last executing test programs: 9m1.410988753s ago: executing program 0 (id=1): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x841, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x51) r3 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x17, 0x0, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffff0180c20000000800450000821e77435603d13f06e14258855f200000000000119078000000000000000000004e20003c7768d60c907801000000"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) recvfrom$inet(r3, 0x0, 0x0, 0x20, 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f0000001840)="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", 0x2000, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0xa010, 0x0, 0x7, 0x2, 0x8000003, 0x0, 0x0, 0x0, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x300) r5 = syz_open_dev$sg(&(0x7f0000000600), 0x1, 0x40) r6 = syz_clone3(&(0x7f0000000980)={0x90001000, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), {0x3e}, &(0x7f00000007c0)=""/244, 0xf4, &(0x7f00000008c0)=""/67, &(0x7f0000000940)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x5}, 0x58) ioctl$SG_BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000a00)={'\x00', 0x5, 0x9, 0x7, 0x800, 0x0, r6}) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) syz_fuse_handle_req(r4, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x10}}, 0xe0}}, 0x0) 8m59.952149889s ago: executing program 0 (id=7): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r1, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file1\x00', 0x8000, 0x20) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101000, 0x59) open$dir(&(0x7f00000001c0)='./file1\x00', 0xc0000, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 8m58.808311105s ago: executing program 0 (id=8): syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat6\x00') r0 = syz_clone(0xa6000, &(0x7f0000000000)="6d73b205df71bc0d1359ed8f380fb951c19e9c54bf1c0bcf", 0x18, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002800800200001"], 0x3c}}, 0x0) syz_open_procfs$userns(r0, &(0x7f0000000180)) 8m56.672786418s ago: executing program 0 (id=10): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4040080) 8m55.29699595s ago: executing program 0 (id=16): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x1012e, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x800) 8m39.474856486s ago: executing program 32 (id=16): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x1012e, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x800) 8m33.064846479s ago: executing program 1 (id=62): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) syz_clone(0x80200, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) 8m31.741047679s ago: executing program 1 (id=64): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYRESDEC=0x0], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x11, 0x0, 0x0, r4}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0xd0, 0x3d0, 0x300, 0x300, 0x0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@private2, @loopback, [0xff000000, 0xffffffff, 0xffffff00, 0xff000000], [0xff000000, 0xffffff00, 0x0, 0xffffff00], 'vlan1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x3, 0x3, 0x14}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x6, 0x1b}}}, {{@ipv6={@remote, @local, [0x0, 0xffffffff], [], 'veth1_to_bond\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@private2, 0xfd, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xc}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x2]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3b}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000010c0)=ANY=[@ANYBLOB="0100000000000000004d564b"]) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x8001, 0x12) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r6, 0x1d) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r7 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) dup3(0xffffffffffffffff, r7, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00220f00000054b20000935aa8257f90b39e3ce07964"], 0x0}, 0x0) r9 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0) ioctl$HIDIOCSREPORT(r9, 0x400c4808, &(0x7f0000000080)={0x2, 0x100, 0x20a6}) 8m25.829537084s ago: executing program 1 (id=68): r0 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000300)={0x2, 0x4e1e, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000000000000000000007000000890f04"], 0x20, 0x5}, 0x48080) 8m23.877810186s ago: executing program 1 (id=71): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 8m20.208620455s ago: executing program 1 (id=75): pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x40001043, r0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x11000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) vmsplice(r2, &(0x7f00000003c0)=[{&(0x7f0000000300)='~', 0x1}], 0x1, 0xf) 8m18.423662966s ago: executing program 1 (id=77): r0 = socket(0x28, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000180)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x28b2, 0x63f5, 0x40, &(0x7f0000000340)={[0x7]}, 0x8) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000200)={0x28, 0x0, 0x0, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r3, 0x3b8d, &(0x7f0000000c40)={0x20, r5, 0x0}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="e6260a8b0180c200000e0180c200"], &(0x7f0000000040)={0x1, 0x2, [0x9f5, 0xba8, 0xc81, 0xb48]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000004040000", 0x58}], 0x1) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000580)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xff, 0x6}, [@RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_HWID={0x5, 0x4, 0x1}}}}]}, 0x30}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000001000110f00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="04010000000000003000128009000100766c616e00000000200002800c0002001b0000001d00000006000100000000000600050088a8000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x60}}, 0x0) 8m4.730562502s ago: executing program 2 (id=108): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x2d6ab132499744a1, 0x48c0, 0x0, 0xffffffc5) 8m3.714874035s ago: executing program 2 (id=110): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, 0x0, 0x400c001) r2 = socket(0x1e, 0x4, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r2, 0x89e1, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000080)={0xc}, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x2, 0x800003, 0x0, 0x0, 0xc3a9, 0x0, 0x4}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0xa, 0x1, 0x0, 0x40, 0x2, 0x400000000000000d, 0x1000000000000, 0x5}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x1, 0x7, 0x6, 0x100000003, 0x5, 0x7}, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) 8m3.031393518s ago: executing program 33 (id=77): r0 = socket(0x28, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000180)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x28b2, 0x63f5, 0x40, &(0x7f0000000340)={[0x7]}, 0x8) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000200)={0x28, 0x0, 0x0, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r3, 0x3b8d, &(0x7f0000000c40)={0x20, r5, 0x0}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="e6260a8b0180c200000e0180c200"], &(0x7f0000000040)={0x1, 0x2, [0x9f5, 0xba8, 0xc81, 0xb48]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000004040000", 0x58}], 0x1) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000580)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xff, 0x6}, [@RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_HWID={0x5, 0x4, 0x1}}}}]}, 0x30}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000001000110f00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="04010000000000003000128009000100766c616e00000000200002800c0002001b0000001d00000006000100000000000600050088a8000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x60}}, 0x0) 8m1.522559169s ago: executing program 2 (id=114): openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r0 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}, {0x0, 0x47}], 0x2}) io_uring_enter(r0, 0x4d10, 0x2, 0x2, 0x0, 0x0) 7m59.412249077s ago: executing program 2 (id=116): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001340)={{0x0, 0x4, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 7m58.087093576s ago: executing program 2 (id=118): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f80)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0x5}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7, 0x3, 0xbb3}, {0x6, 0x9, 0x3, 0x2}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 7m56.006775254s ago: executing program 2 (id=122): socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) write(r2, &(0x7f0000000040), 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @buffer={0x0, 0x46, &(0x7f0000000980)=""/70}, &(0x7f0000000040)="4eb4fffffede", 0x0, 0xfffffffe, 0x0, 0x0, 0x0}) socket$unix(0x1, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) add_key(0x0, 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffe) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001780), 0x2) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(r4, 0x0, r4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x3, 0x6, 0xfffa}, 0x1000001d, [0x8000, 0xc95a, 0xf, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x4, 0x49, 0x39cc191b, 0x5f, 0x9, 0x209, 0xffff2d33, 0xffffff01, 0x6, 0x3, 0x20000, 0x5, 0x4, 0xe4a1, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x6, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x0, 0xe, 0x0, 0x71, 0x6, 0x7, 0x1, 0x7, 0x9, 0x3e, 0x8f, 0x3, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x7, 0x8000, 0x10, 0x1, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x15a, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x8c2, 0xea4, 0x0, 0x4, 0x2, 0x8004, 0x2009, 0x3fc, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f2e, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xffff, 0x42, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x81, 0x223], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x4005, 0x7fff, 0xfffffffc, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x3, 0x9, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x8, 0x2, 0x3, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x9, 0xac8, 0xbf, 0x59, 0x3, 0x80000000, 0xfffffff9, 0x0, 0x9, 0xffff, 0xb0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xa2ed, 0x4, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x938, 0x4, 0x6, 0x0, 0x5, 0xce7, 0x8001, 0x2, 0x7, 0x5, 0x3, 0x101, 0x0, 0x2, 0x7fff, 0xffff, 0xa61c, 0x2, 0xffffffff, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0x7, 0xffff, 0x10, 0x7a, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x5, 0x80010080, 0x5, 0x8, 0x1000, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x0, 0x200, 0xffff343e, 0xfff]}, 0x45c) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000880)="1a573524696e98e80925eef5e496345e6195c12209648f759ce4787f731824f0ba4bc5de4ba0f2b7ee16cf2805aefe37b76ce266ab8e1e3cda99acb4a771a9971cc5a678c4fa2a9ad13c0dcfb8816f8d4d5566fe6f9350dde10298b3f3636487510194df6abed88a755aff4bc1253297390d663f945d78881c1fbd65972939d3526778b6d3a7235513f54ddf1e224c997d334b768d90195202ad9174b140aa41a04357658c0737c6fc9ea93f0e4e4e6c857703a55ebbb18d6c752de32aa1a8b47543637b708f", 0xc6) ioctl$VIDIOC_QUERYBUF_DMABUF(r5, 0xc0585609, &(0x7f0000000140)={0x2, 0x5, 0x4, 0xe000, 0xdb5, {}, {0x2, 0xc, 0x2, 0x7, 0xd, 0x7, "bbab7ae5"}, 0x9, 0x4, {}, 0x8001}) unshare(0x22020600) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000000)=""/31, 0x1f}, {&(0x7f0000000100)=""/182, 0xb6}, {&(0x7f0000000040)=""/13, 0xd}, {&(0x7f0000000200)=""/73, 0x49}, {&(0x7f0000000080)=""/38, 0x26}, {&(0x7f0000000280)=""/200, 0xc8}], 0x6, 0x6, 0x780) 7m43.943849751s ago: executing program 5 (id=145): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r1, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101000, 0x59) close_range(r0, 0xffffffffffffffff, 0x0) 7m42.774197958s ago: executing program 5 (id=148): socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x7e, &(0x7f0000000600)={@random="e33110495bfd", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x48, 0x3a, 0xff, @dev, @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x14, '\x00', {0xf, 0x6, "02dc5f", 0x9, 0x0, 0xff, @dev={0xfe, 0x80, '\x00', 0x10}, @local, [@dstopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x8, {0x3, 0x0, 0xd, 0x8}}]}]}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x64, 0x23b) 7m40.631118396s ago: executing program 34 (id=122): socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) write(r2, &(0x7f0000000040), 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @buffer={0x0, 0x46, &(0x7f0000000980)=""/70}, &(0x7f0000000040)="4eb4fffffede", 0x0, 0xfffffffe, 0x0, 0x0, 0x0}) socket$unix(0x1, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) add_key(0x0, 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffe) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001780), 0x2) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(r4, 0x0, r4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x3, 0x6, 0xfffa}, 0x1000001d, [0x8000, 0xc95a, 0xf, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x4, 0x49, 0x39cc191b, 0x5f, 0x9, 0x209, 0xffff2d33, 0xffffff01, 0x6, 0x3, 0x20000, 0x5, 0x4, 0xe4a1, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x6, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x0, 0xe, 0x0, 0x71, 0x6, 0x7, 0x1, 0x7, 0x9, 0x3e, 0x8f, 0x3, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x7, 0x8000, 0x10, 0x1, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x15a, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x8c2, 0xea4, 0x0, 0x4, 0x2, 0x8004, 0x2009, 0x3fc, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f2e, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xffff, 0x42, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x81, 0x223], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x4005, 0x7fff, 0xfffffffc, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x3, 0x9, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x8, 0x2, 0x3, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x9, 0xac8, 0xbf, 0x59, 0x3, 0x80000000, 0xfffffff9, 0x0, 0x9, 0xffff, 0xb0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xa2ed, 0x4, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x938, 0x4, 0x6, 0x0, 0x5, 0xce7, 0x8001, 0x2, 0x7, 0x5, 0x3, 0x101, 0x0, 0x2, 0x7fff, 0xffff, 0xa61c, 0x2, 0xffffffff, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0x7, 0xffff, 0x10, 0x7a, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x5, 0x80010080, 0x5, 0x8, 0x1000, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x0, 0x200, 0xffff343e, 0xfff]}, 0x45c) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000880)="1a573524696e98e80925eef5e496345e6195c12209648f759ce4787f731824f0ba4bc5de4ba0f2b7ee16cf2805aefe37b76ce266ab8e1e3cda99acb4a771a9971cc5a678c4fa2a9ad13c0dcfb8816f8d4d5566fe6f9350dde10298b3f3636487510194df6abed88a755aff4bc1253297390d663f945d78881c1fbd65972939d3526778b6d3a7235513f54ddf1e224c997d334b768d90195202ad9174b140aa41a04357658c0737c6fc9ea93f0e4e4e6c857703a55ebbb18d6c752de32aa1a8b47543637b708f", 0xc6) ioctl$VIDIOC_QUERYBUF_DMABUF(r5, 0xc0585609, &(0x7f0000000140)={0x2, 0x5, 0x4, 0xe000, 0xdb5, {}, {0x2, 0xc, 0x2, 0x7, 0xd, 0x7, "bbab7ae5"}, 0x9, 0x4, {}, 0x8001}) unshare(0x22020600) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000000)=""/31, 0x1f}, {&(0x7f0000000100)=""/182, 0xb6}, {&(0x7f0000000040)=""/13, 0xd}, {&(0x7f0000000200)=""/73, 0x49}, {&(0x7f0000000080)=""/38, 0x26}, {&(0x7f0000000280)=""/200, 0xc8}], 0x6, 0x6, 0x780) 7m39.714925888s ago: executing program 5 (id=155): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x40, &(0x7f0000000000)={0x0, 0x40000000002, 0x8000000000000000, 0x8000f, 0x7fff, 0x0, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x7, 0x4000004, 0x2, 0x0, 0x2, 0x7}, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) 7m36.830096289s ago: executing program 5 (id=159): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, 0x0, 0x400c001) r2 = socket(0x1e, 0x4, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r2, 0x89e1, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r3) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x2, 0x800003, 0x0, 0x0, 0xc3a9, 0x0, 0x4}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0xa, 0x1, 0x0, 0x40, 0x2, 0x400000000000000d, 0x1000000000000, 0x5}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x1, 0x7, 0x6, 0x100000003, 0x5, 0x7}, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) 7m34.62985156s ago: executing program 5 (id=165): setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f80)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0x5}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7, 0x3, 0xbb3}, {0x6, 0x9, 0x3, 0x2}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 7m32.269332926s ago: executing program 5 (id=169): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) execve(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x4f3, 0x74d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x30, 0x5, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0xff, 0x1, 0x1, {0x22, 0xbb0}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0xba, 0x7}}}}}]}}]}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0xd01, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xa001, 0x45001}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000440)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x0, 0x103, 0x1, 0x0, 0xfffe, 0x2000000}, 0x20) r3 = syz_io_uring_setup(0x466c, 0x0, &(0x7f0000001340)=0x0, &(0x7f0000000140)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newsa={0xf0, 0x10, 0x633, 0x0, 0x0, {{@in=@broadcast, @in=@dev}, {@in6=@loopback, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfe}}, 0xf0}}, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000005580)='/sys/kernel/vmcoreinfo', 0x0, 0x0) sendfile(r7, r9, 0x0, 0x1335f0a6) write$binfmt_script(r9, &(0x7f0000000300)={'#! ', './file0', [{0x20, '\xe2.