last executing test programs: 1m56.157264271s ago: executing program 2 (id=1372): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x1c9800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0xe, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, &(0x7f0000002400)=ANY=[], 0x3d}) r9 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000088000000000000001000000000000000420000c744240233d8cecbc7442406000000000f011c24660f3881", @ANYRES8=r8], 0xa0}) ioctl$KVM_SET_NESTED_STATE(r9, 0x4080aebf, &(0x7f0000000280)={{0x1, 0x0, 0xffffffffffffff36, {0xdddd1000, 0x5000}}, "62f555e0f9c836012c959487e9bafeb15cd459417d251d183362d146a5da275fa7c56e36b8c00cef93e8c26aa3746b883077791cbe55f78b96385e58790dd65124a4dcba480eb9743ad8475f0b30f5b9416ca2edc503e89e3945b9d5d584c4df4c96ea383d0b551dfc6b747010953240f12f85a79fe0e371a9ab0b2ab1ba3e8f37a3385dc9068a628ce6a05183bfd67d45bed9bc3ef1f275746b8709c5c239c2cb101ddbe79b4d3fbba5e6d12c03df76c97488a62d484e587dbc864c37c59eec5adf0ad0e353e39c5d44e5f47e68de2add4a385cc934ed1fa08515f94481fac14eb4de2f788e9a5b66c5db80c6d4c0e4618f96f1d39fced38274c741fb07503cae134c348be7c8860eb3f8eeab8caad6fa9f13f4c7319f0870ef5688d9ed7681871592c434a3e7e5e635314bfe433a70f580a63e670107ef600f0f4825b9fca1b3d182248f0fef5d1c1ed9dbc73ec60bf12ce7af6c1e7d45204601cbfa843b993fcad8644955b7ca9e2b5ca81f49a7b8eb9ff5ecb069ec4c69ae21fa57c464d10a3b2473809563b8dcc22644a0c09b2f4872707fd8bd4d56c2a31f6cb187089e9da60a5c1945337ab749213ff681e940e8d9388ea943d0c29b2c48e281b6aed6fe5f7276390321b330442616da11a79adcee0d31bdf1381fc0d23e4a5cb84329df1957abecf66840f9464cdfb2f46e36ef2c6db74a429cbb70590cf9b9e16a7b11d5f254b41567a29b3f77b28cdb3ed5a4073b143c7c3b2b060e13f7035c029a19162d72b1a5e7ea04bfca6150bd8baf9b8e41cfe9bad45b8596649a0b878c19092dba346bb9e9e069d5bbacf3d3b0e66977b14dffd0a82a233a6371545b672800470de178a220a9dbb4cdeb86f936986e980c5589676dea2d7071018347a94e7e5ad6aeadbd597f352b18c46fc34c94498357e3c97721f9f03b1ba0527712bfd3242cb98d9232882e09022b9da6404a0a3f94cf6002e36cbf701ef7c4bb6135d7d3127699fe61cc2d0f9c5877b3f7a005830711571d74ca5e3c6fd8d118a0df3e154bd6374754c5066124c209323589e7b9d6969ddf6bdcab805012a1ebb639460d08555398815761562a38fd995734ef997b1f9c036de55f228baf772ac899b4aed71e681f189870eb03915fe187e0e55272f6a69ec5876f1ab90fe34b7eda6379bdb95e83153a2160162a6fcb6beda89f1f8dd33a8c6c543117b6b4440f5ffab5ab3c34c756b7dd1c280efdfe3261c7133cd41217ab9198313da6d8fc7bbdae005c40f9704d531f5ebb7045bdb79ecf25983dafb4acb98e44743d7e6b64ff65cba7e7f2b8d53d18ca16e2de188204ecbbd499d70ad852ce30d4fdb0d8408014e3a3de2517cd82971b193e406b744cd5ccc0c2df864bca7a4e0af41ddb8501db2af788a6bad5518d848010986d48e952af942494859d166825cdd54912d0d32ff115efdbd1592325cdc047938a2c9f137f9bb198235a1d83a938acefac6f56946110b522bdb69e2a853965c11fc5a487c1df9510a03ed86baf365f49a30a67f93cfd5eed0fdebfcebcf96b0351826e06d13108fbfa3f85932d5ad00cda467dc39af4d3a33bdc28abcce3a392f219b46736c9e8b870f35dc5f1132c6b00994b78f586ed7af901b05063938e6464ab164befd046facdccd2e984f9c7f7d2d7c0cc8a5904f79895168f4af168102f52ce771719a6b89ae2f8787c3b6a3e4641824cf99c4c3cf7b4b3079b1b5bf7e671ae1920382d459202faf2091d9d85e9baf2a6ab7a6d7f380580f5931379b76a70ce84330dc000c8b4c58ca825d287ab2c1c0d7f6821b6c60dcc206a516a7c8a5cdb12c3c176f2bf3e199444c48503f4c0037225f535b0f9f0882c2001b05fe64c74d99b7267d3978814da995d0a7e61ff03b9d39817dd656544398f713f917f2cf220cfd29b3e59eb8a401fce9b57ba8bc87b0e2685a07d51a0dcbe655769630e36173fb991d710213b4b367c5bce5a8ccd633f553107d1096449c883730df2e07e9deaec2d8c3f8171ca097276dae33e0f9009a82ec90f07ed3200af689263c07f60eb182d3e8305e947a700a5ac208e4c8323534e6e0f51c015a18a396971a8089688cdaf64e7884de54542f35772a41fae7661319e92e62259ae79635b3d888a173fe92a222cf294c569d092e41c6ad59a2c1bff78d506cc8fa28b03eb0aaf19d7e218402c8e19dbfcf5680143bc0a71bfb6a1e68ebf42d634ad8205f0774195d032e8d5bcfbc36bd737141f8be4e7279ed1231921a8e916995aaaf577c64b51b34ef72c9c7b7ccd6a0765ba5162525ce436bfae6d977c11570066622584599f4817bfbea9fb9ad549146a5403d8b9a29827f5dc4f8dae4cc0849c3d7a93fe148f43d465d246a974137f28cc17185adabb9b49d93c6bfe502dc47576c85c5145e0c211a42809959b1a8dd0bb42d9e1831a55bfbb681aacb0b62b4a9298c5d5f5834d0b0cbe626c17b128cdf53a03bc21fe1c7648a96697d8b078d3a6570289ef0e7ebc5bff6a64cfa65276713532fd54147043e0c3b74282dfb6d1e1c137eae1ecb3d3d39a5ace7e48cb0dc94a2c8cfb12742f5538e141207717505fe8b46a2492f7e3e77990b935df524b07efab69e8404ba0670dc27cb9feebb1cc89fbb36c5bab9123e1d56e75bebe2d31a1a4e259d01b70aef3a9479c38bc72e245ae3e6520a6acb16eabb011551c856957e687cbc53e4d6fb89a83c7f54bc5ca3a4f4d933e0b8ec873d7a288e51d8e1a9f7a96b8e7275ab2ca388be30485bfba4c430b7ba98d37873327f53e6ffc5fcc315325cd530747b1217aa9715a80e4391e510ff8c2d4e696cb8a56f7e7328618ec24933834d87e12ddc8c6b5e0349cdbe81a815a0bea4903872bd762e223eeae89961219f8b7ac866b075797d055ba08d5f5b25e402c9d8164c8a18a29df5c7e0250836e04400142e2eb1ae31fd305773bf3352384e023933cc12e2665b90ba7d28cd4199af329817a5fb212e458b5a645773581272a75c294ff564122cf7d96e8f3d14d9876ab09f9e7a2fe184ac2183b50bdba3be95c9d3c0c854492a1beb59e5020fd1bc28c3b70b081e5bfd82176e0987b58fead13096b7b055afe0a6a50af2277eb646224b0705ced3ce3901306e1eacb4906df54f72d4706f6ea6a3f111d9fa0efb2693ca41fb0394d3fd65e85508af36de513c6f1acbb50f386c5d5e712d8f4a720b8b035247ad6167b837000abeb38237c093e5159873dda350801b3f343f53df555c4856e857b0426579ab60adbdbf3db0a5bd58f01a27224a010fde1b679ccb4ffe7069c117958b57372f444d84507bb0f4dbfa44e03cc0cecc93f7af7143340fa28ccf9d49ade9f396063aa5b7ce397574f28ecde2f58655acaead943cc49f26a0a387ad68136f8f4b13fcdd3d5be006b494564c766ebc926140d45c84bd02e6a3e947e7e2dfc5ce301a66a0974b2f5ffa906cb2ae660370ae010224a81bca39e1521cbe7340445b0d6f44c628ed297f5860685ded2acfa10c1b4aac4439c65768d48a175e43fb25c4c85c05b04c0955f1aaa4fd0c18f6ac540b66bd856b8ac32837e8b3082453e4b8f10375f6b32b2af80240dc602bc340a9e107b42a4204bd6bb0889e46a415ff5c24df7ffbe9eca2dddf7ad64c4eb018624cb0a2fa92ffa23bc7c503972fdf208da2f4ff1af3ba19a96b390f209608a3b8c5f19d7117adf3a222b886b04e300a8c8b25afc52201d8afdb0f8d1377c028de8eafabd75759a44ddbb2f4376ffae20629fe08ba10c768fec6f011c61ab155573b48f5141d9ff02ad2c317eaa86becf9d4f007aebd0b152fe7b55aca593b6678bd4333f220fa61e8124657d3dcab9ecb1258857cba8e61861a921222957d4c346bfe81eb0274843ff7fee27dcebf6bd29fd05687e7e85c213c95426b976e07012ebd5e0592082229a8a5bd1b580678b3c204fe6305465c03ceffa908b8150a99c3e32ae4bd095d75ff180fa02e64c471180fa468caaff9fcee94f8fdb55ab9f06dfed97ee710807d1fca7e6b103c1600b7455fd9d8e42c1146938a02cf8c2c8f0ed074398cff451d0ba2d660885e4fb3c384a52fb8d841d8b7bb2c5463aeb015cbbf54f394875e20f6b3574d65ed39c44f2c6d5b0507ff6196dbcd2b69ba0be1d44565958560c5e9688807a74161f8749b78cd558fde84dc2527b344ab773870e184615ad2ccada1ef750ef8b44cd16cb362faf22ba66f6476d0294d6a22483d78a6855a1bd13f151dc80a358224c86021393bdddb093928863475512a6110acb6ec55039ace9c45792478222155ae2177df549934e202c2865b54132ec8a489c5e6bd0a2d3f27ae107d62f95d131279ee8a0c180e3c61bdee4cf53a7fdf60dfcbb443ee3f2218de76f5e33cf8db2f824c63bf15784d022b121cc69761cc80116774dabb549c1c63f9f99bbe66b4351d8274c73754b7e7475dd8030223c8f830bb77bee7346643f2614601d06a52fae4f53bab4ee047552d9bdd0fa5fd7e4f7674f226f04ab733b7369a62ecfa9a47aed6c350594f9f0a211277a89dbff52abe7638f9d4f37370b784abd7f174b5f3b3a68149935cbb6c88a17c9876c8dd1b501c5f3a424bdfe44b177b1799384c28723b7150a61184d006052f8e14e6e77bf3a9164d596ddb341bebae2f2dbd175af59cce8b121ebfee73fad3eed15d87de5b64abc1758396da2508ee3f20bebd93b6d25b6377989ec5424022a0086699478e6860750e9c926c59bcd0cac3e9dbb1f0b0124c2bd69b535573c9617aab0fec4e3faa69512d9a76aad0df282e9dea80422655d7d001b09fdb53930243d3615df8f0bd598430a23de65f6d882166e84a00306fe079973e5322976a43c72b245358e3ceaa926f60b474f81a482fe2137f06cbd4dbffd476c88a4ab0ad32692719467f5afced5894bc15c3f8d830ebffa8ee431b58a2ad355c2872a0f03ba034dbbf730b74de1aaadc634c08b9fe5402a16a7c79ba3f5a4b318b26d4968143343dfcc79106e606d76e488e0cc6cf76df6c076c766bdd27f2a759339ee2da94e5983c7a0e196deebc51ddf909dca31e2ef491be6f9ded1bf2fb50f5322ba94306fb0c6d67a57f58d7a3d30a4a58322d3f0968b7a44e4017c5caf29e2221f5250a8868ed1525e6fa62d0cc79fbfb92d05921542d84339e33305cfd0624e246f742644638e360051f396eb058c68c5f66f5db3c830cc567b0a2601c2354a7f800d7c815c4744e2fabb00cda287aa74c924ab6afcc92e422ef618bd681bea1a9ec7234e67b9690309be0eab273e67f03e6ae349bcb468251954fdc19edd6fb0c09e4306465f2029d08e137bd7e84716a9e9b29c0fb2e5a55256fd878304baea76c9379265ca36a04e69df2782589c1911b8ae314c017ea5685110880b036aa76c4a19dd240664b6f4098aa2bf51b90678098993ebdb39166194b44f35a81709570398f00f0f8a1e9cd004e02cc1ccb63f56b79268dce0dc70438dda8f2885f4f199922a28f04fdac1b4be1a690cd4fdf0c7ff0252768373496e8e6db9068cd492aaea485ffef09c7351d5555eb3545a1048af936a19c5b08a3d47baed2f8cef2f8ae7443acf81b61fa2d0c1cecfe1881d3b2d8882810a014baff0570a389f5424c8e98f64a35e411bd560c5cb5b9ed3f846cc46b4c537691e13bcc3e55762a427534a7354914dac303c3263b8765f861f453e470c4567ba9cb6c13cf17c24bac9ef1f40d9fa5b0b9b5e9d4c082886b80caebaa44fb38934e7bbf184d28c2bc3ac824d1626fccf542eb3", "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"}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 1m52.550522133s ago: executing program 2 (id=1382): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r7, 0xffffffffffffffff, 0x0) 1m51.060688933s ago: executing program 2 (id=1388): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="40090600f971934a27097158"], 0x0, 0x0, &(0x7f0000000280)={0x20, 0x81, 0x3, "2b0c92"}, &(0x7f00000002c0)={0x20, 0x82, 0x1, "a2"}, &(0x7f0000000080)=ANY=[@ANYBLOB="208302000000ed53997e6500c6b9e82d581bb403c717401cd1436952ee6db951a812b1fb0563eeca7e3e8a5c2a01dd"], &(0x7f0000000340)={0x20, 0x84, 0x4, "1a24cefa"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "1fb9e1"}}) timer_create(0x0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) dup2(r2, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_GET_FPEXC(0x45, 0x0) r6 = socket$inet(0x2, 0x2, 0x1) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000002c0)='veth1_virt_wifi\x00', 0x10) sendmsg$inet(r6, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4000, @broadcast}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)="08001efb3e6f0000", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x0) ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80086303, &(0x7f0000000000)) lseek(0xffffffffffffffff, 0x0, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x50) 1m46.562534538s ago: executing program 2 (id=1402): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) socket$inet(0xa, 0x801, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix_mp={0x8e0, 0xffff8000, 0x3136564e, 0x6, 0x3, [{0x2, 0x6}, {0xc00}, {0x3, 0x5de3}, {0x14, 0x5}, {0x9, 0x40000697}, {0x7, 0x3}, {0x81, 0x5}, {0x1fe, 0x17}], 0x7b, 0x2, 0x8, 0x2, 0x4}}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40008) close_range(r1, 0xffffffffffffffff, 0xb00) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000001c0)={&(0x7f0000000240)={0x50, r6, 0x1, 0x4, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg2\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x0, 0x2, 'vlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x40) 1m45.230966466s ago: executing program 2 (id=1406): ioprio_set$uid(0x3, 0x0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0xa382) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = io_uring_setup(0xdac, &(0x7f0000000180)) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r3, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) 1m44.480742447s ago: executing program 2 (id=1410): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000001c0), 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x26}, 0x1c) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) (async, rerun: 64) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) (async, rerun: 64) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYBLOB, @ANYRESDEC, @ANYBLOB=':max']) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000\x0040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_INVAL_INODE(r4, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x1, 0xfffffffffffffffd}}, 0x28) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES64=r7, @ANYRES32=r8, @ANYRES8=r6], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvfrom$inet(r3, 0x0, 0x0, 0x10000, &(0x7f00000004c0)={0x2, 0x4e24, @broadcast}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r9}, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1800000040000900fffffffffbdbdf25010000007a000000a16b862ac7174b8148792531385f08303d22e2076d47cb29dd2b4cc0db5bd9203fe1be4b4b966450e963a68fb0cacbeea66da0e7891b7a798281df95a14878acc5ce29bb3441d31f3e76ea368d273db1c7811721a9a4c962702b4e77c32f020cfb9011770722f3f87b6e5bc7ae5d1e6c085c80053bda952198726e728e212e880e75dcac43805efebeafb0d02406f48f7b80086fce3c10ee85b6139085549726fa42ed3c3ab9249d163831a978549791561a08b86ae11f7ac82b8b53e2d863d0192e05243ebf79e66e65153b987246c8257f7a09df7398c65bf8ef1c7a8f69a12cb5d85293e1b931750cdd"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0xfffffffffffffffd, 0x0, 0xd, 0x5, 0x401, 0x4, 0x7, 0xfffffffffffffffc, 0x6, 0x0, 0x1ffffffc, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfffffffffffff492, 0x0, 0x0, 0xc, 0x3, 0x100000004}) (async, rerun: 32) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x44d9c2, 0x0) (rerun: 32) 1m43.981597622s ago: executing program 32 (id=1410): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000001c0), 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x26}, 0x1c) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) (async, rerun: 64) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) (async, rerun: 64) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYBLOB, @ANYRESDEC, @ANYBLOB=':max']) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000\x0040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_INVAL_INODE(r4, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x1, 0xfffffffffffffffd}}, 0x28) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES64=r7, @ANYRES32=r8, @ANYRES8=r6], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvfrom$inet(r3, 0x0, 0x0, 0x10000, &(0x7f00000004c0)={0x2, 0x4e24, @broadcast}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r9}, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0xfffffffffffffffd, 0x0, 0xd, 0x5, 0x401, 0x4, 0x7, 0xfffffffffffffffc, 0x6, 0x0, 0x1ffffffc, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfffffffffffff492, 0x0, 0x0, 0xc, 0x3, 0x100000004}) (async, rerun: 32) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x44d9c2, 0x0) (rerun: 32) 18.952729478s ago: executing program 3 (id=1670): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x2100, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 17.29736189s ago: executing program 3 (id=1677): unshare(0x20000400) r0 = socket$l2tp(0x2, 0x2, 0x73) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) fsopen(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f046bbeeb, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, 0x16, 0xa01, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r6}) connect$inet(r0, 0x0, 0x0) 15.889538599s ago: executing program 3 (id=1680): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f000000a800), 0x400, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f000000b2c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r5, 0xc01064c5, &(0x7f000000b340)={&(0x7f000000b300)=[r3, r3, r3, 0x0, r3, r3, r3, r6, r3, r3], 0xa}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001940)) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000380)='/proc.sys/net/p\x9aJ\xdc\xd6\'\xd9ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000100)={0x6, [0xff, 0x8, 0x8, 0x7fff, 0x5, 0x800, 0x7, 0xfffa, 0xfc01, 0x1, 0x2, 0x10, 0x400, 0xa, 0x8, 0x2, 0x7, 0x8, 0x7f, 0x0, 0x4, 0x3, 0x97, 0x457f, 0x2, 0x5, 0x81, 0x1, 0x4, 0x8544, 0xb, 0x5, 0x6, 0x7685, 0x98bd, 0x0, 0x8000, 0x8, 0x5, 0x2, 0x0, 0x5, 0xe9da, 0xf, 0x8, 0x6, 0x0, 0x8], 0x6}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) syz_genetlink_get_family_id$tipc(&(0x7f000000b380), r9) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 14.165683405s ago: executing program 4 (id=1687): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$sndctrl(0x0, 0x402, 0x101300) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) r5 = request_key(0x0, &(0x7f0000000480)={'syz', 0x3}, &(0x7f00000004c0)='[\\%\x00', 0x0) keyctl$dh_compute(0x17, &(0x7f0000000500)={0x0, 0x0, r5}, &(0x7f0000000540)=""/92, 0x5c, 0x0) r6 = socket(0x23, 0x5, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000000)) sendmsg$nl_generic(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x8000080) socket$nl_generic(0x10, 0x3, 0x10) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000000)={0x0, 0xd1, 0x3c}, &(0x7f0000000200)={'enc=', 'oaep', ' hash=', {'sha224-ssse3\x00'}}, &(0x7f0000000380)="e75591c4770e1f1e49e9135124b6742fae550f3b99a4ad790e8692f89e17258e41a5bc32d0ca84896f71ff3719c1c95bc2f85c4fdf72a77ae0bad0c937c6afb5f366fcab8839451681426d7cf5e492ecbfbb1ba775dfe00744d095fa632fca8d8320ef25653c90bab76c5c96ed18e98f02fd1ddf4a2eca842db365bd93fb1840fd3ac8cf8e7a034f7e4d9790d39ee3489a6b20b930e19a92f1bb578e3469910f141b294d625e99f4db68eec5b5a9e6fa5b5a98dc0f2a3c1d72f99de2f01a6153ebd5f9b7165fb07e5121782d95784d83f8", &(0x7f0000000080)=""/60) 13.772812509s ago: executing program 0 (id=1688): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) setrlimit(0x7, &(0x7f0000000000)) landlock_create_ruleset(&(0x7f0000000400)={0x100}, 0x10, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003500), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000003a00)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003ac0)={&(0x7f0000003a40)={0x28, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) chdir(&(0x7f0000000340)='./file0\x00') r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="c811b17500000000"], 0x8) lseek(r5, 0x3, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f0000000380)=""/177, 0xb1, 0x0, &(0x7f0000000140)=""/121, 0x79}}, 0x10) getdents(r5, 0x0, 0x58) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 13.218667797s ago: executing program 3 (id=1689): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', 0xffffffffffffffff, 0x0, 0x401}, 0x18) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e3, &(0x7f0000000180)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x8, r4) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) openat(r5, 0x0, 0x10b840, 0x1b4) r6 = syz_pidfd_open(r4, 0x0) process_mrelease(r6, 0x700000000000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) 13.081812222s ago: executing program 4 (id=1691): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) setfsgid(0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000045c0)={'tunl0\x00', &(0x7f0000004580)=@ethtool_link_settings={0x26, 0x1, 0x1, 0x7f, 0x81, 0x8, 0x0, 0xf, 0xb, 0xe1, [0x674, 0x5, 0x2, 0x2, 0x7fffffff, 0x7, 0x80, 0x3]}}) 11.817496975s ago: executing program 0 (id=1692): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, &(0x7f0000000200)=0x1e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) pwritev2(r4, 0x0, 0x0, 0x5412, 0x7, 0x58) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="7e879feb010018000000", @ANYRES16=r2, @ANYRESHEX=r4, @ANYRES64=r1], 0x0, 0x2d, 0x0, 0x1, 0x8}, 0x28) close(r0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="890fff00120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 11.724852665s ago: executing program 3 (id=1694): ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x14}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r4, &(0x7f0000000040)=[{0x0}], 0x1, 0x2) keyctl$setperm(0x5, r3, 0x8) 11.724196448s ago: executing program 4 (id=1695): bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x5, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/4813], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0xfc4acafd929320dc, 0x10, 0x0, 0xffffffffffffff83}, 0x48) 11.473495433s ago: executing program 4 (id=1696): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_clone3(&(0x7f00000004c0)={0x30012100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x3}, 0x58) prlimit64(r1, 0xe, &(0x7f0000000140)={0xb, 0x200080087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX, @ANYRES32=r1], 0x48) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000", @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYBLOB="f37b5700fc095e3d34ee78a487520551590dedcec993d14ef7d78858996093321e45c6c0", @ANYRES16=r4, @ANYRES16, @ANYRES16], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x260181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1) open_by_handle_at(r6, 0x0, 0x60380) r7 = semget$private(0x0, 0xfffffd, 0x0) close(0xffffffffffffffff) semop(r7, &(0x7f00000002c0)=[{0x3, 0x4, 0x1000}], 0x1) semctl$IPC_RMID(r7, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000240)={@private2, @rand_addr, 0x14}}) 10.210749034s ago: executing program 0 (id=1698): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='i2c_write\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='i2c_write\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xf, 0xb}, {0xd, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000180)={0xb2, @time={0x65757100, 0x1000000}}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000000008010200000000000000000200ffff0600024022eb000005000300ffff00000900010073797a3000000000260004"], 0x58}, 0x1, 0x0, 0x0, 0x20000015}, 0x20008000) ioctl$F2FS_IOC_SET_PIN_FILE(r7, 0x4004f50d, &(0x7f0000000000)=0x1) 10.176595234s ago: executing program 4 (id=1699): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f000000a800), 0x400, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f000000b2c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r5, 0xc01064c5, &(0x7f000000b340)={&(0x7f000000b300)=[r3, r3, r3, 0x0, r3, r3, r3, r6, r3, r3], 0xa}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001940)) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000380)='/proc.sys/net/p\x9aJ\xdc\xd6\'\xd9ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000100)={0x6, [0xff, 0x8, 0x8, 0x7fff, 0x5, 0x800, 0x7, 0xfffa, 0xfc01, 0x1, 0x2, 0x10, 0x400, 0xa, 0x8, 0x2, 0x7, 0x8, 0x7f, 0x0, 0x4, 0x3, 0x97, 0x457f, 0x2, 0x5, 0x81, 0x1, 0x4, 0x8544, 0xb, 0x5, 0x6, 0x7685, 0x98bd, 0x0, 0x8000, 0x8, 0x5, 0x2, 0x0, 0x5, 0xe9da, 0xf, 0x8, 0x6, 0x0, 0x8], 0x6}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) syz_genetlink_get_family_id$tipc(&(0x7f000000b380), r9) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 9.206884174s ago: executing program 1 (id=1701): openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi3\x00', 0x20642, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x7}, 0x18) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x8) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x5885, 0x80, 0x10000000}, &(0x7f0000000340), &(0x7f0000000280)) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r0, r2, 0x0, 0x1, &(0x7f0000000300)='\x00'}, 0x30) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000500)={'syz1\x00', {0x7, 0x1, 0x4, 0x15}, 0x31, [0x0, 0x1, 0x7, 0x2, 0x9, 0x5, 0x0, 0x858, 0x5, 0x9, 0x8, 0xc8c, 0x4, 0x9, 0x3, 0x5, 0x4, 0x3b8, 0xfffffff8, 0x7, 0x8000, 0x82, 0x10001, 0x1, 0xe, 0x8, 0x8, 0x1, 0x0, 0x4b0e880e, 0x80000000, 0xb, 0xbd92, 0x81, 0x7, 0x2, 0xb, 0x3e18b6be, 0x2, 0x7, 0x5b98, 0x1ff, 0x4, 0x6, 0x1, 0x5, 0x7ff, 0xffffff01, 0x8001, 0x8000, 0x6, 0xf8000000, 0x653, 0x729e4a8b, 0x1, 0x8, 0xffffffff, 0x6, 0x8, 0x3, 0xfffffffe, 0xffff43d0, 0x5, 0x400], [0x4, 0x4, 0x70, 0x3, 0xffffffff, 0x6, 0x1, 0x5, 0x454, 0x80, 0x1, 0x6, 0x10000, 0x7, 0x9, 0x9, 0xffffff7f, 0x9, 0x6, 0x3, 0x1, 0x8, 0x42, 0x80000001, 0x1ff, 0x411, 0x201, 0x3, 0x9, 0x8001, 0x8, 0x100, 0x3, 0x3099, 0x374, 0x0, 0x60, 0x7ff, 0x3, 0x8, 0x9, 0xfa, 0x5, 0xce81, 0xd, 0x3af036a7, 0x1, 0x0, 0x7f, 0x10, 0x4f3b7fa9, 0x6, 0x4a8, 0x6, 0x0, 0x0, 0xeb, 0x0, 0x9, 0x7fff, 0xf, 0x1001, 0x401, 0x1], [0x81, 0x6, 0xd, 0x9, 0x1, 0x9, 0xfffff23f, 0x2, 0x401, 0x8, 0x2, 0xa9, 0x622, 0xb, 0x8, 0x3ff, 0xfffffffa, 0x7, 0x8, 0xffff8000, 0x200, 0x1, 0x0, 0x4, 0x3, 0x200, 0x1a40, 0xac22, 0x952, 0xe, 0xffffffff, 0x9, 0x4, 0x81, 0x6, 0xff, 0x4, 0x3, 0x3, 0x6, 0x5, 0x5b04a85a, 0x1, 0x5, 0x9, 0xfffffff7, 0x6, 0x1, 0xfffffffb, 0xffff, 0x8, 0x2, 0x2, 0x800, 0x0, 0x8, 0x3, 0x80000001, 0x7, 0xfffff939, 0x2, 0x2, 0xb3, 0x9], [0x1, 0x2, 0x7ffb, 0x3f1, 0x7, 0x8ba8, 0x40, 0x0, 0xfffffffd, 0xf4, 0x4, 0xdee, 0x5, 0x8000001, 0x1c, 0xa9bf, 0xffff8000, 0x0, 0x8, 0x40, 0xe, 0xfffffffd, 0x10000008, 0x3290, 0x5, 0x1, 0x0, 0x6, 0x7, 0x2, 0x4, 0x7, 0x4, 0x4dc, 0x2, 0xfffffff8, 0x200, 0x72, 0x4, 0xfffffffc, 0x3, 0xb, 0x37f, 0x4, 0x5, 0x2, 0x20, 0xfa91, 0x7, 0x401, 0x5, 0x81, 0x20000000, 0x603, 0x0, 0x2, 0x2, 0xd, 0xa, 0x7, 0x5, 0x627b6092, 0x6, 0x6]}, 0x45c) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) 9.07786138s ago: executing program 5 (id=1702): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000000000800040001200000", 0x24) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x3c, r4, 0x1, 0x70bd2d, 0x0, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x2}, 0x1c) listen(r2, 0x9) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff10f5", 0x14, 0x6, 0xff, @local, @mcast2, {[], {{0xfffd, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) write$uinput_user_dev(r1, &(0x7f0000000a80)={'syz1\x00', {0xfffd, 0x80}, 0x0, [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x1], [0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x185], [0x0, 0x9, 0x4, 0x31, 0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3cc, 0x8, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000003, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xa1f], [0x4, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xfffffffc, 0x20000000, 0x0, 0x0, 0x0, 0x4a9c, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x2ec2, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x1000000000008) 8.196986354s ago: executing program 0 (id=1703): socket$inet_smc(0x2b, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x476c80, 0x0) setxattr$system_posix_acl(&(0x7f0000000340)='./cgroup\x00', &(0x7f0000000380)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'macvlan0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x1, 0x5, 0x1c4b8fec, 0x8, 0x10000, 0xa, 0x7ff, 0x1000207f, 0x3}}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x62, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) r4 = syz_open_dev$vim2m(0x0, 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0x2, &(0x7f0000000140)={0x8, 0x1000000000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x10000, 0x12) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000380)=0xff, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x0) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) 7.985666234s ago: executing program 1 (id=1704): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', 0xffffffffffffffff, 0x0, 0x401}, 0x18) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e3, &(0x7f0000000180)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x8, r4) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) openat(r5, 0x0, 0x10b840, 0x1b4) r6 = syz_pidfd_open(r4, 0x0) process_mrelease(r6, 0x700000000000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) 7.933257778s ago: executing program 5 (id=1705): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000980)='4', 0x1}], 0x1, &(0x7f0000000ec0)=ANY=[], 0x68}}], 0x2, 0xc048801) 7.097964525s ago: executing program 1 (id=1706): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0xfffb}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) 7.045521188s ago: executing program 5 (id=1707): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = socket(0x23, 0x80805, 0x0) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x3, @empty, 0x80, 0x3}, 0x20) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x0) fchdir(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x4, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ppoll(&(0x7f0000000000)=[{r5, 0xd52e7b1acd5c3ded}], 0x1, &(0x7f0000001200)={0x0, 0x989680}, 0x0, 0x0) r6 = timerfd_create(0x7, 0x0) timerfd_gettime(r6, &(0x7f0000000000)) bind$bt_l2cap(r4, 0x0, 0x0) connect$bt_l2cap(r4, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x0, 0x0, &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/tty/ldiscs\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000200)={0x2020}, 0x2020) 6.920590147s ago: executing program 1 (id=1708): ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x3, 0x4, {0x0}, {0xffffffffffffffff}, 0x2, 0x9}) sched_setscheduler(r0, 0x0, &(0x7f0000000180)=0x9) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'nicvf0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES64=r1, @ANYRESHEX=r3, @ANYBLOB="20000800000000001c0012800b00010300616373656300000c00028005000f"], 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 5.12170067s ago: executing program 5 (id=1709): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) ioctl$SG_IO(r0, 0x2285, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2024) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002200), 0xa00, 0x0) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c) r9 = socket$igmp6(0xa, 0x3, 0x2) write$FUSE_LK(r2, &(0x7f0000002240)={0x28, 0x0, r3, {{0x6, 0x7fffffffffffffff, 0x2, r6}}}, 0x28) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r8, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd8}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f0000004480)=[{{&(0x7f0000002280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002600)=[{&(0x7f0000002300)="7b0690c5e643b21433afdb217f", 0xd}, {&(0x7f0000002340)="0295c92280a90c76d05b9dc31db7b432ecf3d612cb32381c19f6ba807dd9b0f771c5f90d0bab9c55d33fd37320f8122cbb8a271728d06823556c36b5f23839ec1d2fa7fb5626cfae98747ad7b9a6979869507e11f98eb5603f01b4c12b43bfebe6ae71cc838ed46a022c1d0a3e18bc69eba58831863e64efd24d828ebde63add55655b09de6b8d55dc5cecd2e1a7fca9e66b9f11d5667dd5fb99b061b3b56e0cfab96a2f94c8fefb7227fcba2de00b3e59800a3a4b", 0xb5}, {&(0x7f0000002400)="cb92753654f184a3b70e8efba116ba326d660cb85849c08cbb0fc6fb5d3975861a732d7fdf18e6f4d10134590a6454dad07b7658e38f28b650e2ef3cba98d7618a52e9b090766ebac5f4a1c5272a196e36e9a0cdfd5efffda4081297e27d6d1f6452446fc89c54c7bba5e730cbcae137e763854f076e9d1d986762c60fa4cbabe7ec6b24646862f52be9edd8f8a739af1269f64ab5ed0870df850b3a146196830be3815d3447e7096628990ddba37d1196cf7c2b3c42ebd5278412dd48ed38b56183b7ad259e3f90fee8fd46bccb", 0xce}, {&(0x7f0000002500)="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", 0xfa}], 0x4, &(0x7f0000002700)=[@cred={{0x1c, 0x1, 0x2, {r6, r4, r5}}}, @rights={{0x2c, 0x1, 0x1, [r0, r9, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r9, 0xffffffffffffffff, r7]}}, @cred={{0x1c, 0x1, 0x2, {r10, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r10, r4, r5}}}, @rights={{0x2c, 0x1, 0x1, [r8, r1, r0, r9, r11, r11, 0xffffffffffffffff]}}], 0xe0, 0x24000000}}, {{&(0x7f0000002800)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002d40)=[{&(0x7f0000002880)="017bc80be80595b76180bf764d53a68ceb835bf7", 0x14}, {&(0x7f00000028c0)="e7c186c7c5b357f497b3ecdc", 0xc}, {&(0x7f0000002900)="50d78959bf5867f57702531061df7988e02d7929c155bee4da5a6911a34eaa8f828097091b46a0a77e8d2ca0cd2bfcca15cec14b7d6ab1123437b2faffd90a2e147afcd0b492157defbf426d0ebd38561bb74129e0e5d7f3527553db281cd4f63ec7cb4c985dfd52d41d6a8ca6ae4b7153309fcef43857446620bd7ed9", 0x7d}, {&(0x7f0000002980)="f61644c88d025db5fc021212b601404002a69f40da9d40234980b1070a6205f5fc85548bb56cf18f8cfaa6c3053ae6f093aafd0f4d349cc453a1f5ff3b529fc6a7a435183c9fc58a4421ca2a8daf453cf0d752f73c278cd0f3a5297efed78364c1d7dcb8dddf6f2708f49e55969514ac4c33522b1cca46c321550f295fb0a9420b01e61b4f0cf556bc139d7de0f6df6bb2646093564bc74c13dbdec4465e6700b305f99b91808d32868917d2f711730a099c96b6621b1d2cea9a737d4b262c64c41cabb544fd2fcfe4efc6a47edeba6467e2c3999a17f37cd786bd7866e48ef53827d9af87fe8e86e360a568c5f047e8", 0xf0}, {&(0x7f0000002a80)="a14588db50a3e72814ef584d840c2b8c45db31eca329ddad5d371e4695f00129c8f906aca2fad8dfae35047d042b4708a3316aa05386c346e4f30dbc4413224d3d5fb98e062c085d51c4172490cb69ce5eed0d3a94b7069c39158d389d834e9cf7d9828867bb4cf5293ff438b5a8c3c8a018cd2e8edfc34169740f77c56fd37308c16aef5d34be4ebeb7cb4fae343d010eaf14a9d6a6e0d873949d34702b333729569217693711a9add0f06b7bcd6080b46190a97e68ab1d47c807da2e00", 0xbe}, {&(0x7f0000002b40)="5055c586478805dfdddf1609c16b1c552cb06ec4b8d51ecf75f5f5394b86a2727af755246697dba2ed755b0a3bf13c82f2010c6a7e2a961e57df6c6f22b1509a0445e269e14d7149b66f7fca687bbddae8e62f5addd088f540eb226352cd7709", 0x60}, {&(0x7f0000002bc0)="20dadcd8ac36414c5a10edd1dd5b0e839b613d45ed6c6d5b99bc6c70e889095ef2c8d99e6e01c804fb0bde6ee59a5c0c6323979403000f8877c06a38c2964452a0b57485", 0x44}, {&(0x7f0000002c40)="7e2eb4c81729fa37378569ce5eab2b80353b5b4804a23d58f0780f90cb4ccc7904744ac45f2874b2fa7c58da8154f89ebce359314d4f434cd9fd779bdf14c53464dc14604b74c91c1d5c8a013b375d162d5c532057bcdcee609d2491291b1f4c6c9c05dc7ed740bf7dcd7ae5de9c74f28c633d1396391f73749019c8fe7d7f1e37003a32a1f27f704e11370415bb99cde10e6f9c8592cdb94d20465defdd7dbfdf20741b4de21b927869f3f81f685a2a798966fe321ff6051219f5514ed31c6d50e77ffe83bb07df5c2810a181568bf0a6b43cd4876bf44e", 0xd8}], 0x8, &(0x7f0000002dc0)=[@rights={{0x20, 0x1, 0x1, [r2, r12, r12, r2]}}, @cred={{0x1c, 0x1, 0x2, {r6, r4, r5}}}, @rights={{0x20, 0x1, 0x1, [r9, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60, 0x2280e346254135f8}}, {{&(0x7f0000002e40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000004280)=[{&(0x7f0000002ec0)="f65184d8a87f2b7b2c95cbd61f1bc06f8a0a7c3f6066fb9e2b9711dc7078e53f42301db18c", 0x25}, {&(0x7f0000002f00)="67c4a0c0a03e22464ec9491a70f23b931bb48f6233725bf88496d98522e1b1e5ac0449af6eef50e7237738b6cb63a4b7e558eee0e56e7c9d38e118c0f1f9d7fd4871343bf483545fcf65c9cbee1420c3c812a69c6d2271feb35d04c3c0eb436fcce7fbe1a57856796d01b80985b93c0d8b3e6985451130203ec982708fc4b7f8d3df1318646da3689a9dd18a80d342ec6f7eb1e663", 0x95}, {&(0x7f0000002fc0)="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", 0x1000}, {&(0x7f0000003fc0)="a0db781c98caf5050eb02fc2cb5b89e02474eab58de90fb15c2902c84f269c6965a7e9b2a9fa0b072678d3f578af25be9039e75088373dfa6c2cc4fa3de98f2679f7ccc243b3c4b0423b12795c781d26171752e5", 0x54}, {&(0x7f0000004040)}, {&(0x7f0000004140)="045eb414aa2b1b84321feeb7ec99039ba60cf09bf01c1172b06d48fd3def7de6504c848baab00e4a0a4b8b8e5841c42932ed3b35726330dcf8589c955b86518bb0945c9dd0aa05f5e325b02a44bed574010b807f36915f5bd179b7836d2cc341be3430959d512b578fc4dc987a5e0e4a9cd6891bb3de0fe692bc21dede53bb716b0697b51e77b76521c5d5130f215e5172d7fc4e252f2699fdef1a32deb00327907ac1208741eb7b3c4eee4cd73a393ac50dbfb66be5db75706d5c6e25b359c8877e0ec55f3931f7a9cf4fe38a8e22c48ec09ca23e99eba581741620681273153a5bbddcee5c3566545b493a33", 0xed}, {&(0x7f0000004240)="17efea1c2fce38ea8c4f3f4658ab9fbaea027ae5abf5d2d6025d87e1e30d3eb3737db7c3a00f429f982fced9cd9f9ff056c0845adddd071d8f91a5", 0x3b}], 0x7, 0x0, 0x0, 0x24000080}}, {{&(0x7f0000004300)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000004440)=[{&(0x7f0000004380)="eaff4d408d54829e5eabacedf5153c465079a5", 0x13}, {&(0x7f00000043c0)}], 0x2, 0x0, 0x0, 0x20000800}}], 0x4, 0x0) recvmmsg(r11, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020004000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r13}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000005000000020000000700020000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r14 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x1000) setsockopt$sock_int(r14, 0x1, 0xb, &(0x7f0000000040)=0x2, 0x4) 4.965598608s ago: executing program 1 (id=1710): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f000000a800), 0x400, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f000000b2c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r3, 0xc01064c5, &(0x7f000000b340)={&(0x7f000000b300)=[r1, r1, r1, 0x0, r1, r1, r1, r4, r1, r1], 0xa}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001940)) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000380)='/proc.sys/net/p\x9aJ\xdc\xd6\'\xd9ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000100)={0x6, [0xff, 0x8, 0x8, 0x7fff, 0x5, 0x800, 0x7, 0xfffa, 0xfc01, 0x1, 0x2, 0x10, 0x400, 0xa, 0x8, 0x2, 0x7, 0x8, 0x7f, 0x0, 0x4, 0x3, 0x97, 0x457f, 0x2, 0x5, 0x81, 0x1, 0x4, 0x8544, 0xb, 0x5, 0x6, 0x7685, 0x98bd, 0x0, 0x8000, 0x8, 0x5, 0x2, 0x0, 0x5, 0xe9da, 0xf, 0x8, 0x6, 0x0, 0x8], 0x6}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) syz_genetlink_get_family_id$tipc(&(0x7f000000b380), r7) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 2.461773788s ago: executing program 5 (id=1711): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x20000000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) epoll_create(0x281) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000640)='asymmetric\x00', &(0x7f00000004c0)) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, r4) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000002a00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x7f, 0xfffffffe}}, 0x120) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000500)="dfa1434f7c88d9058558875d3c5b2d8bfcb162669be95907caaefae569dbdfd596ee5166c13ffbf8cf6ed8fdc62bdadeb4a4c7a4178136107341cdb989e91c482deee66260b9b301880c08445aeb9c3c5c1d0f60b8df6ccba1780293af8f34f15c56d1610f28aebbba8c57a5eca437309fce6ed67366d3edaaf4a62ec44ec8feb49df5c73f25a55b01c41665757a33fe732cabcff1319d6d3b92403898a277d1677670c01bc8f9fe1bae44c57caba0eb495cc2b96957f1a4335d212d30cfdf342c7fbd8355dc15b29207790bb82af66f05e4a72570c9891567ca6ea26ba6dd98ff880f6e1cd9d7", 0xe7}, {&(0x7f0000000680)="1fef362428895a754caecb8211ca3a50eb6d41bb1ed7a8424c07c3677c76f553d01ea40dc315d955801597c80de9d3f722e32bccc636548d68fc13cd44be7a5ee8f2a4a4ba76999b3d1ec899a148ee0edcc8162d395583af5500d2c3fb7cc7e6306122b94419597a6689d058b51a874ccf9d1cd99a2c64911761e181c32aadc9a8116382ded27778aa0d3339101feef0daf309bb284918e98e163360e3dc9bb48f7b6356e69dae0549c7505cf5b4b6654255ce0ab5ca95adb2f883217e9e007354aef098c66bb15bd235777887a29570c875026716686a700e", 0xd9}, {&(0x7f0000000780)="5510e0cfd9f4177a2a4ac222f9a7fc721e6d66b49238273a03c25dd9b3343f2909f3bc2b8e4058067ef8fe2f481121fe418be6c46cb48a192c6b51f5540c8935c6175a2faaaf1a401d1363ceae43dfa28a7ee4e59be78bb06ddc441abdfb28e71a93bfcfe0356034f8a8484f5dca9a83d42d42871b28acaa7d2f7f8ead18631b0016005d26dd72ba0c73a023ba9dcae211a95e3b720faa0bf8496497dec7f7b24b3b898dd9a8af12ed425874c1c8de6b4d2e31df8dc6ed", 0xb7}], 0x3) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000140)) 1.844798631s ago: executing program 3 (id=1712): openat$sysfs(0xffffff9c, &(0x7f0000000200)='/sys/kernel/notes', 0x0, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r4 = accept4(r3, 0x0, 0x0, 0x80000) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}, {{0x0, 0x500, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) 1.801591288s ago: executing program 0 (id=1713): r0 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) keyctl$restrict_keyring(0x1d, r4, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) 1.11139343s ago: executing program 5 (id=1714): prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x20018001) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, 0x0, 0x118) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000001180)=""/4084, 