583.676842][T10555] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 583.686755][T10555] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.705042][T11645] netlink: 'syz.2.1492': attribute type 2 has an invalid length. [ 583.713048][T11645] !: left promiscuous mode [ 583.737503][T10555] usb 6-1: Product: syz [ 583.743076][T10555] usb 6-1: Manufacturer: syz [ 583.754801][T10555] usb 6-1: SerialNumber: syz [ 583.762937][T10555] usb 6-1: config 0 descriptor?? [ 583.774983][T10555] gspca_main: se401-2.14.0 probing 047d:5003 [ 583.854880][ T5858] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 584.134371][ T5858] usb 4-1: Using ep0 maxpacket: 32 [ 584.207146][ T5858] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.237376][ T5858] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 584.311439][ T5858] usb 4-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64 [ 584.323187][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.573488][ T5858] usb 4-1: config 0 descriptor?? [ 584.944968][T11642] bridge_slave_0: left allmulticast mode [ 585.036710][T10555] usb 6-1: reset high-speed USB device number 24 using dummy_hcd [ 585.078178][T11642] bridge_slave_0: left promiscuous mode [ 585.086538][T11642] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.120116][T11642] bridge_slave_1: left allmulticast mode [ 585.206657][T11642] bridge_slave_1: left promiscuous mode [ 585.222682][T11642] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.257779][T10555] usb 6-1: device descriptor read/64, error -32 [ 585.287944][T11642] bond0: (slave bond_slave_0): Releasing backup interface [ 585.306307][T11642] bond0: (slave bond_slave_1): Releasing backup interface [ 585.343251][T11642] team0: Port device team_slave_0 removed [ 585.437229][T11642] team0: Port device team_slave_1 removed [ 585.450875][T11642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 585.501112][T10555] usb 6-1: reset high-speed USB device number 24 using dummy_hcd [ 585.523840][T11642] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 585.558239][T11642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 585.584114][T11642] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 585.615555][T11642] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 585.641217][T10555] usb 6-1: device descriptor read/64, error -32 [ 585.705235][T11671] random: crng reseeded on system resumption [ 585.720929][T11656] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 585.842867][ T24] usb 4-1: USB disconnect, device number 44 [ 585.910504][T11679] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1503'. [ 585.920483][T10555] usb 6-1: reset high-speed USB device number 24 using dummy_hcd [ 586.001381][T10555] usb 6-1: device descriptor read/8, error -32 [ 586.241162][T10555] usb 6-1: reset high-speed USB device number 24 using dummy_hcd [ 586.261448][T10555] usb 6-1: device descriptor read/8, error -32 [ 586.371483][T10555] raw-gadget.0 gadget.5: failed to queue suspend event [ 586.378824][T10555] gspca_se401: read req failed req 0x06 error -19 [ 586.396110][T10555] usb 6-1: USB disconnect, device number 24 [ 586.422899][T10555] raw-gadget.0 gadget.5: failed to queue reset event [ 586.551161][T10555] raw-gadget.0 gadget.5: failed to queue resume event [ 586.621565][T10555] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 586.630505][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 586.749057][T10555] raw-gadget.0 gadget.5: failed to queue reset event [ 586.846720][T10555] raw-gadget.0 gadget.5: failed to queue resume event [ 586.951256][T10555] usb 6-1: device descriptor read/64, error -32 [ 587.074468][T10555] raw-gadget.0 gadget.5: failed to queue suspend event [ 587.089122][T10555] raw-gadget.0 gadget.5: failed to queue reset event [ 587.201180][T10555] raw-gadget.0 gadget.5: failed to queue resume event [ 587.291213][T10555] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 587.301565][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 587.308694][T10555] raw-gadget.0 gadget.5: failed to queue reset event [ 587.383711][T10555] raw-gadget.0 gadget.5: failed to queue resume event [ 587.442070][T10555] usb 6-1: device descriptor read/64, error -32 [ 587.556929][T10555] raw-gadget.0 gadget.5: failed to queue suspend event [ 587.590116][T10555] usb usb6-port1: attempt power cycle [ 587.761784][T10555] raw-gadget.0 gadget.5: failed to queue disconnect event [ 587.782010][T10555] raw-gadget.0 gadget.5: failed to queue reset event [ 587.832637][ T10] usb 1-1: new low-speed USB device number 39 using dummy_hcd [ 587.861958][T11657] raw-gadget.0 gadget.5: failed to queue disconnect event [ 588.021889][ T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 588.029570][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 588.074832][ T10] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 588.105572][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 588.121131][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 588.136503][ T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 588.150961][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 588.239623][ T10] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 588.316281][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 588.316294][ T29] audit: type=1326 audit(2000000268.120:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11698 comm="syz.4.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2cb79c799 code=0x7ffc0000 [ 588.346400][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 588.369573][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 588.446515][T11712] netlink: 'syz.2.1512': attribute type 2 has an invalid length. [ 588.468004][T11712] !: entered promiscuous mode [ 588.478114][T11712] netlink: 'syz.2.1512': attribute type 2 has an invalid length. [ 588.486095][T11712] !: left promiscuous mode [ 588.503695][ T29] audit: type=1326 audit(2000000268.120:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11698 comm="syz.4.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2cb79c799 code=0x7ffc0000 [ 588.652967][ T29] audit: type=1326 audit(2000000268.120:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11698 comm="syz.4.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb2cb79c799 code=0x7ffc0000 [ 588.773139][ T29] audit: type=1326 audit(2000000268.120:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11698 comm="syz.4.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2cb79c799 code=0x7ffc0000 [ 588.820551][ T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 588.842898][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 588.884546][ T10] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 588.900125][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 589.026393][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 589.199426][ T29] audit: type=1326 audit(2000000268.120:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11698 comm="syz.4.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2cb79c799 code=0x7ffc0000 [ 589.300899][T11722] fuse: Bad value for 'rootmode' [ 589.358687][ T10] usb 1-1: string descriptor 0 read error: -22 [ 589.367064][ T10] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 589.377195][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.437796][ T10] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 589.497557][ T29] audit: type=1326 audit(2000000268.120:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11698 comm="syz.4.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fb2cb79c799 code=0x7ffc0000 [ 589.756160][ T29] audit: type=1326 audit(2000000268.120:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11698 comm="syz.4.