{'}], 0xa, "3390a7cc65a4ea59673aed88b64a927f421cd365b10f3f48c143c5ac6726691f4c6bd2809bcb5cd326bfc32085ffd01372a77744b674ba71a2d9d3b6b1bd84fdfaeeb2280ffb23e482fc"}, 0x59) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RENAMEAT={0x23, 0x30, 0x0, r6, 0x0, 0x0, r6}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0xfffffffffffffd74) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = syz_open_dev$video4linux(&(0x7f0000000ac0), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r11, 0xc0585605, &(0x7f0000002700)={0x1, 0x0, {0x0, 0x0, 0x3010, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r12 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r12, 0x720, &(0x7f00000000c0)={0x1, 0xe, 0x3, &(0x7f0000000080)={0x10, "d00aef137a3a5ed350a808e56e798948879484c300"}}) 7m15.98274999s ago: executing program 35 (id=169): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) execve(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x4f3, 0x74d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x30, 0x5, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0xff, 0x1, 0x1, {0x22, 0xbb0}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0xba, 0x7}}}}}]}}]}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0xd01, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xa001, 0x45001}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000440)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x0, 0x103, 0x1, 0x0, 0xfffe, 0x2000000}, 0x20) r3 = syz_io_uring_setup(0x466c, 0x0, &(0x7f0000001340)=0x0, &(0x7f0000000140)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newsa={0xf0, 0x10, 0x633, 0x0, 0x0, {{@in=@broadcast, @in=@dev}, {@in6=@loopback, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfe}}, 0xf0}}, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000005580)='/sys/kernel/vmcoreinfo', 0x0, 0x0) sendfile(r7, r9, 0x0, 0x1335f0a6) write$binfmt_script(r9, &(0x7f0000000300)={'#! ', './file0', [{0x20, '\xe2.{'}], 0xa, "3390a7cc65a4ea59673aed88b64a927f421cd365b10f3f48c143c5ac6726691f4c6bd2809bcb5cd326bfc32085ffd01372a77744b674ba71a2d9d3b6b1bd84fdfaeeb2280ffb23e482fc"}, 0x59) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RENAMEAT={0x23, 0x30, 0x0, r6, 0x0, 0x0, r6}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0xfffffffffffffd74) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = syz_open_dev$video4linux(&(0x7f0000000ac0), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r11, 0xc0585605, &(0x7f0000002700)={0x1, 0x0, {0x0, 0x0, 0x3010, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r12 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r12, 0x720, &(0x7f00000000c0)={0x1, 0xe, 0x3, &(0x7f0000000080)={0x10, "d00aef137a3a5ed350a808e56e798948879484c300"}}) 6m27.968363197s ago: executing program 8 (id=284): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES64, @ANYBLOB="44a837b4012918a47d", @ANYRES16, @ANYRESDEC=r1, @ANYRES32=r0], &(0x7f0000000380)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) fsopen(0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x3, &(0x7f0000000100)=[{0x81, 0x6, 0x1, 0xe7}, {0x2, 0xcc, 0x5, 0xd}, {0x11c, 0xf, 0x9e, 0xffffffff}]}) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706b86e65204361707455726527203030303030303430303030"], 0xb8) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r6, r5, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r7) 6m22.797351184s ago: executing program 8 (id=298): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) r1 = syz_io_uring_setup(0x23d, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2f}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000040)={0x3ff}, 0x0, 0x0) io_uring_enter(r1, 0x2def, 0x0, 0x20, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) exit(0x4) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r5, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) 6m21.326078859s ago: executing program 8 (id=301): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x112, 0x50000089) 6m20.660636346s ago: executing program 8 (id=302): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@map, 0xffffffffffffffff, 0x37, 0x200c, 0x0, @value}, 0x20) 6m20.071423576s ago: executing program 8 (id=304): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = syz_io_uring_setup(0x909, &(0x7f0000000240)={0x0, 0x770, 0x1000, 0x0, 0x18d}, &(0x7f0000000300)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0xffffffffffffffff, 0x0}) io_uring_enter(r1, 0xdc7, 0xe4bd, 0x1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) 6m19.408285381s ago: executing program 8 (id=307): pipe(&(0x7f0000000000)) keyctl$session_to_parent(0x12) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd26, 0x8000002, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xff, 0x1, 0x8001}, {0x8, 0x6a6, 0xffff, 0x5, 0x2, 0x2}}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}, "22d1aa"}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 6m4.148564078s ago: executing program 36 (id=307): pipe(&(0x7f0000000000)) keyctl$session_to_parent(0x12) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd26, 0x8000002, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xff, 0x1, 0x8001}, {0x8, 0x6a6, 0xffff, 0x5, 0x2, 0x2}}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}, "22d1aa"}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 9.938371501s ago: executing program 7 (id=1421): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB, @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r1, &(0x7f0000000300)={0x2020}, 0x2020) creat(&(0x7f00000002c0)='./file0\x00', 0x6) 9.148275896s ago: executing program 7 (id=1424): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) syz_open_dev$dri(0x0, 0xd21, 0x0) readv(r1, &(0x7f00000001c0)=[{0x0}], 0x1) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 7.982985812s ago: executing program 7 (id=1429): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xb1ea, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0xef92, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x9) 7.366481188s ago: executing program 4 (id=1431): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x1) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 7.016238856s ago: executing program 4 (id=1432): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x6a, 0x4, 0x20000002, 0x101) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000022c0)={'\x00', 0xfbfd, 0x200eeac, 0x80, 0x31, 0x1000209}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="000d8e0000008e301e368a61672df9d84366bf1d046fbedf711718378804b529c43b16209011b1333c717717d48a65f67ab780a61382711ea6c44b30161328a2c8035f16e678be3b9e6cd8f694f47f15d5386f430500e4792cbbfe6a91e8ea3d3048fd8c5489149eb2b739ba3aea00839714a3210cc33fc7f304aba07be832f3d37ead4de5996733ad211f527f45"], &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x1c, &(0x7f0000000200)={0x40, 0x14, 0x82, "d6380b96f71350dec7ec2c2b218c5cc535857e8aa122131d0189f9ae07ee1f278f7a44e6fbb772e942565e93c9ed2c6db9b04e07ee6540836596fceab4cd128e16a6497e926e0d6fa106f9c6ad0cc66222a17f64b4de67bd5739445c4d547ec3d831e13747669bbb56a99711e168176568e101119e1b3e23f528921ebbb6f53b2b77"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x2}}) 6.496999044s ago: executing program 7 (id=1435): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x6a, 0x4, 0x20000002, 0x101) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="000d8e0000008e301e368a61672df9d84366bf1d046fbedf711718378804b529c43b16209011b1333c717717d48a65f67ab780a61382711ea6c44b30161328a2c8035f16e678be3b9e6cd8f694f47f15d5386f430500e4792cbbfe6a91e8ea3d3048fd8c5489149eb2b739ba3aea00839714a3210cc33fc7f304aba07be832f3d37ead4de5996733ad211f527f45"], &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x1c, &(0x7f0000000200)={0x40, 0x14, 0x82, "d6380b96f71350dec7ec2c2b218c5cc535857e8aa122131d0189f9ae07ee1f278f7a44e6fbb772e942565e93c9ed2c6db9b04e07ee6540836596fceab4cd128e16a6497e926e0d6fa106f9c6ad0cc66222a17f64b4de67bd5739445c4d547ec3d831e13747669bbb56a99711e168176568e101119e1b3e23f528921ebbb6f53b2b77"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x2}}) 5.646594649s ago: executing program 6 (id=1437): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f000000770000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) open$dir(&(0x7f0000000400)='./file0\x00', 0xae102, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x77, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendto$inet6(r7, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r5}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c00)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r3, @ANYBLOB="05070000000000000000010000000400030004000180080002800400018004000180480001801400020064766d727030000000000000000000001400020076657468315f6d61637674617000000014000200766574683100000000000000000000000800030003000000040003004c000280140001800800010006000000080001000500000034000180080001000800000008000180070000000800010001000000080001000200000008000100030000000800010008000000040003"], 0xc4}}, 0x0) 5.031222134s ago: executing program 6 (id=1438): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000080)) 4.77263596s ago: executing program 9 (id=1439): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) syz_open_dev$dri(0x0, 0xd21, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 4.520988198s ago: executing program 6 (id=1440): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f00000003c0)={@multicast2, @remote}, 0xc) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001640)="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", 0x1000}], 0x2}, 0x40025) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="d80000001e0081056d81f7820600000000000e800a0014260000000008000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d316a4683f5aeb4ec8a699aca74fac1700360db798262f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93412a92954b43370e9703920723f9a94100"/204, 0xcc}], 0x1}, 0x40041) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000002c0)={0x58eb, 0x1, 0x2, "fff600f40b00ffffff00", 0x31303553}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000400)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-aesni\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) fcntl$dupfd(r5, 0x0, r5) r7 = fsopen(&(0x7f0000000200)='ramfs\x00', 0x0) r8 = fsmount(r7, 0x0, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r6, 0x30, 0x0, @in6={0xa, 0x4e24, 0xec2a, @loopback, 0x76}}}, 0x90) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r8, 0x942e, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x800000, 0x10008, 0x8}) write$bt_hci(r9, &(0x7f0000000080)=ANY=[], 0x6) ftruncate(0xffffffffffffffff, 0x51a9497) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 4.079674975s ago: executing program 9 (id=1441): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 3.908213687s ago: executing program 3 (id=1442): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x1) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 3.400292729s ago: executing program 6 (id=1443): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file1'}, 0xb) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x2000, 0x0) sendfile(r1, r2, 0x0, 0xfffe82) 3.352392865s ago: executing program 3 (id=1444): r0 = syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x105cc6, 0x0, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 3.294443597s ago: executing program 4 (id=1445): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x5, 0x0, 0x8001, 0x7, 0x6, 0xffffffff, {0x1, 0x8, 0xffffffffbd00c694, 0x7fffffffffffffff, 0x7fff, 0x8, 0x5, 0x0, 0x10, 0xc000, 0xd, 0x0, 0x0, 0x2, 0x29}}}}, 0xa0) pwritev2(r3, &(0x7f00000003c0)=[{0x0}], 0x1, 0x80, 0x0, 0x17) 3.024672091s ago: executing program 9 (id=1446): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB, @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r1, &(0x7f0000000300)={0x2020}, 0x2020) creat(&(0x7f00000002c0)='./file0\x00', 0x6) 3.012603607s ago: executing program 7 (id=1447): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$FUSE_CREATE_OPEN(r3, 0x0, 0x0) pwritev2(r3, &(0x7f00000003c0)=[{&(0x7f00000009c0)='l', 0x1}], 0x1, 0x80, 0x0, 0x17) 2.69336179s ago: executing program 3 (id=1448): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f000000770000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) open$dir(&(0x7f0000000400)='./file0\x00', 0xae102, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x77, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendto$inet6(r7, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r5}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c00)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r3, @ANYBLOB="05070000000000000000010000000400030004000180080002800400018004000180480001801400020064766d727030000000000000000000001400020076657468315f6d61637674617000000014000200766574683100000000000000000000000800030003000000040003004c000280140001800800010006000000080001000500000034000180080001000800000008000180070000000800010001000000080001000200000008000100030000000800010008000000040003"], 0xc4}}, 0x0) 2.440515694s ago: executing program 7 (id=1449): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920001000109021b1901000000d40904150001da40df000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040e"], 0x7) 2.332542688s ago: executing program 6 (id=1450): unshare(0x2000400) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x2000000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2.271721457s ago: executing program 9 (id=1451): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) syz_open_dev$dri(0x0, 0xd21, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 2.208682373s ago: executing program 4 (id=1452): r0 = socket(0xa, 0x3, 0x3a) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4) recvmmsg(r1, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40002000, 0x0) r2 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x121400) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000180)={0x0, 0xa0, 0xa}) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f0000000200)=0x5, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061117a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000280)=0x4, 0x4) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f00000001c0)=0x80, 0x4) write$binfmt_misc(r1, &(0x7f0000000300), 0x6) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x2, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r3, &(0x7f00000003c0)={[&(0x7f0000000000)='+\x00']}, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES64=r1], 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 1.863112555s ago: executing program 3 (id=1453): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 1.423800314s ago: executing program 3 (id=1454): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x1) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 910.4879ms ago: executing program 6 (id=1455): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0x4468, &(0x7f0000010780)="$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") mkdir(&(0x7f0000000040)='./file1\x00', 0x1e) setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), &(0x7f0000001040)=ANY=[], 0x841, 0x0) 720.613312ms ago: executing program 4 (id=1456): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 674.762437ms ago: executing program 3 (id=1457): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x6a, 0x4, 0x20000002, 0x101) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="000d8e0000008e301e368a61672df9d84366bf1d046fbedf711718378804b529c43b16209011b1333c717717d48a65f67ab780a61382711ea6c44b30161328a2c8035f16e678be3b9e6cd8f694f47f15d5386f430500e4792cbbfe6a91e8ea3d3048fd8c5489149eb2b739ba3aea00839714a3210cc33fc7f304aba07be832f3d37ead4de5996733ad211f527f45"], &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x1c, &(0x7f0000000200)={0x40, 0x14, 0x82, "d6380b96f71350dec7ec2c2b218c5cc535857e8aa122131d0189f9ae07ee1f278f7a44e6fbb772e942565e93c9ed2c6db9b04e07ee6540836596fceab4cd128e16a6497e926e0d6fa106f9c6ad0cc66222a17f64b4de67bd5739445c4d547ec3d831e13747669bbb56a99711e168176568e101119e1b3e23f528921ebbb6f53b2b77"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x2}}) 597.675685ms ago: executing program 9 (id=1458): r0 = syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x105cc6, 0x0, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 82.534182ms ago: executing program 9 (id=1459): syz_usb_connect(0x2, 0x9a2, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000002580)={&(0x7f00000002c0)=[{0x7, 0x4200, 0x0, 0x0}, {0x794, 0xd201, 0x0, 0x0}], 0x2}) 0s ago: executing program 4 (id=1460): epoll_create1(0x0) r0 = socket$unix(0x1, 0x1, 0x0) close(r0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xb1ea, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180), &(0x7f00000001c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r4, 0x2ded, 0xef92, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)=0x9) kernel console output (not intermixed with test programs): 3] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 856.734927][ T5863] usb 8-1: Product: syz [ 856.739324][ T5863] usb 8-1: Manufacturer: syz [ 856.744430][ T5863] usb 8-1: SerialNumber: syz [ 856.925798][ T5863] usb 8-1: config 0 descriptor?? [ 857.206350][ T5863] usb 8-1: USB disconnect, device number 23 [ 857.517829][ T9386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.755'. [ 857.528216][ T9386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.755'. [ 858.066728][ T9395] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 858.212684][ T9395] kvm: pic: level sensitive irq not supported [ 858.213130][ T9395] kvm: pic: non byte read [ 858.658088][ T9404] loop3: detected capacity change from 0 to 128 [ 858.760324][ T9404] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 858.928790][ T9404] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 859.041899][ T9404] ext2 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 859.939952][ T5824] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 860.038119][ T9413] loop6: detected capacity change from 0 to 32768 [ 860.183211][ T9413] XFS (loop6): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 860.627013][ T9413] XFS (loop6): Ending clean mount [ 860.644175][ T9439] Bluetooth: MGMT ver 1.23 [ 861.171242][ T9436] loop7: detected capacity change from 0 to 32768 [ 861.235468][ T6558] XFS (loop6): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 861.278148][ T9436] XFS (loop7): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 861.412216][ T9436] XFS (loop7): Ending clean mount [ 861.423061][ T9436] XFS (loop7): Quotacheck needed: Please wait. [ 861.506028][ T9436] XFS (loop7): Quotacheck: Done. [ 861.640278][ T6737] XFS (loop7): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 861.679591][ T5786] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 861.891221][ T5786] usb 5-1: Using ep0 maxpacket: 32 [ 861.942799][ T5786] usb 5-1: config 0 interface 0 has no altsetting 0 [ 862.021531][ T5786] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 862.031715][ T5786] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.039971][ T5786] usb 5-1: Product: syz [ 862.044583][ T5786] usb 5-1: Manufacturer: syz [ 862.049402][ T5786] usb 5-1: SerialNumber: syz [ 862.193673][ T5786] usb 5-1: config 0 descriptor?? [ 862.433620][ T5866] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 862.683585][ T5786] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 862.731837][ T5866] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 862.828419][ T5866] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 862.838219][ T5866] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 862.847014][ T5866] usb 8-1: Product: syz [ 862.851717][ T5866] usb 8-1: Manufacturer: syz [ 862.856724][ T5866] usb 8-1: SerialNumber: syz [ 862.923853][ T5786] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 862.932975][ T5786] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 862.965887][ T9470] loop9: detected capacity change from 0 to 1024 [ 863.027994][ T5866] usb 8-1: config 0 descriptor?? [ 863.069340][ T5786] usb 5-1: USB disconnect, device number 14 [ 863.206961][ T5866] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 863.303758][ T9470] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 863.316687][ T9470] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 863.378222][ T5866] usb 8-1: USB disconnect, device number 24 [ 863.488498][ T30] audit: type=1800 audit(1747180524.927:54): pid=9470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.775" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 863.658859][ T6310] udevd[6310]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 864.012991][ T7573] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 864.028753][ T9477] random: crng reseeded on system resumption [ 864.609834][ T5866] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 864.726436][ T9487] netlink: 'syz.9.778': attribute type 10 has an invalid length. [ 864.735638][ T9487] netlink: 40 bytes leftover after parsing attributes in process `syz.9.778'. [ 864.853927][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 864.866150][ T5866] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 864.878742][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 865.042544][ T5866] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 865.052247][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.060502][ T5866] usb 5-1: Product: syz [ 865.065158][ T5866] usb 5-1: Manufacturer: syz [ 865.069988][ T5866] usb 5-1: SerialNumber: syz [ 865.194650][ T5866] usb 5-1: config 0 descriptor?? [ 865.205056][ T9479] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 865.240117][ T9479] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 865.255555][ T9495] netlink: 168 bytes leftover after parsing attributes in process `syz.6.782'. [ 865.303833][ T5866] usb 5-1: ucan: probing device on interface #0 [ 866.432426][ T9499] loop9: detected capacity change from 0 to 32768 [ 866.624229][ T9499] XFS (loop9): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 867.067378][ T5866] usb 5-1: ucan: could not read protocol version, ret=-71 [ 867.074933][ T5866] usb 5-1: ucan: probe failed; try to update the device firmware [ 867.111281][ T9499] XFS (loop9): Ending clean mount [ 867.246635][ T9504] loop7: detected capacity change from 0 to 32768 [ 867.262257][ T5866] usb 5-1: USB disconnect, device number 15 [ 867.372127][ T9504] XFS (loop7): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 867.711900][ T9504] XFS (loop7): Ending clean mount [ 867.725882][ T9504] XFS (loop7): Quotacheck needed: Please wait. [ 867.737237][ T7573] XFS (loop9): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 867.802029][ T9504] XFS (loop7): Quotacheck: Done. [ 867.927849][ T6737] XFS (loop7): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 868.041450][ T5863] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 868.167709][ T9536] syz.6.788 (9536): drop_caches: 2 [ 868.177830][ T9536] syz.6.788 (9536): drop_caches: 2 [ 868.272844][ T5863] usb 5-1: Using ep0 maxpacket: 32 [ 868.308510][ T5863] usb 5-1: config 0 interface 0 has no altsetting 0 [ 868.373448][ T5863] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 868.383074][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.391566][ T5863] usb 5-1: Product: syz [ 868.395948][ T5863] usb 5-1: Manufacturer: syz [ 868.400766][ T5863] usb 5-1: SerialNumber: syz [ 868.504386][ T5863] usb 5-1: config 0 descriptor?? [ 869.028266][ T5863] gs_usb 5-1:0.0: Configuring for 118 interfaces [ 869.038249][ T5863] gs_usb 5-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 869.051369][ T5863] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -22 [ 869.245030][ T5866] usb 5-1: USB disconnect, device number 16 [ 870.197264][ T9551] netlink: 'syz.3.793': attribute type 10 has an invalid length. [ 870.205558][ T9551] netlink: 40 bytes leftover after parsing attributes in process `syz.3.793'. [ 870.322664][ T5863] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 870.423849][ T9556] netlink: 168 bytes leftover after parsing attributes in process `syz.6.795'. [ 870.529826][ T5863] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 870.606324][ T5863] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 870.616159][ T5863] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 870.624775][ T5863] usb 8-1: Product: syz [ 870.629174][ T5863] usb 8-1: Manufacturer: syz [ 870.634256][ T5863] usb 8-1: SerialNumber: syz [ 870.758465][ T5863] usb 8-1: config 0 descriptor?? [ 871.136777][ T5863] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 871.178266][ T5863] usb 8-1: USB disconnect, device number 25 [ 871.383602][ T7998] udevd[7998]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 872.676779][ T9573] loop3: detected capacity change from 0 to 32768 [ 872.755191][ T9578] loop6: detected capacity change from 0 to 32768 [ 872.800441][ T9573] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 872.896940][ T9578] XFS (loop6): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 873.164946][ T9573] XFS (loop3): Ending clean mount [ 873.272172][ T9578] XFS (loop6): Ending clean mount [ 873.287652][ T9578] XFS (loop6): Quotacheck needed: Please wait. [ 873.386406][ T9578] XFS (loop6): Quotacheck: Done. [ 873.400451][ T9599] netlink: 8 bytes leftover after parsing attributes in process `syz.7.801'. [ 873.572080][ T6558] XFS (loop6): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 873.716592][ T5824] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 874.479560][ T9608] loop4: detected capacity change from 0 to 4096 [ 874.591970][ T9608] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 874.803894][ T9611] netlink: 'syz.7.807': attribute type 10 has an invalid length. [ 874.812149][ T9611] netlink: 40 bytes leftover after parsing attributes in process `syz.7.807'. [ 874.927067][ T9608] ntfs3(loop4): ino=19, mi_enum_attr [ 874.933326][ T9608] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 875.078096][ T9608] ntfs3(loop4): failed to convert "c46c" to cp874 [ 875.111744][ T9608] ntfs3(loop4): ino=20, mi_enum_attr [ 875.425210][ T9615] netlink: 168 bytes leftover after parsing attributes in process `syz.7.808'. [ 875.809633][ T5863] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 876.021180][ T5863] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 876.031875][ T5863] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 876.086145][ T5863] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 876.096109][ T5863] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 876.106725][ T5863] usb 7-1: SerialNumber: syz [ 876.432647][ T5863] usb 7-1: 0:2 : does not exist [ 876.437850][ T5863] usb 7-1: unit 255 not found! [ 876.515036][ T5863] usb 7-1: 5:0: cannot get min/max values for control 2 (id 5) [ 876.606897][ T5863] usb 7-1: USB disconnect, device number 8 [ 876.879139][ T7998] udevd[7998]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 877.678912][ T9630] loop7: detected capacity change from 0 to 32768 [ 877.757443][ T9630] XFS (loop7): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 878.146635][ T9630] XFS (loop7): Ending clean mount [ 878.197751][ T9630] XFS (loop7): Quotacheck needed: Please wait. [ 878.308734][ T9630] XFS (loop7): Quotacheck: Done. [ 878.474647][ T6737] XFS (loop7): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 878.682105][ T9636] loop6: detected capacity change from 0 to 32768 [ 878.750410][ T9636] XFS (loop6): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 878.918965][ T9648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.817'. [ 879.049009][ T9636] XFS (loop6): Ending clean mount [ 879.743327][ T7541] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 879.761147][ T7541] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 879.782646][ T5880] usb 10-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 879.804705][ T5880] dvb_usb_az6007 10-1:0.0: probe with driver dvb_usb_az6007 failed with error -2 [ 879.901591][ T7541] usb 4-1: USB disconnect, device number 12 [ 879.931002][ T5880] usb 10-1: USB disconnect, device number 9 [ 880.142839][ T9660] loop3: detected capacity change from 0 to 4096 [ 880.232157][ T9660] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 880.334002][ T5880] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 880.407217][ T6558] XFS (loop6): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 880.822822][ T9666] netlink: 'syz.7.818': attribute type 10 has an invalid length. [ 880.831118][ T9666] netlink: 40 bytes leftover after parsing attributes in process `syz.7.818'. [ 880.969652][ T9660] ntfs3(loop3): ino=19, mi_enum_attr [ 880.975699][ T9660] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 881.182180][ T9668] cgroup: Unexpected value for 'cpuset_v2_mode' [ 881.312259][ T9660] ntfs3(loop3): failed to convert "c46c" to cp874 [ 881.371967][ T9660] ntfs3(loop3): ino=20, mi_enum_attr [ 882.641678][ T5866] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 882.732409][ T9684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.830'. [ 882.862434][ T5866] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 882.873211][ T5866] usb 8-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 882.886915][ T5866] usb 8-1: config 0 interface 0 has no altsetting 0 [ 882.991370][ T5866] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 883.001466][ T5866] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 883.009902][ T5866] usb 8-1: Product: syz [ 883.014998][ T5866] usb 8-1: Manufacturer: syz [ 883.019812][ T5866] usb 8-1: SerialNumber: syz [ 883.118772][ T5866] usb 8-1: config 0 descriptor?? [ 883.241749][ T5866] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 883.382442][ T5866] usb 8-1: USB disconnect, device number 26 [ 883.617469][ T7998] udevd[7998]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 883.967057][ T9696] netlink: 'syz.6.835': attribute type 10 has an invalid length. [ 883.976731][ T9696] netlink: 40 bytes leftover after parsing attributes in process `syz.6.835'. [ 884.765393][ T9700] loop9: detected capacity change from 0 to 4096 [ 884.824772][ T9700] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512). [ 885.070619][ T9710] random: crng reseeded on system resumption [ 885.103237][ T9705] loop4: detected capacity change from 0 to 4096 [ 885.141753][ T9705] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 885.201868][ T9700] ntfs3(loop9): ino=19, mi_enum_attr [ 885.207465][ T9700] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 885.435799][ T9700] ntfs3(loop9): failed to convert "c46c" to cp874 [ 885.445791][ T9700] ntfs3(loop9): ino=20, mi_enum_attr [ 885.532312][ T9705] ntfs3(loop4): ino=19, mi_enum_attr [ 885.537907][ T9705] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 885.682196][ T9705] overlay: Unknown parameter '/' [ 885.727886][ T9705] ntfs3(loop4): failed to convert "c46c" to cp874 [ 885.751774][ T9705] ntfs3(loop4): ino=20, mi_enum_attr [ 886.075727][ T9719] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 886.082538][ T9719] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 886.091007][ T9719] vhci_hcd vhci_hcd.0: Device attached [ 886.205452][ T5866] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 886.234136][ T9720] vhci_hcd: connection closed [ 886.251798][ T5879] vhci_hcd: stop threads [ 886.261359][ T5879] vhci_hcd: release socket [ 886.265967][ T5879] vhci_hcd: disconnect device [ 886.463685][ T5866] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 886.474939][ T5866] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 886.489000][ T5866] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 886.498582][ T5866] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.620314][ T5866] usb 8-1: config 0 descriptor?? [ 886.688148][ T5866] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 886.841217][ T5880] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 887.087911][ T5880] usb 7-1: Using ep0 maxpacket: 32 [ 887.141724][ T5880] usb 7-1: config 0 interface 0 has no altsetting 0 [ 887.195733][ T5880] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 887.205347][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.213957][ T5880] usb 7-1: Product: syz [ 887.218353][ T5880] usb 7-1: Manufacturer: syz [ 887.223328][ T5880] usb 7-1: SerialNumber: syz [ 887.334198][ T5880] usb 7-1: config 0 descriptor?? [ 887.561393][ T7541] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 887.766774][ T7541] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 887.779727][ T7541] usb 4-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 887.794225][ T7541] usb 4-1: config 0 interface 0 has no altsetting 0 [ 887.821305][ T5880] gs_usb 7-1:0.0: Configuring for 1 interfaces [ 887.839879][ T7541] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 887.849598][ T7541] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 887.852300][ T9734] loop9: detected capacity change from 0 to 4096 [ 887.858273][ T7541] usb 4-1: Product: syz [ 887.869072][ T7541] usb 4-1: Manufacturer: syz [ 887.874241][ T7541] usb 4-1: SerialNumber: syz [ 887.917946][ T9734] ntfs3(loop9): Different NTFS sector size (2048) and media sector size (512). [ 888.031700][ T7541] usb 4-1: config 0 descriptor?? [ 888.166751][ T7541] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 888.321926][ T5866] usb 4-1: USB disconnect, device number 13 [ 888.430580][ T5880] gs_usb 7-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 888.441447][ T5880] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -71 [ 888.523118][ T5880] usb 7-1: USB disconnect, device number 9 [ 888.565373][ T8026] udevd[8026]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 889.207163][ T5866] usb 8-1: USB disconnect, device number 27 [ 889.544439][ T9755] random: crng reseeded on system resumption [ 890.003343][ T9761] netlink: 168 bytes leftover after parsing attributes in process `syz.6.859'. [ 890.135962][ T9749] syz.9.854 (9749): drop_caches: 2 [ 890.411400][ T9757] loop3: detected capacity change from 0 to 4096 [ 890.467986][ T9757] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 890.560754][ T9759] loop4: detected capacity change from 0 to 4096 [ 890.608854][ T9759] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 890.801185][ T9757] ntfs3(loop3): ino=19, mi_enum_attr [ 890.806794][ T9757] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 890.821656][ T9765] loop7: detected capacity change from 0 to 128 [ 890.838291][ T9766] loop6: detected capacity change from 0 to 512 [ 890.896123][ T9765] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 890.959903][ T9757] overlay: Unknown parameter '/' [ 890.982231][ T9757] ntfs3(loop3): failed to convert "c46c" to cp874 [ 890.986817][ T9759] ntfs3(loop4): ino=19, mi_enum_attr [ 890.996346][ T9759] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 891.010757][ T9757] ntfs3(loop3): ino=20, mi_enum_attr [ 891.014269][ T9765] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 891.102923][ T9766] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 891.116410][ T9766] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 891.344198][ T9766] Quota error (device loop6): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 891.355933][ T9766] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 891.368943][ T9766] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.861: Failed to acquire dquot type 0 [ 891.440085][ T9759] ntfs3(loop4): failed to convert "c46c" to cp874 [ 891.485606][ T9759] ntfs3(loop4): ino=20, mi_enum_attr [ 891.994466][ T6558] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 892.511980][ T5873] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 892.711709][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 892.722254][ T5873] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 892.733050][ T5873] usb 10-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 892.746816][ T5873] usb 10-1: config 0 interface 0 has no altsetting 0 [ 892.848242][ T5873] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 892.858074][ T5873] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 892.867312][ T5873] usb 10-1: Product: syz [ 892.872061][ T5873] usb 10-1: Manufacturer: syz [ 892.876969][ T5873] usb 10-1: SerialNumber: syz [ 892.908944][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 892.919737][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 892.928291][ T5873] usb 10-1: config 0 descriptor?? [ 892.933183][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 892.947657][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.125871][ T5873] snd-usb-audio 10-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 893.158099][ T24] usb 5-1: config 0 descriptor?? [ 893.199662][ T24] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 893.285903][ T5873] usb 10-1: USB disconnect, device number 11 [ 893.377216][ T9799] random: crng reseeded on system resumption [ 893.622492][ T7998] udevd[7998]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 894.047501][ T9803] loop6: detected capacity change from 0 to 256 [ 894.103598][ T9803] exfat: Deprecated parameter 'utf8' [ 894.109323][ T9803] exfat: Deprecated parameter 'namecase' [ 894.128145][ T9805] syz.3.872 (9805): drop_caches: 2 [ 894.193062][ T9805] syz.3.872 (9805): drop_caches: 2 [ 894.243133][ T9803] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x22c3df5e, utbl_chksum : 0xe619d30d) [ 894.868569][ T5871] kernel write not supported for file /481/attr/sockcreate (pid: 5871 comm: kworker/0:4) [ 895.132754][ T9811] loop7: detected capacity