0xff4}], 0x1, 0x304, 0x21000008) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000000)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 739.915327ms ago: executing program 0 (id=1715): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'dt2801\x00', [0x1, 0x7, 0x6, 0x8, 0x5, 0x6, 0xfff, 0x6, 0x4, 0xe, 0x401, 0x8, 0x3a8, 0x8, 0x6bc9c6e3, 0x6, 0x2, 0xe396, 0x6, 0x2, 0x8, 0x3, 0x0, 0x80, 0x4, 0x90, 0x8, 0x1, 0x7, 0x8, 0x9]}) r2 = eventfd(0x1) io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x7, r0, &(0x7f0000000180)="b140f051f9a67dd24a23c04aa1b3615bd779fe1bcec49748f6a885fdd6fbba80f37f3b439767df382c358510e95d08714aeaeb008864c57c77b195552117bd18bd357a46f6030c88acc0361a7d7ff6680d83fa43effcda451d79d40725f31caaeaed6190ece01d3ce04d9f7e5a48a3b76c18c9d0ab2f4847c288bc0addeae50ab680659dbc02e27dd584d1d4d3fb2b25f883c4be34b5546085112833f0021e1cb1f808a29a25f2f7953a26ebd554cf8194700d1f04b5754337abea3b1aec6315adf8a72dbd5e95538633b3", 0xcb, 0x6, 0x0, 0x0, r2}]) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0xe24, 0x4, @mcast2, 0x14}}}, 0x30) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) 380.111215ms ago: executing program 4 (id=1716): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'pcl812\x00', [0x2f00, 0x20, 0xd09a, 0x2, 0x0, 0x1, 0x1, 0x9, 0xffe, 0x1, 0xc, 0x1, 0x4, 0x4, 0xffff, 0x6, 0xffffffa7, 0x40000009, 0x832, 0x30000, 0x3ff, 0x9, 0x800, 0xe2df, 0x2, 0x1, 0x9, 0x3, 0x4, 0x5, 0x70f]}) 0s ago: executing program 1 (id=1717): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', 0xffffffffffffffff, 0x0, 0x401}, 0x18) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e3, &(0x7f0000000180)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x8, r4) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) openat(r5, 0x0, 0x10b840, 0x1b4) r6 = syz_pidfd_open(r4, 0x0) process_mrelease(r6, 0x700000000000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) kernel console output (not intermixed with test programs): .430533][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 208.585744][ T7148] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 209.231714][ T7158] xfrm0: entered allmulticast mode [ 210.947640][ T7185] fuse: Unknown parameter '0x0000000000000005' [ 212.217089][ T7194] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 212.228561][ T7194] overlayfs: missing 'lowerdir' [ 215.105988][ T5898] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 215.166543][ T7237] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 216.179367][ T5898] usb 1-1: config index 0 descriptor too short (expected 64706, got 72) [ 216.190478][ T5898] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 216.200182][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.208525][ T5898] usb 1-1: Product: syz [ 216.212723][ T5898] usb 1-1: Manufacturer: syz [ 216.217787][ T5898] usb 1-1: SerialNumber: syz [ 216.326493][ T5898] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 216.392418][ T981] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 217.576628][ T981] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 217.636048][ T981] ath9k_htc: Failed to initialize the device [ 217.730250][ T981] usb 1-1: ath9k_htc: USB layer deinitialized [ 217.816594][ T9] usb 1-1: USB disconnect, device number 9 [ 219.295374][ T5956] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 219.495755][ T5956] usb 2-1: device descriptor read/64, error -71 [ 220.025389][ T5956] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 221.275322][ T5956] usb 2-1: device descriptor read/64, error -71 [ 221.405861][ T5956] usb usb2-port1: attempt power cycle [ 225.049413][ T7332] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 232.438646][ T30] audit: type=1326 audit(1751803370.405:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7410 comm="syz.1.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0ad8e929 code=0x7ffc0000 [ 232.628350][ T7416] QAT: failed to copy from user cfg_data. [ 233.189362][ T30] audit: type=1326 audit(1751803370.405:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7410 comm="syz.1.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0ad8e929 code=0x7ffc0000 [ 233.210682][ C1] vkms_vblank_simulate: vblank timer overrun [ 233.262763][ T7423] Bluetooth: MGMT ver 1.23 [ 233.312187][ T30] audit: type=1326 audit(1751803370.415:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7410 comm="syz.1.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f9a0ad8e929 code=0x7ffc0000 [ 233.425681][ T30] audit: type=1326 audit(1751803370.415:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7410 comm="syz.1.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0ad8e929 code=0x7ffc0000 [ 233.447020][ C1] vkms_vblank_simulate: vblank timer overrun [ 233.504904][ T30] audit: type=1326 audit(1751803370.415:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7410 comm="syz.1.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0ad8e929 code=0x7ffc0000 [ 233.545010][ T30] audit: type=1326 audit(1751803370.415:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7410 comm="syz.1.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9a0ad8e929 code=0x7ffc0000 [ 233.654475][ T30] audit: type=1326 audit(1751803370.415:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7410 comm="syz.1.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0ad8e929 code=0x7ffc0000 [ 233.736594][ T30] audit: type=1326 audit(1751803370.415:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7410 comm="syz.1.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9a0ad8d290 code=0x7ffc0000 [ 233.909150][ T30] audit: type=1326 audit(1751803370.455:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7410 comm="syz.1.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0ad8e929 code=0x7ffc0000 [ 233.930513][ C1] vkms_vblank_simulate: vblank timer overrun [ 234.604484][ T30] audit: type=1326 audit(1751803370.455:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7410 comm="syz.1.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0ad8e929 code=0x7ffc0000 [ 236.202657][ T7451] netlink: 'syz.2.444': attribute type 9 has an invalid length. [ 236.211317][ T7451] netlink: 20 bytes leftover after parsing attributes in process `syz.2.444'. [ 237.338215][ T7462] binder: BINDER_SET_CONTEXT_MGR already set [ 237.368809][ T7462] binder: 7459:7462 ioctl 4018620d 200000000040 returned -16 [ 237.833336][ T7469] netlink: 20 bytes leftover after parsing attributes in process `syz.0.451'. [ 237.865055][ T7469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.451'. [ 239.586604][ T7492] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 244.509120][ T7563] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 249.053428][ T7630] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.496'. [ 249.063972][ T7630] netlink: zone id is out of range [ 249.069824][ T7630] netlink: get zone limit has 8 unknown bytes [ 249.981223][ T7643] netlink: 'syz.3.501': attribute type 9 has an invalid length. [ 249.989182][ T7643] netlink: 20 bytes leftover after parsing attributes in process `syz.3.501'. [ 252.404116][ T7670] Illegal XDP return value 790286952 on prog (id 110) dev N/A, expect packet loss! [ 252.717466][ T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 252.743353][ T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 252.756231][ T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 252.764555][ T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 252.773606][ T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 252.782283][ T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 252.792671][ T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 252.810467][ T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 252.838876][ T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 252.850739][ T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 252.861294][ T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 252.873466][ T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 252.884187][ T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 252.970349][ T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 252.984148][ T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 253.002652][ T7684] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 253.033816][ T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 253.093938][ T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 253.131058][ T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 253.161187][ T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 253.198273][ T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 253.214773][ T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 253.239369][ T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 253.260813][ T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 253.272350][ T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 253.287395][ T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 253.314449][ T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 253.326927][ T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 253.335466][ T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 253.356102][ T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 253.369337][ T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 253.399689][ T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 253.421109][ T7693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.433679][ T7693] netlink: 24 bytes leftover after parsing attributes in process `syz.0.518'. [ 253.455569][ T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 253.469980][ T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 253.478783][ T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 253.487512][ T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 253.529741][ T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 253.537834][ T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 253.547745][ T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 253.565104][ T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 253.574551][ T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 253.597243][ T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 253.618300][ T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 253.631057][ T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 253.655031][ T43] hid-generic 0000:007F:FFFFFFFE.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 253.875860][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 253.954379][ T7699] fido_id[7699]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 254.068852][ T9] usb 5-1: config 16 interface 0 altsetting 75 endpoint 0x7 has invalid maxpacket 1032, setting to 1024 [ 254.085512][ T9] usb 5-1: config 16 interface 0 altsetting 75 endpoint 0x6 has invalid wMaxPacketSize 0 [ 254.098451][ T9] usb 5-1: config 16 interface 0 has no altsetting 0 [ 254.111566][ T9] usb 5-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 254.141625][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.163117][ T7696] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 254.641464][ T7695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.717134][ T7695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.779186][ T9] usb 5-1: string descriptor 0 read error: -71 [ 254.830734][ T9] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 254.929316][ T9] imon 5-1:16.0: unable to initialize intf0, err -19 [ 254.985514][ T9] imon:imon_probe: failed to initialize context! [ 255.020490][ T9] imon 5-1:16.0: unable to register, err -19 [ 255.143712][ T9] usb 5-1: USB disconnect, device number 6 [ 255.491236][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.196606][ T7727] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 259.052206][ T7741] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 264.582711][ T7783] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 271.152730][ T7841] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.562'. [ 271.162156][ T7841] netlink: zone id is out of range [ 271.167539][ T7841] netlink: get zone limit has 8 unknown bytes [ 274.721909][ T7864] lo speed is unknown, defaulting to 1000 [ 274.753008][ T7864] lo speed is unknown, defaulting to 1000 [ 274.782476][ T7864] lo speed is unknown, defaulting to 1000 [ 275.341801][ T7864] infiniband syz2: set active [ 275.346668][ T7864] infiniband syz2: added lo [ 275.353958][ T7864] syz2: rxe_create_cq: returned err = -12 [ 275.359931][ T7864] infiniband syz2: Couldn't create ib_mad CQ [ 275.366100][ T7864] infiniband syz2: Couldn't open port 1 [ 275.378494][ T24] lo speed is unknown, defaulting to 1000 [ 275.423469][ T7864] RDS/IB: syz2: added [ 275.427878][ T7864] smc: adding ib device syz2 with port count 1 [ 275.434147][ T7864] smc: ib device syz2 port 1 has pnetid SYZ2 (user defined) [ 275.444226][ T7864] lo speed is unknown, defaulting to 1000 [ 275.582287][ T7864] lo speed is unknown, defaulting to 1000 [ 275.718668][ T7864] lo speed is unknown, defaulting to 1000 [ 275.852984][ T7864] lo speed is unknown, defaulting to 1000 [ 275.986243][ T7864] lo speed is unknown, defaulting to 1000 [ 276.192735][ T24] lo speed is unknown, defaulting to 1000 [ 277.571096][ T7884] binder: 7878:7884 ioctl c0306201 200000000640 returned -22 [ 281.730623][ T7926] binder: 7916:7926 ioctl c0306201 200000000640 returned -22 [ 283.558554][ T7944] netlink: 'syz.2.592': attribute type 27 has an invalid length. [ 283.573528][ T7944] netlink: 52 bytes leftover after parsing attributes in process `syz.2.592'. [ 287.800508][ T7984] binder: 7974:7984 ioctl c0306201 200000000640 returned -22 [ 293.534122][ T5840] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 293.695870][ T5840] usb 4-1: Using ep0 maxpacket: 32 [ 293.727088][ T5840] usb 4-1: config 0 interface 0 altsetting 17 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.753826][ T5840] usb 4-1: config 0 interface 0 altsetting 17 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 293.792674][ T5840] usb 4-1: config 0 interface 0 has no altsetting 0 [ 293.810839][ T5840] usb 4-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 293.840748][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.871829][ T5840] usb 4-1: config 0 descriptor?? [ 294.173648][ T8033] binder: 8029:8033 ioctl c0306201 200000000640 returned -22 [ 294.746152][ T5840] usbhid 4-1:0.0: can't add hid device: -71 [ 294.764624][ T5840] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 294.790066][ T5840] usb 4-1: USB disconnect, device number 5 [ 298.645231][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 299.233617][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 299.241324][ T10] usb 3-1: config 0 interface 0 altsetting 17 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.254864][ T10] usb 3-1: config 0 interface 0 altsetting 17 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 299.269846][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 299.304746][ T10] usb 3-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 299.717941][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.789773][ T10] usb 3-1: config 0 descriptor?? [ 300.056946][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 300.345975][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 300.399661][ T10] usb 3-1: USB disconnect, device number 3 [ 300.901242][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 300.946517][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 302.122352][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 302.365405][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 302.384372][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 302.413298][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 302.434161][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 302.451613][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 302.517095][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 302.542505][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 302.564998][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 302.582936][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 302.719975][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 302.727974][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 302.735965][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 302.745663][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 302.753567][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 302.762598][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 302.770819][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 302.778822][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 302.819113][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 302.883654][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 302.899195][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 302.915212][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 303.048888][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 303.068167][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 303.081971][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 303.108380][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 303.169571][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 303.218922][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 303.237588][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 303.271954][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 303.302452][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 303.332841][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 303.396514][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 303.490399][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 303.592652][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 303.696772][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 303.817760][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 303.951345][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 304.100128][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 304.121502][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 304.153991][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 304.245593][ T10] hid-generic 0000:007F:FFFFFFFE.