last executing test programs: 26.476973824s ago: executing program 4 (id=1656): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) r0 = dup(0xffffffffffffffff) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x7fffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0xc2}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r0, 0x0, 0x0, 0x0, 0x80000}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f00000000c0)={0x0, 0x17, 0x5, 0x1, 0x2, [0x0], [0x8, 0x7fffffff, 0x1, 0x7], [0x1ff, 0xfffffe00, 0x3, 0xbd], [0x8001, 0xcab, 0x9, 0xfffffffffffff2e8]}) (async, rerun: 32) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000140)={0x65e29f16}, 0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={r9, 0x80000}) socket$inet6_sctp(0xa, 0x1, 0x84) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_trace_dev_match', 0x0, 0x9) syz_usb_connect(0x2, 0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="120100036ffa680863070120ff2c0102030109024000021109400c0904080601ff8bbd020a240107000d02010205240503", @ANYBLOB="698bf4564af38da049cf71d9e43d"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 25.966049363s ago: executing program 4 (id=1657): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00}) fsopen(0x0, 0x0) socket(0x2b, 0xa, 0x7) gettid() (async) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@delqdisc={0x300, 0x25, 0x400, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xf, 0x7}, {0x4, 0xfff2}, {0xa, 0x2}}, [@TCA_STAB={0xa8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x4, 0x7, 0x5, 0x0, 0x2, 0x0, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x80, 0x51, 0x9, 0x0, 0x0, 0xffffffff, 0x7, 0x6}}, {0x10, 0x2, [0x8, 0x2, 0x6, 0xe3, 0xf, 0x401]}}, {{0x1c, 0x1, {0x3, 0x7, 0x0, 0x6, 0x43a5e3655ad619c0, 0x2, 0xe8c, 0x2}}, {0x8, 0x2, [0x40, 0x3f92]}}, {{0x1c, 0x1, {0x3, 0x6, 0x3, 0xd42b, 0x1, 0x3, 0x2, 0x8}}, {0x14, 0x2, [0x2, 0x6, 0xfa5, 0x1000, 0x7, 0x0, 0xb, 0x1176]}}]}, @TCA_STAB={0x120, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x94, 0x4, 0xff, 0x1, 0x4, 0x200, 0x5}}, {0xe, 0x2, [0xd8, 0x3, 0x1000, 0x10, 0x919b]}}, {{0x1c, 0x1, {0x40, 0x40, 0xb, 0x709, 0x2, 0x10, 0x5, 0x7}}, {0x12, 0x2, [0x8a0a, 0x3ff, 0xfffb, 0xda, 0x9, 0x7, 0x1]}}, {{0x1c, 0x1, {0x9, 0x9, 0x3, 0x8000, 0x2, 0x9, 0xb, 0x4}}, {0xc, 0x2, [0x9, 0xed, 0xa84, 0x9696]}}, {{0x1c, 0x1, {0x3, 0x2, 0x0, 0x101, 0x1, 0x4, 0xffff8000}}, {0x4}}, {{0x1c, 0x1, {0x5, 0x3b, 0x1, 0x6, 0x2, 0x7, 0x7, 0x1}}, {0x6, 0x2, [0xfff0]}}, {{0x1c, 0x1, {0x1, 0x80, 0xb588, 0x40, 0x1, 0x7f, 0xfffffffb, 0x6}}, {0x10, 0x2, [0x9, 0xcb, 0x2, 0x2, 0x7, 0xc]}}, {{0x1c, 0x1, {0xd, 0x1, 0x3, 0x67, 0x1, 0x1, 0x2cb, 0x4}}, {0xc, 0x2, [0x2, 0x0, 0x2, 0x2]}}]}, @TCA_STAB={0x10c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf7, 0x85, 0x5, 0x4, 0x1, 0x1dd, 0x4f, 0x3}}, {0xa, 0x2, [0x9, 0x4, 0x5]}}, {{0x1c, 0x1, {0x6, 0xe, 0x9, 0x8000, 0x1, 0x0, 0x4, 0x2}}, {0x8, 0x2, [0x73f3, 0x1ff]}}, {{0x1c, 0x1, {0xdb, 0x40, 0xffff, 0xfffffff9, 0x1, 0x0, 0xfff, 0x9}}, {0x16, 0x2, [0x4, 0x9, 0x1ff, 0x101, 0x1, 0x7f, 0x0, 0xd6, 0x9]}}, {{0x1c, 0x1, {0x8, 0x6, 0x82, 0x8002, 0x2, 0x400, 0x1000, 0x9}}, {0x16, 0x2, [0x0, 0x5a4, 0x4, 0x6, 0x3, 0x7, 0x3, 0x7000, 0x4]}}, {{0x1c, 0x1, {0x3, 0x0, 0x6, 0x6, 0x2, 0xd985, 0x2, 0x2}}, {0x8, 0x2, [0x6, 0xdba7]}}, {{0x1c, 0x1, {0x6, 0x3, 0x8, 0x5, 0x1, 0x3, 0x3d4b, 0x8}}, {0x14, 0x2, [0x3, 0x6, 0x1, 0x87, 0x0, 0x1, 0x0, 0x2]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7fff}]}, 0x300}}, 0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f00000001c0)=ANY=[@ANYBLOB="302d080008c3f6bae7a30211000001ffeeffffffff506e21bc3055b7fefc91f7d55050505050030418000500a9002d1a0080046f000000000200000000060005a87a110055"], 0x3a) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000244100, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000244100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x12, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64) socket$nl_route(0x10, 0x3, 0x0) 24.902468049s ago: executing program 4 (id=1661): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x48, 0x0, &(0x7f0000000cc0)=[@reply={0x40406301, {0x8000001, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0}}, @exit_looper], 0x0, 0x0, 0x0}) 24.738923194s ago: executing program 4 (id=1662): openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x6, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x4000000, 0xe3]}}, 0x5c) sendmmsg$unix(r1, &(0x7f00000003c0)=[{{&(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000380)=[{&(0x7f00000002c0)="03fc432275ceb82ebf704ed6ffecca2c3165938f52ec08346bccdc47d694505692e01d9743553b066b74896a4e1e82be82d65050f824630cb3b65ea9bafdca69bbc3849766c8da86efb6f2b6d20705dd52a33ae6", 0x54}, {&(0x7f0000000100)="7312ef40c39a57354bdf8ec66a5a07899c7c03fc9d1c55ce548c7a0eefddf7e77aac813f94d9", 0x26}, {&(0x7f0000000240)="0fc7141c536e5a34bd404cabb69baa9a844fe6432980991f55741ca450a09dc594f850d4cf4ea91203c7ff16a75b3a366a2f586354f8fb", 0x37}, {&(0x7f0000000340)="2d03de3fec06df67494c7089c5ea929bc50c078368a244484ec96613841b42", 0x1f}], 0x4, 0x0, 0x0, 0x80}}], 0x1, 0x4040) add_key(&(0x7f0000000400)='cifs.spnego\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="be8ce2737c5655b8fedda5191866dde08c36fae3e488d80ed77aad7d464b2f7d78b92c496751febb36e24304190bb4834d3e87a3c0d63a03c0301e810a6b57c86481b1221ba289b38c02854137fda393e0bc4e864ffa648bac62994632a31408c0e6f9ea199583cb21816fd830c02d83c5ae2739f6caed0191944fc8d2ea67ec3ea77b70a0e7624a888c9447b65d66bb30d40b87599a53420a57500257fe18e08caf434eef1a14acca3e275e5669dd3365e9baca654cbbe2dbb7e65a", 0xbc, 0xfffffffffffffffb) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 23.828332908s ago: executing program 4 (id=1666): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1b) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000100)) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f00008ba000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00005b7000/0x2000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mremap(&(0x7f00003fd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000000000000000000ffffffff0000000000", @ANYRES32=0x1], 0x50) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0182101, &(0x7f0000000100)) writev(r0, &(0x7f0000001600), 0x0) 22.327089442s ago: executing program 4 (id=1673): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x0, 0x0}}) r3 = socket$inet(0xa, 0x801, 0x84) listen(0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000007d000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x7, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) r7 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) write$sndseq(r7, 0x0, 0x0) r8 = syz_open_procfs(0x0, 0x0) readv(r8, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r8, 0x80045300, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 21.856441458s ago: executing program 32 (id=1673): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x0, 0x0}}) r3 = socket$inet(0xa, 0x801, 0x84) listen(0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000007d000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x7, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a7c000000060a030400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c000280240003007339f2f304fdd672bad09dfb040000000000000001f9580dabf95ddc91967c2008000240000000000c00010052415445455354000900020073797a3200000000140000001100010000000000000000000100000a294213a216864f00e95c117851f81fd83a7d9c71ebcd5ef03a143dd5fa619aa52b434e05b5a722d003bd2144cb358edacd30954f4b4c04e7db98522a99bf90c91b36aef1b48df6aa3539608f720c436ef2b0fbf7c5990196308b6c"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) r7 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) write$sndseq(r7, 0x0, 0x0) r8 = syz_open_procfs(0x0, 0x0) readv(r8, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r8, 0x80045300, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 9.587485424s ago: executing program 1 (id=1719): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$midi(0x2, 0x2b, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x200c, 0x100b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x19, 0x1, 0x1, 0x7, 0x40, 0xf8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x0, [@midi_out_jack={0x7, 0x24, 0x3, 0x2, 0x7, 0x0, [], 0xff}]}}}}}]}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x41002, 0x408}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 8.067987344s ago: executing program 1 (id=1723): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x13, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0xff2f}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x7732561d5b88ce84, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="736563757216ae2c697479"], 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000200)=ANY=[@ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x2000c010) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@ieee802154={0x24, @short}, &(0x7f0000000340)=0x80, 0x80000) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000680)=ANY=[]) 6.862776879s ago: executing program 5 (id=1729): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="48000000100039040000", @ANYRES32=0x0, @ANYBLOB="01980000000000002800128008000100677265001c00028008000600ac14543008000700e000"], 0x48}, 0x1, 0x0, 0x0, 0x20044080}, 0x8000000) 6.688184112s ago: executing program 5 (id=1730): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x2400c0c7, 0x1}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) io_uring_enter(0xffffffffffffffff, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r6, 0xc0205866, &(0x7f00000000c0)={&(0x7f0000000040)=0x401, 0xca, 0x0, 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newqdisc={0xc4, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x94, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xcb96, 0x7, 0xffffff7f, 0xe, 0x0, 0x1}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xfd, 0xfffff6d9}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x0, 0xf0000000}}, @TCA_NETEM_CORR={0x10, 0x1, {0x7fff, 0x8000, 0x4fe0}}, @TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x40, 0x4d, 0x4}}, @TCA_NETEM_CORR={0x10, 0x1, {0x0, 0x27, 0x6}}]}}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) sendto$inet(r6, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 5.365519677s ago: executing program 1 (id=1732): io_setup(0x8, &(0x7f00000000c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r1, 0x8800000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x80003, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) pipe(&(0x7f0000000400)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, 0x0, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x11490421, 0x5, 0x800, 0x0, 0x1, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(r5, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c0a200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x8) fallocate(r7, 0x10, 0x400000000000460e, 0x7) 4.851556604s ago: executing program 5 (id=1733): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32=r0, @ANYBLOB="06001c004e21000008000100ac1414", @ANYRES8], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r2, &(0x7f0000001b00)={0x2a, 0x3, 0x7fff}, 0xc) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100090808004149004001040800", 0x58}], 0x1) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000140), 0x10000, 0x40000) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000000100)=0x5) 4.402184772s ago: executing program 3 (id=1735): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x3c, r2, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x3c}}, 0x80) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x70, 0x3}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_team\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 4.377524541s ago: executing program 5 (id=1736): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x42, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x100000001, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r2 = syz_io_uring_setup(0x8cf, &(0x7f00000023c0)={0x0, 0x2411, 0x80, 0x1, 0x262}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = syz_open_dev$vbi(&(0x7f0000000200), 0x2, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfe, 0x10}, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mlock2(&(0x7f0000348000/0x4000)=nil, 0x4000, 0x0) madvise(&(0x7f0000610000/0x3000)=nil, 0x3000, 0x8) ioctl$VIDIOC_ENUMAUDIO(r5, 0xc0345641, &(0x7f0000000280)={0x1, "87022476e56bd7b2da6de8b0984de637807daf493da1e03bc0d34e5297cb004e"}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x18, 0x0, r1, &(0x7f0000002380)={0x50000000}, r5, 0x3, 0x0, 0x1, {0x0, r7}}) io_uring_enter(r2, 0x47ba, 0x3e7e, 0x60, 0x0, 0x0) connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/kexec_loaded', 0x103080, 0x103) read$FUSE(r8, &(0x7f0000000300)={0x2020}, 0x2020) ppoll(&(0x7f0000000380), 0x0, 0x0, 0x0, 0x0) socket(0x3, 0x1, 0x1000) timer_create(0x7, &(0x7f0000001140)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x100000000005}) mprotect(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x100000a) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000000600)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000000000ad8eea0000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000efffffff00000000000000000000000000000000000000fcffffff0000000000000000000000010000000000000000000000000000000000000000000000000000000000000000fcffffff00"]}, 0x108) timer_settime(r9, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) lsm_get_self_attr(0x67, 0x0, &(0x7f0000002a00)=0x4d, 0x0) 4.142647175s ago: executing program 3 (id=1737): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcb, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) sendmmsg(r3, 0x0, 0x0, 0x200c0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="080005000b000000050053"], 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=ANY=[@ANYBLOB="400100001a000100feffffff00011900ac1e01010000000000000000a01c0ede8329a675000000000000000000000001000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc010000000000000000000000000001fe000000000000009201000000000010a39b000000000800ffff0000000000001c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffff9030000000000007e00000005350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0002"], 0x140}}, 0x844) 3.987489295s ago: executing program 3 (id=1738): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="680200001a000100feffffff00010000e0000002000000000000000000000000fc0100000000000000000000000000010001071c4e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff000000000000000000000000000001000004d46c000000fc02000000000000000000000000000100000000000000009201000000000010a39b0000ff800000ffff0000000000001c250800000000000500000000000000fcfffffffffffffb0000000000000000ffffffffffffffff00000000000000001f00000000000020fefffffffffffffffefffffffc030000000000008000000005350000020001002000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f0102"], 0x268}}, 0x844) 3.8558204s ago: executing program 0 (id=1739): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) fcntl$setstatus(r0, 0x4, 0x400) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x14, 0x4) (async) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) writev(r1, &(0x7f0000000740)=[{&(0x7f0000000380)="03", 0x1}], 0x1) (async) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) open_tree(r2, &(0x7f0000000640)='\x00', 0x89901) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x14, r3, 0x30b, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x200000d0) (async) get_mempolicy(0x0, &(0x7f0000000040), 0x3adc1ea9, &(0x7f0000ffb000/0x3000)=nil, 0x7) (async) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @remote}, {{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x40, 0x8, 0x0, 0x0, {[@exp_fastopen={0x1d, 0x5, 0xf989, 'P'}, @md5sig={0x13, 0x12, "81a11af3cdf38296b558c3853ddabe16"}]}}}}}}}, 0x0) r6 = fsopen(&(0x7f00000000c0)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000040)='source', &(0x7f0000000d00)='//_:e\xa4/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\xa5\x94\x0e\x0et\x8d@\xdc\x03+\xcf\xbf\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffb}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/udp6\x00') ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000180)={0x2, 0xef, &(0x7f0000000380)="8f3c8ca7c98533df09d217c95e34bfd2dcc5f67f181379efb10c093f600c0e7e5ee84605aa6e51abd73c0dafa35d1364e2b78615fc96dbe4e077592cd7c8836e7005352d39ad4afa3839297bf88d2c384ac56fca67efd53fb7871d39df00ebaf5171a530a9b2d6933fc7de25bd80b388c48a4308c8d81c29b44f9b4a174bf15b17eda44a86d4e43d11b7ee19ed98ba2a710fdeffab18e96f40b2c7126f306ddfa423c17d4e1ce04ca41cced2a6e5e72ebe799d18b9d6bf94e171c1eb90171020366f0fe9dbf1a904f724a11094f25baa0182b5f9386e88f7dba3c59cc7f8aa5e20608f9b992065a77cf55d7bcd313a"}) read$dsp(r3, &(0x7f00000002c0)=""/140, 0x8c) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x4}, 0x8) sendto$inet6(r6, &(0x7f00000003c0)='\x00', 0x1, 0x20000000, &(0x7f0000000480)={0xa, 0x4e23, 0x1c, @loopback, 0x1}, 0x1c) sendmmsg$sock(r6, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="c9", 0x1}], 0x1}}], 0x2, 0x48890) shutdown(r6, 0x1) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000780)=""/76, 0x0, 0x80a0000}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000006c0)) 3.365652087s ago: executing program 2 (id=1746): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x768}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) close_range(r4, 0xffffffffffffffff, 0x0) close(r3) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021880000000c0a01030000000000000000070000090900020073797a31000000000900010073797a30000000005c000380580000800400018050000b80200001800a00010071756f7461000000100002800c00014000000000000000002c0001800a0001006c696d69740000001c0002800c00024000000000000000000c0001400000000000000003140900001000010000000000000000000084000a2946e6626156edb383315166627764bc2095113af8209daa777c03965cdbc54f"], 0x10c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r8, 0xc0286405, &(0x7f0000000080)={0x0, 0x9, {0xffffffffffffffff}, {0xffffffffffffffff}, 0xbd, 0x6}) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000100)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000140)="8c997b313ce83aa22d1b8483033cf4f6cc407b4885be95c8c16550bbc06bc8706bbe765b20c215fde7ab13bf047b2a8145a1d6745c6e8e2a48ddb0a6", 0x3c}, {&(0x7f00000001c0)="290b20c8021027d114a66b8d6f7f97faa3c6f2f5f39d28238192b576e01799e97cd619389ea8", 0x26}, {&(0x7f0000000700)="fef06fcb8d9909c1edfaf5b61c5d047cf6eeffdf8591005c18ab544a1fec6bf1a74da1a8fabd52217a3dba231b8d7348b885b5c8032b18636b188efafd39c5a0cea0b4dd68c25a36426fc67563300e9888daa02c6cf4872bf25095d12bc5821e8dc5ee55b06630a0c3ee143e9267e88dfe4a4c07e013", 0x76}], 0x3, &(0x7f00000002c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x30}}, {{&(0x7f0000000980)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000bc0)=[{&(0x7f00000009c0)="7c450cfc62efaafc59a14a32d832938838f53282e8c0c4b51e2dd5b952378fe670c2b873e9a0f059e0ea0fec4ea640ea0fbfcb00f44133de7b2ea0d1fa20777aea633b5714235ad3499bc03bdde0646d7a65c3a657936580ea791d4d15c00582cbde87a4e38750063a94304d0db7e03d3f45a413215052cac9daf52ee7c68038e428fa346394e642e8c01e4b8113c231dff30185a07377cf57cea28aa1e8aaaaf78b5001abe2f878863a4f7b706da9c8928f18359c6672c2ebdf5c763042b2a76394b400b09484", 0xc7}, {&(0x7f0000000ac0)="ddcd9a72539129d3dade058b299a6ccd4f48a2750d075de9bd5fb81c14aeef55cebe0104c95ea2e523bda85a3eb311420b92cdce10c116bb9f5845eac7e0", 0x3e}, {&(0x7f0000000b00)="b49a67d2da49d4a7e8f0c7706734ee74896ffce5c960004ada1c67ff8996303dd0f3c9c2d780518725ddea5a044ebd8ea257120a555ef0dcc98bae186cfb3a5c87fbd14f747c2de7f505091446f41294a07f834afc6d2d2e519a931ffefb1bb60587b7ed21074fe1c399d95490818319efe2d678458efb0610db92bb104125fab743e5ae2c4ba32d765fe5da87195c1c8cd9ab5ca0e18636f2abca7e989759dfca5bb58e1638660be8fb4ea8", 0xac}], 0x3}}, {{&(0x7f0000000c00)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000c40)="fb8a88583ba640a2162f214d0972817e9ec95a3bd21768429108586cdf62a4d5efb7ed3bb3931d5ba805e47ab2d996516912715c324abd4f146ae94fd60cc557420c3f45576e9db076f42462b27c2c37a6e3c7dcc232efad7b75419b701bbac1fd0619390b8d89abb8b5b0b10abd2aed9ed4c3a4b980c70d2487319acc3152fc4054baaccf1b0ac832cc84", 0x8b}, {&(0x7f0000000d00)="867cf003f919bcdd99ccb9882a4ae5af066ee73f456dd3130b83f1a0b016125f493e2cd1d5093c179e5ee4bfc2cb638933347b916f68", 0x36}, {&(0x7f0000000d40)="880459fbfa510f70373fe1f6f5d8ba5f988f87fb4199bab82423d998fa6d3d19d706a52c8e86114a6812b4a7f58a60385af4bf0aef704c55e37f9ec7e52f7e2f3fa4e286c80271e30666f0b86f1fbcde25cb116485e2f0b56a3fbc14db4f95484835928ef8df5731fba492428e245e3d14e7f9078f5dab511d8cb88de1cadc1250de2da085b548ceb1379e836f87091500442af4d5f636253f7684b0624f16c419805554472799b6278f4d4ebbae1994e795751569cd1f6b19436d93c4a982df69", 0xc1}, {&(0x7f0000000e40)="daf40be4633e4ce6877adfdc2184d124ca32f616f4e09cb794808fb8e2a160701a1255173a5c5cc8b469b9dd6c843c7acc7e11e9df6f69a1c8d2ffee1eaf6be59fb5be8d81", 0x45}], 0x4, &(0x7f0000000f00)=[@ip_retopts={{0x68, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0xf4, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x1f, 0xb9, [@multicast2, @loopback, @private=0xa010101, @multicast1, @multicast2, @loopback, @local]}, @rr={0x7, 0x23, 0xad, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @broadcast, @rand_addr=0x64010100, @empty, @rand_addr=0x64010100, @broadcast]}, @generic={0x86, 0x2}, @lsrr={0x83, 0x7, 0x8b, [@local]}, @generic={0x88, 0x2}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @dev={0xac, 0x14, 0x14, 0x37}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @broadcast}}}], 0xf8}}, {{&(0x7f0000001000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000001280)=[{&(0x7f0000001040)="61de0772b79c105e01985367aeb0d5ea2d65ae753a2f3e8069308d60b1f0a4a4f0c9424d79", 0x25}, {&(0x7f0000001080)="f3cb9b2fdaa930464825c22de71e44f76639912b685720f62e0ab628c06b3c6960f2f275d0039a61e111d53035a558653e7d092ecbb2241326321861d8d83363eafe", 0x42}, {&(0x7f0000001100)="ea661360fef339442b903d9a8712f46d9e3fe5f40fd2b2675608e832dd0fa4d94b182b476c022c7865c66d5feb6af32486955a8f45a391bfd6c1c5fb8c05c00824cceb", 0x43}, {&(0x7f0000001180)="94b80ff3f3fcaaf6a8f588fa5b3401e1a63ef7dfd2badf5a42b0c800517345f4619ab0afd7b4603a7c0a043253ce680b6260e45ff00a6e733440a7858f03a0d3a0c16893d41e3e0dc964b57abd92cb9db124dea15f6514d8b4bd2b783f63098f88a9d36ce5174b5c34dd3add8a0e661a731afc6d93c74ffd8f6e2fb4cfdde3f50a3e6094e8f9dcdff801d1c6cea03d34273b9e511150bbdefa1bf7a9d1d19681799db104766cc09395edd1d08e146080904228c7dd9830ca94308c3c9feaa71178db4146e621f1e0af138538a3bc03a330769e74316a7fd09e77a7547c", 0xdd}], 0x4}}, {{&(0x7f00000012c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001380)=[{&(0x7f0000001300)="b5d2935fc2ee15b358003f18c2b93f261ff65321fe04d7c313fdc2ea276564a3dca1c0b9a742e7103f4b1984498e937ebbe9fb1c1cdaacf0ce1e68d069d10f8e71d7a694f939", 0x46}], 0x1, &(0x7f00000013c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffffff7}}], 0x18}}, {{&(0x7f0000001400)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000001440)="aa178b9c5dbc8441d5f00c0263d76f9a7e3068deb16d1846f44cf421cdf9516577a9", 0x22}, {&(0x7f0000001480)="6a1b29c5c1c72c31fa4846cf381370296ba4e172b5c4b3cd0d81768981273c9872f6c76f6b6795081209a31d6b5971a419ca1d0ab0d9093816ae10050fbf284145c2bcfef4c2d6bbc080a8300d2590", 0x4f}, {&(0x7f0000001500)="302c682df48b383d8339b2bd21ba5943cc80c97e318a4fbb95db6afbaa39f6989d82868c8067757f6d6de4cc4bb077453e28c6a8c39568477af1d50a6ee374de534c510eb4fad6383bad1235e22d12cc7803da94f9fdd2d324abc65e0df2e8ce7972cabbad8473e29422ab2e0da9b4e93ad5ded9d30d5f0030914a91823a61b078658e60b87d9f82abf1d24da4690f7bccf8ecc91b3047c16f1e550d3492e5b6df76d7d1b2405bb642555e8aab8e7a6e69b93a4156bb7da82919d7e3fb3c549d6ef82dcc298d165939513eab48b0d1f034e5128865", 0xd5}, {&(0x7f0000001600)="5594c88ff1a04decb35a3a0819b9e7b4690832430e2ed0920980134061b20b829327516bf4057c224cca640e35f0b72e14707f0bb5feaa3aa40d0f5e3733ebcc267d1591b5228c1f126cbdfda66c29a0cce69748f6c6309f6a6f1907061e1879f6d92d7761388248d35288473906bd2f2412229f9f9e70b17d3ef463878f3b1c1e5d9ff2e4f5b34a7034067ec5709c47058f2a97fc85993c4a50cb71c5f08780d5", 0xa1}, {&(0x7f00000016c0)="a3b886fb9e0d683e9cc122125831d162533c7a87cf6eb8af5fbd556395a8b3bd750acdb2576db9a5705e175701bb37d957c3266471c971f3ee8dec4c8461be2ff47c9d08df4060ce3b8f7eaf074fa9edbd16592ae52b1feb95eb730ca081359e97f791c086206c8ac033f1584c6c2064edad248fc2a3663c6cf0298232997110f57c4716875675350d5b0371", 0x8c}, {&(0x7f0000001780)="83bb5e20a5e80d9291403039fdfe4c84f03420a38cac59d1c32b45b46156a7a5522a2718548e7dd45206b975ccbe384008ed10904da91a4822401ccc297f059955b9a6fa3e46c8155e02f98766603238b21b2474a0dde56be8eebfcdbf56d01ac0ad3e397fcb3ab33709142b31226f8bd4d0f31d37bfd0dd4bd83a70f4edba3b433c1afdc42365b52cd304099d042e3b3f46c81aced4217d6daa35f59010a7de95ea88d646b6", 0xa6}, {&(0x7f0000001840)="a343313c02c81945cc3f919fd63b841e786170806f308fcbd9a866d8ddbe1a33db9b8fae4152e12b281ec7d190748cd869356d1efd72ced907a7725eb973e987ba08f56176a17a54f7d26404059a75197cc7a76bd791241c9e6feab1d0c198cbf08a042d8bd11fa1bf0ffc8e9d15d9bc1f5689724e3cf8cda10611d772bee2373761e70af61e3697f37814ccaec885ed0cee6ddfd4f07b4e37bda29acebd5aaad54c9f5f51d1718d5a35c94609abd64a4eb927", 0xb3}, {&(0x7f0000001900)="3dedb1c65e18aeed43a21bd98cf33d6c62cfe33a5d4cec88375aa432b5f818bab8819a019287a6d8d8e36af1b466ce1b319c7bbf63d117abacef3290332daf26cedadeb67a970cc88404fce55214edb09ac38b9ed2477bbcb0c7233f8a36cb2d5f15ca657cdbf0a1ad4a0fffe245ef67bc33835fa404e646fcb6f5fdade8df13b43568a2a696404923ec95be9903c7b12f43e3d559cacb72195ae5d260f61cad7ad1171d36d5ce778d64a669142ccd95c018993c78caf1308fd35b6e3a0b7c35beddb8193ae2babd016fa7936229f383da8fc432c698f7de49a36a28b93377", 0xdf}, {&(0x7f0000001a00)}], 0x9, &(0x7f0000001b00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xf4}}], 0x18}}, {{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001b40)="7ed429f143f26705d8be999cf8542dec7adbb2539b3c177b87b725e75bd0720e54520b7280b16fe8d03be39ae2bf8df6fb8eebc9c0db3e131afe733058c2a6922b4e3ca1effb1900371b336c6871eb4376fda99a2c0aafe8baf69360e8d9e9ff5257587d77b172c4c9a5a9e407704701c51e9d812ef4b9dc4e71ada656013008e79d3baccded86847ff4cfff2aaaf94d8124c86a9c72cfbafe9ab2171a53fafe82707bb7beb6cd218a4faaaaa5471acbba1b10fcce25bc9e170e63be35f24711a9bd0d11539606c616e983", 0xcb}, {&(0x7f0000001c40)="99c1ff1556880c636b6eeb1d7c5e5e61e7fc7feaca5647956aa514b2609cc25de23637917f0be16503ac60892fd4f16b7bf6a91d0e71e52e82b984a147319d629fe1b52fa4ea890fe3f20905496bbb9a143de80979c72d575b6d04fa0662e028", 0x60}, {&(0x7f0000001cc0)="2cc4c955b7e8d1d0da3202d179b2050ac83cb44eaee72c81f9d363aca7fa63", 0x1f}, {&(0x7f0000001d00)="f9fc99d065a0976c04def5cb210dbd0754707759691055cd739ed68ab0", 0x1d}, {&(0x7f0000001d40)}, {&(0x7f0000001d80)="cd4c50bde21647d754815e110a26b98999eb914789675fd89c31", 0x1a}, {&(0x7f0000001dc0)="1485b1587838e6c3eb31c726b8b1533c74178ba55fee2c4ad9e5f532b178197c433cc3b3b3749e3c5a4569d3b99e0196cdac9648fc284eda901e4abcad8d84adafbe9d", 0x43}], 0x7, &(0x7f0000001ec0)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0xc4, 0x0, 0x9, [0x7, 0xffff, 0x80000001, 0x6, 0x101, 0xfffffffc]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3f7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1ff}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@end, @rr={0x7, 0xb, 0x90, [@broadcast, @local]}]}}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@ra={0x94, 0x4}, @noop, @timestamp_addr={0x44, 0x2c, 0x67, 0x1, 0x8, [{@broadcast, 0xf0ee}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x1}, {@private=0xa010101, 0x3}, {@multicast2, 0x9}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x6}]}, @noop, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}, @ip_ttl={{0x14}}, @ip_retopts={{0x54, 0x0, 0x7, {[@generic={0x88, 0x8, "dbcb01f89db3"}, @timestamp_addr={0x44, 0xc, 0xbe, 0x1, 0x8, [{@loopback, 0x1ccb02af}]}, @ssrr={0x89, 0x23, 0x4f, [@multicast2, @private=0xa010100, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xdb, 0x3, 0xc, [{@multicast2, 0xffff}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x170}}], 0x7, 0x20) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"597aebb3200720801b0e6ba1c3c9395fa6939c9dfe61db731224a32e0e42a97ae54fa5934b3561c8b03878ea755360e1f5398d1ba0cabf6cf8281c713f1e24f6703e7b2139576f37f3343e77d5a7cc22391cd2cdcb81ce51eebfc55762fb866b1c78576c01006aa946b4bc5c06fd6e52e796c7e52630b4abf83a601b07f7178f50c4c9c50a210675d61beb4e28c375f45f347b81fc61fc31b0d3b2bca1ddda53e9f1999cc99ba57f5f6f0674748cc787ecf4cc36db31b276f802c8fab94774fc2370e62ff40f62ba4d27133b1529efbfaea33f7e3c24b64c38b64c2002349c8a1e2dee73e24eb570aeeeba66d4d5f2ffe4b52bc0e341fd3772ac3e465da234d70e806555d345ac3b45dc1c229c8e127e1fe544b70bbad8f3b79e5c0562b10958531e17656b1ab6ef9c7352b709c2a19b3bdd33613c9ef2eeacafb51d090a45032a89ad46bd2859bce48ae4f90f977d83d39db160f6c075af0c77130e5429f8b5e31569d78aa49f670474a4430357acfe713640fdeed88971b78b69b1652bd6e1d6ef4c3d9eb2e32871efaa26bae28839c51799f881fbebd0dda92b58bff3429d89641d35c0d4818137038f7463ba658e8cfa8c504e9c0833d41ae483f2d64aa6ec60199e2eb121c90a8a4956b4121504a1913c2052b33500fc610ca396fd549de3462c2e6a7164c931fd7900707f8ab4498bbad75109d28f421fb7a1d276e15a497a385c23189b33d4e02efb94670e07a03a4908b990a925542154c86694d84c65bac5a0e9e2f2e36b95aac26d64447ffd828f831380bc6eece3db2c18693d29b59760ed2ebabd7b9bf874126a7f08205c81a0df5ff169b236cf3d05002f1798913f3f75292f1f1c42a9151170309d0bda87447719341e85b7aa07f07965205c37ea21b5504eb97eab44a70a7b2597ce0af2608c5cc2a85366ec11e47e2a197c6e038f6f9f4d1d25edb077f6d98d44305c4ebc803047409dfa8e6f93d9ce63ab434957924dbdefefc99bff0bb4a68142e04c7c20954541728ed4505377ba88ec208ce064e3c8a7943577e20804932e0571a902cf0c45c54dbacb9968ed15fee9234fff2f631990bf840f5693d285ecd94688c63a251dd2e2a7d0049ee2c45c1e695b87711cf5a6d31414d0f708e5d0fc03b2f37becf1e3267ff6b4d740c2b5d905ecf572d2c9f06b5da649af020b6931dfe057442e2cf12f28d93fd1b49f5716a0c2d773250c2caf8f52f2da9412ae377ed6f74a2f0123d6bb9fae78c37a88f029f1ecaf91d023bbf90a6110b21a015b3a6a4b5e54433c662e6162b114c128c158b8391eb5b57f8cdd4be5207bfbaded1a2063852f15fd2a9d00becc20d2432846c6254625d0af44119fd273ea85ccd4e18e47456bd72ea67a334d65368a8858322d8a1bd2786eb36138fa0b3600f44d03ba84615fcf998500"}) close_range(r0, 0xffffffffffffffff, 0x0) 3.359458165s ago: executing program 5 (id=1747): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_VLAN={0x6}]}, 0x24}}, 0x0) syz_usb_connect(0x5, 0xec, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0xe1, 0x5c, 0x5f, 0x10, 0xe8d, 0x760a, 0x6ec8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xda, 0x2, 0xfe, 0x4, 0x0, 0x27, "", [{{0x9, 0x4, 0xfc, 0xa, 0x1, 0x1b, 0xfc, 0xb7, 0xf0, [@uac_control={{0xa, 0x24, 0x1, 0x8000, 0xa}}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "c731277275"}, {0x5, 0x24, 0x0, 0xdb5}, {0xd, 0x24, 0xf, 0x1, 0xfffffeff, 0xa18, 0xfe, 0x6}, {0x6, 0x24, 0x1a, 0x2, 0x1}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0xc}, @acm={0x4, 0x24, 0x2, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x1}, @acm={0x4, 0x24, 0x2, 0xc}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x80}]}], [{{0x9, 0x5, 0x1, 0x3, 0x20, 0x4, 0xe, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x800}]}}]}}, {{0x9, 0x4, 0x4, 0x7f, 0x1, 0xbc, 0x3b, 0x5f, 0xd, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x2, 0x4, 0x4}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0xc, 0x1, 0x10}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x8, 0x3, 0x1, 0x7}, @as_header={0x7, 0x24, 0x1, 0x10, 0x6, 0x5}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7f, 0x3, 0x40, 0x9, "786a1d"}]}, @cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "d00dce02b001"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x3, 0x1, 0x4}, {0x6, 0x24, 0x1a, 0x0, 0x8}, [@mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x7, 0x100}, @mbim={0xc, 0x24, 0x1b, 0x3, 0x7, 0x6, 0xe, 0x4, 0x1}]}], [{{0x9, 0x5, 0x3, 0x1, 0x3ff, 0x5, 0x9, 0x5}}]}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x3, 0xf0, 0x4, 0x20, 0xd9}, 0xf, &(0x7f0000000340)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x5, 0x9, 0x1}]}, 0x3, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x4ff}}, {0x9d, &(0x7f00000003c0)=@string={0x9d, 0x3, "ef93c6fb12d8630ced7181aca1fa2bfe848e2e4c6e476b73b2938151b8c87896e7dd79d87a79f16c8921a4c93c9e2d93b63191e2bd23940227dfd93dccea7660f6daf5532ff36cc7b5db3440fd8436373e9c5aa69573d0f80dff2fa398a1f99e09af4f7f2e8eb2ef674c8015ee1db29deca67f56ccfe65a87991c15fc592cad6a83bba109da78dde9ddf00617b13fa440d212cc5f32245d14c28ad"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x441}}]}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x210, 