change from 0 to 4096 [ 895.143673][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 895.152177][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 895.211166][ T9811] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 895.499057][ T9811] ntfs3(loop7): ino=19, mi_enum_attr [ 895.505415][ T9811] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 895.752114][ T5871] usb 5-1: USB disconnect, device number 17 [ 895.773621][ T9828] netlink: 12 bytes leftover after parsing attributes in process `syz.6.879'. [ 896.053241][ T9823] loop9: detected capacity change from 0 to 4096 [ 896.132035][ T9823] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512). [ 896.601621][ T9838] random: crng reseeded on system resumption [ 896.617924][ T9823] ntfs3(loop9): ino=19, mi_enum_attr [ 896.623931][ T9823] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 897.101194][ T5871] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 897.333287][ T5871] usb 5-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 897.347017][ T5871] usb 5-1: config 0 interface 0 has no altsetting 0 [ 897.455975][ T5871] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 897.466022][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 897.474718][ T5871] usb 5-1: Product: syz [ 897.479104][ T5871] usb 5-1: Manufacturer: syz [ 897.484019][ T5871] usb 5-1: SerialNumber: syz [ 897.566606][ T5871] usb 5-1: config 0 descriptor?? [ 897.675266][ T9848] syz.7.885 (9848): drop_caches: 2 [ 897.769338][ T9848] syz.7.885 (9848): drop_caches: 2 [ 897.807169][ T5871] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 897.911616][ T5871] usb 5-1: USB disconnect, device number 18 [ 898.047830][ T9851] loop3: detected capacity change from 0 to 1024 [ 898.202583][ T8026] udevd[8026]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 898.316027][ T9851] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 898.333056][ T9851] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 898.441947][ T30] audit: type=1800 audit(1747180559.877:55): pid=9851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.887" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 898.692084][ T24] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 898.901854][ T5824] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 898.957457][ T24] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 898.968390][ T24] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 898.982271][ T24] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 898.991798][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.212984][ T24] usb 10-1: config 0 descriptor?? [ 899.287651][ T24] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 899.389661][ T9864] loop7: detected capacity change from 0 to 40427 [ 899.411597][ T9864] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 899.419608][ T9864] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 899.462374][ T9864] F2FS-fs (loop7): invalid crc value [ 899.816123][ T9864] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 899.823679][ T9864] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 900.820219][ T9892] random: crng reseeded on system resumption [ 901.548098][ T24] usb 10-1: USB disconnect, device number 12 [ 901.893109][ T9894] loop7: detected capacity change from 0 to 4096 [ 901.960667][ T9894] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 902.079326][ T9901] syz.6.899 (9901): drop_caches: 2 [ 902.155292][ T9901] syz.6.899 (9901): drop_caches: 2 [ 902.666211][ T9894] ntfs3(loop7): ino=19, mi_enum_attr [ 902.672149][ T9894] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 903.469018][ T9927] random: crng reseeded on system resumption [ 904.391782][ T5871] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 904.608931][ T5871] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 904.620358][ T5871] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 904.634001][ T5871] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 904.643467][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.748595][ T5871] usb 5-1: config 0 descriptor?? [ 904.787275][ T5871] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 905.569651][ T9956] syz.7.916 (9956): drop_caches: 2 [ 905.679574][ T9956] syz.7.916 (9956): drop_caches: 2 [ 906.553445][ T9967] loop6: detected capacity change from 0 to 4096 [ 906.582653][ T24] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 906.607628][ T9967] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 906.809034][ T9967] ntfs3(loop6): ino=19, mi_enum_attr [ 906.814976][ T9967] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 906.846213][ T24] usb 4-1: config 7 interface 0 has no altsetting 0 [ 906.933258][ T24] usb 4-1: string descriptor 0 read error: -22 [ 906.940268][ T24] usb 4-1: New USB device found, idVendor=0ace, idProduct=13a1, bcdDevice= 4.44 [ 906.949854][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.048505][ T24] usb 4-1: dvb_usb_v2: found a 'ZyDAS ZD1301 reference design' in warm state [ 907.057705][ T24] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 907.068941][ T24] dvbdev: DVB: registering new adapter (ZyDAS ZD1301 reference design) [ 907.077663][ T24] usb 4-1: media controller created [ 907.247028][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 907.297007][ T5880] usb 5-1: USB disconnect, device number 19 [ 908.351580][ T5880] usb 8-1: new full-speed USB device number 28 using dummy_hcd [ 908.576010][ T5880] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 908.587258][ T5880] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 908.600932][ T5880] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 908.610247][ T5880] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.790480][ T24] usb 4-1: USB disconnect, device number 14 [ 908.811456][ T7998] udevd[7998]: setting owner of /dev/bus/usb/004/014 to uid=0, gid=0 failed: No such file or directory [ 909.058422][ T5880] usb 8-1: GET_CAPABILITIES returned 2f [ 909.065165][ T5880] usbtmc 8-1:16.0: can't read capabilities [ 909.321740][ T5871] usb 8-1: USB disconnect, device number 28 [ 910.392791][T10029] loop7: detected capacity change from 0 to 128 [ 910.441739][ T5871] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 910.474683][T10029] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 910.629575][T10029] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 910.708598][T10029] ext2 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 910.742554][ T5871] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 910.756424][ T5871] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 910.766055][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.846010][ T5871] usb 4-1: config 0 descriptor?? [ 910.874954][T10029] EXT4-fs error (device loop7): make_indexed_dir:2271: inode #2: block 20: comm syz.7.939: bad entry in directory: rec_len is smaller than minimal - offset=988, inode=0, rec_len=5, size=1000 fake=1 [ 910.878365][ T5871] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 911.064320][T10031] loop6: detected capacity change from 0 to 4096 [ 911.106044][T10031] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 911.272267][ T6737] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 911.951872][T10031] ntfs3(loop6): ino=19, mi_enum_attr [ 911.957595][T10031] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 913.439308][ T5880] usb 4-1: USB disconnect, device number 15 [ 914.268296][ T5880] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 914.472784][ T5880] usb 8-1: Using ep0 maxpacket: 8 [ 914.484647][ T5880] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 914.495087][ T5880] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.583885][ T5880] usb 8-1: config 0 descriptor?? [ 914.762301][ T5871] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 914.951712][ T5871] usb 10-1: device descriptor read/64, error -71 [ 915.202702][ T5871] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 915.392892][ T5871] usb 10-1: device descriptor read/64, error -71 [ 915.503272][ T5871] usb usb10-port1: attempt power cycle [ 915.841347][T10100] netlink: 16 bytes leftover after parsing attributes in process `syz.4.956'. [ 915.931193][ T5871] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 915.993834][ T5871] usb 10-1: device descriptor read/8, error -71 [ 916.245843][ T5871] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 916.290710][ T5871] usb 10-1: device descriptor read/8, error -71 [ 916.441555][ T5871] usb usb10-port1: unable to enumerate USB device [ 916.742380][ T5880] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 916.758055][ T5880] asix 8-1:0.0: probe with driver asix failed with error -71 [ 916.892004][ T5880] usb 8-1: USB disconnect, device number 29 [ 917.281915][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 917.505747][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 917.519423][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 917.529056][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.624781][ T24] usb 5-1: config 0 descriptor?? [ 917.663934][ T24] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 918.592243][T10129] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 918.690689][T10129] kvm: requested 87161 ns i8254 timer period limited to 200000 ns [ 919.693052][T10147] netlink: 16 bytes leftover after parsing attributes in process `syz.7.969'. [ 920.122339][ T5871] usb 5-1: USB disconnect, device number 20 [ 920.521160][ T5866] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 920.687726][ T5871] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 920.751188][ T5866] usb 10-1: Using ep0 maxpacket: 16 [ 920.812382][ T5866] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 920.824548][ T5866] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 920.878806][ T5866] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 920.889646][ T5866] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.898737][ T5866] usb 10-1: Product: syz [ 920.903330][ T5866] usb 10-1: Manufacturer: syz [ 920.908259][ T5866] usb 10-1: SerialNumber: syz [ 920.921811][ T5871] usb 5-1: Using ep0 maxpacket: 16 [ 920.978309][ T5871] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 920.989009][ T5871] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 921.056891][ T5866] usb 10-1: config 0 descriptor?? [ 921.084725][ T5871] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 921.094407][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.102827][ T5871] usb 5-1: Product: syz [ 921.107196][ T5871] usb 5-1: Manufacturer: syz [ 921.112154][ T5871] usb 5-1: SerialNumber: syz [ 921.149569][ T5866] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 921.159437][ T5866] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 921.548249][ T5871] usb 5-1: 0:2 : does not exist [ 921.552873][T10175] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 921.582677][ T24] IPVS: starting estimator thread 0... [ 921.689774][ T5866] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 921.699978][ T5871] usb 5-1: USB disconnect, device number 21 [ 921.711683][T10177] IPVS: using max 240 ests per chain, 12000 per kthread [ 921.734273][ T5866] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 922.148996][ T8026] udevd[8026]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 922.364369][ T5866] em28xx 10-1:0.0: Unknown AC97 audio processor detected! [ 922.596716][ T5866] em28xx 10-1:0.0: couldn't setup AC97 register 2 [ 922.653360][ T5866] em28xx 10-1:0.0: couldn't setup AC97 register 4 [ 922.701399][ T5866] em28xx 10-1:0.0: couldn't setup AC97 register 6 [ 922.740088][ T5866] em28xx 10-1:0.0: couldn't setup AC97 register 54 [ 922.764534][ T5866] em28xx 10-1:0.0: couldn't setup AC97 register 56 [ 922.880318][ T5866] usb 10-1: USB disconnect, device number 17 [ 922.964606][T10187] loop4: detected capacity change from 0 to 512 [ 923.110763][T10187] EXT4-fs (loop4): Test dummy encryption mode enabled [ 923.119620][T10187] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 923.133292][T10187] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 923.282526][T10192] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 923.298948][T10187] EXT4-fs (loop4): 1 truncate cleaned up [ 923.309475][T10187] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 923.729594][T10201] loop9: detected capacity change from 0 to 64 [ 923.731350][ T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 923.944269][ T5816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 923.993248][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 924.006906][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 924.016399][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.110283][ T24] usb 4-1: config 0 descriptor?? [ 924.148738][ T24] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 925.019326][T10214] ALSA: mixer_oss: invalid index 40000 [ 926.045939][ T24] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 926.271277][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 926.309341][ T24] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 926.321916][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 926.389582][ T24] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 926.399294][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.407735][ T24] usb 8-1: Product: syz [ 926.412310][ T24] usb 8-1: Manufacturer: syz [ 926.417121][ T24] usb 8-1: SerialNumber: syz [ 926.486154][ T24] usb 8-1: config 0 descriptor?? [ 926.501405][ T5880] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 926.546094][ T24] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 926.555972][ T24] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 926.636804][T10229] netlink: 36 bytes leftover after parsing attributes in process `syz.6.990'. [ 926.698775][ T5866] usb 4-1: USB disconnect, device number 16 [ 926.715279][ T5880] usb 5-1: Using ep0 maxpacket: 16 [ 926.760502][ T5880] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 926.771692][ T5880] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 926.896915][ T5880] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 926.906592][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.915207][ T5880] usb 5-1: Product: syz [ 926.919764][ T5880] usb 5-1: Manufacturer: syz [ 926.924963][ T5880] usb 5-1: SerialNumber: syz [ 927.144956][ T24] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 927.154823][ T24] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 927.361150][ T5880] usb 5-1: 0:2 : does not exist [ 927.456547][ T5880] usb 5-1: USB disconnect, device number 22 [ 927.775081][ T24] em28xx 8-1:0.0: Unknown AC97 audio processor detected! [ 927.999277][ T8026] udevd[8026]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 928.016096][T10242] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 928.022867][T10242] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 928.031246][T10242] vhci_hcd vhci_hcd.0: Device attached [ 928.200292][ T24] em28xx 8-1:0.0: couldn't setup AC97 register 2 [ 928.231778][ T24] em28xx 8-1:0.0: couldn't setup AC97 register 4 [ 928.259044][T10245] vhci_hcd: connection closed [ 928.265039][ T8474] vhci_hcd: stop threads [ 928.274517][ T8474] vhci_hcd: release socket [ 928.279189][ T8474] vhci_hcd: disconnect device [ 928.302755][ T5866] vhci_hcd: vhci_device speed not set [ 928.303902][ T24] em28xx 8-1:0.0: couldn't setup AC97 register 6 [ 928.369882][ T24] em28xx 8-1:0.0: couldn't setup AC97 register 54 [ 928.408108][ T24] em28xx 8-1:0.0: couldn't setup AC97 register 56 [ 928.464055][ T24] usb 8-1: USB disconnect, device number 30 [ 930.232157][T10277] ALSA: mixer_oss: invalid index 40000 [ 930.359312][ T5866] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 930.409325][T10281] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1002'. [ 930.714631][ T5866] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 930.724965][ T5866] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 930.738433][ T5866] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 930.747974][ T5866] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.899128][T10279] loop6: detected capacity change from 0 to 1024 [ 930.959379][ T5866] usb 10-1: config 0 descriptor?? [ 931.028113][ T5866] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 931.722585][T10287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1005'. [ 931.732216][T10287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 931.793084][T10287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 931.822791][ T5866] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 931.896265][ T8474] hfsplus: b-tree write err: -5, ino 4 [ 932.011230][ T5866] usb 5-1: Using ep0 maxpacket: 16 [ 932.029727][ T5866] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 932.041299][ T5866] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 932.094167][ T5866] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 932.103696][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.112175][ T5866] usb 5-1: Product: syz [ 932.116558][ T5866] usb 5-1: Manufacturer: syz [ 932.121483][ T5866] usb 5-1: SerialNumber: syz [ 932.447885][ T5866] usb 5-1: 0:2 : does not exist [ 932.533618][ T5866] usb 5-1: USB disconnect, device number 23 [ 932.937653][T10304] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 932.944470][T10304] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 932.952722][T10304] vhci_hcd vhci_hcd.0: Device attached [ 932.993655][ T7998] udevd[7998]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 933.107694][T10305] vhci_hcd: connection closed [ 933.145707][ T7492] vhci_hcd: stop threads [ 933.155370][ T7492] vhci_hcd: release socket [ 933.160036][ T7492] vhci_hcd: disconnect device [ 933.165999][ T24] vhci_hcd: vhci_device speed not set [ 933.247793][ T5880] usb 10-1: USB disconnect, device number 18 [ 934.530576][T10328] ALSA: mixer_oss: invalid index 40000 [ 934.807684][T10329] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1015'. [ 936.167435][T10340] loop7: detected capacity change from 0 to 1024 [ 936.395311][ T5866] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 936.591640][ T5866] usb 7-1: Using ep0 maxpacket: 32 [ 936.653326][ T5866] usb 7-1: config 0 interface 0 has no altsetting 0 [ 936.791301][ T5866] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 936.800759][ T5866] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.809348][ T5866] usb 7-1: Product: syz [ 936.814013][ T5866] usb 7-1: Manufacturer: syz [ 936.818832][ T5866] usb 7-1: SerialNumber: syz [ 