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 304.440970][ T8124] fido_id[8124]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 305.408474][ T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 305.420657][ T24] IPVS: starting estimator thread 0... [ 305.876384][ T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 305.892312][ T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 305.965825][ T8138] IPVS: using max 44 ests per chain, 105600 per kthread [ 305.976922][ T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 305.985262][ T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 305.995237][ T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 306.063712][ T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 306.126491][ T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 306.185330][ T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 306.202875][ T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 306.235291][ T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 306.295381][ T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 306.305047][ T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 306.337529][ T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 306.442863][ T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 306.553222][ T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 306.592667][ T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 306.769324][ T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 307.410507][ T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 307.555947][ T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 307.563725][ T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 307.641268][ T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 307.758641][ T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 307.987096][ T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 307.994885][ T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 308.003117][ T8160] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.651'. [ 308.012429][ T8160] netlink: zone id is out of range [ 308.017578][ T8160] netlink: get zone limit has 8 unknown bytes [ 308.137596][ T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 308.169041][ T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 308.197887][ T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 308.223552][ T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 308.252239][ T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 308.278132][ T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 308.308363][ T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 308.318642][ T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 308.326993][ T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 308.335471][ T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 308.343635][ T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 308.352025][ T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 308.360230][ T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 308.368740][ T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 308.377471][ T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 308.385644][ T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 308.396582][ T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 308.405289][ T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 308.461742][ T981] hid-generic 0000:007F:FFFFFFFE.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 308.875824][ T8166] fido_id[8166]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 310.064816][ T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 310.110085][ T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 310.132980][ T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 310.141903][ T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 310.151696][ T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 310.219093][ T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 310.253644][ T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 310.275476][ T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 310.315445][ T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 310.344163][ T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 310.368824][ T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 310.389510][ T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 310.407637][ T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 310.425303][ T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 310.445235][ T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 310.463677][ T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 310.494008][ T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 310.509269][ T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 310.530562][ T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 310.558626][ T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 310.579353][ T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 310.599834][ T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 310.615396][ T24] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 310.633158][ T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 310.657193][ T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 310.675280][ T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 310.703467][ T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 310.733790][ T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 310.777266][ T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 310.785616][ T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 310.793397][ T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 310.801771][ T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 310.810114][ T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 310.819415][ T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 310.836886][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 310.849960][ T24] usb 3-1: config 0 has no interface number 0 [ 310.856672][ T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 310.866027][ T24] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 311.027485][ T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 311.095889][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.132259][ T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 311.293057][ T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 311.318782][ T24] usb 3-1: config 0 descriptor?? [ 311.345724][ T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 311.368351][ T24] usb 3-1: selecting invalid altsetting 1 [ 311.374842][ T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 311.384488][ T24] dvb_ttusb_budget: ttusb_init_controller: error [ 311.498478][ T24] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 311.508708][ T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 311.519304][ T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 311.541789][ T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 311.556488][ T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 311.671012][ T981] hid-generic 0000:007F:FFFFFFFE.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 312.579476][ T8192] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 312.590993][ T8209] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 313.369465][ T24] DVB: Unable to find symbol cx22700_attach() [ 313.711625][ T8212] fido_id[8212]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 313.796701][ T24] DVB: Unable to find symbol tda10046_attach() [ 313.813816][ T24] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 314.933407][ T24] usb 3-1: USB disconnect, device number 4 [ 315.408800][ T8232] netlink: 79 bytes leftover after parsing attributes in process `syz.0.672'. [ 315.434546][ T8232] netlink: 79 bytes leftover after parsing attributes in process `syz.0.672'. [ 316.930770][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.965256][ T1210] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 317.135700][ T1210] usb 3-1: Using ep0 maxpacket: 8 [ 317.144821][ T1210] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 317.158425][ T1210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.174634][ T1210] pvrusb2: Hardware description: Terratec Grabster AV400 [ 317.184978][ T1210] pvrusb2: ********** [ 317.191900][ T1210] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 317.208982][ T1210] pvrusb2: Important functionality might not be entirely working. [ 317.233011][ T1210] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 317.244733][ T1210] pvrusb2: ********** [ 317.764482][ T2343] pvrusb2: Invalid write control endpoint [ 317.799994][ T8262] netlink: 'syz.3.680': attribute type 39 has an invalid length. [ 317.969570][ T5898] usb 3-1: USB disconnect, device number 5 [ 318.046572][ T2343] pvrusb2: Invalid write control endpoint [ 318.052345][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 318.124736][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 318.140150][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 318.215914][ T2343] pvrusb2: Device being rendered inoperable [ 318.318731][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 318.350444][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 318.519569][ T2343] pvrusb2: Attached sub-driver cx25840 [ 318.526427][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 318.584255][ T8270] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.682'. [ 318.593622][ T8270] netlink: zone id is out of range [ 318.598959][ T8270] netlink: get zone limit has 8 unknown bytes [ 318.737422][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 319.553580][ T8279] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 319.943064][ T8291] netlink: 52 bytes leftover after parsing attributes in process `syz.2.688'. [ 320.861911][ T8304] rdma_rxe: rxe_newlink: failed to add lo [ 321.607653][ T8314] netlink: 48 bytes leftover after parsing attributes in process `syz.1.695'. [ 321.825331][ T5898] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 321.995489][ T5898] usb 1-1: Using ep0 maxpacket: 8 [ 322.018829][ T5898] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 322.033741][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.074728][ T5898] pvrusb2: Hardware description: Terratec Grabster AV400 [ 322.082005][ T5898] pvrusb2: ********** [ 322.093095][ T5898] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 322.103802][ T5898] pvrusb2: Important functionality might not be entirely working. [ 322.121806][ T5898] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 322.133596][ T5898] pvrusb2: ********** [ 322.339422][ T8326] netlink: 'syz.1.699': attribute type 9 has an invalid length. [ 322.347233][ T8326] netlink: 20 bytes leftover after parsing attributes in process `syz.1.699'. [ 322.355329][ T2343] pvrusb2: Invalid write control endpoint [ 322.726657][ T5898] usb 1-1: USB disconnect, device number 10 [ 322.918081][ T2343] pvrusb2: Invalid write control endpoint [ 322.923994][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 322.954934][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 322.989803][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 323.021161][ T2343] pvrusb2: Device being rendered inoperable [ 323.051574][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 323.069698][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 323.078952][ T2343] pvrusb2: Attached sub-driver cx25840 [ 323.084815][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 323.096899][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 323.112492][ T8337] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 323.205418][ T5840] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 323.915081][ T5840] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 323.935622][ T5840] usb 2-1: config 0 has no interface number 0 [ 323.941830][ T5840] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 323.954761][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.037265][ T5840] usb 2-1: config 0 descriptor?? [ 324.079208][ T5840] usb 2-1: selecting invalid altsetting 1 [ 324.088669][ T5840] dvb_ttusb_budget: ttusb_init_controller: error [ 324.096333][ T5840] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 324.468591][ T8361] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 324.477658][ T8362] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 326.999107][ T5840] DVB: Unable to find symbol cx22700_attach() [ 327.514615][ T8375] syz2: rxe_newlink: already configured on lo [ 328.313594][ T8376] netlink: 'syz.4.712': attribute type 9 has an invalid length. [ 328.321538][ T8376] netlink: 20 bytes leftover after parsing attributes in process `syz.4.712'. [ 328.347788][ T5840] DVB: Unable to find symbol tda10046_attach() [ 328.605240][ T5840] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 329.561855][ T5840] usb 2-1: USB disconnect, device number 8 [ 330.619144][ T5840] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 331.355277][ T5840] usb 2-1: Using ep0 maxpacket: 8 [ 331.370649][ T5840] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 331.396416][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.447629][ T5840] pvrusb2: Hardware description: Terratec Grabster AV400 [ 331.454703][ T5840] pvrusb2: ********** [ 331.480556][ T5840] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 331.509316][ T5840] pvrusb2: Important functionality might not be entirely working. [ 331.562821][ T5840] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 331.763654][ T5840] pvrusb2: ********** [ 331.794459][ T2343] pvrusb2: Invalid write control endpoint [ 332.255941][ T5898] usb 2-1: USB disconnect, device number 9 [ 332.368601][ T8422] rdma_rxe: rxe_newlink: failed to add lo [ 332.753683][ T2343] pvrusb2: Invalid write control endpoint [ 332.777358][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 332.795178][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 332.802754][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 332.858758][ T2343] pvrusb2: Device being rendered inoperable [ 332.912763][ T8423] netlink: 44 bytes leftover after parsing attributes in process `syz.0.724'. [ 332.947761][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 333.003686][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 333.021604][ T2343] pvrusb2: Attached sub-driver cx25840 [ 333.056353][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 333.074944][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 333.106926][ T8428] netlink: 'syz.4.725': attribute type 39 has an invalid length. [ 334.804713][ T8439] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.729'. [ 334.815026][ T8439] netlink: zone id is out of range [ 334.820782][ T8439] netlink: get zone limit has 8 unknown bytes [ 335.046335][ T8446] netlink: 'syz.0.728': attribute type 9 has an invalid length. [ 335.054973][ T8446] netlink: 20 bytes leftover after parsing attributes in process `syz.0.728'. [ 336.875591][ T5840] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 337.319357][ T8467] netlink: 'syz.2.737': attribute type 39 has an invalid length. [ 337.492376][ T5840] usb 1-1: Using ep0 maxpacket: 8 [ 337.504983][ T5840] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 337.522955][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.599284][ T5840] pvrusb2: Hardware description: Terratec Grabster AV400 [ 337.624500][ T5840] pvrusb2: ********** [ 337.634411][ T5840] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 337.855342][ T5840] pvrusb2: Important functionality might not be entirely working. [ 337.873653][ T5840] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 337.927616][ T5840] pvrusb2: ********** [ 337.976941][ T2343] pvrusb2: Invalid write control endpoint [ 338.162444][ T43] usb 1-1: USB disconnect, device number 11 [ 338.906980][ T2343] pvrusb2: Invalid write control endpoint [ 338.912756][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 338.996065][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 339.003652][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 339.097417][ T2343] pvrusb2: Device being rendered inoperable [ 339.136792][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 339.143920][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 339.214605][ T2343] pvrusb2: Attached sub-driver cx25840 [ 339.224295][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 339.244869][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 340.178796][ T8498] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 341.143749][ T8520] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 341.226420][ T981] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 341.365328][ T981] usb 5-1: device descriptor read/64, error -71 [ 341.615247][ T981] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 341.776105][ T981] usb 5-1: device descriptor read/64, error -71 [ 341.900387][ T981] usb usb5-port1: attempt power cycle [ 342.364796][ T981] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 342.765860][ T981] usb 5-1: device descriptor read/8, error -71 [ 343.025606][ T981] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 343.046035][ T981] usb 5-1: device descriptor read/8, error -71 [ 343.155477][ T981] usb usb5-port1: unable to enumerate USB device [ 343.289128][ T8543] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 343.508470][ T8552] fuse: Bad value for 'group_id' [ 343.516116][ T8552] fuse: Bad value for 'group_id' [ 344.174020][ T8560] netlink: 48 bytes leftover after parsing attributes in process `syz.4.767'. [ 345.049578][ T8569] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 346.015487][ T8584] ubi: mtd0 is already attached to ubi31 [ 347.214439][ T9] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 347.304522][ T5840] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 347.465505][ T5840] usb 5-1: device descriptor read/64, error -71 [ 347.498025][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 347.508430][ T9] usb 2-1: config 0 has no interface number 0 [ 347.514558][ T9] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 347.625794][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.675615][ T9] usb 2-1: config 0 descriptor?? [ 347.705325][ T5840] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 347.736802][ T9] usb 2-1: selecting invalid altsetting 1 [ 347.742701][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 347.821457][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 347.885916][ T5840] usb 5-1: device descriptor read/64, error -71 [ 347.984008][ T9] DVB: Unable to find symbol cx22700_attach() [ 348.065481][ T5840] usb usb5-port1: attempt power cycle [ 348.234985][ T9] DVB: Unable to find symbol tda10046_attach() [ 348.241287][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 348.261605][ T8615] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 348.264344][ T8617] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 348.420468][ T9] usb 2-1: USB disconnect, device number 10 [ 348.428083][ T5840] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 348.460947][ T5840] usb 5-1: device descriptor read/8, error -71 [ 349.357991][ T5840] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 349.413018][ T5840] usb 5-1: device descriptor read/8, error -71 [ 349.545562][ T5840] usb usb5-port1: unable to enumerate USB device [ 350.051439][ T8634] fuse: Bad value for 'group_id' [ 350.082092][ T8634] fuse: Bad value for 'group_id' [ 350.428434][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 350.428451][ T30] audit: type=1326 audit(1751803488.405:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8638 comm="syz.4.791" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f81c758e929 code=0x0 [ 352.956373][ T8671] netlink: 'syz.0.799': attribute type 27 has an invalid length. [ 361.466776][ T10] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 361.507787][ T8769] netlink: 'syz.1.831': attribute type 39 has an invalid length. [ 361.658255][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 361.674880][ T10] usb 5-1: config 0 has no interface number 0 [ 361.682034][ T10] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 361.692536][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.712719][ T10] usb 5-1: config 0 descriptor?? [ 361.723011][ T10] usb 5-1: selecting invalid altsetting 1 [ 361.729153][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 361.749351][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 363.134131][ T10] DVB: Unable to find symbol cx22700_attach() [ 364.884772][ T8795] netlink: 44 bytes leftover after parsing attributes in process `syz.2.835'. [ 364.905224][ T10] DVB: Unable