0x13}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x9, 0x3}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_team\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 3.008604499s ago: executing program 2 (id=1748): io_cancel(0x0, 0x0, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r0], 0x20}}, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4, 0x13, r1, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) (async) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff4, 0x2, 0x2, 0x0, 0x5, 0x7}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x19}, {0xb, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r10, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r10, 0x0) (async) futex_waitv(&(0x7f0000000ac0)=[{0x0, 0x0, 0x82}], 0x1, 0x0, &(0x7f0000000800)={0x77359400}, 0x0) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) (async) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r11, 0x100, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000840}, 0x1851) 2.306106746s ago: executing program 0 (id=1749): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x9) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/protocols\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000003900)=""/4104, 0x1008}], 0x1, 0x73, 0x0) (async) shutdown(r3, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_FORWARD(r1, 0x40084149, &(0x7f0000000000)=0x5) (async) syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="120100010038d408f01002204ddc0102030109022d00f4da06800809045f40030a0000400905ff0f010202040c09050a0c400001c60d090582"], 0x0) 2.18939747s ago: executing program 0 (id=1750): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x48, 0x0, &(0x7f0000000cc0)=[@reply={0x40406301, {0x8000001, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0}}, @exit_looper], 0x0, 0x0, 0x0}) 2.188860325s ago: executing program 2 (id=1751): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="680200001a000100feffffff00010000e0000002000000000000000000000000fc0100000000000000000000000000010001071c4e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff000000000000000000000000000001000004d46c000000fc02000000000000000000000000000100000000000000009201000000000010a39b000080ff0000ffff0000000000001c250800000000000500000000000000fcfffffffffffffb0000000000000000ffffffffffffffff00000000000000001f00000000000020fefffffffffffffffefffffffc030000000000008000000005350000020001002000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f0102"], 0x268}}, 0x844) 2.116557286s ago: executing program 2 (id=1752): socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './cgroup.cpu/cgroup.procs\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r3, &(0x7f0000002d40)={0x2020, 0x0, 0x0, 0x0}, 0xfffffffffffffc88) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80021}, 0xc, &(0x7f0000000380)={&(0x7f0000000a40)=ANY=[@ANYBLOB="741000002100100027bd7000fddbdf2500000000000000000000ffffac1e0001fe8000000000000000000000000000bb4e2100004e200000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="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"], 0x1074}, 0x1, 0x0, 0x0, 0x20000000}, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8003, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x7) sendmmsg$inet6(r5, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000004c0)="f3", 0x1}], 0x1}}], 0x1, 0x4000841) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r6}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x4, r7}, 0x38) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="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", 0xb5, 0x0) read$FUSE(r8, &(0x7f0000006300)={0x2020}, 0x402) r9 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x3, 0x2, 0x40, 0x4, 0x19, 0xfe}, {0x9, 0x5, 0x8f44bf2897946724, 0x2, 0x260, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xfd, 0x72}}}}}}]}}, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r9, 0xc0045516, &(0x7f0000000000)=0xffb) r10 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r10, 0xc0040d07, &(0x7f0000000040)=0x121) 2.074647009s ago: executing program 0 (id=1753): syz_open_dev$cec(0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) splice(r0, 0x0, r1, 0x0, 0x6, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kexec_load(0x0, 0x0, 0x0, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xff}, 0x1c) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0xff, 0xc}, 0x1b) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) lsm_get_self_attr(0x64, &(0x7f00000002c0)={0x0, 0x0, 0x35, 0x15, ""/21}, &(0x7f0000001280)=0x35, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$sg(&(0x7f0000000280), 0xfffffffffffffffa, 0x109202) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f00000000c0)={0x0, 0xe4, 0x5d}) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCFLSH(r6, 0x5608, 0x1) 1.950200045s ago: executing program 5 (id=1754): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x7c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, &(0x7f00000000c0)={0xffff0002, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9}, 0x94) syz_usb_connect$uac1(0x5, 0x9c, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109028a000301ffa0060904000000010100000a240100000202010207240504062e7d0904010000000000000000010101010200000c2402ec79030420be11d1d109050109758b0620010725010006efff0904020000010200000904020101010200001124020306040803000c0000000000000007240116050210090506090002"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0x0, 0x310, 0x0, 0x0, 0x1d8, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x2b, 0x5, 0x1, 0x18}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00], '\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x1], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) ioctl$KVM_CREATE_DEVICE(r2, 0xc018aec0, &(0x7f00000000c0)={0x1, 0xffffffffffffffff}) fcntl$setflags(r0, 0x2, 0x1) syz_usb_connect$hid(0xecd354649168cc25, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x44f, 0xb304, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb6, 0x80, 0x6, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x9, 0x0, 0x7, 0x10, 0x9}, 0xb0, &(0x7f0000000240)={0x5, 0xf, 0xb0, 0x5, [@wireless={0xb, 0x10, 0x1, 0x4, 0x2, 0x7, 0x7, 0x2, 0x2}, @generic={0x76, 0x10, 0x2, "15a0a9e28c273d00c6324988ada9c3e347c7c3086fb729fa0a259d3968fc441534875a52a201595e1a98058e36684d5ba6ef31f3565dd81a2e7485d62b7f45e872b9c13e9f84dba421cdc7cf13fc5f27407ab3756407f675c6b54a33cd9f16cd35242dd0cbf0dedbcc1ea3ddbf85d39cd87f5f"}, @wireless={0xb, 0x10, 0x1, 0x0, 0x4, 0x1, 0xa, 0x6, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x92, 0x5, 0x0, 0x80}, @ssp_cap={0x14, 0x10, 0xa, 0x1a, 0x2, 0x9, 0x0, 0xff78, [0xc0, 0xf0]}]}, 0x2, [{0x2, &(0x7f00000001c0)=@string={0x2}}, {0xd8, &(0x7f0000000540)=@string={0xd8, 0x3, "dc57ad6c9c772009de9b2cb547d918265810efe7ef8219479291fb66b277b0bf4be336319d5372cd1f2a70464ef0267d03eace90f2640a317884b2ea35b3890e971c23c1cb0df0ceb90cdf797bbc2aa696b8a0fca1e96eecd766873cf9b84664cf753c5d165a15d0fe75f74bc034f8585e68ce8417732fa54059b376e78044fedf512d297c1daca7d7cfd50bf4cfd8bed5f2c62ba8d93659dded5a55860ca4146a5eaf9c76d67755f2340a20a2aa7683a32ecacd3b9ccd914168f7c04e6d1e6d5f79bda6db9e06fdca880868ea2caaf739ca1ef2f055"}}]}) ioctl$OCFS2_IOC_GROUP_EXTEND(r4, 0x40046f01, &(0x7f0000000300)=0x9) openat$sndtimer(0xffffff9c, &(0x7f0000000080), 0x8040) r5 = socket(0x40000000015, 0x5, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x0, @local, 0x3}], 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x4000000, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, 0x4}, 0x10) 474.435211ms ago: executing program 1 (id=1755): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="48000000100039040000", @ANYRES32=0x0, @ANYBLOB="01980000000000002800128008000100677265001c00028008000600ac14543008000700e000"], 0x48}, 0x1, 0x0, 0x0, 0x20044080}, 0x8000000) 352.828002ms ago: executing program 3 (id=1756): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x2102, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="a400000013002f0a2bbd70000000000007006800", @ANYRES32=r3, @ANYBLOB="400900006522020084001a8009000100766c616e000000007400048070000480"], 0xa4}, 0x1, 0x0, 0x0, 0x40944}, 0x0) socket$inet6(0xa, 0x3, 0x5) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x200}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xd) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = socket$inet6(0xa, 0x3, 0xff) syz_io_uring_submit(0x0, 0x0, 0x0) r11 = dup2(r10, r10) sendmmsg$unix(r11, &(0x7f0000008380), 0x400000000000174, 0x4008890) 311.765567ms ago: executing program 0 (id=1757): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6800000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000902020073797a32000000001c0007801800018014000240fe8000000000000000000000800000bb05000500020000000500010006000000"], 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000480), 0xffff, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000001180)={0x1, 0x0, {0xe, 0x7, 0x200a, 0x6, 0x4, 0x2, 0x0, 0x7}}) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xff, 0x1, 0x6, 0x8e, 0x9, 0xcac0, 0xb}}}, 0x0) 0s ago: executing program 1 (id=1758): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e1f, 0x2, @mcast2, 0x1}, 0x1c) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) (async) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) (async) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x1) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x20000187}, 0x0) kernel console output (not intermixed with test programs): d configurations, error -61 [ 529.682320][ T10] usb usb1-port1: attempt power cycle [ 529.719414][ T24] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 529.740009][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 529.746205][ T24] usb 2-1: too many configurations: 106, using maximum allowed: 8 [ 529.746267][ T5905] usb 4-1: USB disconnect, device number 78 [ 529.756883][ T24] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 529.783584][ T24] usb 2-1: can't read configurations, error -61 [ 529.801201][ T24] usb usb2-port1: unable to enumerate USB device [ 529.948816][T10847] fuse: Unknown parameter 'user_i00000000000000000000' [ 530.029090][ T10] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 530.050123][ T10] usb 1-1: device descriptor read/8, error -71 [ 530.289118][ T10] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 530.319735][ T10] usb 1-1: device descriptor read/8, error -71 [ 530.404367][T10851] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1283'. [ 530.498111][ T10] usb usb1-port1: unable to enumerate USB device [ 530.560295][ T5924] usb 3-1: USB disconnect, device number 73 [ 531.523048][ T5905] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 531.619104][ T10] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 531.690696][ T5905] usb 3-1: config 1 has an invalid descriptor of length 59, skipping remainder of the config [ 531.719046][ T5905] usb 3-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 531.739007][ T5905] usb 3-1: config 1 interface 0 has no altsetting 0 [ 531.786969][ T5905] usb 3-1: string descriptor 0 read error: -22 [ 531.803746][ T10] usb 2-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 531.820431][ T5905] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.40 [ 531.831796][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.845544][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.863280][ T10] usb 2-1: Product: syz [ 531.887254][ T10] usb 2-1: Manufacturer: syz [ 531.917731][ T10] usb 2-1: SerialNumber: syz [ 531.924734][ T5905] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 531.949679][ T10] usb 2-1: config 0 descriptor?? [ 531.959851][ T10] hub 2-1:0.0: bad descriptor, ignoring hub [ 531.969089][ T10] hub 2-1:0.0: probe with driver hub failed with error -5 [ 531.997230][ T10] f81232 2-1:0.0: f81534a converter detected [ 532.189222][ T10] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 532.196393][ T10] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 532.346190][T10877] hub 1-0:1.0: USB hub found [ 532.352981][T10877] hub 1-0:1.0: 1 port detected [ 532.539809][ T10] usb 2-1: reset high-speed USB device number 67 using dummy_hcd [ 532.786908][T10887] netlink: 'syz.4.1293': attribute type 23 has an invalid length. [ 532.819320][T10888] netlink: 'syz.4.1293': attribute type 23 has an invalid length. [ 533.330904][ T24] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 533.452249][ T5924] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 533.493113][ T24] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 533.524471][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.554395][T10899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.574706][ T24] usb 1-1: Product: syz [ 533.582019][T10899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.590577][ T24] usb 1-1: Manufacturer: syz [ 533.595533][ T24] usb 1-1: SerialNumber: syz [ 533.617020][ T24] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 533.669894][ T1224] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 533.679027][ T5924] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 533.708570][ T5924] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 533.748020][ T5924] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 533.789105][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.818284][ T5924] usb 5-1: config 0 descriptor?? [ 533.910800][ T5924] usb 1-1: USB disconnect, device number 65 [ 534.242777][T10910] fuse: Unknown parameter 'user_i00000000000000000000' [ 534.396473][ T10] usb 2-1: USB disconnect, device number 67 [ 534.403413][ T10] f81232 2-1:0.0: device disconnected [ 534.718831][ T1224] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 534.747295][ T1224] ath9k_htc: Failed to initialize the device [ 534.756464][ T29] usb 3-1: USB disconnect, device number 74 [ 534.786309][ T5924] usb 1-1: ath9k_htc: USB layer deinitialized [ 535.201508][ T5924] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 535.373669][ T5924] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 535.384931][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.468108][ T5924] usb 2-1: Product: syz [ 535.527978][ T5924] usb 2-1: Manufacturer: syz [ 535.560525][ T5924] usb 2-1: SerialNumber: syz [ 535.616821][ T5924] usb 2-1: config 0 descriptor?? [ 535.651914][ T5924] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 535.949272][ T5905] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 535.980267][T10930] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 536.120742][ T5905] usb 3-1: config 5 has an invalid interface number: 123 but max is 0 [ 536.139246][ T5905] usb 3-1: config 5 has no interface number 0 [ 536.159065][ T5905] usb 3-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 536.202709][ T5905] usb 3-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 536.221796][ T5905] usb 3-1: config 5 interface 123 altsetting 7 endpoint 0x86 has invalid wMaxPacketSize 0 [ 536.247850][ T5905] usb 3-1: config 5 interface 123 has no altsetting 0 [ 536.269231][ T5905] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 536.300024][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.308058][ T5905] usb 3-1: Product: syz [ 536.324801][ T5905] usb 3-1: Manufacturer: syz [ 536.329993][ T5905] usb 3-1: SerialNumber: syz [ 536.366556][T10939] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1306'. [ 536.558419][T10928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.579516][T10928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.608348][ T5905] ni6501 3-1:5.123: driver 'ni6501' failed to auto-configure device. [ 536.638628][ T5905] usb 3-1: USB disconnect, device number 75 [ 536.763351][ T29] usb 5-1: USB disconnect, device number 66 [ 536.771441][ T5924] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 536.863891][T10945] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 536.929054][ T5924] usb 1-1: Using ep0 maxpacket: 16 [ 536.936298][ T5924] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 536.959022][ T5924] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 536.979133][ T30] kauditd_printk_skb: 90 callbacks suppressed [ 536.979149][ T30] audit: type=1326 audit(1773881414.664:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10923 comm="syz.1.1300" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f457699c799 code=0x0 [ 537.033281][ T5924] usb 1-1: New USB device found, idVendor=1d63, idProduct=0101, bcdDevice= 0.40 [ 537.045051][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.056206][ T5924] usb 1-1: Product: syz [ 537.060811][ T5924] usb 1-1: Manufacturer: syz [ 537.066233][ T5924] usb 1-1: SerialNumber: syz [ 537.096256][T10952] tipc: Failed to remove unknown binding: 66,0,0/0:2348987246/2348987248 [ 537.104868][T10952] tipc: Failed to remove unknown binding: 66,0,0/0:2348987246/2348987247 [ 537.137103][T10952] tipc: Failed to remove unknown binding: 66,0,0/0:2348987246/2348987248 [ 537.187079][T10952] tipc: Failed to remove unknown binding: 66,0,0/0:2348987246/2348987247 [ 537.287607][ T5924] usb 1-1: 0:2 : does not exist [ 537.310384][ T5924] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 537.515181][ T5924] usb 1-1: USB disconnect, device number 66 [ 537.683770][ T9745] udevd[9745]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 537.979126][ T29] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 538.018173][T10963] xt_hashlimit: size too large, truncated to 1048576 [ 538.164169][ T29] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 538.264312][ T10] usb 2-1: USB disconnect, device number 68 [ 538.327968][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.344189][ T29] usb 5-1: Product: syz [ 538.352286][ T29] usb 5-1: Manufacturer: syz [ 538.359152][ T29] usb 5-1: SerialNumber: syz [ 538.583500][ T29] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 538.664000][ T5924] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 538.717856][T10975] fuse: Unknown parameter 'user_i00000000000000000000' [ 539.075713][ T10] usb 5-1: USB disconnect, device number 67 [ 539.483179][T10986] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1317'. [ 539.493582][T10986] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1317'. [ 539.802880][T10993] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1319'. [ 539.812553][T10993] tc_dump_action: action bad kind [ 539.919464][ T5924] usb 5-1: Service connection timeout for: 256 [ 539.955566][ T5924] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 540.001846][ T5924] ath9k_htc: Failed to initialize the device [ 540.032565][ T10] usb 5-1: ath9k_htc: USB layer deinitialized [ 540.679055][ T5924] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 540.761730][T11015] netlink: 'syz.4.1325': attribute type 4 has an invalid length. [ 540.841400][ T5924] usb 1-1: unable to get BOS descriptor or descriptor too short [ 540.850931][ T5924] usb 1-1: not running at top speed; connect to a high speed hub [ 540.866944][ T5924] usb 1-1: config 5 has an invalid interface number: 150 but max is 0 [ 540.959300][ T5924] usb 1-1: config 5 has no interface number 0 [ 540.965497][ T5924] usb 1-1: config 5 interface 150 has no altsetting 0 [ 541.001207][ T5924] usb 1-1: New USB device found, idVendor=046d, idProduct=c281, bcdDevice=7a.a6 [ 541.012920][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.049178][ T5924] usb 1-1: Product: syz [ 541.053626][ T5924] usb 1-1: Manufacturer: syz [ 541.058538][ T5924] usb 1-1: SerialNumber: syz [ 541.286892][T11012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.295991][T11012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.333878][T11028] ipip0: entered promiscuous mode [ 541.448644][ T5924] usb 1-1: USB disconnect, device number 67 [ 541.759101][ T1224] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 541.809106][ T10] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 541.869167][ T5924] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 541.948580][ T1224] usb 5-1: Using ep0 maxpacket: 16 [ 542.074970][ T5924] usb 1-1: device descriptor read/64, error -71 [ 542.082394][ T1224] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 542.092819][ T1224] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 542.100668][ T10] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 542.115427][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.135307][ T1224] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 542.145892][ T1224] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.154106][ T1224] usb 5-1: Product: syz [ 542.154844][ T10] usb 4-1: config 0 has no interface number 0 [ 542.169097][ T10] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid wMaxPacketSize 0 [ 542.178474][ T1224] usb 5-1: Manufacturer: syz [ 542.178821][ T10] usb 4-1: config 0 interface 2 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 542.183537][ T1224] usb 5-1: SerialNumber: syz [ 542.229368][ T10] usb 4-1: config 0 interface 2 has no altsetting 0 [ 542.238819][ T10] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f [ 542.248632][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.261985][ T10] usb 4-1: Product: syz [ 542.269255][ T10] usb 4-1: Manufacturer: syz [ 542.276033][ T10] usb 4-1: SerialNumber: syz [ 542.285938][ T10] usb 4-1: config 0 descriptor?? [ 542.329253][ T5924] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 542.489102][ T5924] usb 1-1: device descriptor read/64, error -71 [ 542.599414][ T5924] usb usb1-port1: attempt power cycle [ 542.658243][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 542.810769][T11037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.823304][T11037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.880131][T11053] fuse: Unknown parameter 'user_id00000000000000000000' [ 542.955168][T11037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.973994][T11037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.075084][ T10] snd-usb-audio 4-1:0.2: probe with driver snd-usb-audio failed with error -12 [ 543.129058][ T5924] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 543.159784][ T10] usb 4-1: USB disconnect, device number 79 [ 543.170474][ T5924] usb 1-1: device descriptor read/8, error -71 [ 543.202412][ T9631] udevd[9631]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 543.431478][ T5924] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 543.459715][ T5924] usb 1-1: device descriptor read/8, error -71 [ 543.565474][T11063] fuse: Bad value for 'user_id' [ 543.570929][T11063] fuse: Bad value for 'user_id' [ 543.579809][ T5924] usb usb1-port1: unable to enumerate USB device [ 543.946069][T11078] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 544.139066][ T10] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 544.330858][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 544.339530][ T10] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 544.355144][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 544.375122][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 544.398096][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 544.419031][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 544.448620][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 544.477206][ T5924] usb 5-1: USB disconnect, device number 68 [ 544.479001][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.639236][T11085] QAT: Device 8 not found [ 544.713889][ T10] usb 3-1: usb_control_msg returned -32 [ 544.719773][ T10] usbtmc 3-1:16.0: can't read capabilities [ 544.953732][T11093] netlink: 67 bytes leftover after parsing attributes in process `syz.1.1346'. [ 545.049214][ T29] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 545.140230][ T1224] usb 3-1: USB disconnect, device number 76 [ 545.193292][ T29] usb 1-1: device descriptor read/64, error -71 [ 545.219642][ T5924] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 545.389069][ T5924] usb 2-1: Using ep0 maxpacket: 32 [ 545.401554][ T5924] usb 2-1: unable to get BOS descriptor or descriptor too short [ 545.414253][ T5924] usb 2-1: config 12 has an invalid interface number: 187 but max is 0 [ 545.426338][ T5924] usb 2-1: config 12 has no interface number 0 [ 545.437620][ T5924] usb 2-1: config 12 interface 187 altsetting 98 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 545.453868][ T29] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 545.479185][ T5924] usb 2-1: config 12 interface 187 has no altsetting 0 [ 545.490383][ T5924] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0115, bcdDevice=1d.41 [ 545.499829][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.507929][ T5924] usb 2-1: Product: syz [ 545.519042][ T1224] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 545.527287][ T5924] usb 2-1: Manufacturer: syz [ 545.533102][T11117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1353'. [ 545.542489][ T5924] usb 2-1: SerialNumber: syz [ 545.619678][ T29] usb 1-1: device descriptor read/64, error -71 [ 545.699072][ T1224] usb 3-1: Using ep0 maxpacket: 16 [ 545.705659][ T1224] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 545.717501][ T1224] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 545.726833][ T1224] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.734963][ T1224] usb 3-1: Product: syz [ 545.739936][ T29] usb usb1-port1: attempt power cycle [ 545.745438][ T1224] usb 3-1: Manufacturer: syz [ 545.750145][ T1224] usb 3-1: SerialNumber: syz [ 545.757723][T11093] netlink: 67 bytes leftover after parsing attributes in process `syz.1.1346'. [ 545.758725][ T1224] usb 3-1: config 0 descriptor?? [ 545.771031][T11123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.781505][ T1224] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 545.784185][T11123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.791826][ T1224] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 545.809966][ T5924] kvaser_usb 2-1:12.187: error -ENODEV: Cannot get usb endpoint(s) [ 545.819516][ T5905] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 545.823885][ T5924] usb 2-1: USB disconnect, device number 69 [ 545.959091][ T5905] usb 5-1: device descriptor read/64, error -71 [ 545.979012][T11104] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1349'. [ 546.050316][ T1224] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 546.099090][ T29] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 546.124894][ T1224] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 546.137431][ T1224] em28xx 3-1:0.0: board has no eeprom [ 546.144835][ T29] usb 1-1: device descriptor read/8, error -71 [ 546.199183][ T5905] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 546.209089][ T1224] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 546.217389][ T1224] em28xx 3-1:0.0: dvb set to bulk mode. [ 546.230577][ T24] em28xx 3-1:0.0: Binding DVB extension [ 546.245287][ T1224] usb 3-1: USB disconnect, device number 77 [ 546.262651][ T1224] em28xx 3-1:0.0: Disconnecting em28xx [ 546.323432][T11132] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 546.334115][ T5905] usb 5-1: device descriptor read/64, error -71 [ 546.344406][ T24] em28xx 3-1:0.0: Registering input extension [ 546.361884][ T1224] em28xx 3-1:0.0: Closing input extension [ 546.414036][ T1224] em28xx 3-1:0.0: Freeing device [ 546.419123][ T29] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 546.449648][ T5905] usb usb5-port1: attempt power cycle [ 546.468316][T11138] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1357'. [ 546.469581][ T29] usb 1-1: device descriptor read/8, error -71 [ 546.609317][ T29] usb usb1-port1: unable to enumerate USB device [ 546.799068][ T5905] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 546.819667][ T5905] usb 5-1: device descriptor read/8, error -71 [ 546.849093][ T10] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 546.999073][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 547.001868][ T10] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 547.014289][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.039831][ T10] usb 4-1: config 0 descriptor?? [ 547.089124][ T5905] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 547.119865][ T5905] usb 5-1: device descriptor read/8, error -71 [ 547.230383][ T5905] usb usb5-port1: unable to enumerate USB device [ 547.254497][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 547.264638][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 547.275609][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 547.283365][ T10] usb 4-1: media controller created [ 547.296393][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 547.449169][ T1224] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 547.462768][T11144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.473425][T11144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.483572][T11144] gre0: entered promiscuous mode [ 547.490358][T11144] gre0: entered allmulticast mode [ 547.599049][ T1224] usb 3-1: Using ep0 maxpacket: 8 [ 547.607027][ T1224] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 547.615500][ T1224] usb 3-1: config 0 has no interface number 0 [ 547.622640][ T1224] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 547.633802][ T1224] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 547.645531][ T1224] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 547.656628][ T1224] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 547.670814][ T1224] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 547.679936][ T1224] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.690483][ T1224] usb 3-1: config 0 descriptor?? [ 547.703709][ T1224] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 547.872873][T11162] tipc: Enabled bearer , priority 0 [ 547.938320][ T30] audit: type=1326 audit(1773881425.624:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11161 comm="syz.0.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa879c799 code=0x7ffc0000 [ 547.963877][ T30] audit: type=1326 audit(1773881425.654:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11161 comm="syz.0.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa879c799 code=0x7ffc0000 [ 547.987039][ T30] audit: type=1326 audit(1773881425.654:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11161 comm="syz.0.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f9aa879c799 code=0x7ffc0000 [ 548.013568][ T30] audit: type=1326 audit(1773881425.654:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11161 comm="syz.0.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa879c799 code=0x7ffc0000 [ 548.047204][ T1224] usb 3-1: USB disconnect, device number 78 [ 548.062493][ T1224] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 548.071500][ T30] audit: type=1326 audit(1773881425.654:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11161 comm="syz.0.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9aa879c799 code=0x7ffc0000 [ 548.100070][ T30] audit: type=1326 audit(1773881425.654:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11161 comm="syz.0.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa879c799 code=0x7ffc0000 [ 548.125927][ T30] audit: type=1326 audit(1773881425.654:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11161 comm="syz.0.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9aa879c799 code=0x7ffc0000 [ 548.154759][ T30] audit: type=1326 audit(1773881425.654:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11161 comm="syz.0.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa879c799 code=0x7ffc0000 [ 548.177917][ T30] audit: type=1326 audit(1773881425.654:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11161 comm="syz.0.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9aa879c799 code=0x7ffc0000 [ 548.202161][ T30] audit: type=1326 audit(1773881425.654:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11161 comm="syz.0.