936.929995][ T5878] hfsplus: b-tree write err: -5, ino 4 [ 937.014236][ T5866] usb 7-1: config 0 descriptor?? [ 937.065517][ T5866] gs_usb 7-1:0.0: Required endpoints not found [ 937.551928][ T24] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 937.614295][ T5866] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 937.666213][ T5880] usb 7-1: USB disconnect, device number 10 [ 937.761117][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 937.821921][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 937.832573][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 937.863207][ T5866] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 937.874801][ T5866] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 937.888265][ T5866] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 937.897686][ T5866] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.964723][ T5866] usb 8-1: config 0 descriptor?? [ 937.983404][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 937.992894][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.001893][ T24] usb 5-1: Product: syz [ 938.006295][ T24] usb 5-1: Manufacturer: syz [ 938.011220][ T24] usb 5-1: SerialNumber: syz [ 938.020297][ T5866] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 938.356149][ T24] usb 5-1: 0:2 : does not exist [ 938.482205][ T24] usb 5-1: USB disconnect, device number 24 [ 938.566260][T10354] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1023'. [ 938.802051][ T7998] udevd[7998]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 939.326842][T10361] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 939.333670][T10361] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 939.341948][T10361] vhci_hcd vhci_hcd.0: Device attached [ 939.462601][T10363] vhci_hcd: connection closed [ 939.476065][ T8465] vhci_hcd: stop threads [ 939.485674][ T8465] vhci_hcd: release socket [ 939.490361][ T8465] vhci_hcd: disconnect device [ 939.551262][ T5873] vhci_hcd: vhci_device speed not set [ 939.929996][T10370] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1028'. [ 940.687726][ T5873] usb 8-1: USB disconnect, device number 31 [ 941.196146][T10380] loop6: detected capacity change from 0 to 1024 [ 941.292040][T10385] ALSA: mixer_oss: invalid index 40000 [ 943.301717][ T8465] hfsplus: b-tree write err: -5, ino 4 [ 943.840491][T10407] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1039'. [ 944.321407][ T5873] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 944.501270][ T5873] usb 4-1: Using ep0 maxpacket: 16 [ 944.554061][ T5873] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 944.566453][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 944.657186][ T5873] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 944.667460][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.676021][ T5873] usb 4-1: Product: syz [ 944.680415][ T5873] usb 4-1: Manufacturer: syz [ 944.685591][ T5873] usb 4-1: SerialNumber: syz [ 944.833833][ T5873] usb 4-1: config 0 descriptor?? [ 944.880260][ T5873] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 944.890157][ T5873] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 945.478287][ T5873] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 945.511661][ T5873] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 946.178659][ T5873] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 946.443293][ T5873] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 946.534609][ T5873] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 946.664007][T10441] ALSA: mixer_oss: invalid index 40000 [ 946.919160][T10437] loop4: detected capacity change from 0 to 2048 [ 947.314471][T10437] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 947.528871][ T30] audit: type=1800 audit(1747180608.957:56): pid=10437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1048" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 947.548953][ T5873] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 947.557005][ T5873] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 947.564720][ T5873] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 947.592365][ T5873] usb 4-1: USB disconnect, device number 17 [ 948.559702][ T5816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 948.873370][T10456] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1052'. [ 948.884998][T10456] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1052'. [ 949.531330][ T5873] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 949.721539][ T5873] usb 5-1: Using ep0 maxpacket: 16 [ 949.782996][ T5873] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 949.793811][ T5873] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 949.941690][ T5873] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 949.951404][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.959643][ T5873] usb 5-1: Product: syz [ 949.964455][ T5873] usb 5-1: Manufacturer: syz [ 949.969273][ T5873] usb 5-1: SerialNumber: syz [ 950.373965][ T5873] usb 5-1: 0:2 : does not exist [ 950.459977][ T5873] usb 5-1: USB disconnect, device number 25 [ 950.764066][ T7998] udevd[7998]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 950.973421][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 951.201892][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 951.240616][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 951.252896][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 951.328211][ T9] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 951.338004][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.346791][ T9] usb 7-1: Product: syz [ 951.351357][ T9] usb 7-1: Manufacturer: syz [ 951.356171][ T9] usb 7-1: SerialNumber: syz [ 951.473934][ T9] usb 7-1: config 0 descriptor?? [ 951.549697][ T9] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 951.560172][ T9] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 952.050126][T10494] ALSA: mixer_oss: invalid index 40000 [ 952.128087][T10495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1064'. [ 952.230615][T10486] loop9: detected capacity change from 0 to 4096 [ 952.341109][T10486] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512). [ 952.519638][ T9] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 952.541243][ T9] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 952.905247][T10486] ntfs3(loop9): ino=19, mi_enum_attr [ 952.911042][T10486] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 953.354618][ T9] em28xx 7-1:0.0: Unknown AC97 audio processor detected! [ 953.401083][ T24] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 953.603831][ T24] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 953.614107][ T24] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 953.627663][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 953.638058][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 953.647511][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.681466][ T9] em28xx 7-1:0.0: couldn't setup AC97 register 2 [ 953.732267][ T9] em28xx 7-1:0.0: couldn't setup AC97 register 4 [ 953.801578][ T9] em28xx 7-1:0.0: couldn't setup AC97 register 6 [ 953.852247][ T9] em28xx 7-1:0.0: couldn't setup AC97 register 54 [ 953.864692][ T24] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 953.874571][ T24] usb 5-1: no configuration chosen from 1 choice [ 953.878344][ T9] em28xx 7-1:0.0: couldn't setup AC97 register 56 [ 953.969792][ T9] usb 7-1: USB disconnect, device number 11 [ 954.083775][T10503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1066'. [ 954.525283][ T5873] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 954.731338][ T5873] usb 10-1: Using ep0 maxpacket: 32 [ 954.789902][ T5873] usb 10-1: config 0 interface 0 has no altsetting 0 [ 954.821944][ T5873] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 954.832812][ T5873] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.841451][ T5873] usb 10-1: Product: syz [ 954.845916][ T5873] usb 10-1: Manufacturer: syz [ 954.852540][ T5873] usb 10-1: SerialNumber: syz [ 954.951142][ T5873] usb 10-1: config 0 descriptor?? [ 954.966862][ T5873] gs_usb 10-1:0.0: Required endpoints not found [ 955.881692][ T5873] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 956.084032][ T5873] usb 4-1: Using ep0 maxpacket: 16 [ 956.103996][ T5873] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 956.115100][ T5873] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 956.200783][ T5873] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 956.211657][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.219905][ T5873] usb 4-1: Product: syz [ 956.224588][ T5873] usb 4-1: Manufacturer: syz [ 956.229420][ T5873] usb 4-1: SerialNumber: syz [ 956.634979][ T9] usb 5-1: USB disconnect, device number 26 [ 956.654501][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 956.798103][ T5873] usb 4-1: 0:2 : does not exist [ 956.926740][T10549] ALSA: mixer_oss: invalid index 40000 [ 957.051923][ T5873] usb 4-1: USB disconnect, device number 18 [ 957.573776][ T5873] usb 10-1: USB disconnect, device number 19 [ 957.706053][ T7998] udevd[7998]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 957.918926][T10556] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1077'. [ 958.544381][T10558] loop7: detected capacity change from 0 to 4096 [ 958.620608][T10558] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 959.060318][T10558] ntfs3(loop7): ino=19, mi_enum_attr [ 959.066285][T10558] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 959.241263][ T24] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 959.328280][ T5880] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 959.456828][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 959.490685][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 959.504055][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 959.541774][ T5880] usb 7-1: Using ep0 maxpacket: 16 [ 959.579985][ T5880] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 959.593100][ T5880] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 959.685047][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 959.694658][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.703591][ T24] usb 4-1: Product: syz [ 959.707982][ T24] usb 4-1: Manufacturer: syz [ 959.713551][ T24] usb 4-1: SerialNumber: syz [ 959.789636][ T5880] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 959.799269][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.808147][ T5880] usb 7-1: Product: syz [ 959.813094][ T5880] usb 7-1: Manufacturer: syz [ 959.817913][ T5880] usb 7-1: SerialNumber: syz [ 959.839081][ T24] usb 4-1: config 0 descriptor?? [ 959.932405][ T24] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 959.942186][ T24] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 959.986284][ T5880] usb 7-1: config 0 descriptor?? [ 960.023547][ T5880] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 960.033927][ T5880] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 960.582392][ T24] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 960.598596][ T24] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 960.723597][ T5880] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 960.749289][ T5880] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 961.226441][ T24] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 961.251928][ T5866] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 961.460725][ T24] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 961.469128][ T24] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 961.510785][ T5866] usb 10-1: config index 0 descriptor too short (expected 45, got 36) [ 961.519595][ T5866] usb 10-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 961.528118][ T24] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 961.530298][ T5866] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 961.546258][ T5866] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 961.555806][ T5866] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.610365][ T24] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 961.674397][ T24] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 961.703651][ T5866] usb 10-1: rejected 1 configuration due to insufficient available bus power [ 961.710775][ T5880] em28xx 7-1:0.0: Unknown AC97 audio processor detected! [ 961.712823][ T5866] usb 10-1: no configuration chosen from 1 choice [ 961.767028][ T5880] em28xx 7-1:0.0: couldn't setup AC97 register 2 [ 961.856640][ T5880] em28xx 7-1:0.0: couldn't setup AC97 register 4 [ 961.868091][ T24] usb 4-1: USB disconnect, device number 19 [ 961.894935][ T5880] em28xx 7-1:0.0: couldn't setup AC97 register 6 [ 961.947620][ T5880] em28xx 7-1:0.0: couldn't setup AC97 register 54 [ 961.992223][ T5880] em28xx 7-1:0.0: couldn't setup AC97 register 56 [ 962.042297][ T5880] usb 7-1: USB disconnect, device number 12 [ 963.063267][ T5866] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 963.264846][T10603] ALSA: mixer_oss: invalid index 40000 [ 963.311308][ T5866] usb 4-1: Using ep0 maxpacket: 32 [ 963.316966][T10606] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1091'. [ 963.402854][ T5866] usb 4-1: config 0 interface 0 has no altsetting 0 [ 963.797317][ T5866] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 963.806898][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.817523][ T5866] usb 4-1: Product: syz [ 963.822148][ T5866] usb 4-1: Manufacturer: syz [ 963.826955][ T5866] usb 4-1: SerialNumber: syz [ 963.874042][ T5866] usb 4-1: config 0 descriptor?? [ 964.053517][ T5880] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 964.265321][ T5880] usb 7-1: Using ep0 maxpacket: 16 [ 964.271049][ T5873] usb 10-1: USB disconnect, device number 20 [ 964.361485][ T5866] gs_usb 4-1:0.0: Couldn't get device config: (err=-32) [ 964.375155][ T5866] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -32 [ 964.383472][ T5880] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 964.383588][ T5880] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 964.511675][ T5880] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 964.521263][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.529587][ T5880] usb 7-1: Product: syz [ 964.534956][ T5880] usb 7-1: Manufacturer: syz [ 964.539787][ T5880] usb 7-1: SerialNumber: syz [ 964.994805][ T5880] usb 7-1: 0:2 : does not exist [ 965.170289][ T5880] usb 7-1: USB disconnect, device number 13 [ 965.473240][T10623] loop4: detected capacity change from 0 to 512 [ 965.531224][ T7998] udevd[7998]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 965.633620][T10619] loop9: detected capacity change from 0 to 4096 [ 965.723065][T10623] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 965.737382][T10623] ext4 filesystem being mounted at /256/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 965.861183][ T30] audit: type=1800 audit(1747180627.287:57): pid=10623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1096" name="file1" dev="loop4" ino=18 res=0 errno=0 [ 965.926533][ T5880] usb 4-1: USB disconnect, device number 20 [ 966.369502][ T5816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 966.446011][T10636] fuse: Unknown parameter 'user_id00000000000000000000' [ 966.987199][ T5866] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 967.221385][ T5866] usb 7-1: Using ep0 maxpacket: 16 [ 967.272551][ T5866] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 967.284681][ T5866] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 967.404424][ T5866] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 967.414102][ T5866] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.422718][ T5866] usb 7-1: Product: syz [ 967.427085][ T5866] usb 7-1: Manufacturer: syz [ 967.432068][ T5866] usb 7-1: SerialNumber: syz [ 967.544073][ T5866] usb 7-1: config 0 descriptor?? [ 967.587665][ T5866] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 967.597699][ T5866] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 967.703712][T10651] loop7: detected capacity change from 0 to 2048 [ 968.178473][T10651] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 968.292019][ T30] audit: type=1800 audit(1747180629.727:58): pid=10651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1104" name="bus" dev="loop7" ino=18 res=0 errno=0 [ 968.338434][T10661] ALSA: mixer_oss: invalid index 40000 [ 969.191112][ T5866] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 969.199984][ T5866] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 969.272429][ T6737] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 970.471112][ T5863] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 970.487438][ T5866] em28xx 7-1:0.0: Unknown AC97 audio processor detected! [ 970.506271][ T5866] em28xx 7-1:0.0: couldn't setup AC97 register 2 [ 970.514231][ T5866] em28xx 7-1:0.0: couldn't setup AC97 register 4 [ 970.531578][ T5866] em28xx 7-1:0.0: couldn't setup AC97 register 6 [ 970.548233][ T5866] em28xx 7-1:0.0: couldn't setup AC97 register 54 [ 970.556020][ T5866] em28xx 7-1:0.0: couldn't setup AC97 register 56 [ 970.621734][ T5866] usb 7-1: USB disconnect, device number 14 [ 970.701145][ T5863] usb 5-1: Using ep0 maxpacket: 32 [ 970.751708][ T5863] usb 5-1: config 0 interface 0 has no altsetting 0 [ 970.802756][ T5863] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 970.812303][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.823504][ T5863] usb 5-1: Product: syz [ 970.827883][ T5863] usb 5-1: Manufacturer: syz [ 970.833897][ T5863] usb 5-1: SerialNumber: syz [ 970.930148][ T5863] usb 5-1: config 0 descriptor?? [ 971.084467][ T5873] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 971.301069][ T5873] usb 10-1: Using ep0 maxpacket: 16 [ 971.358663][ T5863] gs_usb 5-1:0.0: Couldn't get device config: (err=-32) [ 971.361356][ T5873] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 971.365914][ T5863] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -32 [ 971.386488][ T5873] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 971.552604][T10689] loop6: detected capacity change from 0 to 512 [ 971.586542][ T5873] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 971.596489][ T5873] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.605063][ T5873] usb 10-1: Product: syz [ 971.609532][ T5873] usb 10-1: Manufacturer: syz [ 971.614672][ T5873] usb 10-1: SerialNumber: syz [ 971.799024][T10689] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 971.812605][T10689] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 971.912076][ T30] audit: type=1800 