to find symbol tda10046_attach() [ 364.911392][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 365.285334][ T981] usb 5-1: USB disconnect, device number 15 [ 368.572007][ T8846] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 368.646131][ T8850] netlink: 44 bytes leftover after parsing attributes in process `syz.2.849'. [ 368.741338][ T981] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 368.991474][ T981] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 369.000544][ T981] usb 4-1: config 0 has no interface number 0 [ 369.011818][ T981] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 369.028672][ T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.163643][ T981] usb 4-1: config 0 descriptor?? [ 369.260964][ T981] usb 4-1: selecting invalid altsetting 1 [ 369.286576][ T981] dvb_ttusb_budget: ttusb_init_controller: error [ 369.309692][ T981] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 371.155664][ T981] DVB: Unable to find symbol cx22700_attach() [ 371.554448][ T981] DVB: Unable to find symbol tda10046_attach() [ 371.587437][ T981] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 372.066485][ T8878] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 372.786232][ T24] usb 4-1: USB disconnect, device number 6 [ 372.902191][ T8885] binder: BINDER_SET_CONTEXT_MGR already set [ 372.913000][ T8885] binder: 8884:8885 ioctl 4018620d 200000000040 returned -16 [ 373.293372][ T8894] netlink: 'syz.1.859': attribute type 9 has an invalid length. [ 373.301276][ T8894] netlink: 20 bytes leftover after parsing attributes in process `syz.1.859'. [ 373.817251][ T8903] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 375.086481][ T8917] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 375.120168][ T8917] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 376.304434][ T8933] ubi: mtd0 is already attached to ubi31 [ 376.845287][ T8944] netlink: 'syz.4.874': attribute type 9 has an invalid length. [ 376.853139][ T8944] netlink: 20 bytes leftover after parsing attributes in process `syz.4.874'. [ 377.413293][ T8949] fuse: Bad value for 'fd' [ 377.564432][ T8951] netlink: 'syz.0.876': attribute type 27 has an invalid length. [ 377.583185][ T8953] netlink: 'syz.4.877': attribute type 4 has an invalid length. [ 377.655970][ T8955] netlink: 52 bytes leftover after parsing attributes in process `syz.0.876'. [ 378.167323][ T8966] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 378.369065][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.699494][ T8970] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 380.268038][ T8989] netlink: 'syz.0.887': attribute type 9 has an invalid length. [ 380.280323][ T8989] netlink: 20 bytes leftover after parsing attributes in process `syz.0.887'. [ 381.796933][ T9003] netlink: 'syz.2.892': attribute type 27 has an invalid length. [ 381.806499][ T9003] netlink: 52 bytes leftover after parsing attributes in process `syz.2.892'. [ 383.264146][ T9015] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 385.115834][ T9035] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 385.220747][ T9043] netlink: 'syz.3.904': attribute type 39 has an invalid length. [ 385.636751][ T10] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 385.785150][ T5840] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 386.888413][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 386.905380][ T10] usb 1-1: config 0 has no interface number 0 [ 386.921321][ T10] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 386.985567][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.065996][ T5840] usb 3-1: Using ep0 maxpacket: 32 [ 387.096963][ T10] usb 1-1: config 0 descriptor?? [ 387.205426][ T5840] usb 3-1: no configurations [ 387.315394][ T10] usb 1-1: selecting invalid altsetting 1 [ 387.347825][ T5840] usb 3-1: can't read configurations, error -22 [ 387.409008][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 387.426317][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 387.545684][ T5840] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 387.626944][ T9062] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 387.634310][ T9063] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 387.745419][ T5840] usb 3-1: Using ep0 maxpacket: 32 [ 387.793608][ T5840] usb 3-1: no configurations [ 387.819777][ T5840] usb 3-1: can't read configurations, error -22 [ 387.864954][ T5840] usb usb3-port1: attempt power cycle [ 387.880942][ T10] DVB: Unable to find symbol cx22700_attach() [ 388.020065][ T10] DVB: Unable to find symbol tda10046_attach() [ 388.028525][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 388.215604][ T5840] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 388.246779][ T5840] usb 3-1: Using ep0 maxpacket: 32 [ 388.253851][ T5840] usb 3-1: no configurations [ 388.270686][ T5840] usb 3-1: can't read configurations, error -22 [ 388.523530][ T5840] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 388.884101][ T5840] usb 3-1: device descriptor read/8, error -71 [ 388.997143][ T10] usb 1-1: USB disconnect, device number 12 [ 389.028034][ T5840] usb usb3-port1: unable to enumerate USB device [ 389.375214][ T5840] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 389.845353][ T5840] usb 3-1: Using ep0 maxpacket: 8 [ 390.019613][ T5840] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 390.047587][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.490675][ T5840] pvrusb2: Hardware description: Terratec Grabster AV400 [ 390.633622][ T5840] pvrusb2: ********** [ 390.763156][ T9086] netlink: 'syz.1.918': attribute type 9 has an invalid length. [ 390.771102][ T9086] netlink: 20 bytes leftover after parsing attributes in process `syz.1.918'. [ 390.801866][ T5840] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 391.057759][ T5840] pvrusb2: Important functionality might not be entirely working. [ 391.082646][ T5840] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 391.144640][ T5840] pvrusb2: ********** [ 391.174055][ T2343] pvrusb2: Invalid write control endpoint [ 391.264775][ T9093] pvrusb2: Invalid write control endpoint [ 391.529475][ T5840] usb 3-1: USB disconnect, device number 10 [ 392.248817][ T2343] pvrusb2: Invalid write control endpoint [ 392.265444][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 392.281953][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 392.517587][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 392.540082][ T2343] pvrusb2: Device being rendered inoperable [ 392.684740][ T9102] binder: 9094:9102 ioctl c0306201 200000000640 returned -22 [ 392.914103][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 392.921309][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 392.935020][ T2343] pvrusb2: Attached sub-driver cx25840 [ 392.943882][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 393.085182][ T43] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 393.094918][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 393.276552][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 393.468371][ T43] usb 2-1: config 0 interface 0 altsetting 17 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.522886][ T981] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 393.564119][ T43] usb 2-1: config 0 interface 0 altsetting 17 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 393.747634][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 393.764361][ T43] usb 2-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 393.788470][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.818058][ T43] usb 2-1: config 0 descriptor?? [ 393.887303][ T981] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 393.911192][ T981] usb 5-1: config 0 has no interface number 0 [ 393.948775][ T981] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 393.985273][ T981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.058369][ T981] usb 5-1: config 0 descriptor?? [ 394.068258][ T43] usbhid 2-1:0.0: can't add hid device: -71 [ 394.077573][ T981] usb 5-1: selecting invalid altsetting 1 [ 394.083448][ T981] dvb_ttusb_budget: ttusb_init_controller: error [ 394.095503][ T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 394.112971][ T9120] netlink: 44 bytes leftover after parsing attributes in process `syz.0.928'. [ 394.129673][ T981] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 394.144176][ T43] usb 2-1: USB disconnect, device number 11 [ 394.303901][ T981] DVB: Unable to find symbol cx22700_attach() [ 394.535897][ T9128] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 394.543203][ T9126] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 396.053665][ T9133] syz2: rxe_newlink: already configured on lo [ 396.641250][ T9136] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.931'. [ 396.694647][ T9136] netlink: zone id is out of range [ 396.704484][ T9136] netlink: get zone limit has 8 unknown bytes [ 396.896250][ T9142] netlink: 'syz.1.933': attribute type 9 has an invalid length. [ 396.904070][ T9142] netlink: 20 bytes leftover after parsing attributes in process `syz.1.933'. [ 397.269835][ T981] DVB: Unable to find symbol tda10046_attach() [ 397.328724][ T981] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 397.539862][ T981] usb 5-1: USB disconnect, device number 16 [ 398.917072][ T9160] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 399.525458][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 399.685399][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 399.703172][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 399.819624][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.846708][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 399.864739][ T9] pvrusb2: ********** [ 399.869572][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 399.880016][ T9] pvrusb2: Important functionality might not be entirely working. [ 399.888007][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 400.495366][ T9] pvrusb2: ********** [ 400.619881][ T2343] pvrusb2: Invalid write control endpoint [ 400.804430][ T9157] pvrusb2: Invalid write control endpoint [ 400.828779][ T9] usb 2-1: USB disconnect, device number 12 [ 400.895162][ T9182] syz2: rxe_newlink: already configured on lo [ 401.529694][ T2343] pvrusb2: Invalid write control endpoint [ 401.570512][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 401.612835][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 401.661416][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 401.688600][ T2343] pvrusb2: Device being rendered inoperable [ 401.711298][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 401.719015][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 401.730569][ T2343] pvrusb2: Attached sub-driver cx25840 [ 401.736534][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 401.747094][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 405.448418][ T9216] fuse: Bad value for 'fd' [ 407.136195][ T9213] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 407.175267][ T9213] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 409.108424][ T9254] fuse: Bad value for 'fd' [ 409.252568][ T9252] netlink: 'syz.3.968': attribute type 39 has an invalid length. [ 409.581382][ T9260] rdma_rxe: rxe_newlink: failed to add lo [ 412.693102][ T9286] fuse: Bad value for 'fd' [ 412.765808][ T9288] fuse: Unknown parameter 'grou00000000000000000000' [ 413.905196][ T9278] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 413.927480][ T9301] rdma_rxe: rxe_newlink: failed to add lo [ 413.938423][ T9278] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 418.002534][ T9326] fuse: Bad value for 'fd' [ 425.834515][ T9387] fuse: Bad value for 'fd' [ 428.025162][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 428.225136][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 428.990139][ T9] usb 4-1: config 0 interface 0 altsetting 17 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.015320][ T9] usb 4-1: config 0 interface 0 altsetting 17 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 429.029724][ T9408] netlink: 'syz.0.1016': attribute type 39 has an invalid length. [ 429.045102][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 429.051758][ T9] usb 4-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 429.085234][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.148618][ T9] usb 4-1: config 0 descriptor?? [ 429.197064][ T9] usb 4-1: can't set config #0, error -71 [ 429.373454][ T9] usb 4-1: USB disconnect, device number 7 [ 430.619258][ T5898] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 430.835362][ T5898] usb 2-1: Using ep0 maxpacket: 32 [ 430.910262][ T5898] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.952741][ T5898] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 431.011460][ T5898] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 431.053908][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.324512][ T9433] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 431.337367][ T5898] usb 2-1: config 0 descriptor?? [ 431.941403][ T9] usb 2-1: USB disconnect, device number 13 [ 433.605378][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 433.855273][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 433.922462][ T10] usb 4-1: config 0 interface 0 altsetting 17 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.083080][ T10] usb 4-1: config 0 interface 0 altsetting 17 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 434.192347][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 434.201114][ T10] usb 4-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 434.215540][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.234408][ T10] usb 4-1: config 0 descriptor?? [ 434.614238][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 434.677407][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 434.915691][ T10] usb 4-1: USB disconnect, device number 8 [ 437.393681][ T9477] qrtr: Invalid version 0 [ 437.459174][ T9475] fuse: Bad value for 'fd' [ 438.615200][ T10] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 439.157789][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 439.175292][ T10] usb 4-1: config 0 has no interface number 0 [ 439.184281][ T10] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 439.224349][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.384162][ T10] usb 4-1: config 0 descriptor?? [ 439.393268][ T10] usb 4-1: selecting invalid altsetting 1 [ 439.400956][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 439.421366][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 439.721630][ T9516] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 439.728949][ T9518] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 439.808481][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.622944][ T10] DVB: Unable to find symbol cx22700_attach() [ 441.777975][ T5898] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 441.856045][ T10] DVB: Unable to find symbol tda10046_attach() [ 441.874575][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 441.920836][ T10] usb 4-1: USB disconnect, device number 9 [ 441.936710][ T5898] usb 5-1: Using ep0 maxpacket: 32 [ 441.943523][ T5898] usb 5-1: config 0 interface 0 altsetting 17 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.953671][ T5898] usb 5-1: config 0 interface 0 altsetting 17 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 442.000457][ T5898] usb 5-1: config 0 interface 0 has no altsetting 0 [ 442.034932][ T5898] usb 5-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 442.050037][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.135874][ T5898] usb 5-1: config 0 descriptor?? [ 442.268998][ T9529] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 442.524800][ T5898] usbhid 5-1:0.0: can't add hid device: -71 [ 442.797542][ T5898] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 443.235596][ T9532] /dev/nullb0: Can't open blockdev [ 443.256070][ T5898] usb 5-1: USB disconnect, device number 17 [ 443.459256][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 443.470063][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 443.522382][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 443.548064][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 443.576997][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 443.758799][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 444.388602][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 444.511384][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 444.740098][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 444.757490][ T9544] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1049'. [ 444.791285][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 444.858778][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 444.889299][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 445.095140][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 445.121971][ T9555] autofs: Bad value for 'fd' [ 445.123263][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 445.334500][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 445.343236][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 445.353657][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 445.361498][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 445.403928][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 445.550515][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 445.935125][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 445.945204][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 445.959938][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 445.980466][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 446.034946][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 446.045199][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 446.054812][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 446.087852][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 446.105180][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 446.169395][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 446.704813][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 446.712695][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 446.722970][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 446.732532][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 446.740363][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 446.756936][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 446.893887][ T9569] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 447.088836][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 447.285233][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 447.345606][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 447.353609][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 447.423443][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 447.441753][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 447.453321][ T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 447.609888][ T10] hid-generic 0000:007F:FFFFFFFE.