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa879c799 code=0x7ffc0000 [ 548.725753][T11161] tipc: Disabling bearer [ 548.742250][T11169] binder: 11168:11169 ioctl 4008ae89 200000000240 returned -22 [ 548.931890][T11173] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1366'. [ 549.349774][ T10] az6027: usb out operation failed. (-110) [ 549.365686][ T10] az6027: usb out operation failed. (-32) [ 549.377846][ T10] stb0899_attach: Driver disabled by Kconfig [ 549.390162][ T10] az6027: no front-end attached [ 549.390162][ T10] [ 549.405782][ T10] az6027: usb out operation failed. (-32) [ 549.419031][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 549.442679][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input37 [ 549.445817][T11187] QAT: failed to copy from user. [ 549.471453][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 549.495761][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 549.521326][ T5905] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 549.535645][ T10] usb 4-1: USB disconnect, device number 80 [ 549.617668][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 549.730182][ T5905] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 549.773163][T11193] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 549.784518][ T5905] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 549.796233][ T5905] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 549.805866][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.815358][ T5905] usb 3-1: Product: syz [ 550.102413][ T5905] usb 3-1: Manufacturer: syz [ 550.107990][ T5905] usb 3-1: SerialNumber: syz [ 550.157091][ T5905] usb 3-1: config 0 descriptor?? [ 550.189256][T11191] syzkaller0: entered promiscuous mode [ 550.195015][T11191] syzkaller0: entered allmulticast mode [ 550.348737][T11201] fuse: Unknown parameter 'user_id00000000000000000000' [ 550.561243][T11184] tipc: Enabling of bearer rejected, failed to enable media [ 550.614157][T11184] kvm: kvm [11183]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x40600 [ 550.859586][ T5819] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 551.159164][ T1224] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 551.170732][ T5819] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 551.193617][ T5819] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 551.308302][ T5819] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 551.321324][ T5905] mos7840 3-1:0.0: required endpoints missing [ 551.355422][ T1224] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 551.364586][ T5819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.593464][ T5905] usb 3-1: USB disconnect, device number 79 [ 551.597251][ T1224] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 551.646011][ T1224] usb 4-1: New USB device found, idVendor=05ac, idProduct=0267, bcdDevice= 0.00 [ 551.646839][ T5819] usb 5-1: config 0 descriptor?? [ 551.679120][ T1224] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.908350][ T1224] usb 4-1: config 0 descriptor?? [ 551.921365][T11207] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 552.506482][ T1224] apple 0003:05AC:0267.0013: unknown main item tag 0x0 [ 552.520912][ T1224] apple 0003:05AC:0267.0013: unknown main item tag 0x0 [ 552.545070][ T1224] apple 0003:05AC:0267.0013: unknown main item tag 0x0 [ 552.581028][ T1224] apple 0003:05AC:0267.0013: unknown main item tag 0x0 [ 552.605456][ T1224] apple 0003:05AC:0267.0013: unknown main item tag 0x0 [ 552.634367][ T1224] apple 0003:05AC:0267.0013: unknown main item tag 0x0 [ 552.657940][ T1224] apple 0003:05AC:0267.0013: unknown main item tag 0x0 [ 552.668631][ T1224] apple 0003:05AC:0267.0013: unknown main item tag 0x0 [ 552.683434][ T1224] apple 0003:05AC:0267.0013: unknown main item tag 0x0 [ 552.694410][ T1224] apple 0003:05AC:0267.0013: unknown main item tag 0x0 [ 552.712676][ T1224] apple 0003:05AC:0267.0013: collection stack underflow [ 552.724945][ T1224] apple 0003:05AC:0267.0013: item 0 0 0 12 parsing failed [ 552.740066][ T1224] apple 0003:05AC:0267.0013: parse failed [ 552.750897][ T1224] apple 0003:05AC:0267.0013: probe with driver apple failed with error -22 [ 552.772189][ T1224] usb 4-1: USB disconnect, device number 81 [ 552.939036][ T29] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 553.119076][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 553.125713][ T29] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 553.151850][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 553.173770][ T29] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 553.197887][ T29] usb 2-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 553.256518][ T29] usb 2-1: Product: syz [ 553.382816][ T29] usb 2-1: Manufacturer: syz [ 553.419255][ T29] usb 2-1: SerialNumber: syz [ 553.447848][ T29] usb 2-1: config 0 descriptor?? [ 553.485077][ T29] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 553.599191][ T5905] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 553.625735][T11241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 553.686624][T11241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 553.746079][T11242] pim6reg: entered allmulticast mode [ 553.771852][ T5905] usb 3-1: Using ep0 maxpacket: 32 [ 553.779997][ T5905] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 553.798463][ T5905] usb 3-1: config 0 has no interface number 0 [ 553.818832][ T5905] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 553.846184][ T5905] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 553.874529][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.896101][ T5905] usb 3-1: Product: syz [ 553.906324][ T5905] usb 3-1: Manufacturer: syz [ 553.916675][ T5905] usb 3-1: SerialNumber: syz [ 553.949167][ T5905] usb 3-1: config 0 descriptor?? [ 553.970336][ T5905] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 553.994941][ T5905] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 554.164455][ T5905] radio-raremono 3-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 554.368316][ T5905] radio-raremono 3-1:0.35: V4L2 device registered as radio48 [ 554.549411][ T49] usb 2-1: Failed to submit usb control message: -110 [ 554.556696][ T49] usb 2-1: unable to send the bmi data to the device: -110 [ 554.564385][ T49] usb 2-1: unable to get target info from device [ 554.576483][ T5905] usb 3-1: USB disconnect, device number 80 [ 554.576511][ T49] usb 2-1: could not get target info (-110) [ 554.620773][ T5905] radio-raremono 3-1:0.35: Thanko's Raremono disconnected [ 554.633569][T11249] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 554.676692][ T10] usb 5-1: USB disconnect, device number 73 [ 554.694980][ T49] usb 2-1: could not probe fw (-110) [ 555.231024][T11257] bridge0: port 3(erspan0) entered blocking state [ 555.244289][T11257] bridge0: port 3(erspan0) entered disabled state [ 555.254242][ T29] usb 2-1: USB disconnect, device number 70 [ 555.262339][T11257] erspan0: entered allmulticast mode [ 555.293391][T11257] erspan0: left allmulticast mode [ 555.365636][T11258] loop5: detected capacity change from 0 to 2647 [ 555.436580][ T9745] buffer_io_error: 108 callbacks suppressed [ 555.436602][ T9745] Buffer I/O error on dev loop5, logical block 330, async page read [ 555.589117][ T5905] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 555.766584][ T5905] usb 3-1: Using ep0 maxpacket: 16 [ 555.785683][ T5905] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 555.787247][T11277] libceph: resolve '. [ 555.787247][T11277] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 555.787247][T11277] ' (ret=-3): failed [ 555.796172][ T5905] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 555.798191][ T5905] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 555.851756][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.862889][ T5905] usb 3-1: Product: syz [ 555.868225][ T5905] usb 3-1: Manufacturer: syz [ 555.926982][ T5905] usb 3-1: SerialNumber: syz [ 556.114952][ T29] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 556.145282][ T5905] usb 3-1: 0:192 : does not exist [ 556.186360][ T1224] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 556.272954][ T5905] usb 3-1: USB disconnect, device number 81 [ 556.292217][ T9745] udevd[9745]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 556.338542][ T1224] usb 2-1: device descriptor read/64, error -71 [ 556.611444][ T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.622074][ T29] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 556.724029][ T10] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 556.725429][ T29] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 556.779082][ T1224] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 556.797178][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.808915][ T29] usb 4-1: config 0 descriptor?? [ 556.900764][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.919022][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.929047][ T1224] usb 2-1: device descriptor read/64, error -71 [ 556.979290][ T10] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 556.996646][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.063704][ T1224] usb usb2-port1: attempt power cycle [ 557.115031][ T10] usb 5-1: config 0 descriptor?? [ 557.479089][ T1224] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 557.511898][ T1224] usb 2-1: device descriptor read/8, error -71 [ 557.737131][T11284] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 557.750768][ T1224] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 557.771441][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 557.778782][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 557.791833][ T10] usb 5-1: USB disconnect, device number 74 [ 557.814455][ T1224] usb 2-1: device descriptor read/8, error -71 [ 557.929439][ T1224] usb usb2-port1: unable to enumerate USB device [ 557.969112][ T5905] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 558.129227][ T5905] usb 1-1: Using ep0 maxpacket: 32 [ 558.137365][ T5905] usb 1-1: config 37 has an invalid descriptor of length 170, skipping remainder of the config [ 558.152251][ T5905] usb 1-1: config 37 has 0 interfaces, different from the descriptor's value: 1 [ 558.188627][ T5905] usb 1-1: New USB device found, idVendor=4971, idProduct=1012, bcdDevice=1d.68 [ 558.199475][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.442038][T11299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1401'. [ 558.559879][ T1224] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 558.710461][ T1224] usb 3-1: Using ep0 maxpacket: 16 [ 558.720501][ T1224] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 558.735194][ T1224] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 558.761783][ T1224] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 558.771153][ T1224] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.782499][ T1224] usb 3-1: Product: syz [ 558.786815][ T1224] usb 3-1: Manufacturer: syz [ 558.835458][ T1224] usb 3-1: SerialNumber: syz [ 558.847120][ T10] usb 4-1: USB disconnect, device number 82 [ 558.903520][ T1224] usb 3-1: config 0 descriptor?? [ 558.927658][ T1224] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 558.961188][ T1224] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 559.347350][T11333] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 559.528688][ T1224] em28xx 3-1:0.0: chip ID is em2800 [ 559.729292][ T1224] em28xx 3-1:0.0: Config register raw data: 0x31 [ 559.736627][ T1224] em28xx 3-1:0.0: I2S Audio (3 sample rate(s)) [ 559.766144][ T1224] em28xx 3-1:0.0: No AC97 audio processor [ 559.832852][ T5924] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 559.943617][ T1224] usb 3-1: USB disconnect, device number 82 [ 560.000149][ T5924] usb 2-1: Using ep0 maxpacket: 8 [ 560.014800][ T5924] usb 2-1: device descriptor read/all, error -61 [ 560.149063][ T5924] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 560.170195][ T10] usb 4-1: new low-speed USB device number 83 using dummy_hcd [ 560.279173][ T5924] usb 2-1: device descriptor read/64, error -71 [ 560.320710][ T10] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 560.329259][ T10] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 560.337425][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 560.346564][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 560.357472][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 560.368322][ T796] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 560.375986][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 560.389421][ T5924] usb usb2-port1: attempt power cycle [ 560.519113][ T796] usb 5-1: device descriptor read/64, error -71 [ 560.729150][ T5924] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 560.750312][ T5924] usb 2-1: device descriptor read/8, error -71 [ 560.759073][ T796] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 560.845833][ T5905] usb 1-1: string descriptor 0 read error: -71 [ 560.862250][ T5905] usb 1-1: USB disconnect, device number 76 [ 560.891067][ T796] usb 5-1: device descriptor read/64, error -71 [ 560.899160][ T1224] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 560.989396][ T5924] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 561.009328][ T796] usb usb5-port1: attempt power cycle [ 561.015215][ T5924] usb 2-1: device descriptor read/8, error -71 [ 561.071795][ T1224] usb 3-1: config 0 has an invalid interface number: 99 but max is 0 [ 561.080227][ T1224] usb 3-1: config 0 has no interface number 0 [ 561.088363][ T1224] usb 3-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 561.097737][ T1224] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.105804][ T1224] usb 3-1: Product: syz [ 561.110130][ T1224] usb 3-1: Manufacturer: syz [ 561.114973][ T1224] usb 3-1: SerialNumber: syz [ 561.122023][ T1224] usb 3-1: config 0 descriptor?? [ 561.132135][ T5924] usb usb2-port1: unable to enumerate USB device [ 561.141225][ T1224] peak_usb 3-1:0.99: probe with driver peak_usb failed with error 99 [ 561.259108][ T5905] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 561.349063][ T796] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 561.369726][ T796] usb 5-1: device descriptor read/8, error -71 [ 561.409092][ T5905] usb 1-1: Using ep0 maxpacket: 16 [ 561.416471][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.428129][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.438156][ T5905] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 561.447280][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.457328][ T5905] usb 1-1: config 0 descriptor?? [ 561.609062][ T796] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 561.630106][ T796] usb 5-1: device descriptor read/8, error -71 [ 561.739469][ T796] usb usb5-port1: unable to enumerate USB device [ 561.871892][T11360] netem: incorrect gi model size [ 561.877241][T11360] netem: change failed [ 561.883071][T11360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.893136][T11360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.907240][ T5905] apple 0003:05AC:024B.0014: fixing up MacBook JIS keyboard report descriptor [ 561.917476][ T5905] apple 0003:05AC:024B.0014: unknown global tag 0xe [ 561.924716][ T5905] apple 0003:05AC:024B.0014: item 0 1 1 14 parsing failed [ 561.932921][ T5905] apple 0003:05AC:024B.0014: parse failed [ 561.938756][ T5905] apple 0003:05AC:024B.0014: probe with driver apple failed with error -22 [ 562.108660][ T5905] usb 1-1: USB disconnect, device number 77 [ 562.609123][ T5924] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 562.706214][T11367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1419'. [ 562.716773][T11367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1419'. [ 562.769199][ T5924] usb 2-1: Using ep0 maxpacket: 16 [ 562.780694][ T5924] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 562.794472][ T5924] usb 2-1: config 0 has no interface number 0 [ 562.806170][ T5924] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 562.821171][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.834438][ T5924] usb 2-1: Product: syz [ 562.844568][ T5924] usb 2-1: Manufacturer: syz [ 562.853404][ T5924] usb 2-1: SerialNumber: syz [ 562.866318][ T5924] usb 2-1: config 0 descriptor?? [ 562.876867][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.876962][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.893472][T11369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1420'. [ 562.932459][ T5924] hub 