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2cb79c799 code=0x7ffc0000 [ 589.789878][ T29] audit: type=1326 audit(2000000268.120:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11698 comm="syz.4.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fb2cb79c799 code=0x7ffc0000 [ 589.793322][ T10] usb 1-1: USB disconnect, device number 39 [ 590.011165][ T29] audit: type=1326 audit(2000000268.120:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11698 comm="syz.4.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2cb79c799 code=0x7ffc0000 [ 590.064262][ T29] audit: type=1326 audit(2000000268.120:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11698 comm="syz.4.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fb2cb79c799 code=0x7ffc0000 [ 590.492835][T11740] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1520'. [ 590.585424][T11739] batadv_slave_0: entered promiscuous mode [ 592.709438][T11771] tipc: Enabling of bearer rejected, already enabled [ 592.852629][T11774] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1529'. [ 593.814052][T11783] netlink: 'syz.5.1531': attribute type 2 has an invalid length. [ 593.842089][T11783] !: entered promiscuous mode [ 593.850425][T11783] netlink: 'syz.5.1531': attribute type 2 has an invalid length. [ 593.858315][T11783] !: left promiscuous mode [ 594.951162][ T5832] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 595.151192][ T5832] usb 4-1: Using ep0 maxpacket: 8 [ 595.154375][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 595.154389][ T29] audit: type=1800 audit(2000000274.880:772): pid=11803 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.1538" name="bus" dev="overlay" ino=1602 res=0 errno=0 [ 595.308087][ T5832] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 595.327371][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.368119][ T5832] usb 4-1: Product: syz [ 595.396121][ T5832] usb 4-1: Manufacturer: syz [ 595.400739][ T5832] usb 4-1: SerialNumber: syz [ 595.419260][T11807] netlink: 'syz.2.1539': attribute type 2 has an invalid length. [ 595.446991][T11807] !: entered promiscuous mode [ 595.465474][T11807] netlink: 'syz.2.1539': attribute type 2 has an invalid length. [ 595.476594][T11807] !: left promiscuous mode [ 595.488125][ T5832] usb 4-1: config 0 descriptor?? [ 595.497642][ T5832] gspca_main: se401-2.14.0 probing 047d:5003 [ 595.871093][ T10] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 596.174735][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 596.199107][ T10] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 596.221105][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.255872][ T10] usb 6-1: config 0 descriptor?? [ 596.281585][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 596.681095][ T5832] usb 4-1: reset high-speed USB device number 45 using dummy_hcd [ 596.752038][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 596.811099][ T5832] usb 4-1: device descriptor read/64, error -32 [ 596.821412][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 596.851321][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 596.860288][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 596.871428][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 596.881948][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 596.888910][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 596.975217][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 596.986634][ T10] pwc: recv_control_msg error -32 req 04 val 1500 [ 597.121110][ T5832] usb 4-1: reset high-speed USB device number 45 using dummy_hcd [ 597.135644][T11822] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 597.251129][ T5832] usb 4-1: device descriptor read/64, error -32 [ 597.251169][ T5885] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 597.281988][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 597.305082][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 597.315948][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 597.419378][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 597.441171][ T5885] usb 1-1: Using ep0 maxpacket: 8 [ 597.454668][ T5885] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 597.466829][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.491682][ T5885] usb 1-1: Product: syz [ 597.496087][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 597.501527][ T5832] usb 4-1: reset high-speed USB device number 45 using dummy_hcd [ 597.510677][ T5885] usb 1-1: Manufacturer: syz [ 597.516377][ T5885] usb 1-1: SerialNumber: syz [ 597.516570][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 597.531451][ T5832] usb 4-1: device descriptor read/8, error -32 [ 597.533232][ T5885] usb 1-1: config 0 descriptor?? [ 597.592177][ T10] pwc: Registered as video103. [ 597.605293][ T5885] gspca_main: se401-2.14.0 probing 047d:5003 [ 597.614211][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input15 [ 597.658959][ T10] usb 6-1: USB disconnect, device number 28 [ 597.781167][ T5832] usb 4-1: reset high-speed USB device number 45 using dummy_hcd [ 597.801360][ T5832] usb 4-1: device descriptor read/8, error -32 [ 597.951184][ T5832] raw-gadget.0 gadget.3: failed to queue suspend event [ 597.974606][ T5832] gspca_se401: read req failed req 0x06 error -19 [ 598.037604][ T5832] usb 4-1: USB disconnect, device number 45 [ 598.503741][ T5832] raw-gadget.0 gadget.3: failed to queue reset event [ 598.555687][T11821] raw-gadget.0 gadget.3: failed to queue disconnect event [ 598.893246][ T5885] usb 1-1: reset high-speed USB device number 40 using dummy_hcd [ 599.081147][ T5885] usb 1-1: device descriptor read/64, error -32 [ 599.252670][ T47] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 599.254644][T11845] netlink: 'syz.3.1549': attribute type 2 has an invalid length. [ 599.290948][T11845] !: entered promiscuous mode [ 599.303589][T11845] netlink: 'syz.3.1549': attribute type 2 has an invalid length. [ 599.311764][T11845] !: left promiscuous mode [ 599.421269][ T5885] usb 1-1: reset high-speed USB device number 40 using dummy_hcd [ 599.501930][ T47] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.527344][ T47] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 599.564884][ T47] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 599.581140][ T5885] usb 1-1: device descriptor read/64, error -32 [ 599.584461][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.647378][ T47] usb 3-1: config 0 descriptor?? [ 599.856041][T11844] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 599.921220][ T5885] usb 1-1: reset high-speed USB device number 40 using dummy_hcd [ 600.004402][ T5885] usb 1-1: device descriptor read/8, error -32 [ 600.240630][T11848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.249175][ T5885] usb 1-1: reset high-speed USB device number 40 using dummy_hcd [ 600.258178][T11848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.321736][ T5885] usb 1-1: device descriptor read/8, error -32 [ 600.432555][ T5885] raw-gadget.2 gadget.0: failed to queue suspend event [ 600.485833][ T5885] gspca_se401: read req failed req 0x06 error -19 [ 600.593636][ T5885] usb 1-1: USB disconnect, device number 40 [ 600.658143][ T5885] raw-gadget.2 gadget.0: failed to queue reset event [ 600.758738][ T5885] raw-gadget.2 gadget.0: failed to queue resume event [ 600.811487][ T24] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 600.901225][T11855] overlayfs: failed to resolve './file0': -2 [ 600.985363][ T5885] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 600.993206][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 601.001161][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 601.008557][ T5885] raw-gadget.2 gadget.0: failed to queue reset event [ 601.015740][ T24] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 