audit(1747180633.307:59): pid=10689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1111" name="file1" dev="loop6" ino=18 res=0 errno=0 [ 972.027132][ T5873] usb 10-1: 0:2 : does not exist [ 972.158882][ T5873] usb 10-1: USB disconnect, device number 21 [ 972.220113][ T6558] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 972.370502][T10698] fuse: Unknown parameter 'user_id00000000000000000000' [ 972.545690][T10694] loop7: detected capacity change from 0 to 4096 [ 972.569206][ T7998] udevd[7998]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 973.411412][ T5863] usb 5-1: USB disconnect, device number 27 [ 973.862747][T10713] loop4: detected capacity change from 0 to 1024 [ 974.331918][ T5873] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 974.572050][ T5873] usb 10-1: Using ep0 maxpacket: 16 [ 974.634363][T10723] ALSA: mixer_oss: invalid index 40000 [ 975.207044][ T5878] hfsplus: b-tree write err: -5, ino 4 [ 975.557885][ T5873] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 975.570044][ T5873] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 976.563532][ T5873] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 976.573504][ T5873] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.582425][ T5873] usb 10-1: Product: syz [ 976.586892][ T5873] usb 10-1: Manufacturer: syz [ 976.591935][ T5873] usb 10-1: SerialNumber: syz [ 976.614969][ T5873] usb 10-1: config 0 descriptor?? [ 976.684092][ T5873] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 976.695708][ T5873] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 976.918402][T10736] loop6: detected capacity change from 0 to 512 [ 977.090446][T10736] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 977.104206][T10736] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 977.271371][ T5866] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 977.281384][ T5873] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 977.303151][ T5873] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 977.345385][ T30] audit: type=1800 audit(1747180638.777:60): pid=10736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1125" name="file1" dev="loop6" ino=18 res=0 errno=0 [ 977.409027][ T5863] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 977.473233][ T5866] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 977.483140][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.608166][ T5866] usb 4-1: config 0 descriptor?? [ 977.644342][ T5863] usb 5-1: Using ep0 maxpacket: 16 [ 977.699199][ T5863] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 977.710688][ T5863] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 977.804107][ T6558] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 977.812888][ T5863] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 977.823011][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.831432][ T5863] usb 5-1: Product: syz [ 977.835826][ T5863] usb 5-1: Manufacturer: syz [ 977.840656][ T5863] usb 5-1: SerialNumber: syz [ 977.907057][ T5866] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 977.916382][ T5866] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 978.054541][ T5866] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 978.061875][ T5866] [drm] Initialized udl on minor 2 [ 978.171221][ T5873] em28xx 10-1:0.0: Unknown AC97 audio processor detected! [ 978.208955][ T5863] usb 5-1: 0:2 : does not exist [ 978.223853][ T5873] em28xx 10-1:0.0: couldn't setup AC97 register 2 [ 978.270287][ T5873] em28xx 10-1:0.0: couldn't setup AC97 register 4 [ 978.316595][ T5873] em28xx 10-1:0.0: couldn't setup AC97 register 6 [ 978.339984][ T5863] usb 5-1: USB disconnect, device number 28 [ 978.344105][ T5866] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 1 failed [ 978.354057][ T5866] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 978.429354][ T5873] em28xx 10-1:0.0: couldn't setup AC97 register 54 [ 978.491681][ T5873] em28xx 10-1:0.0: couldn't setup AC97 register 56 [ 978.514991][T10756] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 978.558308][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 978.561110][ T7541] usb 4-1: USB disconnect, device number 21 [ 978.567939][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 978.582060][ T9] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 978.616592][ T5873] usb 10-1: USB disconnect, device number 22 [ 978.801586][ T3068] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 979.063098][ T7998] udevd[7998]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 979.118842][ T3068] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 979.129427][ T3068] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 979.197156][ T3068] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 979.207462][ T3068] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.219276][ T3068] usb 7-1: Product: syz [ 979.224800][ T3068] usb 7-1: Manufacturer: syz [ 979.229639][ T3068] usb 7-1: SerialNumber: syz [ 979.483263][ T3068] usb 7-1: 0:2 : does not exist [ 979.488449][ T3068] usb 7-1: unit 4 not found! [ 979.642582][ T3068] usb 7-1: USB disconnect, device number 15 [ 979.734911][T10762] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1131'. [ 980.191540][ T8026] udevd[8026]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 980.221877][T10766] loop9: detected capacity change from 0 to 4096 [ 981.732711][ T5873] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 981.856110][T10796] loop9: detected capacity change from 0 to 512 [ 981.922984][ T5873] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 981.934816][ T5873] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 981.945027][ T5873] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 981.958398][ T5873] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 981.968519][ T5873] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.122423][T10796] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 982.137305][T10796] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 982.244134][ T5873] usb 7-1: config 0 descriptor?? [ 982.284572][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 982.302455][ T30] audit: type=1800 audit(1747180643.717:61): pid=10796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1139" name="file1" dev="loop9" ino=18 res=0 errno=0 [ 982.461549][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 982.516816][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 982.529252][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 982.600103][T10807] netlink: 'syz.4.1143': attribute type 13 has an invalid length. [ 982.632373][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 982.642365][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.651184][ T9] usb 4-1: Product: syz [ 982.655803][ T9] usb 4-1: Manufacturer: syz [ 982.660962][ T9] usb 4-1: SerialNumber: syz [ 982.752765][ T5873] usbhid 7-1:0.0: can't add hid device: -71 [ 982.759665][ T5873] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 982.788587][ T9] usb 4-1: config 0 descriptor?? [ 982.901355][ T9] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 982.909468][ T7573] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 982.911098][ T9] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 982.935279][ T5866] usb 8-1: new full-speed USB device number 32 using dummy_hcd [ 982.978202][ T5873] usb 7-1: USB disconnect, device number 16 [ 983.129740][ T5866] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 983.140211][ T5866] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.245055][ T5866] usb 8-1: config 0 descriptor?? [ 983.496965][ T9] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 983.512384][ T5866] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 983.521778][ T5866] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 983.551912][ T9] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 983.631868][ T5866] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 2 [ 983.639008][ T5866] [drm] Initialized udl on minor 2 [ 983.971524][ T3068] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 983.989080][ T9] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 983.996559][ T9] em28xx 4-1:0.0: No AC97 audio processor [ 984.012607][ T5866] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 1 failed [ 984.020492][ T5866] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 984.215244][ T3068] usb 5-1: config 1 has an invalid interface number: 3 but max is 2 [ 984.223724][ T3068] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 984.237281][ T3068] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 984.247627][ T3068] usb 5-1: config 1 has no interface number 1 [ 984.264333][ T5873] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 984.276763][ T9] usb 8-1: USB disconnect, device number 32 [ 984.325623][ T5873] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 984.336607][ T5873] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 984.453011][ T3068] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 984.463257][ T3068] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.472177][ T3068] usb 5-1: Product: syz [ 984.476626][ T3068] usb 5-1: Manufacturer: syz [ 984.481574][ T3068] usb 5-1: SerialNumber: syz [ 984.508494][T10824] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1147'. [ 984.838106][ T3068] usb 5-1: 0:2 : does not exist [ 984.847042][ T3068] usb 5-1: unit 6 not found! [ 985.063644][ T3068] usb 5-1: USB disconnect, device number 29 [ 985.281311][ T9] usb 4-1: USB disconnect, device number 22 [ 985.289067][ T9] em28xx 4-1:0.0: Disconnecting em28xx [ 985.388135][ T9] em28xx 4-1:0.0: Freeing device [ 985.470650][ T8026] udevd[8026]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 986.004693][T10833] loop9: detected capacity change from 0 to 4096 [ 986.622010][T10852] netlink: 'syz.3.1156': attribute type 13 has an invalid length. [ 987.249083][T10860] loop7: detected capacity change from 0 to 128 [ 987.298566][T10852] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.307019][T10852] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.486004][ T3068] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 987.582174][T10852] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 987.708878][ T3068] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 987.723289][ T3068] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 987.734488][ T3068] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 987.747953][ T3068] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 987.757342][ T3068] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.906295][T10852] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.916687][T10852] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.929999][T10852] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.940607][T10852] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.997407][ T3068] usb 7-1: config 0 descriptor?? [ 988.001842][ T30] audit: type=1804 audit(1747180649.407:62): pid=10865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1157" name="/newroot/201/file0/file1" dev="loop7" ino=5 res=1 errno=0 [ 988.024883][ T30] audit: type=1800 audit(1747180649.407:63): pid=10865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1157" name="file1" dev="loop7" ino=5 res=0 errno=0 [ 988.133879][T10871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1160'. [ 988.491369][ T3068] usbhid 7-1:0.0: can't add hid device: -71 [ 988.497965][ T3068] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 988.589674][ T3068] usb 7-1: USB disconnect, device number 17 [ 989.078993][T10881] 9pnet_fd: Insufficient options for proto=fd [ 989.421266][ T9] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 989.653372][ T9] usb 5-1: config 1 has an invalid interface number: 3 but max is 2 [ 989.663189][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 989.673805][ T9] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 989.683123][ T9] usb 5-1: config 1 has no interface number 1 [ 989.814890][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 989.824504][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.833059][ T9] usb 5-1: Product: syz [ 989.837437][ T9] usb 5-1: Manufacturer: syz [ 989.842368][ T9] usb 5-1: SerialNumber: syz [ 990.250245][ T9] usb 5-1: 0:2 : does not exist [ 990.257995][ T9] usb 5-1: unit 6 not found! [ 990.333021][T10891] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1166'. [ 990.385390][T10891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 990.436550][ T9] usb 5-1: USB disconnect, device number 30 [ 990.810672][T10906] loop3: detected capacity change from 0 to 128 [ 990.957546][ T7998] udevd[7998]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 991.142557][T10911] netlink: 'syz.9.1172': attribute type 13 has an invalid length. [ 991.211447][ T30] audit: type=1804 audit(1747180652.647:64): pid=10906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1171" name="/newroot/238/file0/file1" dev="loop3" ino=6 res=1 errno=0 [ 991.233795][ T30] audit: type=1800 audit(1747180652.647:65): pid=10906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1171" name="file1" dev="loop3" ino=6 res=0 errno=0 [ 991.755374][T10911] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.764854][T10911] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.981383][T10911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 992.006632][T10911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 992.625982][T10911] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.640188][T10911] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.650763][T10911] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.660106][T10911] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.041784][ T5863] usb 10-1: new full-speed USB device number 23 using dummy_hcd [ 994.264044][ T5863] usb 10-1: config 1 has an invalid interface number: 3 but max is 2 [ 994.277219][ T5863] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 994.288561][ T5863] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 994.298157][ T5863] usb 10-1: config 1 has no interface number 1 [ 994.326775][T10956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1184'. [ 994.503588][ T5863] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 994.513826][ T5863] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.522450][ T5863] usb 10-1: Product: syz [ 994.526923][ T5863] usb 10-1: Manufacturer: syz [ 994.531903][ T5863] usb 10-1: SerialNumber: syz [ 994.896709][ T5863] usb 10-1: 0:2 : does not exist [ 994.902146][ T5863] usb 10-1: unit 6 not found! [ 994.969291][ T5863] usb 10-1: USB disconnect, device number 23 [ 995.311192][ T7998] udevd[7998]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 995.871856][ T5863] usb 8-1: new full-speed USB device number 33 using dummy_hcd [ 996.088149][T10965] loop6: detected capacity change from 0 to 32768 [ 996.105148][ T5863] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 996.116916][ T5863] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.126256][ T5863] usb 8-1: Product: syz [ 996.130663][ T5863] usb 8-1: Manufacturer: syz [ 996.135602][ T5863] usb 8-1: SerialNumber: syz [ 996.189710][ T5863] usb 8-1: config 0 descriptor?? [ 996.209237][T10965] XFS (loop6): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 996.228593][T10976] netlink: 'syz.9.1193': attribute type 13 has an invalid length. [ 996.442225][ T5863] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 996.569581][T10965] XFS (loop6): Ending clean mount [ 997.337966][ T6306] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 997.561259][ T6306] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 997.575555][ T6306] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 997.589193][ T6306] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 997.598865][ T6306] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.677044][ T6558] XFS (loop6): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 997.748469][T11003] block nbd4: NBD_DISCONNECT [ 997.770198][ T6306] usb 10-1: config 0 descriptor?? [ 997.823172][ T6306] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 998.322419][ T5863] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 998.375742][ T5863] usb 8-1: USB disconnect, device number 33 [ 998.568570][T11011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1200'. [ 998.904415][ T6306] usb 10-1: USB disconnect, device number 24 [ 999.882274][ T6306] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 1000.118913][ T6306] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.129604][ T6306] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1000.191690][ T6306] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1000.201241][ T6306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.209470][ T6306] usb 4-1: Product: syz [ 1000.214881][ T6306] usb 4-1: Manufacturer: syz [ 1000.219693][ T6306] usb 4-1: SerialNumber: syz [ 1000.552322][ T6306] usb 4-1: 0:2 : does not exist [ 1000.557496][ T6306] usb 4-1: unit 6 not found! [ 1000.597699][T11038] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1206'. [ 1000.635301][T11037] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1207'. [ 1000.659859][T11037] vlan2: entered promiscuous mode [ 1000.665303][T11037] syz_tun: entered promiscuous mode [ 1000.720483][ T6306] usb 4-1: USB disconnect, device number 23 [ 1001.047900][ T7998] udevd[7998]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1001.402716][T11043] No control pipe specified [ 1001.520290][T11044] netlink: 'syz.7.1208': attribute type 13 has an invalid length. [ 1001.995879][T11051] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1211'. [ 1002.009252][T11051] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1211'. [ 1002.512143][ T9] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 1002.774810][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1002.784460][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.793063][ T9] usb 4-1: Product: syz [ 1002.797443][ T9] usb 4-1: Manufacturer: syz [ 1002.802449][ T9] usb 4-1: SerialNumber: syz [ 1002.934707][ T9] usb 4-1: config 0 descriptor?? [ 1003.032255][T11057] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1213'. [ 1003.174661][ T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1003.977408][T11080] netlink: 'syz.7.1217': attribute type 1 has an invalid length. [ 1003.985925][T11080] netlink: 'syz.7.1217': attribute type 1 has an invalid length. [ 1004.371336][T11083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1218'. [ 