2-1:0.132: bad descriptor, ignoring hub [ 562.938920][ T5924] hub 2-1:0.132: probe with driver hub failed with error -5 [ 562.950646][ T10] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 562.952408][ T5924] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input39 [ 562.977951][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.011910][ T10] usb 4-1: config 0 descriptor?? [ 563.023974][ T10] usb 4-1: can't set config #0, error -71 [ 563.045597][ T10] usb 4-1: USB disconnect, device number 83 [ 563.160179][T11377] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1422'. [ 563.187410][T11362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.208526][T11379] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1423'. [ 563.219884][T11362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.238557][T11379] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1423'. [ 563.436687][ T24] hid_parser_main: 77 callbacks suppressed [ 563.436701][ T24] hid-generic 0003:0004:0000.0015: unknown main item tag 0x0 [ 563.482662][ T24] hid-generic 0003:0004:0000.0015: unknown main item tag 0x0 [ 563.490179][T11394] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1426'. [ 563.509263][ T29] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 563.527705][ T24] hid-generic 0003:0004:0000.0015: unknown main item tag 0x0 [ 563.539576][ T1224] usb 3-1: USB disconnect, device number 83 [ 563.596383][ T24] hid-generic 0003:0004:0000.0015: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 563.691315][ T29] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 60, changing to 7 [ 563.718755][ T29] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 563.726423][T11396] fido_id[11396]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 563.737094][ T29] usb 5-1: New USB device found, idVendor=0499, idProduct=5008, bcdDevice= 0.40 [ 563.754105][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.768259][ T29] usb 5-1: Product: syz [ 563.777100][ T29] usb 5-1: Manufacturer: syz [ 563.782089][ T29] usb 5-1: SerialNumber: syz [ 564.004121][T11379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.014717][ T1224] usb 2-1: USB disconnect, device number 79 [ 564.023491][T11379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.091124][ T24] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 564.259478][ T29] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 564.267113][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 564.286991][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 564.298098][ T29] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 564.323382][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 564.350312][ T29] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 564.357625][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 564.368558][ T29] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 564.380311][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 564.398863][ T29] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 564.412144][ T24] usb 1-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=9b.1d [ 564.463413][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.496362][ T24] usb 1-1: Product: syz [ 564.507291][ T24] usb 1-1: Manufacturer: syz [ 564.524161][ T24] usb 1-1: SerialNumber: syz [ 564.532446][ T29] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 564.554109][ T24] usb 1-1: config 0 descriptor?? [ 564.578919][ T29] usb 5-1: USB disconnect, device number 79 [ 564.586761][ T24] port100 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 564.632407][ T9745] udevd[9745]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 564.742088][T11409] tipc: Enabled bearer , priority 0 [ 564.749726][T11409] syzkaller0: entered promiscuous mode [ 564.755392][T11409] syzkaller0: entered allmulticast mode [ 564.765937][T11409] tipc: Resetting bearer [ 564.779070][ T10] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 564.809055][ T796] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 564.832968][ T5819] usb 1-1: USB disconnect, device number 78 [ 564.852559][T11412] binder: BINDER_SET_CONTEXT_MGR already set [ 564.858571][T11412] binder: 11411:11412 ioctl 4018620d 200000004a80 returned -16 [ 564.953009][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 564.961485][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 564.974615][ T10] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 564.984036][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.992534][ T10] usb 4-1: Product: syz [ 564.996770][ T10] usb 4-1: Manufacturer: syz [ 565.001747][ T10] usb 4-1: SerialNumber: syz [ 565.006657][ T796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.018831][ T796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.029033][ T29] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 565.030393][ T10] usb 4-1: config 0 descriptor?? [ 565.044432][ T796] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 565.057626][ T796] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 565.066962][ T796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.075899][ T10] hub 4-1:0.0: bad descriptor, ignoring hub [ 565.081945][ T10] hub 4-1:0.0: probe with driver hub failed with error -5 [ 565.091669][ T796] usb 2-1: config 0 descriptor?? [ 565.098875][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 565.192402][ T29] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 565.205354][ T29] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 565.215197][ T29] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 565.231062][ T29] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 565.240372][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 565.248938][ T29] usb 3-1: Product: syz [ 565.253544][ T29] usb 3-1: Manufacturer: syz [ 565.258193][ T29] usb 3-1: SerialNumber: syz [ 565.343031][T11405] kvm: kvm [11404]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 565.352378][T11405] kvm: kvm [11404]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 565.486893][ T29] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 84 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 565.674799][ T29] usb 4-1: USB disconnect, device number 84 [ 565.685284][ T1224] usb 3-1: USB disconnect, device number 84 [ 565.704024][T11408] tipc: Resetting bearer [ 565.712223][ T1224] usblp0: removed [ 565.751341][T11408] tipc: Disabling bearer [ 565.790691][T11419] loop8: detected capacity change from 0 to 7 [ 565.818110][T11419] Dev loop8: unable to read RDB block 7 [ 565.824713][T11419] loop8: unable to read partition table [ 565.829073][ T10] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 565.840479][T11419] loop8: partition table beyond EOD, truncated [ 565.847787][T11419] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 565.851373][ T796] steelseries 0003:1038:1410.0016: unknown main item tag 0x0 [ 565.876730][ T796] steelseries 0003:1038:1410.0016: unknown main item tag 0x0 [ 565.898141][ T796] steelseries 0003:1038:1410.0016: unknown main item tag 0x0 [ 565.929075][ T796] steelseries 0003:1038:1410.0016: unknown main item tag 0x0 [ 565.937475][ T796] steelseries 0003:1038:1410.0016: unknown main item tag 0x0 [ 565.949658][ T796] steelseries 0003:1038:1410.0016: unknown main item tag 0x0 [ 565.957099][ T796] steelseries 0003:1038:1410.0016: unknown main item tag 0x0 [ 565.979688][ T796] steelseries 0003:1038:1410.0016: missing HID_OUTPUT_REPORT 0 [ 566.006296][ T796] usb 2-1: USB disconnect, device number 80 [ 566.031898][ T10] usb 1-1: too many endpoints for config 1 interface 0 altsetting 13: 255, using maximum allowed: 30 [ 566.058704][ T10] usb 1-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 566.073048][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 566.083992][ T10] usb 1-1: string descriptor 0 read error: -22 [ 566.090655][ T10] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.40 [ 566.099783][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.718379][ T10] hid-udraw 0003:20D6:CB17.0017: unexpected long global item [ 566.737367][ T10] hid-udraw 0003:20D6:CB17.0017: parse failed [ 566.754410][ T10] hid-udraw 0003:20D6:CB17.0017: probe with driver hid-udraw failed with error -22 [ 566.992511][ T29] usb 1-1: USB disconnect, device number 79 [ 568.802493][ T10] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 569.017831][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 569.029669][ T10] usb 2-1: config 0 has no interface number 0 [ 569.094775][ T10] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 569.111306][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.127851][ T10] usb 2-1: Product: syz [ 569.170992][ T10] usb 2-1: Manufacturer: syz [ 569.183797][ T10] usb 2-1: SerialNumber: syz [ 569.217132][ T10] usb 2-1: config 0 descriptor?? [ 569.257888][ T10] usb 2-1: selecting invalid altsetting 1 [ 569.287627][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 569.294231][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 569.457265][ T10] DVB: Unable to find symbol stv0299_attach() [ 569.630514][ T10] DVB: Unable to find symbol tda8083_attach() [ 569.636724][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 569.660888][ T10] usb 2-1: USB disconnect, device number 81 [ 569.760742][ T796] usb 4-1: new low-speed USB device number 85 using dummy_hcd [ 569.919056][ T796] usb 4-1: Invalid ep0 maxpacket: 16 [ 570.049389][ T796] usb 4-1: new low-speed USB device number 86 using dummy_hcd [ 570.199064][ T796] usb 4-1: Invalid ep0 maxpacket: 16 [ 570.215911][ T796] usb usb4-port1: attempt power cycle [ 570.459061][ T1224] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 570.569107][ T796] usb 4-1: new low-speed USB device number 87 using dummy_hcd [ 570.591989][ T796] usb 4-1: Invalid ep0 maxpacket: 16 [ 570.609973][ T1224] usb 2-1: Using ep0 maxpacket: 32 [ 570.632219][ T1224] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1056, setting to 1024 [ 570.652086][ T1224] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 252, changing to 7 [ 570.689613][ T1224] usb 2-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40 [ 570.705325][ T1224] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.713729][ T1224] usb 2-1: Product: syz [ 570.729153][ T796] usb 4-1: new low-speed USB device number 88 using dummy_hcd [ 570.730196][ T1224] usb 2-1: Manufacturer: syz [ 570.755630][ T1224] usb 2-1: SerialNumber: syz [ 570.769831][ T796] usb 4-1: Invalid ep0 maxpacket: 16 [ 570.779424][ T796] usb usb4-port1: unable to enumerate USB device [ 571.295596][ T1224] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 571.318139][ T1224] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 571.347752][ T1224] usb 2-1: unit 130 not found! [ 571.468329][ T1224] usb 2-1: USB disconnect, device number 82 [ 571.532813][ T9745] udevd[9745]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 571.644433][T11487] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 572.089042][ T29] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 572.260767][ T29] usb 2-1: config 0 has an invalid interface number: 231 but max is 0 [ 572.271163][ T29] usb 2-1: config 0 has no interface number 0 [ 572.283626][ T29] usb 2-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 572.307751][ T29] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 572.325091][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.507743][ T29] usb 2-1: Product: syz [ 572.519497][ T29] usb 2-1: Manufacturer: syz [ 572.524651][ T29] usb 2-1: SerialNumber: syz [ 572.543510][ T29] usb 2-1: config 0 descriptor?? [ 572.554004][T11492] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 572.579535][ T29] plusb 2-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.1-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, b6:4c:37:c9:90:18 [ 573.758569][T11517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1457'. [ 574.503685][T11531] netlink: 'syz.2.1461': attribute type 1 has an invalid length. [ 574.873001][ T29] usb 2-1: USB disconnect, device number 83 [ 574.880749][ T29] plusb 2-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.1-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 575.345807][ T1224] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 576.299013][ T1224] usb 3-1: Using ep0 maxpacket: 16 [ 576.329848][ T1224] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.380355][ T1224] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 576.442396][T11571] input: syz1 as /devices/virtual/input/input40 [ 576.489941][ T1224] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 576.529010][ T1224] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.586088][ T1224] usb 3-1: config 0 descriptor?? [ 576.601273][ T5819] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 576.771690][ T5819] usb 5-1: unable to get BOS descriptor or descriptor too short [ 576.790022][ T5819] usb 5-1: not running at top speed; connect to a high speed hub [ 576.802889][ T5819] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 576.829432][ T5819] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 576.840865][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.857775][ T5819] usb 5-1: Product: syz [ 576.863213][ T5819] usb 5-1: Manufacturer: syz [ 576.867820][ T5819] usb 5-1: SerialNumber: syz [ 576.949121][ T24] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 577.017758][ T1224] hid_parser_main: 1 callbacks suppressed [ 577.017806][ T1224] belkin 0003:1020:0006.0018: unknown main item tag 0x0 [ 577.042448][ T1224] belkin 0003:1020:0006.0018: unknown main item tag 0x0 [ 577.058804][ T1224] belkin 0003:1020:0006.0018: unknown main item tag 0x0 [ 577.065939][ T1224] belkin 0003:1020:0006.0018: unknown main item tag 0x0 [ 577.074305][ T1224] belkin 0003:1020:0006.0018: unknown main item tag 0x0 [ 577.081784][ T1224] belkin 0003:1020:0006.0018: unknown main item tag 0x0 [ 577.088842][ T1224] belkin 0003:1020:0006.0018: unexpected long global item [ 577.100622][ T5819] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 577.106428][ T1224] belkin 0003:1020:0006.0018: parse failed [ 577.108346][ T5819] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 577.113451][ T1224] belkin 0003:1020:0006.0018: probe with driver belkin failed with error -22 [ 577.119066][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 577.127314][ T5819] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 577.140747][ T24] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 577.154091][ T24] usb 4-1: config 0 has no interface number 0 [ 577.166156][ T24] usb 4-1: config 0 interface 184 has no altsetting 0 [ 577.186339][ T24] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 577.204183][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.206884][ T5819] usb 5-1: USB disconnect, device number 80 [ 577.231327][ T24] usb 4-1: Product: syz [ 577.242632][ T9745] udevd[9745]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 577.253953][ T796] usb 3-1: USB disconnect, device number 85 [ 577.265284][ T24] usb 4-1: Manufacturer: syz [ 577.281116][ T24] usb 4-1: SerialNumber: syz [ 577.291416][ T24] usb 4-1: config 0 descriptor?? [ 577.551336][T11606] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1482'. [ 577.599266][ T1224] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 577.793401][ T1224] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 577.835056][ T1224] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 577.861333][ T1224] usb 2-1: config 220 has no interface number 2 [ 577.870812][ T1224] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 577.884116][ T1224] usb 2-1: config 220 interface 0 has no altsetting 0 [ 577.895007][ T1224] usb 2-1: config 220 interface 76 has no altsetting 0 [ 577.901974][ T1224] usb 2-1: config 220 interface 1 has no altsetting 0 [ 577.929121][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 577.959023][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 577.977770][ T1224] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 578.002108][ T1224] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.027894][ T1224] usb 2-1: Product: syz [ 578.035221][ T1224] usb 2-1: Manufacturer: syz [ 578.055542][ T1224] usb 2-1: SerialNumber: syz [ 578.312529][ T1224] usb 2-1: selecting invalid altsetting 0 [ 578.329531][ T1224] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 578.336931][ T1224] uvcvideo 2-1:220.0: No valid video chain found. [ 578.369109][ T796] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 578.370736][ T1224] usb 2-1: selecting invalid altsetting 0 [ 578.399024][ T1224] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 578.426773][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 578.438443][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 578.455280][ T1224] usb 2-1: USB disconnect, device number 84 [ 578.474611][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 578.509216][ T24] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 578.514664][T11640] binder_alloc: binder_alloc_mmap_handler: 11639 200000a35000-200000a36000 already mapped failed -16 [ 578.531983][ T796] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.541384][ T24] usb 4-1: USB disconnect, device number 89 [ 578.550524][ T796] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 578.573298][ T796] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 578.583208][ T796] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 578.599879][ T796] usb 1-1: Product: syz [ 578.615779][ T796] usb 1-1: SerialNumber: syz [ 578.927589][ T29] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 579.101266][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 579.112522][ T29] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 579.139033][ T29] usb 3-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 579.155738][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.176830][ T29] usb 3-1: config 0 descriptor?? [ 579.480905][ T10] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 579.594249][ T29] saitek 0003:06A3:0621.0019: ignoring exceeding usage max [ 579.603358][ T29] saitek 0003:06A3:0621.0019: unknown main item tag 0x1 [ 579.611851][ T29] saitek 0003:06A3:0621.0019: collection stack underflow [ 579.621446][ T29] saitek 0003:06A3:0621.0019: item 0 4 0 12 parsing failed [ 579.629551][ T29] saitek 0003:06A3:0621.0019: parse failed [ 579.635537][ T29] saitek 0003:06A3:0621.0019: probe with driver saitek failed with error -22 [ 579.648149][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 579.659232][ T796] cdc_ncm 1-1:1.0: bind() failure [ 579.673086][ T796] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 579.687657][ T10] usb 2-1: config 208 has an invalid interface number: 119 but max is 0 [ 579.701668][ T796] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 579.711333][ T10] usb 2-1: config 208 has no interface number 0 [ 579.717636][ T10] usb 2-1: config 208 interface 119 has no altsetting 0 [ 579.740139][ T796] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 579.742941][T11670] random: crng reseeded on system resumption [ 579.752391][ T10] usb 2-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 579.768084][ T796] usb 1-1: USB disconnect, device number 80 [ 579.777963][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.796902][ T5819] usb 3-1: USB disconnect, device number 86 [ 579.808140][ T10] usb 2-1: Product: syz [ 579.812794][ T10] usb 2-1: Manufacturer: syz [ 579.818056][ T10] usb 2-1: SerialNumber: syz [ 580.001580][T11676] netlink: 272 bytes leftover after parsing attributes in process `syz.3.1513'. [ 580.109088][ T29] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 580.267815][ T10] ums-alauda 2-1:208.119: USB Mass Storage device detected [ 580.279430][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 580.312482][ T29] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 580.339003][ T29] usb 5-1: config 0 has no interface number 0 [ 580.359062][ T29] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 580.385711][ T10] usb 2-1: USB disconnect, device number 85 [ 580.413613][ T29] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 580.414340][T11690] rtc_cmos 00:00: Alarms can be up to one day in the future [ 580.438698][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.450505][ T29] usb 5-1: Product: syz [ 580.455631][ T29] usb 5-1: Manufacturer: syz [ 580.489409][ T29] usb 5-1: SerialNumber: syz [ 580.505593][ T29] usb 5-1: config 0 descriptor?? [ 580.526740][T11672] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 580.747405][T11672] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 580.918809][T11713] syzkaller1: entered promiscuous mode [ 580.928639][T11713] syzkaller1: entered allmulticast mode [ 581.489364][ T10] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 581.659160][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 581.670898][ T10] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 581.689581][ T796] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 581.702651][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 581.729685][ T10] usb 2-1: config 0 has no interface number 0 [ 581.746059][ T10] usb 2-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 581.771007][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 581.789571][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.807894][ T10] usb 2-1: Product: syz [ 581.817110][ T10] usb 2-1: Manufacturer: syz [ 581.829191][ T10] usb 2-1: SerialNumber: syz [ 581.860032][ T10] usb 2-1: config 0 descriptor?? [ 581.876406][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 581.891684][ T10] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22 [ 581.900516][ T796] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 581.924497][ T796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.949369][ T796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.979223][ T796] usb 4-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 581.988380][ T796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.029501][ T796] usb 4-1: config 0 descriptor?? [ 582.055893][T11759] IPv4: Oversized IP packet from 127.202.26.0 [ 582.083090][ T10] usb 2-1: USB disconnect, device number 86 [ 582.443844][ T796] wacom 0003:056A:0010.001A: item fetching failed at offset 5/7 [ 582.452132][ T796] wacom 0003:056A:0010.001A: parse failed [ 582.457904][ T796] wacom 0003:056A:0010.001A: probe with driver wacom failed with error -22 [ 582.609109][ T10] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 582.655633][ T5819] usb 4-1: USB disconnect, device number 90 [ 582.669408][ T796] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 582.769107][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 582.775770][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.788242][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 582.798449][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 582.823856][ T10] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 582.833860][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.842477][ T796] usb 1-1: Using ep0 maxpacket: 8 [ 582.851563][ T796] usb 1-1: unable to get BOS descriptor or descriptor too short [ 582.861832][ T796] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 253, changing to 7 [ 582.874817][ T10] usb 3-1: config 0 descriptor?? [ 582.892235][ T796] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 582.911930][ T796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.922733][ T796] usb 1-1: Product: syz [ 582.923109][T11777] input: syz1 as /devices/virtual/input/input42 [ 582.926940][ T796] usb 1-1: Manufacturer: syz [ 582.938566][ T796] usb 1-1: SerialNumber: syz [ 582.971731][ T29] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 582.987356][ T29] asix 5-1:0.188: probe with driver asix failed with error -71 [ 583.009335][ T29] usb 5-1: USB disconnect, device number 81 [ 583.169091][ T796] usb 1-1: 1:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 583.178639][ T796] usb 1-1: found format II with max.bitrate = 4, frame size=397 [ 583.186865][ T796] usb 1-1: 1:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 583.206460][ T796] usb 1-1: found format II with max.bitrate = 4, frame size=397 [ 583.218481][ T796] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 583.286178][ T10] hid (null): unknown global tag 0xe [ 583.310657][ T10] hid-multitouch 0003:0457:07DA.001B: unknown main item tag 0x2 [ 583.318653][ T10] hid-multitouch 0003:0457:07DA.001B: reserved main item tag 0xe [ 583.339464][ T5819] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 583.369490][ T10] hid-multitouch 0003:0457:07DA.001B: unknown main item tag 0x1 [ 583.377191][ T10] hid-multitouch 0003:0457:07DA.001B: unknown global tag 0xe [ 583.401279][ T10] hid-multitouch 0003:0457:07DA.001B: item 0 0 1 14 parsing failed [ 583.410693][ T10] hid-multitouch 0003:0457:07DA.001B: probe with driver hid-multitouch failed with error -22 [ 583.462107][ T796] usb 1-1: USB disconnect, device number 81 [ 583.508181][ T29] usb 3-1: USB disconnect, device number 87 [ 583.509044][ T5819] usb 2-1: Using ep0 maxpacket: 32 [ 583.516076][ T9631] udevd[9631]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 583.544853][ T5819] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 583.590904][ T5819] usb 2-1: config 0 has no interface number 0 [ 583.627086][ T5819] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 583.646665][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.679162][ T5819] usb 2-1: Product: syz [ 583.683366][ T5819] usb 2-1: Manufacturer: syz [ 583.698422][ T5819] usb 2-1: SerialNumber: syz [ 583.720483][ T5819] usb 2-1: config 0 descriptor?? [ 584.135026][ T5819] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 584.168311][ T5819] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 584.569726][T11829] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1579'. [ 584.794260][T11839] kvm: pic: level sensitive irq not supported [ 584.795124][T11839] kvm: pic: level sensitive irq not supported [ 585.019798][ T24] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 585.192528][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 585.200672][ T24] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 585.210204][ T24] usb 5-1: config 0 has no interface number 0 [ 585.216343][ T24] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 585.229869][ T24] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 585.239180][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.247204][ T24] usb 5-1: Product: syz [ 585.259463][ T24] usb 5-1: Manufacturer: syz [ 585.264884][ T24] usb 5-1: SerialNumber: syz [ 585.274646][ T24] usb 5-1: config 0 descriptor?? [ 585.290002][T11835] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 585.532103][T11835] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 585.963116][ T24] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 585.994411][ T24] asix 5-1:0.188: probe with driver asix failed with error -71 [ 586.008781][ T24] usb 5-1: USB disconnect, device number 82 [ 587.435575][ T5819] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000024: -71 [ 587.457182][ T5819] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 587.478388][T11931] fuse: Unknown parameter '00000000000000000000' [ 587.490309][ T5819] usb 2-1: USB disconnect, device number 87 [ 587.659348][ T10] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 587.839028][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 587.846486][ T10] usb 4-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.858192][ T10] usb 4-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 587.871820][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 587.878537][ T10] usb 4-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 587.888812][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.901112][ T10] usb 4-1: config 0 descriptor?? [ 587.969072][ T29] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 588.119984][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 588.126781][ T29] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 588.139885][ T29] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 588.151839][ T29] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 588.164888][ T29] usb 5-1: config 1 interface 0 has no altsetting 0 [ 588.173778][ T29] usb 5-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 588.199059][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.207099][ T29] usb 5-1: Product: syz [ 588.211458][ T29] usb 5-1: Manufacturer: syz [ 588.216063][ T29] usb 5-1: SerialNumber: syz [ 588.323989][ T10] elo 0003:04E7:0030.001C: unknown main item tag 0x0 [ 588.339415][ T10] elo 0003:04E7:0030.001C: unknown main item tag 0x0 [ 588.354860][ T10] elo 0003:04E7:0030.001C: unknown main item tag 0x0 [ 588.368701][ T10] elo 0003:04E7:0030.001C: unknown main item tag 0x0 [ 588.382954][ T10] elo 0003:04E7:0030.001C: unknown main item tag 0x0 [ 588.397890][ T10] elo 0003:04E7:0030.001C: unknown main item tag 0x0 [ 588.411808][ T10] elo 0003:04E7:0030.001C: unknown main item tag 0x0 [ 588.425406][ T10] elo 0003:04E7:0030.001C: unknown main item tag 0x0 [ 588.439482][ T29] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 83 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 588.440129][ T10] elo 0003:04E7:0030.001C: unknown main item tag 0x7 [ 588.473662][ T10] elo 0003:04E7:0030.001C: unknown main item tag 0x0 [ 588.497085][ T10] elo 0003:04E7:0030.001C: unexpected long global item [ 588.524425][ T10] elo 0003:04E7:0030.001C: parse failed [ 588.541299][ T10] elo 0003:04E7:0030.001C: probe with driver elo failed with error -22 [ 588.578079][ T10] usb 4-1: USB disconnect, device number 91 [ 588.645085][ T29] usb 5-1: USB disconnect, device number 83 [ 588.665714][ T29] usblp0: removed [ 589.049515][ T29] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 589.244966][ T29] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 589.275114][ T29] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 589.311711][ T29] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 589.321311][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.333801][ T29] usb 1-1: Product: syz [ 589.339419][ T29] usb 1-1: Manufacturer: syz [ 589.344143][ T29] usb 1-1: SerialNumber: syz [ 589.460987][T11986] tipc: Enabling not permitted [ 589.466700][T11986] tipc: Enabling of bearer rejected, failed to enable media [ 589.559969][ T24] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 589.580287][ T29] usb 1-1: 0:2 : does not exist [ 589.585441][ T29] usb 1-1: unit 3 not found! [ 589.592179][ T29] usb 1-1: unit 64 not found! [ 589.612421][ T29] usb 1-1: 1:2 : does not exist [ 589.621522][ T29] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -16 [ 589.690550][ T29] usb 1-1: USB disconnect, device number 82 [ 589.767870][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 589.786688][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 589.806634][ T24] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 589.823379][ T24] usb 3-1: config 0 has no interface number 0 [ 589.834086][ T24] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 589.839919][T11994] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1648'. [ 589.859879][ T24] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 589.872013][ T24] usb 3-1: config 0 interface 88 has no altsetting 0 [ 589.885980][ T24] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 589.896751][ T24] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 589.913958][ T24] usb 3-1: Product: syz [ 589.951020][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 589.951039][ T30] audit: type=1326 audit(1773881467.624:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11987 comm="syz.4.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae359c799 code=0x7ffc0000 [ 589.985971][ T24] usb 3-1: Manufacturer: syz [ 590.090279][ T24] usb 3-1: SerialNumber: syz [ 590.209125][ T30] audit: type=1326 audit(1773881467.624:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11987 comm="syz.4.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f9ae359c799 code=0x7ffc0000 [ 590.233034][ T24] usb 3-1: config 0 descriptor?? [ 590.239490][ T30] audit: type=1326 audit(1773881467.624:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11987 comm="syz.4.