601.071950][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.081143][ T5885] raw-gadget.2 gadget.0: failed to queue resume event [ 601.110366][ T24] usb 5-1: Product: syz [ 601.126735][ T24] usb 5-1: Manufacturer: syz [ 601.146190][T11837] raw-gadget.2 gadget.0: failed to queue suspend event [ 601.153855][ T24] usb 5-1: SerialNumber: syz [ 601.153882][ T5885] usb 1-1: device descriptor read/64, error -32 [ 601.165271][T11837] raw-gadget.2 gadget.0: failed to queue disconnect event [ 601.173420][ T24] usb 5-1: config 0 descriptor?? [ 601.198900][ T24] gspca_main: se401-2.14.0 probing 047d:5003 [ 601.299030][T11863] netlink: 'syz.5.1553': attribute type 2 has an invalid length. [ 601.350493][T11863] !: entered promiscuous mode [ 601.354081][T11864] netlink: 'syz.5.1553': attribute type 2 has an invalid length. [ 601.363723][T11864] !: left promiscuous mode [ 601.731466][T11870] fuse: Bad value for 'fd' [ 602.095608][ T5832] usb 3-1: USB disconnect, device number 37 [ 602.471447][ T24] usb 5-1: reset high-speed USB device number 26 using dummy_hcd [ 602.686640][ T24] usb 5-1: device descriptor read/64, error -32 [ 603.041140][ T24] usb 5-1: reset high-speed USB device number 26 using dummy_hcd [ 603.292804][T11895] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 603.309092][ T24] usb 5-1: device descriptor read/64, error -32 [ 603.602760][ T24] usb 5-1: reset high-speed USB device number 26 using dummy_hcd [ 603.648991][ T24] usb 5-1: device descriptor read/8, error -32 [ 603.961503][ T24] usb 5-1: reset high-speed USB device number 26 using dummy_hcd [ 603.982966][ T24] usb 5-1: device descriptor read/8, error -32 [ 604.098380][ T24] raw-gadget.3 gadget.4: failed to queue suspend event [ 604.115185][ T24] gspca_se401: read req failed req 0x06 error -19 [ 604.126255][ T24] usb 5-1: USB disconnect, device number 26 [ 604.262236][ T24] raw-gadget.3 gadget.4: failed to queue reset event [ 604.625973][T11875] raw-gadget.3 gadget.4: failed to queue disconnect event [ 604.765136][T11909] netlink: 'syz.2.1562': attribute type 2 has an invalid length. [ 604.786274][T11909] !: entered promiscuous mode [ 604.794782][T11909] netlink: 'syz.2.1562': attribute type 2 has an invalid length. [ 604.802665][T11909] !: left promiscuous mode [ 605.034460][T11912] tipc: Enabling of bearer rejected, already enabled [ 605.166060][T11915] syzkaller0: entered promiscuous mode [ 605.183831][T11915] syzkaller0: entered allmulticast mode [ 605.704014][T11918] random: crng reseeded on system resumption [ 607.013448][T11945] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1574'. [ 608.531363][ T793] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 608.722914][ T793] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 608.748298][ T793] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 608.789978][ T793] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 608.877672][ T793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.914512][ T793] usb 1-1: config 0 descriptor?? [ 609.312993][T11963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.322878][T11963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.041644][T11972] fuse: Unknown parameter 'user_i00000000000000000000' [ 610.386987][T11978] netlink: 'syz.4.1582': attribute type 2 has an invalid length. [ 610.419158][T11978] !: entered promiscuous mode [ 610.430230][T11978] netlink: 'syz.4.1582': attribute type 2 has an invalid length. [ 610.439130][T11978] !: left promiscuous mode [ 610.815533][ T10] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 611.061167][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 611.082837][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 611.092207][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.130567][ T10] usb 4-1: Product: syz [ 611.150267][ T10] usb 4-1: Manufacturer: syz [ 611.161093][ T10] usb 4-1: SerialNumber: syz [ 611.195461][ T10] usb 4-1: config 0 descriptor?? [ 611.441165][ T10] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 611.642435][ T10] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 612.151206][ T10] usb 1-1: USB disconnect, device number 43 [ 612.521120][ T5832] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 612.544149][T12017] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1591'. [ 612.709723][ T5832] usb 5-1: Using ep0 maxpacket: 32 [ 612.734882][ T5832] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 612.775352][ T5832] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 612.785647][ T5832] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 612.796697][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 612.816835][ T5832] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 612.854364][ T5832] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 612.867622][ T5832] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 612.876939][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.018752][ T5832] usb 5-1: config 0 descriptor?? [ 613.088463][T12023] fuse: Unknown parameter 'user_i00000000000000000000' [ 613.243969][ T5832] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 28 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 613.539139][T12028] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 613.565479][ T24] usb 4-1: USB disconnect, device number 47 [ 614.555013][T12047] syzkaller0: entered promiscuous mode [ 614.560586][T12047] syzkaller0: entered allmulticast mode [ 614.761233][ T24] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 614.891157][ T24] usb 3-1: device descriptor read/64, error -71 [ 615.141150][ T24] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 615.237526][T10555] usb 5-1: USB disconnect, device number 28 [ 615.252776][T10555] usblp0: removed [ 615.409487][ T24] usb 3-1: device descriptor read/64, error -71 [ 615.544876][ T24] usb usb3-port1: attempt power cycle [ 615.724599][T12070] netlink: 'syz.4.1604': attribute type 2 has an invalid length. [ 615.738628][T12070] !: entered promiscuous mode [ 615.751176][ T5832] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 615.764408][T12070] netlink: 'syz.4.1604': attribute type 2 has an invalid length. [ 615.778310][T12070] !: left promiscuous mode [ 615.912043][ T24] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 615.919648][ T5832] usb 6-1: Using ep0 maxpacket: 8 [ 615.928069][ T5832] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 615.947479][ T5832] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.955880][ T793] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 615.966078][ T24] usb 3-1: device descriptor read/8, error -71 [ 616.043059][T12075] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1608'. [ 616.071745][ T5832] usb 6-1: Product: syz [ 616.075959][ T5832] usb 6-1: Manufacturer: syz [ 616.080561][ T5832] usb 6-1: SerialNumber: syz [ 616.087233][ T5832] usb 6-1: config 0 descriptor?? [ 616.159264][ T5832] gspca_main: se401-2.14.0 probing 047d:5003 [ 616.165407][ T793] usb 4-1: Using ep0 maxpacket: 8 [ 616.220207][ T793] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 616.229392][ T793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.237460][ T793] usb 4-1: Product: syz [ 616.249104][ T793] usb 4-1: Manufacturer: syz [ 616.261211][ T793] usb 4-1: SerialNumber: syz [ 616.311868][ T24] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 616.329369][ T793] usb 4-1: config 0 descriptor?? [ 616.335320][ T24] usb 3-1: device descriptor read/8, error -71 [ 616.451388][ T24] usb usb3-port1: unable to enumerate USB device [ 616.554800][ T793] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 616.767474][ T793] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 617.488937][T12092] netlink: 