1004.718933][T11088] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1219'. [ 1004.871565][ T9] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1004.922805][ T9] usb 4-1: USB disconnect, device number 24 [ 1005.011923][T11091] No control pipe specified [ 1005.393327][T11096] netlink: 'syz.6.1223': attribute type 13 has an invalid length. [ 1005.588357][T11099] block nbd4: NBD_DISCONNECT [ 1006.122779][T11096] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.131320][T11096] bridge0: port 1(bridge_slave_0) entered disabled state [ 1006.670944][T11096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1006.696356][T11096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1007.564182][T11096] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.574487][T11096] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.590709][T11096] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.601654][T11096] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.691169][T11111] netlink: 92 bytes leftover after parsing attributes in process `syz.9.1225'. [ 1007.700386][T11111] netlink: 92 bytes leftover after parsing attributes in process `syz.9.1225'. [ 1008.420313][T11145] sctp: failed to load transform for md5: -4 [ 1008.821195][T11113] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1009.032339][T11113] usb 10-1: Using ep0 maxpacket: 16 [ 1009.060543][T11168] No control pipe specified [ 1009.071556][T11167] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1233'. [ 1009.115955][T11113] usb 10-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1009.125719][T11113] usb 10-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1009.134449][T11113] usb 10-1: Product: syz [ 1009.138918][T11113] usb 10-1: Manufacturer: syz [ 1009.144012][T11113] usb 10-1: SerialNumber: syz [ 1009.216556][T11113] usb 10-1: config 0 descriptor?? [ 1009.557240][T11142] usb 10-1: USB disconnect, device number 25 [ 1009.846116][ T8026] udevd[8026]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1010.129843][T11174] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1236'. [ 1010.267781][T11113] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 1010.531754][T11113] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1010.545139][T11113] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.553668][T11113] usb 5-1: Product: syz [ 1010.558052][T11113] usb 5-1: Manufacturer: syz [ 1010.563067][T11113] usb 5-1: SerialNumber: syz [ 1010.638971][T11113] usb 5-1: config 0 descriptor?? [ 1010.964360][T11113] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1011.063694][T11189] netlink: 'syz.7.1240': attribute type 13 has an invalid length. [ 1011.440410][T11195] ALSA: mixer_oss: invalid index 40000 [ 1012.572932][T11142] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1012.843603][T11142] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.854609][T11142] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1012.868873][T11142] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1012.878347][T11142] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.076425][T11142] usb 7-1: config 0 descriptor?? [ 1013.144590][T11142] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1013.807260][T11142] usb 7-1: USB disconnect, device number 18 [ 1014.104359][T11213] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1246'. [ 1014.346363][T11215] block nbd7: NBD_DISCONNECT [ 1014.504212][T11113] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1014.526438][T11113] usb 5-1: USB disconnect, device number 31 [ 1015.625885][ T5821] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1017.092198][T11234] netlink: 'syz.3.1253': attribute type 13 has an invalid length. [ 1018.025517][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1018.101967][T11249] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1257'. [ 1018.676476][T11255] loop6: detected capacity change from 0 to 2048 [ 1018.886236][T11255] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1018.911355][T11142] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1019.038326][ T30] audit: type=1800 audit(1747180680.467:66): pid=11255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1259" name="bus" dev="loop6" ino=18 res=0 errno=0 [ 1019.109503][T11142] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1019.120241][T11142] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1019.133841][T11142] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1019.143264][T11142] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.229812][T11248] Bluetooth: Frame is too long (len 65, expected len 4) [ 1019.241375][T11271] loop3: detected capacity change from 0 to 128 [ 1019.243571][T11142] usb 8-1: config 0 descriptor?? [ 1019.269661][T11142] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1019.441405][ T30] audit: type=1800 audit(1747180680.847:67): pid=11271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1263" name="file1" dev="loop3" ino=7 res=0 errno=0 [ 1019.634421][ T6558] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1019.971179][T11248] Bluetooth: hci5: command 0x0406 tx timeout [ 1020.112384][T11113] usb 8-1: USB disconnect, device number 34 [ 1020.263101][ T5821] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 1020.797385][T11113] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1020.811111][T11286] netlink: 'syz.3.1268': attribute type 13 has an invalid length. [ 1021.011349][T11113] usb 10-1: Using ep0 maxpacket: 8 [ 1021.037079][T11113] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1021.046978][T11113] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.117289][T11113] usb 10-1: config 0 descriptor?? [ 1021.401506][T11294] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1270'. [ 1021.799647][T11113] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1021.811372][T11113] asix 10-1:0.0: probe with driver asix failed with error -32 [ 1021.851469][T11297] block nbd7: NBD_DISCONNECT [ 1022.608263][T11306] loop3: detected capacity change from 0 to 2048 [ 1022.853290][T11306] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1022.965612][ T30] audit: type=1800 audit(1747180684.407:68): pid=11306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1274" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 1023.124839][T11320] loop4: detected capacity change from 0 to 512 [ 1023.304553][T11320] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1023.317774][T11320] ext4 filesystem being mounted at /288/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1023.547675][ T5824] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1023.629155][ T5816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1023.812346][T11142] usb 10-1: USB disconnect, device number 26 [ 1024.717952][T11297] loop7: detected capacity change from 0 to 32768 [ 1024.822996][T11343] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1283'. [ 1024.945377][T11345] netlink: 'syz.4.1284': attribute type 13 has an invalid length. [ 1026.028750][T11360] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1027.215385][T11384] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1297'. [ 1027.708996][T11389] netlink: 'syz.4.1299': attribute type 13 has an invalid length. [ 1028.318724][T11400] loop9: detected capacity change from 0 to 1024 [ 1028.831196][T11140] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1028.968903][ T5849] hfsplus: b-tree write err: -5, ino 4 [ 1029.008510][T11140] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1029.020037][T11140] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1029.030777][T11140] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1029.040168][T11140] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.275025][T11405] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1029.295557][T11140] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1029.530125][ T5821] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1030.072443][T11140] usb 4-1: USB disconnect, device number 25 [ 1030.340396][T11435] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1312'. [ 1030.484919][ T6603] udevd[6603]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1031.016080][T11442] netlink: 'syz.6.1316': attribute type 13 has an invalid length. [ 1031.151939][T11113] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 1031.222717][T11447] loop9: detected capacity change from 0 to 1024 [ 1031.397753][T11113] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1031.408207][T11113] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.417099][T11113] usb 5-1: Product: syz [ 1031.421746][T11113] usb 5-1: Manufacturer: syz [ 1031.426567][T11113] usb 5-1: SerialNumber: syz [ 1031.599918][T11113] usb 5-1: config 0 descriptor?? [ 1031.625443][ T5879] hfsplus: b-tree write err: -5, ino 4 [ 1031.859745][T11113] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1032.143094][T11457] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1032.293997][T11457] kvm: pic: level sensitive irq not supported [ 1032.294366][T11457] kvm: pic: non byte read [ 1032.339333][T11457] kvm: pic: level sensitive irq not supported [ 1032.339764][T11457] kvm: pic: non byte read [ 1032.462623][T11457] kvm: pic: level sensitive irq not supported [ 1032.462972][T11457] kvm: pic: non byte read [ 1032.604723][T11457] kvm: pic: level sensitive irq not supported [ 1032.605117][T11457] kvm: pic: non byte read [ 1032.713214][T11457] kvm: pic: level sensitive irq not supported [ 1032.713564][T11457] kvm: pic: non byte read [ 1033.079622][T11472] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1325'. [ 1033.369027][T11477] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1326'. [ 1033.634526][T11113] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1033.714698][T11113] usb 5-1: USB disconnect, device number 32 [ 1034.331766][T11490] netlink: 'syz.3.1329': attribute type 13 has an invalid length. [ 1036.219212][T11517] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1338'. [ 1036.331090][T11140] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1036.542133][T11140] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1036.553889][T11140] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1036.567628][T11140] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1036.577043][T11140] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.591188][T11139] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1036.694993][T11140] usb 4-1: config 0 descriptor?? [ 1036.769311][T11140] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1036.809073][T11139] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1036.821265][T11139] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1036.831515][T11139] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1036.844828][T11139] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1036.854325][T11139] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.877763][T11528] netlink: 'syz.6.1344': attribute type 13 has an invalid length. [ 1036.906564][T11529] 9pnet_fd: Insufficient options for proto=fd [ 1036.973914][T11139] usb 5-1: config 0 descriptor?? [ 1037.297384][T11113] usb 4-1: USB disconnect, device number 26 [ 1037.445302][T11139] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 1037.453298][T11139] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 1037.461246][T11139] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 1037.468955][T11139] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 1037.476783][T11139] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 1037.485452][T11139] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 1037.493659][T11139] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 1037.501552][T11139] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 1037.509235][T11139] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 1037.517000][T11139] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 1037.524909][T11139] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 1037.597987][ T5821] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1037.756964][T11139] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 1037.840022][T11139] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1037.920068][T11139] usb 5-1: USB disconnect, device number 33 [ 1038.514770][T11558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1349'. [ 1038.908474][T11569] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1352'. [ 1039.549274][T11579] 9pnet_fd: Insufficient options for proto=fd [ 1039.557614][T11578] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1354'. [ 1039.568689][T11576] netlink: 'syz.9.1355': attribute type 13 has an invalid length. [ 1040.231934][T11587] bridge_slave_0: left allmulticast mode [ 1040.237855][T11587] bridge_slave_0: left promiscuous mode [ 1040.245361][T11587] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.329679][T11587] bridge_slave_1: left allmulticast mode [ 1040.336146][T11587] bridge_slave_1: left promiscuous mode [ 1040.342996][T11587] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.468969][T11587] bond0: (slave bond_slave_0): Releasing backup interface [ 1040.533521][T11587] bond0: (slave bond_slave_1): Releasing backup interface [ 1040.671302][T11587] team0: Port device team_slave_0 removed [ 1040.803275][T11587] team0: Port device team_slave_1 removed [ 1040.811436][T11587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1040.964883][T11587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1041.046968][T11587] team0: Port device netdevsim1 removed [ 1042.251844][T11121] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1042.477449][T11121] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1042.488095][T11121] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1042.533335][T11121] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1042.543057][T11121] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1042.552106][T11121] usb 10-1: SerialNumber: syz [ 1042.650574][T11619] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1366'. [ 1042.795281][T11121] usb 10-1: 0:2 : does not exist [ 1042.942582][T11121] usb 10-1: USB disconnect, device number 27 [ 1043.209838][ T7998] udevd[7998]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1043.677612][T11626] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1368'. [ 1043.824011][T11630] 9pnet_fd: Insufficient options for proto=fd [ 1044.151747][T11121] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1044.162358][T11106] usb 10-1: new full-speed USB device number 28 using dummy_hcd [ 1044.337985][T11641] loop3: detected capacity change from 0 to 128 [ 1044.368916][T11121] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1044.379748][T11121] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1044.393735][T11121] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1044.403292][T11121] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.452390][T11106] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1044.462153][T11106] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.470482][T11106] usb 10-1: Product: syz [ 1044.475349][T11106] usb 10-1: Manufacturer: syz [ 1044.480275][T11106] usb 10-1: SerialNumber: syz [ 1044.577823][ T30] audit: type=1800 audit(1747180705.967:69): pid=11641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1374" name="file1" dev="loop3" ino=8 res=0 errno=0 [ 1044.699694][T11121] usb 5-1: config 0 descriptor?? [ 1044.760127][T11121] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1044.781244][T11106] usb 10-1: config 0 descriptor?? [ 1045.005225][T11121] usb 5-1: USB disconnect, device number 34 [ 1045.021430][T11106] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1046.531291][T11139] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1046.721345][T11106] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1046.751525][T11139] usb 4-1: Using ep0 maxpacket: 32 [ 1046.784382][T11106] usb 10-1: USB disconnect, device number 28 [ 1046.823642][T11139] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1046.832433][T11139] usb 4-1: config 0 has no interface number 0 [ 1046.838774][T11139] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1046.945679][T11139] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1046.955434][T11139] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.963870][T11139] usb 4-1: Product: syz [ 1046.968259][T11139] usb 4-1: Manufacturer: syz [ 1046.973381][T11139] usb 4-1: SerialNumber: syz [ 1047.129618][T11139] usb 4-1: config 0 descriptor?? [ 1047.164842][T11139] smsc75xx v1.0.0 [ 1047.351294][T11137] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1047.601764][T11137] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.612924][T11137] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1047.642659][T11139] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1047.654017][T11139] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1047.664269][T11139] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1047.675534][T11139] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 1047.725815][T11137] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1047.735393][T11137] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1047.743818][T11137] usb 7-1: SerialNumber: syz [ 1047.836400][T11681] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1383'. [ 1047.870405][T11106] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1048.045438][T11137] usb 7-1: 0:2 : does not exist [ 1048.093684][T11106] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1048.106035][T11106] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1048.116252][T11106] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1048.129585][T11106] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1048.139050][T11106] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.207022][T11137] usb 7-1: USB disconnect, device number 19 [ 1048.348183][T11106] usb 5-1: config 0 descriptor?? [ 1048.492219][ T7998] udevd[7998]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1048.564929][T11687] 9pnet_fd: Insufficient options for proto=fd [ 1048.800125][T11106] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1048.808674][T11106] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1048.816632][T11106] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1048.824544][T11106] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1048.832910][T11106] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1048.840618][T11106] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1048.853662][T11106] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1048.861848][T11106] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1048.869537][T11106] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1048.877464][T11106] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1048.885508][T11106] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1049.016837][T11106] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 