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 447.951945][ T9580] binder: 9572:9580 ioctl c0306201 200000000640 returned -22 [ 448.967068][ T9586] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 449.049311][ T9581] fido_id[9581]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 449.135872][ T9588] /dev/nullb0: Can't open blockdev [ 454.417112][ T9632] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 455.206364][ T9639] binder: 9633:9639 ioctl c0306201 200000000640 returned -22 [ 457.702201][ T9658] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 457.898116][ T9661] /dev/nullb0: Can't open blockdev [ 460.523313][ T9681] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1087'. [ 460.533174][ T9681] netlink: zone id is out of range [ 460.538696][ T9681] netlink: get zone limit has 8 unknown bytes [ 466.785828][ T981] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 466.940946][ T9733] fuse: Bad value for 'fd' [ 467.029055][ T981] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 467.058868][ T981] usb 4-1: config 0 has no interface number 0 [ 467.149923][ T981] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 468.125489][ T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.161324][ T9735] fuse: Invalid rootmode [ 468.707158][ T981] usb 4-1: config 0 descriptor?? [ 468.775809][ T981] usb 4-1: selecting invalid altsetting 1 [ 468.781791][ T981] dvb_ttusb_budget: ttusb_init_controller: error [ 468.819865][ T9738] trusted_key: encrypted_key: master key parameter 'trusteyz' is invalid [ 468.856013][ T981] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 469.661653][ T9744] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 469.670162][ T9745] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 471.836737][ T981] DVB: Unable to find symbol cx22700_attach() [ 473.475661][ T981] DVB: Unable to find symbol tda10046_attach() [ 473.523690][ T981] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 473.538754][ T9770] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 473.621287][ T981] usb 4-1: USB disconnect, device number 10 [ 479.767051][ T9804] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1121'. [ 480.165400][ T10] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 480.387555][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 480.405386][ T10] usb 3-1: config 0 has no interface number 0 [ 480.415985][ T10] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 480.426527][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.456483][ T10] usb 3-1: config 0 descriptor?? [ 480.476576][ T10] usb 3-1: selecting invalid altsetting 1 [ 480.498757][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 480.506798][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 481.001222][ T9812] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 481.008832][ T9813] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 484.407680][ T10] DVB: Unable to find symbol cx22700_attach() [ 484.633451][ T10] DVB: Unable to find symbol tda10046_attach() [ 484.685603][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 484.730991][ T10] usb 3-1: USB disconnect, device number 11 [ 485.203387][ T9825] netlink: 'syz.2.1126': attribute type 9 has an invalid length. [ 485.211469][ T9825] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1126'. [ 487.965381][ T10] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 488.160236][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 488.194670][ T10] usb 4-1: config 0 has no interface number 0 [ 488.248018][ T10] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 488.283246][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.320108][ T10] usb 4-1: config 0 descriptor?? [ 488.348547][ T10] usb 4-1: selecting invalid altsetting 1 [ 488.400548][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 488.435088][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 491.571119][ T10] DVB: Unable to find symbol cx22700_attach() [ 491.721393][ T10] DVB: Unable to find symbol tda10046_attach() [ 491.731956][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 491.774983][ T10] usb 4-1: USB disconnect, device number 11 [ 493.461894][ T9866] netlink: 'syz.0.1138': attribute type 4 has an invalid length. [ 499.532224][ T9906] netlink: 'syz.1.1148': attribute type 27 has an invalid length. [ 499.558393][ T9906] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1148'. [ 499.637518][ T9908] netlink: 'syz.4.1149': attribute type 39 has an invalid length. [ 501.249526][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.713936][ T9926] netlink: 'syz.2.1153': attribute type 4 has an invalid length. [ 502.125627][ T5898] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 502.422361][ T5898] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 502.433212][ T5898] usb 2-1: config 0 has no interface number 0 [ 502.441305][ T5898] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 502.451588][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.479626][ T5898] usb 2-1: config 0 descriptor?? [ 502.500731][ T5898] usb 2-1: selecting invalid altsetting 1 [ 502.512435][ T5898] dvb_ttusb_budget: ttusb_init_controller: error [ 502.533019][ T5898] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 502.798711][ T9947] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 506.022612][ T5898] DVB: Unable to find symbol cx22700_attach() [ 506.299117][ T5898] DVB: Unable to find symbol tda10046_attach() [ 506.335212][ T981] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 506.477731][ T5898] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 507.261680][ T5898] usb 2-1: USB disconnect, device number 14 [ 507.287451][ T981] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 507.525530][ T981] usb 1-1: config 0 has no interface number 0 [ 508.455253][ T981] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 508.464389][ T981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.537568][ T981] usb 1-1: config 0 descriptor?? [ 508.566828][ T981] usb 1-1: selecting invalid altsetting 1 [ 508.572805][ T981] dvb_ttusb_budget: ttusb_init_controller: error [ 508.640288][ T981] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 508.760192][ T9972] netlink: 'syz.4.1167': attribute type 4 has an invalid length. [ 508.860651][ T9973] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 510.800601][ T981] DVB: Unable to find symbol cx22700_attach() [ 510.950044][ T981] DVB: Unable to find symbol tda10046_attach() [ 510.974540][ T981] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 511.042294][ T981] usb 1-1: USB disconnect, device number 13 [ 513.321010][ T9994] rdma_rxe: rxe_newlink: failed to add lo [ 515.971771][T10015] fuse: Unknown parameter 'user_i00000000000000000000' [ 517.122185][T10028] rdma_rxe: rxe_newlink: failed to add lo [ 518.403766][T10026] netlink: 'syz.0.1184': attribute type 27 has an invalid length. [ 518.445493][T10026] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1184'. [ 521.022795][T10055] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 523.615054][ T981] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 523.817296][ T981] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 523.827760][ T981] usb 4-1: config 0 has no interface number 0 [ 523.839454][ T981] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 523.890802][ T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.955577][ T981] usb 4-1: config 0 descriptor?? [ 524.004172][ T981] usb 4-1: selecting invalid altsetting 1 [ 524.026816][ T981] dvb_ttusb_budget: ttusb_init_controller: error [ 524.033689][ T981] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 526.097096][ T981] DVB: Unable to find symbol cx22700_attach() [ 526.353122][ T981] DVB: Unable to find symbol tda10046_attach() [ 526.360895][ T981] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 526.391084][ T981] usb 4-1: USB disconnect, device number 12 [ 528.418250][T10092] netlink: 'syz.2.1202': attribute type 27 has an invalid length. [ 528.505278][T10096] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1202'. [ 529.063420][T10105] netlink: 'syz.3.1205': attribute type 39 has an invalid length. [ 529.656224][T10109] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 530.231574][T10116] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 530.445117][ T9] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 530.599346][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 530.618560][ T9] usb 2-1: config 0 has no interface number 0 [ 530.628587][ T9] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 530.639823][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.654052][ T9] usb 2-1: config 0 descriptor?? [ 530.680512][ T9] usb 2-1: selecting invalid altsetting 1 [ 530.701888][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 530.710737][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 530.803573][ T9] DVB: Unable to find symbol cx22700_attach() [ 530.854546][ T9] DVB: Unable to find symbol tda10046_attach() [ 530.863143][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 532.708995][ T9] usb 2-1: USB disconnect, device number 15 [ 533.718578][T10135] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1215'. [ 533.728333][T10135] netlink: zone id is out of range [ 533.733697][T10135] netlink: get zone limit has 8 unknown bytes [ 535.442200][T10145] fuse: Bad value for 'fd' [ 538.405063][ T9] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 539.334832][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 539.360791][ T9] usb 5-1: config 0 has no interface number 0 [ 539.376728][ T9] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 539.389932][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.556685][ T9] usb 5-1: config 0 descriptor?? [ 540.241141][ T9] usb 5-1: selecting invalid altsetting 1 [ 540.253881][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 540.262214][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 540.400961][T10179] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 541.927236][T10183] fuse: Bad value for 'fd' [ 542.472812][ T9] DVB: Unable to find symbol cx22700_attach() [ 546.121068][ T9] DVB: Unable to find symbol tda10046_attach() [ 546.128478][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 546.185374][ T9] usb 5-1: USB disconnect, device number 18 [ 546.420819][T10209] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 546.787684][T10213] fuse: Bad value for 'fd' [ 547.670939][T10219] netlink: 'syz.2.1240': attribute type 27 has an invalid length. [ 547.753554][T10223] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 548.035817][T10225] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1240'. [ 548.148134][T10226] netlink: 'syz.1.1243': attribute type 4 has an invalid length. [ 548.845039][ T9] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 549.278856][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 549.354246][ T9] usb 3-1: config 0 has no interface number 0 [ 549.413026][ T9] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 549.503964][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.677672][ T9] usb 3-1: config 0 descriptor?? [ 549.734710][ T9] usb 3-1: selecting invalid altsetting 1 [ 549.774409][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 549.811419][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 550.978278][T10252] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 552.575029][ T9] DVB: Unable to find symbol cx22700_attach() [ 552.669917][T10258] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 552.696767][ T9] DVB: Unable to find symbol tda10046_attach() [ 552.703249][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 553.198251][ T9] usb 3-1: USB disconnect, device number 12 [ 554.151751][T10276] fuse: Bad value for 'fd' [ 554.459394][T10278] netlink: 'syz.0.1255': attribute type 4 has an invalid length. [ 554.511844][T10281] 9pnet_fd: Insufficient options for proto=fd [ 554.545626][T10282] 9pnet_fd: Insufficient options for proto=fd [ 557.035056][ T9] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 557.247545][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 557.258383][ T9] usb 4-1: config 0 has no interface number 0 [ 557.264666][ T9] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 557.278663][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.406213][ T9] usb 4-1: config 0 descriptor?? [ 557.427826][ T9] usb 4-1: selecting invalid altsetting 1 [ 557.441322][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 557.450267][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 557.715778][ T9] DVB: Unable to find symbol cx22700_attach() [ 557.904819][ T9] DVB: Unable to find symbol tda10046_attach() [ 557.992592][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 558.027964][ T9] usb 4-1: USB disconnect, device number 13 [ 560.484404][T10352] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1277'. [ 560.494531][T10352] netlink: zone id is out of range [ 560.501410][T10352] netlink: get zone limit has 8 unknown bytes [ 562.005281][ T10] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 562.366717][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 562.374768][ T10] usb 3-1: config 0 has no interface number 0 [ 562.432845][ T10] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 562.440415][T10375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1285'. [ 562.460907][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1285'. [ 562.477076][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.507224][ T10] usb 3-1: config 0 descriptor?? [ 562.745595][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.911184][ T10] usb 3-1: selecting invalid altsetting 1 [ 562.936507][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 562.943395][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 563.095820][ T10] DVB: Unable to find symbol cx22700_attach() [ 563.289881][ T10] DVB: Unable to find symbol tda10046_attach() [ 563.310035][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 563.343399][ T10] usb 3-1: USB disconnect, device number 13 [ 565.324857][T10403] fuse: Bad value for 'fd' [ 570.049703][T10436] netlink: 'syz.2.1299': attribute type 4 has an invalid length. [ 570.425350][ T5898] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 571.220335][ T5898] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 571.250166][ T5898] usb 2-1: config 0 has no interface number 0 [ 571.281565][ T5898] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 571.321181][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.375766][ T5898] usb 2-1: config 0 descriptor?? [ 571.386254][ T5898] usb 2-1: selecting invalid altsetting 1 [ 571.399493][ T5898] dvb_ttusb_budget: ttusb_init_controller: error [ 571.997634][ T5898] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 572.154570][ T5898] DVB: Unable to find symbol cx22700_attach() [ 572.265452][ T5898] DVB: Unable to find symbol tda10046_attach() [ 572.273582][ T5898] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 572.306704][ T5898] usb 2-1: USB disconnect, device number 16 [ 572.429637][T10465] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 572.485037][ T981] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 572.645017][ T43] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 572.664160][ T981] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 572.683982][ T981] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 572.715054][ T981] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 572.817263][ T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.847204][ T43] usb 5-1: config 0 has no interfaces? [ 572.866375][ T43] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 572.932273][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.165610][ T43] usb 5-1: config 0 descriptor?? [ 573.202121][ T981] usb 4-1: usb_control_msg returned -32 [ 573.286134][ T981] usbtmc 4-1:16.0: can't read capabilities [ 573.455221][T10472] input: syz0 as /devices/virtual/input/input9 [ 573.671262][T10475] syz.3.1307 uses obsolete (PF_INET,SOCK_PACKET) [ 574.228086][ T981] usb 4-1: USB disconnect, device number 14 [ 574.988000][T10490] netlink: 'syz.3.1315': attribute type 27 has an invalid length. [ 574.996579][T10490] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1315'. [ 575.198265][ T10] usb 5-1: USB disconnect, device number 19 [ 575.283458][T10497] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1318'. [ 575.318924][T10500] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 578.105087][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 578.308171][ T10] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 578.332673][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 578.395885][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 578.429269][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.472357][ T10] usb 3-1: Product: syz [ 578.498477][ T10] usb 3-1: Manufacturer: syz [ 578.503106][ T10] usb 3-1: SerialNumber: syz [ 579.493393][ T10] usb 3-1: 0:2 : does not exist [ 579.578217][ T10] usb 3-1: USB disconnect, device number 14 [ 579.750709][T10542] netlink: 'syz.2.1328': attribute type 27 has an invalid length. [ 579.777743][T10542] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1328'. [ 580.331379][T10548] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1330'. [ 580.578570][ T981] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 580.747749][ T981] usb 3-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf [ 580.769747][ T981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.802549][ T981] ums-cypress 3-1:1.0: USB Mass Storage device detected [ 582.532501][T10575] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 582.540810][ T981] usb 3-1: USB disconnect, device number 15 [ 584.668358][T10600] netlink: 'syz.2.1342': attribute type 27 has an invalid length. [ 584.688370][T10600] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1342'. [ 586.209466][T10616] netlink: 'syz.4.1346': attribute type 9 has an invalid length. [ 586.217446][T10616] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1346'. [ 588.611145][T10642] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 589.410193][ T10] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 589.795188][T10648] fuse: Bad value for 'fd' [ 589.813332][T10654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1357'. [ 589.886211][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 589.909128][T10654] bridge1: port 1(veth5) entered blocking state [ 589.918627][T10654] bridge1: port 1(veth5) entered disabled state [ 589.941098][T10654] veth5: entered allmulticast mode [ 589.962181][T10654] veth5: entered promiscuous mode [ 590.075256][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 590.120456][ T9] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 590.144993][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.171765][ T9] usb 4-1: Product: syz [ 590.186309][ T9] usb 4-1: Manufacturer: syz [ 590.196155][ T9] usb 4-1: SerialNumber: syz [ 590.208621][ T9] usb 4-1: config 0 descriptor?? [ 590.781549][ T9] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 590.989362][ T9] gspca_sunplus: reg_w_riv err -71 [ 590.994756][ T9] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 591.046352][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 591.636749][ T9] usb 4-1: USB disconnect, device number 15 [ 591.644379][ T10] usb 2-1: can't read configurations, error -71 [ 591.844302][T10668] ntfs3: Unknown parameter 'barrier' [ 592.013072][T10673] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 592.946848][T10680] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 594.489534][ T43] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 594.852274][ T43] usb 2-1: config 0 has no interfaces? [ 596.361623][ T43] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 