'syz.4.1610': attribute type 2 has an invalid length. [ 617.497017][T12090] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 617.511114][ T5832] usb 6-1: reset high-speed USB device number 29 using dummy_hcd [ 617.540783][T12092] !: entered promiscuous mode [ 617.831253][ T5832] usb 6-1: device descriptor read/64, error -32 [ 617.916106][T12092] netlink: 'syz.4.1610': attribute type 2 has an invalid length. [ 617.931638][T12092] !: left promiscuous mode [ 618.153786][ T5832] usb 6-1: reset high-speed USB device number 29 using dummy_hcd [ 618.219421][T12099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1613'. [ 618.343233][T12099] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 618.407009][T12099] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 618.441080][ T5832] usb 6-1: device descriptor read/64, error -32 [ 619.681983][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 619.688383][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 619.721172][ T5832] usb 6-1: reset high-speed USB device number 29 using dummy_hcd [ 619.751373][ T5832] usb 6-1: device descriptor read/8, error -32 [ 619.791825][ T10] usb 4-1: USB disconnect, device number 48 [ 619.929274][T12112] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1617'. [ 620.231307][ T5832] usb 6-1: reset high-speed USB device number 29 using dummy_hcd [ 620.271697][ T5832] usb 6-1: device reset changed ep0 maxpacket size! [ 620.278705][ T5832] gspca_se401: read req failed req 0x06 error -19 [ 620.293571][T12118] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1619'. [ 620.419762][ T5832] usb 6-1: USB disconnect, device number 29 [ 620.694721][ T5832] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 620.851173][ T5832] usb 6-1: Using ep0 maxpacket: 32 [ 620.864122][ T5832] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 621.005096][ T5832] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 621.087201][ T5832] usb 6-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64 [ 621.099504][ T5832] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.254695][ T5832] usb 6-1: config 0 descriptor?? [ 622.049455][T12110] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 622.167085][T12140] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1624'. [ 622.271115][T10555] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 622.451111][ T1011] wlan1: Trigger new scan to find an IBSS to join [ 622.671130][T10555] usb 5-1: Using ep0 maxpacket: 8 [ 622.679529][T10555] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 622.686417][ T24] usb 6-1: USB disconnect, device number 30 [ 622.702335][T10555] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.715853][T10555] usb 5-1: Product: syz [ 622.722817][T10555] usb 5-1: Manufacturer: syz [ 622.739954][T10555] usb 5-1: SerialNumber: syz [ 622.748312][T10555] usb 5-1: config 0 descriptor?? [ 622.968176][T10555] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 623.601959][T10555] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 625.035738][T12180] dummy0: entered promiscuous mode [ 625.057274][T12180] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 625.283053][T12180] hsr1: entered allmulticast mode [ 625.288119][T12180] dummy0: entered allmulticast mode [ 625.299445][ T5858] usb 5-1: USB disconnect, device number 29 [ 625.380966][T12180] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 625.860191][ T29] audit: type=1800 audit(2000000305.680:773): pid=12196 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1639" name="bus" dev="overlay" ino=1844 res=0 errno=0 [ 627.888773][ T49] wlan1: Trigger new scan to find an IBSS to join [ 628.271093][ T5858] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 628.431173][ T5858] usb 1-1: Using ep0 maxpacket: 8 [ 628.449532][ T5858] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 628.475693][ T5858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.499588][ T5858] usb 1-1: Product: syz [ 628.511232][ T5858] usb 1-1: Manufacturer: syz [ 628.541714][ T5858] usb 1-1: SerialNumber: syz [ 628.564229][ T5858] usb 1-1: config 0 descriptor?? [ 628.689013][T12217] syzkaller0: entered promiscuous mode [ 628.694762][T12217] syzkaller0: entered allmulticast mode [ 629.825017][ T5858] dvb_usb_rtl28xxu 1-1:0.0: chip type detection failed -110 [ 629.833038][ T5858] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 629.979146][ T1011] wlan1: Creating new IBSS network, BSSID 86:ac:ce:62:29:84 [ 630.192239][ T793] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 630.354807][ T793] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 630.385323][ T793] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 630.412089][ T793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.425092][ T793] usb 5-1: config 0 descriptor?? [ 630.439308][ T793] pwc: Askey VC010 type 2 USB webcam detected. [ 630.841945][ T793] pwc: recv_control_msg error -32 req 02 val 2b00 [ 630.848937][ T793] pwc: recv_control_msg error -32 req 02 val 2700 [ 630.864083][ T793] pwc: recv_control_msg error -32 req 02 val 2c00 [ 630.882820][ T793] pwc: recv_control_msg error -32 req 04 val 1000 [ 630.894004][ T793] pwc: recv_control_msg error -32 req 04 val 1300 [ 630.910279][ T793] pwc: recv_control_msg error -32 req 04 val 1400 [ 631.068089][ T10] usb 1-1: USB disconnect, device number 44 [ 631.114298][ T793] pwc: recv_control_msg error -32 req 02 val 2000 [ 631.128670][ T793] pwc: recv_control_msg error -32 req 02 val 2100 [ 631.136088][ T793] pwc: recv_control_msg error -32 req 04 val 1500 [ 631.361414][ T793] pwc: recv_control_msg error -71 req 02 val 2400 [ 631.370985][ T793] pwc: recv_control_msg error -71 req 02 val 2600 [ 631.378521][ T793] pwc: recv_control_msg error -71 req 02 val 2900 [ 632.495980][ T793] pwc: recv_control_msg error -71 req 02 val 2800 [ 632.514627][ T793] pwc: recv_control_msg error -71 req 04 val 1100 [ 632.619445][ T793] pwc: recv_control_msg error -71 req 04 val 1200 [ 632.640050][ T793] pwc: Registered as video103. [ 633.176625][ T793] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input16 [ 633.196099][ T793] usb 5-1: USB disconnect, device number 30 [ 635.932740][T12285] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1663'. [ 637.721076][ T24] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 637.721077][ T10] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 638.141072][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 638.148990][ T24] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 638.166326][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.207095][T12313] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1672'. [ 638.220792][ T24] usb 6-1: Product: syz [ 638.222001][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 638.226740][ T24] usb 6-1: Manufacturer: syz [ 638.241045][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 638.243289][ T24] usb 6-1: SerialNumber: syz [ 638.268611][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 638.269857][ T24] usb 6-1: config 0 descriptor?? [ 638.289119][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 638.303764][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 638.313651][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.325039][ T10] usb 5-1: config 0 descriptor?? [ 638.473607][ T29] audit: type=1400 audit(2000000318.290:774): avc: denied { ioctl } for pid=12316 comm="syz.2.1674" path="socket:[46949]" dev="sockfs" ino=46949 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 638.519195][ T24] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 638.749774][ T10] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 638.751101][ T5832] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 