1049.071249][T11106] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1049.172378][T11106] usb 5-1: USB disconnect, device number 35 [ 1049.245788][T11697] loop9: detected capacity change from 0 to 128 [ 1049.458873][ T30] audit: type=1800 audit(1747180710.877:70): pid=11697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1386" name="file1" dev="loop9" ino=9 res=0 errno=0 [ 1049.662952][T11106] usb 4-1: USB disconnect, device number 27 [ 1050.453079][T11708] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1050.596822][T11137] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1050.754434][ T5821] Bluetooth: Frame is too long (len 65, expected len 4) [ 1050.861575][T11137] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.872331][T11137] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1050.885824][T11137] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1050.895258][T11137] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.049451][T11137] usb 5-1: config 0 descriptor?? [ 1051.162049][T11137] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1051.241328][T11721] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1391'. [ 1051.293114][T11137] usb 5-1: USB disconnect, device number 36 [ 1051.464183][T11729] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1394'. [ 1051.474076][T11729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1394'. [ 1051.543196][T11106] usb 10-1: new full-speed USB device number 29 using dummy_hcd [ 1051.881665][T11106] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1051.891269][T11106] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.899618][T11106] usb 10-1: Product: syz [ 1051.905467][T11106] usb 10-1: Manufacturer: syz [ 1051.910386][T11106] usb 10-1: SerialNumber: syz [ 1052.027268][T11106] usb 10-1: config 0 descriptor?? [ 1052.104350][ T5821] Bluetooth: Frame is too long (len 65, expected len 4) [ 1052.282945][T11106] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1052.473177][T11743] 9pnet_fd: Insufficient options for proto=fd [ 1052.483552][T11745] loop4: detected capacity change from 0 to 128 [ 1052.661264][ T30] audit: type=1800 audit(1747180714.087:71): pid=11745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1397" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 1053.804448][T11756] loop4: detected capacity change from 0 to 2048 [ 1053.937215][T11756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1053.978503][ T30] audit: type=1800 audit(1747180715.417:72): pid=11756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1401" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 1054.182463][T11106] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1054.232816][T11106] usb 10-1: USB disconnect, device number 29 [ 1054.547647][ T5816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1054.631256][T11121] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 1054.831361][T11121] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1054.844662][T11121] usb 7-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 1054.854224][T11121] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.954391][T11121] usb 7-1: config 0 descriptor?? [ 1055.160168][T11776] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1405'. [ 1055.275670][T11121] usbhid 7-1:0.0: can't add hid device: -71 [ 1055.283398][T11121] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1055.343507][T11121] usb 7-1: USB disconnect, device number 20 [ 1055.727388][T11779] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1406'. [ 1055.738726][T11779] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1406'. [ 1056.255202][T11786] 9pnet_fd: Insufficient options for proto=fd [ 1056.296804][T11758] loop3: detected capacity change from 0 to 32768 [ 1056.401557][T11758] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1402 (11758) [ 1056.482811][T11758] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1056.493523][T11758] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 1056.503923][T11758] BTRFS info (device loop3): using free-space-tree [ 1056.986427][T11758] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1056.987147][T11758] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1056.997929][T11758] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1057.007493][T11758] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1057.017359][T11758] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1057.026792][T11758] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1057.036727][T11758] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1057.046332][T11758] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1057.056363][T11758] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1057.066848][T11758] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1057.077214][T11758] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1057.141431][T11794] ALSA: mixer_oss: invalid index 40000 [ 1058.604859][T11758] BTRFS error (device loop3): open_ctree failed: -12 [ 1059.171733][T11121] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 1059.427726][T11821] loop7: detected capacity change from 0 to 128 [ 1059.464526][T11121] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1059.474318][T11121] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.482775][T11121] usb 7-1: Product: syz [ 1059.487162][T11121] usb 7-1: Manufacturer: syz [ 1059.492081][T11121] usb 7-1: SerialNumber: syz [ 1059.524108][T11821] EXT4-fs: Ignoring removed nobh option [ 1059.584262][T11121] usb 7-1: config 0 descriptor?? [ 1059.611215][T11821] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1059.692019][T11137] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 1059.741834][T11821] ext4 filesystem being mounted at /247/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1059.837548][T11121] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1059.953411][T11137] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1059.962923][T11137] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.971732][T11137] usb 4-1: Product: syz [ 1059.976113][T11137] usb 4-1: Manufacturer: syz [ 1059.982698][T11137] usb 4-1: SerialNumber: syz [ 1060.061587][T11139] usb 10-1: new full-speed USB device number 30 using dummy_hcd [ 1060.119411][T11137] usb 4-1: config 0 descriptor?? [ 1060.277606][T11139] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1060.279525][T11832] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1060.288271][T11139] usb 10-1: config 0 has no interfaces? [ 1060.374032][ T6737] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1060.388226][T11137] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1060.411591][T11139] usb 10-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= b.98 [ 1060.422116][T11139] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.430622][T11139] usb 10-1: Product: syz [ 1060.435458][T11139] usb 10-1: Manufacturer: syz [ 1060.440537][T11139] usb 10-1: SerialNumber: syz [ 1060.513887][T11139] usb 10-1: config 0 descriptor?? [ 1060.835473][T11106] usb 10-1: USB disconnect, device number 30 [ 1061.240517][T11841] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1418'. [ 1061.250392][T11841] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1418'. [ 1061.615186][T11121] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1061.718816][T11121] usb 7-1: USB disconnect, device number 21 [ 1062.157923][T11848] 9pnet_fd: Insufficient options for proto=fd [ 1062.183902][T11137] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1062.252290][T11137] usb 4-1: USB disconnect, device number 28 [ 1062.473835][T11139] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1062.671267][T11139] usb 10-1: Using ep0 maxpacket: 8 [ 1062.751951][T11139] usb 10-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1062.761574][T11139] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.769899][T11139] usb 10-1: Product: syz [ 1062.774650][T11139] usb 10-1: Manufacturer: syz [ 1062.779616][T11139] usb 10-1: SerialNumber: syz [ 1062.826057][T11139] usb 10-1: config 0 descriptor?? [ 1062.849234][T11139] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1062.857795][T11139] usb 10-1: setting power ON [ 1062.862810][T11139] dvb-usb: bulk message failed: -22 (2/0) [ 1062.929039][T11139] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1063.047847][T11139] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1063.057471][T11139] usb 10-1: media controller created [ 1063.166843][T11139] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1063.286001][T11850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1063.364934][T11850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1063.400643][T11850] dvb-usb: bulk message failed: -22 (3/0) [ 1063.408239][T11850] usb 10-1: gpio_write failed. [ 1063.414220][T11850] dvb-usb: bulk message failed: -22 (3/0) [ 1063.583306][T11139] usb 10-1: selecting invalid altsetting 6 [ 1063.589396][T11139] usb 10-1: digital interface selection failed (-22) [ 1063.597841][T11139] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1063.697190][T11139] usb 10-1: setting power OFF [ 1063.702256][T11139] dvb-usb: bulk message failed: -22 (2/0) [ 1063.708197][T11139] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1063.718096][T11139] (NULL device *): no alternate interface [ 1063.924516][T11870] loop6: detected capacity change from 0 to 128 [ 1064.006898][T11870] EXT4-fs: Ignoring removed nobh option [ 1064.193891][T11870] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1064.271976][T11870] ext4 filesystem being mounted at /281/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1064.429644][T11139] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1064.518331][T11881] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1431'. [ 1064.586345][T11139] usb 10-1: USB disconnect, device number 31 [ 1064.956416][ T6558] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1065.351247][T11139] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 1065.498293][T11894] 9pnet_fd: Insufficient options for proto=fd [ 1065.601292][T11139] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1065.610994][T11139] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.619234][T11139] usb 5-1: Product: syz [ 1065.623966][T11139] usb 5-1: Manufacturer: syz [ 1065.628779][T11139] usb 5-1: SerialNumber: syz [ 1065.723025][T11139] usb 5-1: config 0 descriptor?? [ 1065.950618][T11139] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1067.662941][T11139] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1067.712632][T11139] usb 5-1: USB disconnect, device number 37 [ 1067.729259][ T7998] udevd[7998]: setting mode of /dev/bus/usb/005/037 to 020664 failed: No such file or directory [ 1067.769896][ T7998] udevd[7998]: setting owner of /dev/bus/usb/005/037 to uid=0, gid=0 failed: No such file or directory [ 1068.115379][T11928] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1442'. [ 1068.616096][T11934] loop6: detected capacity change from 0 to 128 [ 1068.655105][T11934] EXT4-fs: Ignoring removed nobh option [ 1068.806465][T11934] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1068.911988][T11934] ext4 filesystem being mounted at /286/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1069.103830][T11947] 9pnet_fd: Insufficient options for proto=fd [ 1069.423412][ T6558] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1070.592133][ T5821] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 1070.802111][T11972] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1454'. [ 1071.602422][T11121] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 1071.862916][T11121] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1071.872496][T11121] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.880753][T11121] usb 4-1: Product: syz [ 1071.885327][T11121] usb 4-1: Manufacturer: syz [ 1071.890140][T11121] usb 4-1: SerialNumber: syz [ 1071.999680][T11121] usb 4-1: config 0 descriptor?? [ 1072.111252][T11139] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1072.220965][T11121] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1072.282747][T11139] usb 10-1: Using ep0 maxpacket: 8 [ 1072.313077][T11139] usb 10-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1072.322962][T11139] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.332030][T11139] usb 10-1: Product: syz [ 1072.336498][T11139] usb 10-1: Manufacturer: syz [ 1072.341501][T11139] usb 10-1: SerialNumber: syz [ 1072.413838][T11139] usb 10-1: config 0 descriptor?? [ 1072.431306][T11139] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1072.439672][T11139] usb 10-1: setting power ON [ 1072.444615][T11139] dvb-usb: bulk message failed: -22 (2/0) [ 1072.457254][T11139] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1072.536155][T11139] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1072.545257][T11139] usb 10-1: media controller created [ 1072.613339][T11139] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1072.646670][T11989] dvb-usb: bulk message failed: -22 (3/0) [ 1072.653507][T11989] ===================================================== [ 1072.660670][T11989] BUG: KMSAN: uninit-value in cxusb_i2c_xfer+0x1303/0x18e0 [ 1072.668483][T11989] cxusb_i2c_xfer+0x1303/0x18e0 [ 1072.673695][T11989] __i2c_transfer+0xec7/0x30e0 [ 1072.678668][T11989] i2c_transfer+0x300/0x4b0 [ 1072.683584][T11989] i2cdev_ioctl_rdwr+0x7c2/0xc80 [ 1072.688740][T11989] i2cdev_ioctl+0xc36/0xf40 [ 1072.693596][T11989] __se_sys_ioctl+0x239/0x400 [ 1072.698438][T11989] __x64_sys_ioctl+0x97/0xe0 [ 1072.703338][T11989] x64_sys_call+0x1ebe/0x3db0 [ 1072.708227][T11989] do_syscall_64+0xd9/0x1b0 [ 1072.713055][T11989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.719129][T11989] [ 1072.721718][T11989] Local variable i.i838 created at: [ 1072.727024][T11989] cxusb_i2c_xfer+0x304/0x18e0 [ 1072.732118][T11989] __i2c_transfer+0xec7/0x30e0 [ 1072.737080][T11989] [ 1072.739550][T11989] CPU: 1 UID: 0 PID: 11989 Comm: syz.9.1459 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 1072.752204][T11989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1072.762575][T11989] ===================================================== [ 1072.769630][T11989] Disabling lock debugging due to kernel taint [ 1072.776201][T11989] Kernel panic - not syncing: kmsan.panic set ... [ 1072.782778][T11989] CPU: 1 UID: 0 PID: 11989 Comm: syz.9.1459 Tainted: G B 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 1072.796742][T11989] Tainted: [B]=BAD_PAGE [ 1072.801012][T11989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1072.811247][T11989] Call Trace: [ 1072.814650][T11989] [ 1072.817698][T11989] __dump_stack+0x26/0x30 [ 1072.822231][T11989] dump_stack_lvl+0x53/0x270 [ 1072.827032][T11989] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1072.833066][T11989] dump_stack+0x1e/0x25 [ 1072.837420][T11989] panic+0x4bd/0xd50 [ 1072.841563][T11989] kmsan_report+0x29d/0x2a0 [ 1072.846277][T11989] ? vprintk_default+0x3f/0x50 [ 1072.851238][T11989] ? __msan_warning+0x96/0x120 [ 1072.856192][T11989] ? cxusb_i2c_xfer+0x1303/0x18e0 [ 1072.861398][T11989] ? __i2c_transfer+0xec7/0x30e0 [ 1072.866544][T11989] ? i2c_transfer+0x300/0x4b0 [ 1072.871432][T11989] ? i2cdev_ioctl_rdwr+0x7c2/0xc80 [ 1072.876753][T11989] ? i2cdev_ioctl+0xc36/0xf40 [ 1072.881636][T11989] ? __se_sys_ioctl+0x239/0x400 [ 1072.886666][T11989] ? __x64_sys_ioctl+0x97/0xe0 [ 1072.891593][T11989] ? x64_sys_call+0x1ebe/0x3db0 [ 1072.896655][T11989] ? do_syscall_64+0xd9/0x1b0 [ 1072.901534][T11989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.907820][T11989] ? kmsan_get_metadata+0x105/0x1b0 [ 1072.913237][T11989] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1072.919775][T11989] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1072.926067][T11989] ? kmsan_get_metadata+0x105/0x1b0 [ 1072.931482][T11989] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1072.938029][T11989] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1072.944310][T11989] ? mutex_unlock+0x29/0x50 [ 1072.949010][T11989] ? kmsan_get_metadata+0x105/0x1b0 [ 1072.954428][T11989] __msan_warning+0x96/0x120 [ 1072.959208][T11989] cxusb_i2c_xfer+0x1303/0x18e0 [ 1072.964274][T11989] ? kmsan_get_metadata+0x105/0x1b0 [ 1072.969687][T11989] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1072.975727][T11989] ? kmsan_get_metadata+0x105/0x1b0 [ 1072.981149][T11989] ? __pfx_cxusb_i2c_xfer+0x10/0x10 [ 1072.986534][T11989] ? __pfx_cxusb_i2c_xfer+0x10/0x10 [ 1072.991940][T11989] __i2c_transfer+0xec7/0x30e0 [ 1072.996921][T11989] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1073.003452][T11989] ? __pfx_i2c_adapter_lock_bus+0x10/0x10 [ 1073.009410][T11989] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1073.015700][T11989] ? __pfx_i2c_adapter_lock_bus+0x10/0x10 [ 1073.021660][T11989] i2c_transfer+0x300/0x4b0 [ 1073.026390][T11989] i2cdev_ioctl_rdwr+0x7c2/0xc80 [ 1073.031570][T11989] i2cdev_ioctl+0xc36/0xf40 [ 1073.036302][T11989] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1073.041533][T11989] __se_sys_ioctl+0x239/0x400 [ 1073.046396][T11989] __x64_sys_ioctl+0x97/0xe0 [ 1073.051181][T11989] x64_sys_call+0x1ebe/0x3db0 [ 1073.056087][T11989] do_syscall_64+0xd9/0x1b0 [ 1073.060801][T11989] ? irqentry_exit+0x16/0x60 [ 1073.065584][T11989] ? clear_bhb_loop+0x25/0x80 [ 1073.070470][T11989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1073.076573][T11989] RIP: 0033:0x7f271938e969 [ 1073.081138][T11989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1073.100961][T11989] RSP: 002b:00007f271a14f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1073.109580][T11989] RAX: ffffffffffffffda RBX: 00007f27195b5fa0 RCX: 00007f271938e969 [ 1073.117720][T11989] RDX: 0000200000002580 RSI: 0000000000000707 RDI: 0000000000000004 [ 1073.125850][T11989] RBP: 00007f2719410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1073.133989][T11989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1073.142111][T11989] R13: 0000000000000000 R14: 00007f27195b5fa0 R15: 00007ffefe5efd78 [ 1073.150276][T11989] [ 1073.153725][T11989] Kernel Offset: disabled [ 1073.158124][T11989] Rebooting in 86400 seconds..