596.379629][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.515894][ T43] usb 2-1: Product: syz [ 596.523994][ T43] usb 2-1: Manufacturer: syz [ 596.538793][ T43] usb 2-1: SerialNumber: syz [ 596.555621][ T43] usb 2-1: config 0 descriptor?? [ 597.315644][ T43] usb 2-1: can't set config #0, error -71 [ 597.344792][ T43] usb 2-1: USB disconnect, device number 19 [ 599.638212][T10756] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1383'. [ 599.648550][T10756] netlink: zone id is out of range [ 599.654086][T10756] netlink: get zone limit has 8 unknown bytes [ 600.342938][T10760] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 600.515088][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 600.905132][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 600.929892][ T10] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 600.975139][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.983611][ T10] usb 3-1: Product: syz [ 600.988298][ T10] usb 3-1: Manufacturer: syz [ 600.992921][ T10] usb 3-1: SerialNumber: syz [ 601.072022][ T10] usb 3-1: config 0 descriptor?? [ 601.087979][ T10] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 601.100812][ T10] usb 3-1: Detected FT232H [ 601.291970][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 601.382382][T10779] rdma_rxe: rxe_newlink: failed to add lo [ 601.595725][ T10] ftdi_sio 3-1:0.0: GPIO initialisation failed: -5 [ 601.606370][ T10] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 603.579021][T10791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1394'. [ 603.609306][T10798] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1396'. [ 603.948637][ T43] usb 3-1: USB disconnect, device number 16 [ 603.961369][ T43] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 603.971716][ T43] ftdi_sio 3-1:0.0: device disconnected [ 604.129947][T10808] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1400'. [ 604.669939][T10810] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1402'. [ 604.745064][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 605.634165][ T10] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 605.646061][T10826] rdma_rxe: rxe_newlink: failed to add lo [ 605.657612][ T10] usb 5-1: can't read configurations, error -22 [ 605.935787][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 605.974973][T10832] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.982518][T10832] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.108996][ T10] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 606.153948][T10832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 606.169522][T10832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.225037][ T10] usb 5-1: can't read configurations, error -22 [ 606.231763][ T10] usb usb5-port1: attempt power cycle [ 606.255944][T10832] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.267278][T10832] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.282175][T10832] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.291256][T10832] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.417901][T10839] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1409'. [ 606.509169][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.609328][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.675029][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 606.727931][ T10] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 606.754976][ T10] usb 5-1: can't read configurations, error -22 [ 606.783775][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.941943][T10854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1417'. [ 606.984423][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 607.181668][T10860] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 607.193822][T10860] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 607.211937][T10860] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 607.219810][ T10] usb 5-1: device not accepting address 23, error -71 [ 607.228160][T10860] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 607.236127][ T10] usb usb5-port1: unable to enumerate USB device [ 607.335684][T10860] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 607.449123][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.830878][T10858] lo speed is unknown, defaulting to 1000 [ 608.578243][ T13] bridge_slave_1: left allmulticast mode [ 608.688568][ T13] bridge_slave_1: left promiscuous mode [ 608.711393][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.968622][ T13] bridge_slave_0: left allmulticast mode [ 608.974397][ T13] bridge_slave_0: left promiscuous mode [ 609.013341][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.019433][T10885] loop6: detected capacity change from 0 to 2560 [ 609.042207][T10885] Buffer I/O error on dev loop6, logical block 0, async page read [ 609.074804][T10885] Buffer I/O error on dev loop6, logical block 0, async page read [ 609.096178][ T13] veth5: left allmulticast mode [ 609.105630][ T13] veth5: left promiscuous mode [ 609.115846][ T13] bridge1: port 1(veth5) entered disabled state [ 609.126241][T10885] Buffer I/O error on dev loop6, logical block 0, async page read [ 609.227372][T10885] Buffer I/O error on dev loop6, logical block 0, async page read [ 609.242852][T10885] Buffer I/O error on dev loop6, logical block 0, async page read [ 609.369179][T10885] Buffer I/O error on dev loop6, logical block 0, async page read [ 609.395547][T10895] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 609.403654][T10895] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 609.426141][T10885] Buffer I/O error on dev loop6, logical block 0, async page read [ 609.439949][T10885] Buffer I/O error on dev loop6, logical block 0, async page read [ 609.485064][T10860] Bluetooth: hci1: command tx timeout [ 609.548050][T10885] ldm_validate_partition_table(): Disk read failed. [ 609.585096][T10885] Buffer I/O error on dev loop6, logical block 0, async page read [ 609.638935][T10885] Buffer I/O error on dev loop6, logical block 0, async page read [ 609.696866][T10885] Dev loop6: unable to read RDB block 0 [ 609.747858][T10885] loop6: unable to read partition table [ 609.780855][T10885] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 609.931822][T10903] rdma_rxe: rxe_newlink: failed to add lo [ 610.489004][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 610.502498][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 610.516648][ T13] bond0 (unregistering): Released all slaves [ 611.575917][T10860] Bluetooth: hci1: command tx timeout [ 611.690785][T10923] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 613.645284][T10860] Bluetooth: hci1: command tx timeout [ 613.875271][ T5840] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 615.201441][T10858] chnl_net:caif_netlink_parms(): no params data found [ 615.585281][ T5840] usb 2-1: Using ep0 maxpacket: 32 [ 615.614598][ T5840] usb 2-1: config 0 has an invalid interface number: 96 but max is 0 [ 615.646275][ T5840] usb 2-1: config 0 has no interface number 0 [ 615.652417][ T5840] usb 2-1: config 0 interface 96 has no altsetting 0 [ 615.697719][ T5840] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=b2.44 [ 615.725094][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.725158][T10860] Bluetooth: hci1: command tx timeout [ 615.749422][ T5840] usb 2-1: Product: syz [ 615.760011][ T5840] usb 2-1: Manufacturer: syz [ 615.764623][ T5840] usb 2-1: SerialNumber: syz [ 615.788350][ T5840] usb 2-1: config 0 descriptor?? [ 615.993826][ T5840] legousbtower 2-1:0.96: interrupt endpoints not found [ 616.773415][ T5840] usb 2-1: USB disconnect, device number 20 [ 616.980633][T10858] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.999470][T10858] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.028860][T10858] bridge_slave_0: entered allmulticast mode [ 617.061726][T10858] bridge_slave_0: entered promiscuous mode [ 617.095898][T10976] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1439'. [ 617.130981][T10858] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.148635][T10858] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.164033][T10858] bridge_slave_1: entered allmulticast mode [ 617.206907][T10858] bridge_slave_1: entered promiscuous mode [ 617.337213][T10858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 617.381633][ T13] hsr_slave_0: left promiscuous mode [ 617.400694][ T13] hsr_slave_1: left promiscuous mode [ 617.425777][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 617.455065][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 617.494065][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 617.524664][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 617.600957][ T13] veth1_macvtap: left promiscuous mode [ 617.614302][ T13] veth0_macvtap: left promiscuous mode [ 617.627465][ T13] veth1_vlan: left promiscuous mode [ 617.641761][ T13] veth0_vlan: left promiscuous mode [ 617.895868][ T981] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 618.156749][ T981] usb 5-1: Using ep0 maxpacket: 32 [ 618.374067][ T981] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 618.410346][ T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.420052][ T981] usb 5-1: Product: syz [ 618.424244][ T981] usb 5-1: Manufacturer: syz [ 618.429328][ T981] usb 5-1: SerialNumber: syz [ 618.526153][ T981] usb 5-1: config 0 descriptor?? [ 618.591185][ T981] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 619.252034][T10991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.295148][T10991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.327765][ T43] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 619.495065][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 619.502116][ T43] usb 2-1: config 0 has no interfaces? [ 619.525219][ T43] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 619.544831][ T43] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 619.565072][ T43] usb 2-1: Manufacturer: syz [ 619.582919][ T43] usb 2-1: config 0 descriptor?? [ 619.757452][ T981] gspca_topro: reg_r err -71 [ 619.762145][ T981] gspca_topro: Sensor soi763a [ 619.793482][ T981] usb 5-1: USB disconnect, device number 24 [ 619.838187][ T43] usb 2-1: USB disconnect, device number 21 [ 620.065737][ T13] team0 (unregistering): Port device team_slave_1 removed [ 620.124017][ T13] team0 (unregistering): Port device team_slave_0 removed [ 620.392798][T11021] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 621.823242][T11025] comedi comedi1: mpc624: I/O port conflict (0xffffffffffffffff,16) [ 622.450994][T10858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 622.727588][T10858] team0: Port device team_slave_0 added [ 622.770634][T10858] team0: Port device team_slave_1 added [ 622.839914][T11054] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 623.134774][ T5840] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 623.148347][T10858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.185212][T10858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.211202][ C0] vkms_vblank_simulate: vblank timer overrun [ 623.435117][T10858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.495888][ T5840] usb 5-1: Using ep0 maxpacket: 16 [ 623.506434][ T5840] usb 5-1: config 0 interface 0 has no altsetting 0 [ 623.513204][ T5840] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 623.540600][T10858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.554981][ T5840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.563460][T10858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.606505][ T5840] usb 5-1: config 0 descriptor?? [ 623.765006][T10858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.831960][T11071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.846120][T11071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.869739][ T5840] hid (null): invalid report_size 27418 [ 623.880046][ T5840] hid (null): report_id 17018 is invalid [ 623.905786][ T5840] hid (null): unknown global tag 0x82 [ 623.925184][ T5840] hid (null): report_id 48117 is invalid [ 623.935595][T10858] hsr_slave_0: entered promiscuous mode [ 623.942805][T10858] hsr_slave_1: entered promiscuous mode [ 623.969198][T10858] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 623.992430][ T5840] usb 5-1: USB disconnect, device number 25 [ 624.003439][T10858] Cannot create hsr debugfs directory [ 624.129357][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.840648][T11099] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1468'. [ 624.850679][T11099] netlink: zone id is out of range [ 624.856157][T11099] netlink: get zone limit has 8 unknown bytes [ 625.583838][T11105] netlink: 'syz.4.1470': attribute type 15 has an invalid length. [ 625.612018][T11105] netlink: 723 bytes leftover after parsing attributes in process `syz.4.1470'. [ 625.648546][T10858] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 625.705026][T10858] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 625.768491][T10858] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 625.828912][T10858] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 626.138112][T10858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 626.207023][T10858] 8021q: adding VLAN 0 to HW filter on device team0 [ 626.239521][ T6764] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.246717][ T6764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 626.279805][T11125] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 626.330475][ T6073] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.337665][ T6073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 628.584628][T10858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 628.720704][T11173] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1480'. [ 628.742278][T11177] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1481'. [ 629.364659][T10858] veth0_vlan: entered promiscuous mode [ 629.387130][T11199] netlink: 5120 bytes leftover after parsing attributes in process `syz.3.1486'. [ 629.412073][T10858] veth1_vlan: entered promiscuous mode [ 630.033490][ T43] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 630.284449][T10858] veth0_macvtap: entered promiscuous mode [ 630.315534][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 630.338859][T10858] veth1_macvtap: entered promiscuous mode [ 630.357012][ T43] usb 1-1: config 0 has an invalid interface number: 63 but max is 0 [ 630.372364][ T43] usb 1-1: config 0 has no interface number 0 [ 630.415661][ T43] usb 1-1: config 0 interface 63 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 630.453717][ T43] usb 1-1: config 0 interface 63 has no altsetting 0 [ 630.469716][T10858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 630.489581][ T43] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0023, bcdDevice=40.69 [ 630.505562][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.531445][ T43] usb 1-1: Product: syz [ 630.540532][ T43] usb 1-1: Manufacturer: syz [ 630.547330][ T43] usb 1-1: SerialNumber: syz [ 630.596666][ T43] usb 1-1: config 0 descriptor?? [ 630.649133][ T43] kvaser_usb 1-1:0.63: error -ENODEV: Cannot get usb endpoint(s) [ 630.667932][T10858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 630.734432][T10858] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.755938][T10858] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.764784][T10858] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.785213][T10858] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.835052][T11196] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1483'. [ 630.926153][T11196] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 631.013827][ T6764] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.070770][ T6764] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.260276][ T201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.291554][ T201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.464355][T11230] netlink: 'syz.4.1490': attribute type 1 has an invalid length. [ 631.505788][T11230] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1490'. [ 631.632700][T11230] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 631.929537][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 631.976980][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 632.028093][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 632.064980][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 632.089541][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 632.124240][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 632.172608][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 632.174394][ T43] usb 1-1: USB disconnect, device number 14 [ 632.231097][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 632.280544][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 632.323306][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 632.377660][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 632.431334][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 632.465442][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 632.557690][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 632.613020][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 632.645395][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 632.673550][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 632.693831][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 632.722833][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 632.741149][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 632.769014][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 632.809800][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 633.452878][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 633.465029][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 633.477159][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 633.801541][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 633.809642][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 633.818582][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 633.826647][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 633.836403][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 633.844275][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 633.855052][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 633.862817][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 633.880864][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 633.894983][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 633.975657][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 633.983440][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 633.999406][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 634.007741][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 634.021000][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 634.029456][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 634.054813][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 634.103213][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 634.571940][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 635.238077][T11282] fido_id[11282]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 635.735270][ T43] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 636.177000][T11295] netlink: 5120 bytes leftover after parsing attributes in process `syz.0.1504'. [ 636.186440][ T43] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 