638.772388][T12326] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1675'. [ 638.991496][ T5832] usb 3-1: Using ep0 maxpacket: 32 [ 638.999532][ T5832] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 639.344668][ T5832] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 639.422369][ T5832] usb 3-1: string descriptor 0 read error: -22 [ 639.428741][ T5832] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 639.460947][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.490074][ T24] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 639.637092][T12323] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 639.728053][ T5832] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 639.741409][ T5832] usb 3-1: MIDIStreaming interface descriptor not found [ 639.883401][ T5832] usb 5-1: USB disconnect, device number 31 [ 640.373464][T12338] dummy0: entered promiscuous mode [ 640.383409][T12338] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 640.398171][T12338] debugfs: 'hsr1' already exists in 'hsr' [ 640.404150][T12338] Cannot create hsr debugfs directory [ 640.411611][T12338] hsr1: entered allmulticast mode [ 640.416825][T12338] dummy0: entered allmulticast mode [ 640.422139][T12338] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 640.610869][ T5832] usb 6-1: USB disconnect, device number 31 [ 642.345244][ T793] usb 3-1: USB disconnect, device number 42 [ 642.441094][ T5832] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 642.534342][ T29] audit: type=1400 audit(2000000322.300:775): avc: denied { read } for pid=12352 comm="syz.4.1684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 642.761061][ T5832] usb 4-1: Using ep0 maxpacket: 8 [ 642.771499][ T5832] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 642.782084][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.790430][ T5832] usb 4-1: Product: syz [ 642.809148][ T5832] usb 4-1: Manufacturer: syz [ 642.816685][ T5832] usb 4-1: SerialNumber: syz [ 642.853263][ T5832] usb 4-1: config 0 descriptor?? [ 642.870118][ T5832] gspca_main: se401-2.14.0 probing 047d:5003 [ 643.692104][ T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 644.121106][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 644.133040][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 644.245519][ T5832] usb 4-1: reset high-speed USB device number 49 using dummy_hcd [ 644.267933][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.288131][ T10] usb 5-1: Product: syz [ 644.297135][ T10] usb 5-1: Manufacturer: syz [ 644.471261][T12380] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1690'. [ 644.614305][ T10] usb 5-1: SerialNumber: syz [ 644.620275][ T5832] usb 4-1: device descriptor read/64, error -32 [ 644.623059][ T10] usb 5-1: config 0 descriptor?? [ 644.879257][ T5832] usb 4-1: reset high-speed USB device number 49 using dummy_hcd [ 644.946290][T12384] dummy0: entered promiscuous mode [ 644.982475][T12384] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 644.993048][T12384] debugfs: 'hsr1' already exists in 'hsr' [ 644.998901][T12384] Cannot create hsr debugfs directory [ 645.041232][T12384] hsr1: Slave B (netdevsim0) is not up; please bring it up to get a fully working HSR network [ 645.056722][T12384] hsr1: entered allmulticast mode [ 645.061842][T12384] dummy0: entered allmulticast mode [ 645.067162][T12384] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 645.084036][ T10] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 645.171119][ T5832] usb 4-1: device descriptor read/64, error -32 [ 645.534732][ T5832] usb 4-1: reset high-speed USB device number 49 using dummy_hcd [ 645.581410][ T5832] usb 4-1: device descriptor read/8, error -32 [ 645.621963][T12390] dummy0: entered promiscuous mode [ 645.643922][T12390] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 645.701406][T12390] debugfs: 'hsr1' already exists in 'hsr' [ 645.707191][T12390] Cannot create hsr debugfs directory [ 645.755337][T12399] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1695'. [ 645.806041][ T10] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 645.852885][T12390] hsr1: entered allmulticast mode [ 645.868734][T12390] dummy0: entered allmulticast mode [ 645.878373][T12390] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 645.903307][ T5832] usb 4-1: reset high-speed USB device number 49 using dummy_hcd [ 645.993886][ T5832] usb 4-1: device descriptor read/8, error -32 [ 646.057182][T12382] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 646.088015][T12401] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1696'. [ 646.101419][ T5832] raw-gadget.0 gadget.3: failed to queue suspend event [ 646.123951][ T5832] gspca_se401: read req failed req 0x06 error -19 [ 646.142525][ T5832] usb 4-1: USB disconnect, device number 49 [ 646.175955][ T5832] raw-gadget.0 gadget.3: failed to queue reset event [ 646.241906][T12407] netlink: 'syz.0.1697': attribute type 2 has an invalid length. [ 646.252654][T12407] !: entered promiscuous mode [ 646.258925][T12407] netlink: 'syz.0.1697': attribute type 2 has an invalid length. [ 646.261713][ T5832] raw-gadget.0 gadget.3: failed to queue resume event [ 646.267569][T12407] !: left promiscuous mode [ 646.361128][ T5832] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 646.369224][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 646.376985][ T5832] raw-gadget.0 gadget.3: failed to queue reset event [ 646.451663][ T5832] raw-gadget.0 gadget.3: failed to queue resume event [ 646.581232][ T5832] usb 4-1: device descriptor read/64, error -32 [ 646.691149][ T5832] raw-gadget.0 gadget.3: failed to queue suspend event [ 646.698423][ T5832] raw-gadget.0 gadget.3: failed to queue reset event [ 646.771173][ T5832] raw-gadget.0 gadget.3: failed to queue resume event [ 646.835566][ T793] usb 5-1: USB disconnect, device number 32 [ 646.842013][ T5832] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 646.857991][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 646.869936][ T5832] raw-gadget.0 gadget.3: failed to queue reset event [ 646.951220][ T5832] raw-gadget.0 gadget.3: failed to queue resume event [ 646.991087][ T24] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 647.013178][ T5832] usb 4-1: device descriptor read/64, error -32 [ 647.131415][ T5832] raw-gadget.0 gadget.3: failed to queue suspend event [ 647.148845][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 647.160579][ T5832] usb usb4-port1: attempt power cycle [ 647.171137][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 647.180082][ T5832] raw-gadget.0 gadget.3: failed to queue disconnect event [ 647.202811][ T5832] raw-gadget.0 gadget.3: failed to queue reset event [ 647.210209][ T24] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 647.220570][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.274370][ T24] usb 3-1: config 0 descriptor?? [ 647.281276][ T5832] raw-gadget.0 gadget.3: failed to queue resume event [ 647.305955][ T5832] raw-gadget.0 gadget.3: failed to queue reset event [ 647.316336][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 647.341338][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 647.627115][ T5832] raw-gadget.0 gadget.3: failed to queue resume event [ 647.643498][T12347] raw-gadget.0 gadget.3: failed to queue suspend event [ 647.645210][T12411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 647.671152][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 647.679500][T12347] raw-gadget.0 gadget.3: failed to queue disconnect event [ 647.693958][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 647.702576][ T24] usb 3-1: media controller created [ 647.773965][ T5832] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 647.812359][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 647.852239][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 647.861516][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 647.933140][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input18 [ 647.965052][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 647.965066][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 648.011207][ T5832] usb 4-1: device not accepting address 52, error -71 [ 648.141744][ T47] dvb-usb: bulk message failed: -22 (1/0) [ 648.204103][T12428] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1703'. [ 648.304244][T10555] usb 3-1: USB disconnect, device number 43 [ 648.311343][ T47] dvb-usb: error while querying for an remote control event. [ 648.457115][T10555] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 649.351226][ T29] audit: type=1800 audit(2000000329.000:776): pid=12440 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1707" name="bus" dev="overlay" ino=1929 res=0 errno=0 [ 650.253834][T10555] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 650.264026][T12455] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1712'. [ 650.561091][T10555] usb 3-1: Using ep0 maxpacket: 8 [ 650.569817][T10555] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 650.579869][T12459] netlink: 'syz.5.1709': attribute type 2 has an invalid length. [ 650.601222][T10555] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.604167][T12459] !: entered promiscuous mode [ 650.625752][T12459] netlink: 'syz.5.1709': attribute type 2 has an invalid length. [ 650.633629][T12459] !: left promiscuous mode [ 650.651579][T10555] usb 3-1: Product: syz [ 650.657523][T10555] usb 3-1: Manufacturer: syz [ 650.671204][T10555] usb 3-1: SerialNumber: syz [ 650.684660][T10555] usb 3-1: config 0 descriptor?? [ 650.926761][T10555] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 651.077418][T12466] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1714'. [ 651.541461][T10555] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 652.137075][T12482] tipc: Enabling of bearer rejected, already enabled [ 652.436786][ T29] audit: type=1800 audit(2000000332.260:777): pid=12487 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.1719" name="bus" dev="overlay" ino=1759 res=0 errno=0 [ 652.824179][ T5832] usb 3-1: USB disconnect, device number 44 [ 653.221083][T10555] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 653.382885][T10555] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 653.397477][T10555] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 653.408843][T10555] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 653.444405][T10555] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 653.510589][T10555] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 653.564447][T10555] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.625896][T10555] usb 6-1: config 0 descriptor?? [ 654.112855][T10555] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 655.039394][T12514] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1724'. [ 655.627322][T12524] netlink: 'syz.0.1727': attribute type 2 has an invalid length. [ 655.640214][T12524] !: entered promiscuous mode [ 655.652366][T12524] netlink: 'syz.0.1727': attribute type 2 has an invalid length. [ 655.660280][T12524] !: left promiscuous mode [ 655.861274][ T47] usb 6-1: USB disconnect, device number 32 [ 656.953656][ T24] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 657.116542][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 657.128068][ T24] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 657.137958][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.159935][ T24] usb 5-1: Product: syz [ 657.165941][ T24] usb 5-1: Manufacturer: syz [ 657.171437][ T24] usb 5-1: SerialNumber: syz [ 657.186979][ T24] usb 5-1: config 0 descriptor?? [ 657.357792][T12550] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1737'. [ 657.404132][T10555] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 657.407658][ T24] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 657.783974][T10555] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 657.798457][T10555] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 657.816321][T10555] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 657.836517][T10555] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.081233][ T24] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 658.185561][T10555] usb 1-1: Product: syz [ 658.189757][T10555] usb 1-1: Manufacturer: syz [ 658.316911][T10555] usb 1-1: SerialNumber: syz [ 658.363175][T10555] usb 1-1: config 0 descriptor?? [ 658.575299][ T24] usb 1-1: USB disconnect, device number 45 [ 658.786593][T12568] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1740'. [ 659.189573][ T24] usb 5-1: USB disconnect, device number 33 [ 659.748431][T12581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1742'. [ 660.145077][ T35] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 660.769677][T12600] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1749'. [ 662.191804][ T5832] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 662.504707][ T5832] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 662.515852][ T5832] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 662.527686][ T5832] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 662.536892][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.546141][ T5832] usb 1-1: Product: syz [ 662.550817][ T5832] usb 1-1: Manufacturer: syz [ 662.555558][ T24] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 662.563912][ T5832] usb 1-1: SerialNumber: syz [ 662.695463][ T5832] usb 1-1: config 0 descriptor?? [ 662.725410][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.740865][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 662.763565][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 662.791185][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 662.815089][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.930572][ T47] usb 1-1: USB disconnect, device number 46 [ 662.957182][ T24] usb 4-1: config 0 descriptor?? [ 664.188287][ T24] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 665.327045][ T5832] usb 4-1: USB disconnect, device number 54 [ 665.494268][T12639] netlink: 'syz.4.1764': attribute type 72 has an invalid length. [ 665.507494][T12639] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1764'. [ 665.776299][T12645] fuse: Bad value for 'rootmode' [ 665.791523][ T5832] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 665.952813][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.977892][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 665.997795][ T5832] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 666.021188][ T10] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 666.029878][ T5832] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 666.063594][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.081638][ T5832] usb 4-1: config 0 descriptor?? [ 666.181345][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 666.189739][ T10] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 666.198898][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.221108][ T5885] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 666.234148][ T10] usb 3-1: Product: syz [ 666.237865][T12650] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1762'. [ 666.249465][ T10] usb 3-1: Manufacturer: syz [ 666.256957][ T10] usb 3-1: SerialNumber: syz [ 666.267736][ T10] usb 3-1: config 0 descriptor?? [ 666.290657][ T10] gspca_main: se401-2.14.0 probing 047d:5003 [ 666.382681][ T5885] usb 6-1: Using ep0 maxpacket: 32 [ 666.393930][ T5885] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 666.411260][ T5885] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 