636.230606][ T43] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 636.277848][ T43] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 636.310569][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.344842][ T43] usb 4-1: Product: syz [ 636.366541][ T43] usb 4-1: Manufacturer: syz [ 636.389690][ T43] usb 4-1: SerialNumber: syz [ 636.665195][T11302] random: crng reseeded on system resumption [ 636.950353][T11305] fuse: Unknown parameter '000000000000000000000xffffffffffffffff' [ 638.634412][ T43] usb 4-1: 0:2 : does not exist [ 638.766706][T11320] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 639.954125][ T43] usb 4-1: USB disconnect, device number 16 [ 641.467833][T11343] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 642.627608][T11344] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 642.955083][T11357] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1518'. [ 644.021088][T11369] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 644.085003][ T43] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 644.268278][ T43] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 644.285057][T11375] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 644.483601][ T43] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 644.495325][ T43] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 644.504466][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.512728][ T43] usb 6-1: Product: syz [ 644.517050][ T43] usb 6-1: Manufacturer: syz [ 644.522047][ T43] usb 6-1: SerialNumber: syz [ 645.580755][T11396] netlink: 'syz.1.1527': attribute type 27 has an invalid length. [ 645.612606][T11396] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1527'. [ 645.775053][T11391] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 645.856967][T11391] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 645.969699][T11403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1528'. [ 646.470988][ T43] usb 6-1: 0:2 : does not exist [ 646.509188][ T43] usb 6-1: USB disconnect, device number 2 [ 646.619206][ T6015] udevd[6015]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 649.495281][T11433] rdma_rxe: rxe_newlink: failed to add lo [ 650.067873][T11455] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1540'. [ 650.077585][T11455] netlink: zone id is out of range [ 650.082930][T11455] netlink: get zone limit has 8 unknown bytes [ 650.716734][ T43] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 650.853084][T11460] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 650.907058][ T43] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 650.931127][ T43] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 650.955397][ T43] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 650.974757][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.983225][ T43] usb 4-1: Product: syz [ 650.993471][ T43] usb 4-1: Manufacturer: syz [ 651.029402][ T43] usb 4-1: SerialNumber: syz [ 651.839896][T11480] netlink: 'syz.0.1543': attribute type 1 has an invalid length. [ 651.960282][ T43] usb 4-1: 0:2 : does not exist [ 652.457530][T11487] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1545'. [ 652.465070][ T43] usb 4-1: USB disconnect, device number 17 [ 652.495076][T11487] netlink: 'syz.1.1545': attribute type 7 has an invalid length. [ 652.515848][T11487] netlink: 'syz.1.1545': attribute type 8 has an invalid length. [ 652.533780][ T6015] udevd[6015]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 652.583111][T11487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1545'. [ 654.102650][T11518] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.1551'. [ 654.112401][T11518] netlink: zone id is out of range [ 654.117941][T11518] netlink: get zone limit has 8 unknown bytes [ 654.774524][T11526] rdma_rxe: rxe_newlink: failed to add lo [ 655.408190][T11535] netlink: 'syz.4.1557': attribute type 9 has an invalid length. [ 655.416025][T11535] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1557'. [ 656.291504][T11549] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1561'. [ 656.314117][T11549] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1561'. [ 657.377990][T11590] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1567'. [ 657.388013][T11590] netlink: zone id is out of range [ 657.393318][T11590] netlink: get zone limit has 8 unknown bytes [ 658.125357][T11593] netlink: 'syz.3.1570': attribute type 9 has an invalid length. [ 658.133120][T11593] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1570'. [ 660.989856][T11626] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 661.333901][T11643] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1580'. [ 661.433849][T11637] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 661.446157][T11637] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 662.483188][T11637] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 662.578876][T11637] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 662.747427][T11637] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 662.778984][T11637] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 663.045756][T11637] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 663.211377][T11637] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 663.340457][T11667] overlayfs: failed to resolve './file1': -2 [ 663.432031][T11669] overlayfs: missing 'lowerdir' [ 663.495717][T11671] Invalid logical block size (51711) [ 664.396658][ T981] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 664.425489][T11686] netlink: 788 bytes leftover after parsing attributes in process `syz.1.1590'. [ 664.472751][T11688] fuse: Unknown parameter '0x0000000000000004' [ 664.579799][ T981] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 664.617592][ T981] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 664.661633][ T981] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 664.704170][ T981] usb 4-1: config 220 has no interface number 2 [ 664.726504][ T981] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 664.726732][ T981] usb 4-1: config 220 interface 0 has no altsetting 0 [ 664.726847][ T981] usb 4-1: config 220 interface 76 has no altsetting 0 [ 664.726955][ T981] usb 4-1: config 220 interface 1 has no altsetting 0 [ 664.755035][ T981] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 665.037461][ T981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.064961][ T981] usb 4-1: Product: syz [ 665.069387][ T981] usb 4-1: Manufacturer: syz [ 665.074093][ T981] usb 4-1: SerialNumber: syz [ 666.660911][T11715] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 667.530892][ T981] usb 4-1: selecting invalid altsetting 0 [ 667.568525][ T981] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 667.595201][ T981] usb 4-1: No valid video chain found. [ 667.664234][ T981] usb 4-1: selecting invalid altsetting 0 [ 667.691961][ T981] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 667.861766][ T981] usb 4-1: USB disconnect, device number 18 [ 668.711532][T11743] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 669.377429][T11744] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 669.385647][T11744] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 669.553868][T11748] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 669.775057][ T1210] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 669.980222][ T1210] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 670.003007][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 670.616901][ T1210] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 670.634033][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.642462][ T1210] usb 1-1: Product: syz [ 670.646963][ T1210] usb 1-1: Manufacturer: syz [ 670.651641][ T1210] usb 1-1: SerialNumber: syz [ 671.572878][T11772] sctp: failed to load transform for md5: -2 [ 672.529585][T11788] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1612'. [ 672.597555][T11789] program syz.4.1611 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 672.699353][ T1210] usb 1-1: 0:2 : does not exist [ 673.262043][T11798] Invalid logical block size (248) [ 673.350561][ T1210] usb 1-1: USB disconnect, device number 15 [ 673.482459][ T6015] udevd[6015]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 673.854984][ T43] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 673.876316][T11814] bpq0: left promiscuous mode [ 674.847306][T11818] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 674.854290][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 674.870426][ T43] usb 6-1: config 162 has an invalid interface number: 251 but max is 1 [ 674.913700][ T43] usb 6-1: config 162 has an invalid interface number: 209 but max is 1 [ 674.936083][ T43] usb 6-1: config 162 has no interface number 0 [ 674.963512][ T43] usb 6-1: config 162 has no interface number 1 [ 674.977798][ T43] usb 6-1: config 162 interface 251 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 675.001665][ T43] usb 6-1: config 162 interface 209 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 675.016344][ T43] usb 6-1: config 162 interface 209 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 675.029478][ T43] usb 6-1: config 162 interface 209 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 675.041444][ T43] usb 6-1: config 162 interface 209 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 675.052669][ T43] usb 6-1: config 162 interface 209 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 675.070361][ T43] usb 6-1: config 162 interface 251 has no altsetting 0 [ 675.093433][ T43] usb 6-1: config 162 interface 209 has no altsetting 0 [ 675.123898][ T43] usb 6-1: New USB device found, idVendor=1608, idProduct=0010, bcdDevice=4f.88 [ 675.134917][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.142955][ T43] usb 6-1: Product: syz [ 675.169451][ T43] usb 6-1: Manufacturer: syz [ 675.174077][ T43] usb 6-1: SerialNumber: syz [ 675.199595][ T5840] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 675.365026][ T5840] usb 2-1: Using ep0 maxpacket: 32 [ 675.385237][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 675.389923][T11837] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 675.413157][ T43] io_edgeport 6-1:162.251: required endpoints missing [ 675.421708][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 675.452098][ T5840] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 675.472961][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.473467][T11839] kvm: Disabled LAPIC found during irq injection [ 675.629321][ T43] io_edgeport 6-1:162.209: Edgeport 2 port adapter converter detected [ 675.769396][ T5840] usb 2-1: config 0 descriptor?? [ 676.040725][ T43] usb 6-1: detected [ 676.054495][ T43] usb 6-1: error in getting manufacturer descriptor: -71 [ 676.072367][ T43] usb 6-1: error in getting boot descriptor: -71 [ 676.082401][ T43] usb 6-1: Device Reported 0 serial ports vs. core thinking we have 2 ports, email greg@kroah.com this information. [ 676.121348][ T43] usb 6-1: Direct firmware load for edgeport/down.fw failed with error -2 [ 676.131874][ T43] usb 6-1: Falling back to sysfs fallback for: edgeport/down.fw [ 676.271427][ T5840] kone 0003:1E7D:2CED.0008: bogus close delimiter [ 676.282937][ T5840] kone 0003:1E7D:2CED.0008: item 0 0 2 10 parsing failed [ 676.291943][ T5840] kone 0003:1E7D:2CED.0008: parse failed [ 676.297867][ T5840] kone 0003:1E7D:2CED.0008: probe with driver kone failed with error -22 [ 677.081745][T11860] netlink: 'syz.4.1628': attribute type 12 has an invalid length. [ 677.090230][T11860] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.1628'. [ 677.145003][T11862] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1628'. [ 679.902855][ T981] usb 2-1: USB disconnect, device number 22 [ 681.063797][T11900] netlink: 134820 bytes leftover after parsing attributes in process `syz.1.1634'. [ 681.214019][T11902] loop8: detected capacity change from 0 to 16384 [ 682.578843][T11925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1641'. [ 683.323112][T11939] lo speed is unknown, defaulting to 1000 [ 685.332075][T11972] fuse: Unknown parameter '0x0000000000000004' [ 685.578134][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.978287][T11996] program syz.4.1658 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 688.149064][T12016] 9pnet_fd: Insufficient options for proto=fd [ 689.165260][T12029] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 693.330248][T12061] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 694.429825][T12077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1676'. [ 694.677172][T12077] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 696.123333][T12096] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1683'. [ 696.393942][T12108] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1686'. [ 697.230666][ T5898] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 697.452669][ T5898] usb 2-1: Using ep0 maxpacket: 32 [ 697.485578][ T5898] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 697.509907][ T5898] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 697.708878][ T5898] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 698.651811][ T5898] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 698.800810][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.814942][ T5898] usb 2-1: Product: syz [ 698.819228][ T5898] usb 2-1: Manufacturer: syz [ 698.823848][ T5898] usb 2-1: SerialNumber: syz [ 698.922613][T12142] nfs: Unknown parameter '€' [ 699.013511][T12142] fuse: Bad value for 'group_id' [ 699.045047][T12142] fuse: Bad value for 'group_id' [ 700.345055][ T5898] usb 2-1: USB disconnect, device number 23 [ 700.490256][ T6045] udevd[6045]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 701.190529][T12163] netlink: 34 bytes leftover after parsing attributes in process `syz.0.1698'. [ 702.323133][T12188] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1702'. [ 702.332888][T12188] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1702'. [ 702.388875][T12188] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1702'. [ 702.455360][T12188] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1702'. [ 705.461576][T12190] mmap: syz.0.1703 (12190): VmData 25972736 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 710.815606][T12251] ------------[ cut here ]------------ [ 710.821118][T12251] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/pcl812.c:1152:10 [ 710.865003][T12251] shift exponent 32 is too large for 32-bit type 'int' [ 710.871930][T12251] CPU: 0 UID: 0 PID: 12251 Comm: syz.4.1716 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) [ 710.871957][T12251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 710.871976][T12251] Call Trace: [ 710.871988][T12251] [ 710.871996][T12251] dump_stack_lvl+0x189/0x250 [ 710.872036][T12251] ? __pfx_dump_stack_lvl+0x10/0x10 [ 710.872059][T12251] ? __pfx__printk+0x10/0x10 [ 710.872096][T12251] ubsan_epilogue+0xa/0x40 [ 710.872122][T12251] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 710.872165][T12251] pcl812_attach+0x1b9e/0x2300 [ 710.872204][T12251] comedi_device_attach+0x51d/0x670 [ 710.872232][T12251] comedi_unlocked_ioctl+0x686/0xf40 [ 710.872261][T12251] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 710.872296][T12251] ? __pfx_smack_log+0x10/0x10 [ 710.872315][T12251] ? smk_access+0x14c/0x4e0 [ 710.872338][T12251] ? smk_tskacc+0x2fc/0x370 [ 710.872361][T12251] ? smack_file_ioctl+0x24a/0x340 [ 710.872385][T12251] ? __pfx_smack_file_ioctl+0x10/0x10 [ 710.872420][T12251] ? __fget_files+0x2a/0x420 [ 710.872435][T12251] ? __fget_files+0x3a0/0x420 [ 710.872449][T12251] ? __fget_files+0x2a/0x420 [ 710.872467][T12251] ? bpf_lsm_file_ioctl+0x9/0x20 [ 710.872483][T12251] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 710.872504][T12251] __se_sys_ioctl+0xf9/0x170 [ 710.872527][T12251] do_syscall_64+0xfa/0x3b0 [ 710.872542][T12251] ? lockdep_hardirqs_on+0x9c/0x150 [ 710.872565][T12251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.872580][T12251] ? clear_bhb_loop+0x60/0xb0 [ 710.872598][T12251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.872613][T12251] RIP: 0033:0x7f81c758e929 [ 710.872632][T12251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 710.872645][T12251] RSP: 002b:00007f81c8351038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 710.872665][T12251] RAX: ffffffffffffffda RBX: 00007f81c77b5fa0 RCX: 00007f81c758e929 [ 710.872677][T12251] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000003 [ 710.872687][T12251] RBP: 00007f81c7610b39 R08: 0000000000000000 R09: 0000000000000000 [ 710.872697][T12251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 710.872706][T12251] R13: 0000000000000000 R14: 00007f81c77b5fa0 R15: 00007fffeeb84b58 [ 710.872729][T12251] [ 710.872739][T12251] ---[ end trace ]--- [ 711.153525][T12251] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 711.160805][T12251] CPU: 1 UID: 0 PID: 12251 Comm: syz.4.1716 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) [ 711.172890][T12251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 711.182960][T12251] Call Trace: [ 711.186254][T12251] [ 711.189201][T12251] dump_stack_lvl+0x99/0x250 [ 711.193818][T12251] ? __asan_memcpy+0x40/0x70 [ 711.198450][T12251] ? __pfx_dump_stack_lvl+0x10/0x10 [ 711.203668][T12251] ? __pfx__printk+0x10/0x10 [ 711.208295][T12251] panic+0x2db/0x790 [ 711.212215][T12251] ? __pfx_panic+0x10/0x10 [ 711.216643][T12251] ? _printk+0xcf/0x120 [ 711.220825][T12251] ? __pfx__printk+0x10/0x10 [ 711.225440][T12251] check_panic_on_warn+0x89/0xb0 [ 711.230395][T12251] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 711.236848][T12251] pcl812_attach+0x1b9e/0x2300 [ 711.241649][T12251] comedi_device_attach+0x51d/0x670 [ 711.246865][T12251] comedi_unlocked_ioctl+0x686/0xf40 [ 711.252183][T12251] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 711.258022][T12251] ? __pfx_smack_log+0x10/0x10 [ 711.262794][T12251] ? smk_access+0x14c/0x4e0 [ 711.267314][T12251] ? smk_tskacc+0x2fc/0x370 [ 711.271838][T12251] ? smack_file_ioctl+0x24a/0x340 [ 711.276882][T12251] ? __pfx_smack_file_ioctl+0x10/0x10 [ 711.282286][T12251] ? __fget_files+0x2a/0x420 [ 711.286910][T12251] ? __fget_files+0x3a0/0x420 [ 711.291597][T12251] ? __fget_files+0x2a/0x420 [ 711.296206][T12251] ? bpf_lsm_file_ioctl+0x9/0x20 [ 711.301160][T12251] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 711.306989][T12251] __se_sys_ioctl+0xf9/0x170 [ 711.311624][T12251] do_syscall_64+0xfa/0x3b0 [ 711.316141][T12251] ? lockdep_hardirqs_on+0x9c/0x150 [ 711.321366][T12251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.327464][T12251] ? clear_bhb_loop+0x60/0xb0 [ 711.332361][T12251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.338269][T12251] RIP: 0033:0x7f81c758e929 [ 711.342695][T12251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 711.362313][T12251] RSP: 002b:00007f81c8351038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 711.370736][T12251] RAX: ffffffffffffffda RBX: 00007f81c77b5fa0 RCX: 00007f81c758e929 [ 711.378712][T12251] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000003 [ 711.386695][T12251] RBP: 00007f81c7610b39 R08: 0000000000000000 R09: 0000000000000000 [ 711.394681][T12251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 711.402657][T12251] R13: 0000000000000000 R14: 00007f81c77b5fa0 R15: 00007fffeeb84b58 [ 711.410651][T12251] [ 711.414077][T12251] Kernel Offset: disabled [ 711.418456][T12251] Rebooting in 86400 seconds..