666.434973][ T5885] usb 6-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64 [ 666.460764][ T5885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.584115][ T5885] usb 6-1: config 0 descriptor?? [ 666.700149][ T5832] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 666.819329][T12656] batadv_slave_0: entered promiscuous mode [ 667.158144][T12647] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 667.249628][ T5832] usb 6-1: USB disconnect, device number 33 [ 667.471774][ T10] usb 3-1: reset high-speed USB device number 45 using dummy_hcd [ 667.631270][ T10] usb 3-1: device descriptor read/64, error -32 [ 667.757835][T12660] dummy0: entered promiscuous mode [ 667.769198][T12660] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 667.782400][T12660] debugfs: 'hsr1' already exists in 'hsr' [ 667.788262][T12660] Cannot create hsr debugfs directory [ 667.794518][T12660] hsr1: entered allmulticast mode [ 667.799598][T12660] dummy0: entered allmulticast mode [ 667.805034][T12660] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 668.041731][T12663] netlink: 'syz.5.1769': attribute type 2 has an invalid length. [ 668.071092][ T10] usb 3-1: reset high-speed USB device number 45 using dummy_hcd [ 668.095363][T12664] netlink: 'syz.5.1769': attribute type 2 has an invalid length. [ 668.122685][T12663] !: entered promiscuous mode [ 668.129663][T12664] !: left promiscuous mode [ 668.221279][ T10] usb 3-1: device descriptor read/64, error -32 [ 668.378879][T12671] tipc: Enabling of bearer rejected, already enabled [ 669.201083][ T10] usb 3-1: reset high-speed USB device number 45 using dummy_hcd [ 669.259795][T12668] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 669.316029][ T5885] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 669.337672][T10555] usb 4-1: USB disconnect, device number 55 [ 669.352748][ T10] usb 3-1: device descriptor read/8, error -32 [ 669.532506][ T5885] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 669.585052][ T5885] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 669.610989][ T5885] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 669.621053][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.636033][ T5885] usb 1-1: Product: syz [ 669.641197][ T10] usb 3-1: reset high-speed USB device number 45 using dummy_hcd [ 669.651163][ T5885] usb 1-1: Manufacturer: syz [ 669.659060][ T5885] usb 1-1: SerialNumber: syz [ 669.670975][ T5885] usb 1-1: config 0 descriptor?? [ 669.682537][ T10] usb 3-1: device descriptor read/8, error -32 [ 669.801368][ T10] raw-gadget.1 gadget.2: failed to queue suspend event [ 669.808679][ T10] gspca_se401: read req failed req 0x06 error -19 [ 669.849995][ T10] usb 3-1: USB disconnect, device number 45 [ 669.869983][ T10] raw-gadget.1 gadget.2: failed to queue reset event [ 669.885123][T10555] usb 1-1: USB disconnect, device number 47 [ 669.961105][ T10] raw-gadget.1 gadget.2: failed to queue resume event [ 670.001068][ T5885] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 670.031140][ T10] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 670.039612][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 670.046911][ T10] raw-gadget.1 gadget.2: failed to queue reset event [ 670.131885][ T10] raw-gadget.1 gadget.2: failed to queue resume event [ 670.162637][ T5885] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 670.176966][ T5885] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 670.191122][ T10] usb 3-1: device descriptor read/64, error -32 [ 670.208406][ T5885] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 670.237643][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.265288][ T5885] usb 4-1: config 0 descriptor?? [ 670.311424][ T10] raw-gadget.1 gadget.2: failed to queue suspend event [ 670.321334][ T10] raw-gadget.1 gadget.2: failed to queue reset event [ 670.404820][T12643] raw-gadget.1 gadget.2: failed to queue disconnect event [ 670.528177][T12693] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1779'. [ 670.562849][T12694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.571420][T12694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.312599][T12705] random: crng reseeded on system resumption [ 671.367980][T12706] netlink: 'syz.2.1780': attribute type 2 has an invalid length. [ 671.398149][T12706] !: entered promiscuous mode [ 671.433860][T12706] netlink: 'syz.2.1780': attribute type 2 has an invalid length. [ 671.446247][T12706] !: left promiscuous mode [ 672.141063][ T10] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 673.067075][T10555] usb 4-1: USB disconnect, device number 56 [ 673.073873][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 673.102394][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 673.122111][ T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 673.299459][ T10] usb 1-1: string descriptor 0 read error: -22 [ 673.308443][ T10] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 673.591103][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.617503][T12709] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 673.635955][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 673.661302][ T10] usb 1-1: MIDIStreaming interface descriptor not found [ 673.855378][ T5832] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 673.881187][ T24] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 673.920699][ T10] usb 1-1: USB disconnect, device number 48 [ 674.013066][ T5832] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.023528][ T5832] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 674.034352][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.044698][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 674.054319][ T24] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 674.065688][ T5832] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 674.083046][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.105936][ T5832] usb 5-1: Product: syz [ 674.110103][ T5832] usb 5-1: Manufacturer: syz [ 674.123960][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.141354][ T5832] usb 5-1: SerialNumber: syz [ 674.153445][ T24] usb 3-1: config 0 descriptor?? [ 674.165901][ T5832] usb 5-1: config 0 descriptor?? [ 675.016873][ T5832] usb 5-1: USB disconnect, device number 34 [ 676.356246][T12758] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1793'. [ 676.581203][ T10] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 676.794343][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 676.896649][ T10] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 676.921183][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.935138][ T10] usb 6-1: config 0 descriptor?? [ 676.954527][ T5885] usb 3-1: USB disconnect, device number 48 [ 677.021893][T10555] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 677.194544][ T10] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 677.211701][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 677.222465][T10555] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 677.234387][T10555] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 677.243766][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 677.255084][ T10] usb 6-1: media controller created [ 677.269458][T10555] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 677.320205][T10555] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.346087][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 677.354456][T10555] usb 1-1: Product: syz [ 677.366204][T10555] usb 1-1: Manufacturer: syz [ 677.378555][T10555] usb 1-1: SerialNumber: syz [ 677.398864][T10555] usb 1-1: config 0 descriptor?? [ 677.488884][ T10] DVB: Unable to find symbol dib7000p_attach() [ 677.508777][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 677.601092][ T10] rc_core: IR keymap rc-dib0700-rc5 not found [ 677.615225][ T10] Registered IR keymap rc-empty [ 677.623873][T12762] ------------[ cut here ]------------ [ 677.629448][T12762] usb 6-1: BOGUS control dir, pipe 80002280 doesn't match bRequestType c0 [ 677.637944][T12762] WARNING: drivers/usb/core/urb.c:411 at usb_submit_urb+0x1573/0x1910, CPU#0: syz.0.1795/12762 [ 677.648344][T12762] Modules linked in: [ 677.652461][T12762] CPU: 0 UID: 0 PID: 12762 Comm: syz.0.1795 Tainted: G L syzkaller #0 PREEMPT(full) [ 677.663510][T12762] Tainted: [L]=SOFTLOCKUP [ 677.667832][T12762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 677.678647][T12762] RIP: 0010:usb_submit_urb+0x157e/0x1910 [ 677.684432][T12762] Code: d2 74 5d 48 89 54 24 40 e8 df d4 b7 fa 4c 89 ef e8 17 ac de fe 48 89 c6 48 8d 3d fd 62 95 09 48 8b 54 24 40 45 89 f8 44 89 f1 <67> 48 0f b9 3a e9 c7 ed ff ff e8 b3 d4 b7 fa 89 ee bf ff 00 00 00 [ 677.704255][T12762] RSP: 0018:ffffc9001078f968 EFLAGS: 00010287 [ 677.710306][T12762] RAX: ffffffff8c80dae0 RBX: ffff888029ea1600 RCX: 0000000080002280 [ 677.718513][T12762] RDX: ffff888021ae5d00 RSI: ffffffff8c80dae0 RDI: ffffffff90e64970 [ 677.726618][T12762] RBP: ffff8880288af058 R08: 00000000000000c0 R09: 0000000000000000 [ 677.734934][T12762] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88807af1c960 [ 677.742931][T12762] R13: ffff8880288af0b0 R14: 0000000080002280 R15: 00000000000000c0 [ 677.750889][T12762] FS: 00007f7764c346c0(0000) GS:ffff888124342000(0000) knlGS:0000000000000000 [ 677.759837][T12762] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 677.766420][T12762] CR2: 000000110c3dccda CR3: 0000000079e8b000 CR4: 00000000003526f0 [ 677.774407][T12762] Call Trace: [ 677.777665][T12762] [ 677.780574][T12762] ? __init_swait_queue_head+0xca/0x150 [ 677.786145][T12762] usb_start_wait_urb+0x10e/0x580 [ 677.791205][T12762] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 677.796736][T12762] ? __asan_memset+0x23/0x50 [ 677.801487][T12762] usb_control_msg+0x328/0x4b0 [ 677.806236][T12762] ? __pfx_usb_control_msg+0x10/0x10 [ 677.811872][T12762] dib0700_ctrl_rd+0x1b5/0x320 [ 677.816628][T12762] dib0700_i2c_xfer+0x460/0xd90 [ 677.821550][T12762] __i2c_transfer+0x5d9/0x17f0 [ 677.826305][T12762] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 677.832119][T12762] ? __pfx___i2c_transfer+0x10/0x10 [ 677.837311][T12762] ? rt_mutex_slowtrylock+0x93/0x100 [ 677.842599][T12762] i2c_transfer+0x15f/0x380 [ 677.847085][T12762] i2cdev_ioctl_rdwr+0x3ec/0x700 [ 677.852031][T12762] i2cdev_ioctl+0x19d/0x830 [ 677.856519][T12762] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 677.861555][T12762] ? selinux_file_ioctl+0x139/0x290 [ 677.866738][T12762] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 677.871765][T12762] __x64_sys_ioctl+0x18e/0x210 [ 677.876516][T12762] do_syscall_64+0x106/0xf80 [ 677.881120][T12762] ? clear_bhb_loop+0x40/0x90 [ 677.885783][T12762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.891842][T12762] RIP: 0033:0x7f7763d9c799 [ 677.896246][T12762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 677.916098][T12762] RSP: 002b:00007f7764c34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 677.924645][T12762] RAX: ffffffffffffffda RBX: 00007f7764015fa0 RCX: 00007f7763d9c799 [ 677.932612][T12762] RDX: 0000200000000140 RSI: 0000000000000707 RDI: 0000000000000004 [ 677.940572][T12762] RBP: 00007f7763e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 677.948582][T12762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 677.956583][T12762] R13: 00007f7764016038 R14: 00007f7764015fa0 R15: 00007ffda542ab18 [ 677.964564][T12762] [ 677.967562][T12762] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 677.974818][T12762] CPU: 0 UID: 0 PID: 12762 Comm: syz.0.1795 Tainted: G L syzkaller #0 PREEMPT(full) [ 677.985734][T12762] Tainted: [L]=SOFTLOCKUP [ 677.990039][T12762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 678.000065][T12762] Call Trace: [ 678.003324][T12762] [ 678.006245][T12762] dump_stack_lvl+0x100/0x190 [ 678.010916][T12762] vpanic+0x552/0x970 [ 678.014900][T12762] ? __pfx_vpanic+0x10/0x10 [ 678.019391][T12762] panic+0xd1/0xe0 [ 678.023087][T12762] ? __pfx_panic+0x10/0x10 [ 678.027481][T12762] check_panic_on_warn.cold+0x19/0x34 [ 678.032828][T12762] ? usb_submit_urb+0x1573/0x1910 [ 678.037824][T12762] __warn.cold+0x191/0x348 [ 678.042214][T12762] __report_bug+0x296/0x3d0 [ 678.046690][T12762] ? usb_submit_urb+0x1573/0x1910 [ 678.051692][T12762] ? __pfx___report_bug+0x10/0x10 [ 678.056703][T12762] ? mark_held_locks+0x40/0x70 [ 678.061463][T12762] ? stack_depot_save_flags+0x479/0x9d0 [ 678.067015][T12762] report_bug_entry+0xe1/0x290 [ 678.071762][T12762] ? usb_submit_urb+0x157e/0x1910 [ 678.076767][T12762] handle_bug+0x1cd/0x2a0 [ 678.081083][T12762] exc_invalid_op+0x17/0x50 [ 678.085572][T12762] asm_exc_invalid_op+0x1a/0x20 [ 678.090402][T12762] RIP: 0010:usb_submit_urb+0x157e/0x1910 [ 678.096016][T12762] Code: d2 74 5d 48 89 54 24 40 e8 df d4 b7 fa 4c 89 ef e8 17 ac de fe 48 89 c6 48 8d 3d fd 62 95 09 48 8b 54 24 40 45 89 f8 44 89 f1 <67> 48 0f b9 3a e9 c7 ed ff ff e8 b3 d4 b7 fa 89 ee bf ff 00 00 00 [ 678.115604][T12762] RSP: 0018:ffffc9001078f968 EFLAGS: 00010287 [ 678.121652][T12762] RAX: ffffffff8c80dae0 RBX: ffff888029ea1600 RCX: 0000000080002280 [ 678.129602][T12762] RDX: ffff888021ae5d00 RSI: ffffffff8c80dae0 RDI: ffffffff90e64970 [ 678.137552][T12762] RBP: ffff8880288af058 R08: 00000000000000c0 R09: 0000000000000000 [ 678.145501][T12762] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88807af1c960 [ 678.153451][T12762] R13: ffff8880288af0b0 R14: 0000000080002280 R15: 00000000000000c0 [ 678.161415][T12762] ? usb_submit_urb+0x1569/0x1910 [ 678.166425][T12762] ? __init_swait_queue_head+0xca/0x150 [ 678.171957][T12762] usb_start_wait_urb+0x10e/0x580 [ 678.176965][T12762] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 678.182504][T12762] ? __asan_memset+0x23/0x50 [ 678.187082][T12762] usb_control_msg+0x328/0x4b0 [ 678.191828][T12762] ? __pfx_usb_control_msg+0x10/0x10 [ 678.197100][T12762] dib0700_ctrl_rd+0x1b5/0x320 [ 678.201854][T12762] dib0700_i2c_xfer+0x460/0xd90 [ 678.206695][T12762] __i2c_transfer+0x5d9/0x17f0 [ 678.211453][T12762] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 678.217254][T12762] ? __pfx___i2c_transfer+0x10/0x10 [ 678.222443][T12762] ? rt_mutex_slowtrylock+0x93/0x100 [ 678.227720][T12762] i2c_transfer+0x15f/0x380 [ 678.232212][T12762] i2cdev_ioctl_rdwr+0x3ec/0x700 [ 678.237140][T12762] i2cdev_ioctl+0x19d/0x830 [ 678.241629][T12762] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 678.246638][T12762] ? selinux_file_ioctl+0x139/0x290 [ 678.251823][T12762] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 678.256832][T12762] __x64_sys_ioctl+0x18e/0x210 [ 678.261584][T12762] do_syscall_64+0x106/0xf80 [ 678.266158][T12762] ? clear_bhb_loop+0x40/0x90 [ 678.270819][T12762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.276692][T12762] RIP: 0033:0x7f7763d9c799 [ 678.281090][T12762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.300676][T12762] RSP: 002b:00007f7764c34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 678.309071][T12762] RAX: ffffffffffffffda RBX: 00007f7764015fa0 RCX: 00007f7763d9c799 [ 678.317023][T12762] RDX: 0000200000000140 RSI: 0000000000000707 RDI: 0000000000000004 [ 678.324974][T12762] RBP: 00007f7763e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 678.332940][T12762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 678.340889][T12762] R13: 00007f7764016038 R14: 00007f7764015fa0 R15: 00007ffda542ab18 [ 678.348851][T12762] [ 678.352066][T12762] Kernel Offset: disabled [ 678.356364][T12762] Rebooting in 86400 seconds..