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae359c799 code=0x7ffc0000 [ 590.262741][ T30] audit: type=1326 audit(1773881467.624:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11987 comm="syz.4.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f9ae359c799 code=0x7ffc0000 [ 590.291801][ T30] audit: type=1326 audit(1773881467.634:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11997 comm="syz.4.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9ae355cfce code=0x7ffc0000 [ 590.476896][ T30] audit: type=1326 audit(1773881467.634:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11987 comm="syz.4.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae359c799 code=0x7ffc0000 [ 590.501013][ T30] audit: type=1326 audit(1773881467.634:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11987 comm="syz.4.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae359c799 code=0x7ffc0000 [ 590.527146][ T24] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input44 [ 590.540063][ T30] audit: type=1326 audit(1773881467.764:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11987 comm="syz.4.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9ae359e007 code=0x7ffc0000 [ 590.563172][ T30] audit: type=1326 audit(1773881467.764:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11987 comm="syz.4.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae359c799 code=0x7ffc0000 [ 590.586067][ T30] audit: type=1326 audit(1773881467.764:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11987 comm="syz.4.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae359c799 code=0x7ffc0000 [ 590.676087][ T24] usb 3-1: USB disconnect, device number 88 [ 591.000611][T12006] ip6t_rpfilter: unknown options [ 591.080643][T12007] openvswitch: netlink: IP tunnel dst address not specified [ 591.089039][ T5819] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 591.249147][ T5819] usb 1-1: device descriptor read/64, error -71 [ 591.489873][ T5819] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 591.634534][T12025] syzkaller0: entered promiscuous mode [ 591.643156][T12025] syzkaller0: entered allmulticast mode [ 591.657951][ T5819] usb 1-1: device descriptor read/64, error -71 [ 591.781080][ T5819] usb usb1-port1: attempt power cycle [ 592.174327][ T5819] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 592.209717][ T5819] usb 1-1: device descriptor read/8, error -71 [ 592.339036][ T24] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 592.479037][ T5819] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 592.479133][ T24] usb 2-1: device descriptor read/64, error -71 [ 592.539757][ T5819] usb 1-1: device descriptor read/8, error -71 [ 592.659500][ T5819] usb usb1-port1: unable to enumerate USB device [ 592.749100][ T24] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 592.829322][ T5819] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 592.909080][ T24] usb 2-1: device descriptor read/64, error -71 [ 592.991516][ T5819] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 593.007692][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.029561][ T24] usb usb2-port1: attempt power cycle [ 593.034588][ T5819] usb 3-1: config 0 descriptor?? [ 593.057932][ T5819] cp210x 3-1:0.0: cp210x converter detected [ 593.399076][ T24] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 593.429814][ T24] usb 2-1: device descriptor read/8, error -71 [ 593.468284][ T5819] usb 3-1: cp210x converter now attached to ttyUSB0 [ 593.664716][T12039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.679567][T12039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.688132][ T24] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 593.692412][ T5819] usb 3-1: USB disconnect, device number 89 [ 593.718200][ T5819] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 593.730063][ T24] usb 2-1: device descriptor read/8, error -71 [ 593.752186][ T5819] cp210x 3-1:0.0: device disconnected [ 593.839488][ T24] usb usb2-port1: unable to enumerate USB device [ 594.550265][ T5819] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 594.570004][ T8725] syz_tun (unregistering): left allmulticast mode [ 594.710826][ T5819] usb 3-1: config index 0 descriptor too short (expected 65333, got 142) [ 594.740292][ T5819] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 594.761421][ T5819] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 594.789140][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.809679][ T5819] usb 3-1: Product: syz [ 594.813890][ T5819] usb 3-1: Manufacturer: syz [ 594.829183][ T5819] usb 3-1: SerialNumber: syz [ 594.873613][ T5819] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 594.891389][ T10] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 595.064674][ T7802] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.130773][ T24] usb 3-1: USB disconnect, device number 90 [ 595.382531][ T7802] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.437725][T12062] ip6gretap0: entered promiscuous mode [ 595.447035][T12062] macsec1: entered promiscuous mode [ 595.462396][T12062] macsec1: entered allmulticast mode [ 595.489136][T12062] ip6gretap0: entered allmulticast mode [ 595.519041][ T1224] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 595.597267][ T7802] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.704805][ T1224] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.716368][ T1224] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.731437][ T1224] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 595.741129][ T1224] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.762467][ T1224] usb 2-1: config 0 descriptor?? [ 595.824787][ T7802] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.999057][ T10] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 596.006239][ T10] ath9k_htc: Failed to initialize the device [ 596.037509][ T24] usb 3-1: ath9k_htc: USB layer deinitialized [ 596.090494][ T7802] bridge_slave_1: left allmulticast mode [ 596.096593][ T7802] bridge_slave_1: left promiscuous mode [ 596.121443][ T7802] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.192661][ T7802] bridge_slave_0: left allmulticast mode [ 596.198356][ T7802] bridge_slave_0: left promiscuous mode [ 596.222313][ T7802] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.263890][T12091] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 596.275078][T12091] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 596.283688][T12091] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 596.302792][T12091] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 596.315064][T12091] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 596.348815][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 596.356569][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 596.364595][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 596.372946][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 596.386248][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 596.398684][ T24] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 596.599029][ T24] usb 3-1: device descriptor read/64, error -71 [ 596.778311][T12100] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1677'. [ 596.851181][T12096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1675'. [ 596.969265][ T24] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 597.220503][ T24] usb 3-1: device descriptor read/64, error -71 [ 597.279106][ T7802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 597.361120][ T24] usb usb3-port1: attempt power cycle [ 597.370470][ T7802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 597.384241][ T7802] bond0 (unregistering): Released all slaves [ 597.473756][ T7802] bond1 (unregistering): Released all slaves [ 597.567567][ T7802] bond2 (unregistering): Released all slaves [ 597.617836][ T7802] bond3 (unregistering): Released all slaves [ 597.673721][ T7802] bond4 (unregistering): Released all slaves [ 597.688845][ T7802] bond5 (unregistering): Released all slaves [ 597.707487][ T7802] bond6 (unregistering): Released all slaves [ 597.976042][ T7802] tipc: Left network mode [ 597.991136][ T24] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 597.999215][ T1224] hid-led 0003:27B8:01ED.001D: probe with driver hid-led failed with error -71 [ 598.029535][ T1224] usb 2-1: USB disconnect, device number 92 [ 598.035670][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 598.060105][ T24] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 598.128672][ T24] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 598.180769][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 598.207077][ T24] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 598.227262][ T24] usb 3-1: Product: syz [ 598.251604][ T24] usb 3-1: Manufacturer: syz [ 598.302085][ T24] hub 3-1:4.0: USB hub found [ 598.541143][ T24] hub 3-1:4.0: config failed, hub has too many ports! (err -19) [ 598.631112][T12091] Bluetooth: hci4: command tx timeout [ 598.810166][T12108] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1678'. [ 598.847507][ T7802] hsr_slave_0: left promiscuous mode [ 598.861977][ T7802] hsr_slave_1: left promiscuous mode [ 598.873475][ T7802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 598.887679][ T7802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 598.896826][ T7802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 598.904340][ T7802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.927181][ T7802] veth1_macvtap: left promiscuous mode [ 598.935221][T12145] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 598.944440][ T7802] veth0_macvtap: left promiscuous mode [ 599.189056][ T10] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 599.318105][ T7802] team0 (unregistering): Port device team_slave_1 removed [ 599.348646][ T7802] team0 (unregistering): Port device team_slave_0 removed [ 599.371493][ T10] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 599.392545][ T10] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 599.417347][ T10] usb 2-1: Product: syz [ 599.429023][ T10] usb 2-1: Manufacturer: syz [ 599.441720][ T10] usb 2-1: SerialNumber: syz [ 599.618731][ T10] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 599.754361][T12104] chnl_net:caif_netlink_parms(): no params data found [ 599.820260][ T10] vp7045: USB control message 'out' went wrong. [ 599.827339][ T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 599.847603][ T10] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 599.866004][ T10] usb 2-1: USB disconnect, device number 93 [ 599.919309][ T5819] usb 3-1: USB disconnect, device number 93 [ 600.238322][T12104] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.271155][T12104] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.284083][T12104] bridge_slave_0: entered allmulticast mode [ 600.292786][T12104] bridge_slave_0: entered promiscuous mode [ 600.325058][T12104] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.348796][T12104] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.361552][ T1224] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 600.384639][T12104] bridge_slave_1: entered allmulticast mode [ 600.421101][T12104] bridge_slave_1: entered promiscuous mode [ 600.452619][ T7802] IPVS: stop unused estimator thread 0... [ 600.540643][ T1224] usb 1-1: Using ep0 maxpacket: 16 [ 600.564590][T12104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.574675][ T1224] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.597656][ T1224] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.613171][T12104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.640996][ T1224] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 600.676856][ T1224] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 600.686295][ T1224] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.694883][ T24] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 600.711615][T12091] Bluetooth: hci4: command tx timeout [ 600.723708][ T1224] usb 1-1: config 0 descriptor?? [ 600.794234][T12104] team0: Port device team_slave_0 added [ 600.814992][T12104] team0: Port device team_slave_1 added [ 600.863102][T12104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 600.872078][T12104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.874572][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 600.941243][T12104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.031115][T12186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1689'. [ 601.043951][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 601.056107][T12104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.067380][T12104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.093661][ T24] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 601.107911][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 601.121110][ T24] usb 3-1: SerialNumber: syz [ 601.145930][T12104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.163617][T12189] EXT4-fs: Conflicting test_dummy_encryption options [ 601.187932][ T1224] microsoft 0003:045E:07DA.001E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 601.232937][ T1224] microsoft 0003:045E:07DA.001E: no inputs found [ 601.244355][ T1224] microsoft 0003:045E:07DA.001E: could not initialize ff, continuing anyway [ 601.358003][ T24] usb 3-1: 0:2 : does not exist [ 601.398190][ T24] usb 3-1: unit 254 not found! [ 601.431965][ T1224] usb 1-1: USB disconnect, device number 87 [ 601.535629][T12104] hsr_slave_0: entered promiscuous mode [ 601.567179][ T24] usb 3-1: USB disconnect, device number 94 [ 601.584745][T12104] hsr_slave_1: entered promiscuous mode [ 601.608792][ T9745] udevd[9745]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 601.635177][T12104] debugfs: 'hsr0' already exists in 'hsr' [ 601.661525][T12104] Cannot create hsr debugfs directory [ 601.689430][T12192] fido_id[12192]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 602.429208][ T1224] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 602.488693][T12104] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 602.532970][T12104] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 602.579507][ T1224] usb 1-1: Using ep0 maxpacket: 16 [ 602.604976][T12104] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 602.631880][ T1224] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 602.653830][T12104] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 602.673924][ T1224] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.717964][ T1224] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 602.744136][ T1224] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 602.776811][ T1224] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 602.789643][T12091] Bluetooth: hci4: command tx timeout [ 602.802665][ T1224] usb 1-1: SerialNumber: syz [ 602.819090][ T5819] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 602.828863][ T1224] hub 1-1:1.0: bad descriptor, ignoring hub [ 602.866200][ T1224] hub 1-1:1.0: probe with driver hub failed with error -5 [ 602.900620][T12104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 602.915289][ T1224] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 602.965705][T12104] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.975097][ T5819] usb 2-1: Using ep0 maxpacket: 32 [ 602.983271][ T5819] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 603.000736][ T5819] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 603.030940][ T5819] usb 2-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40 [ 603.044634][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.054080][ T7790] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.061272][ T7790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.064466][ T5819] usb 2-1: Product: syz [ 603.101719][ T5819] usb 2-1: Manufacturer: syz [ 603.116387][ T7790] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.118186][ T5819] usb 2-1: SerialNumber: syz [ 603.123562][ T7790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 603.139361][ T796] usb 1-1: USB disconnect, device number 88 [ 603.396621][T12104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 603.431205][ T5819] usb 2-1: 0:1 : does not exist [ 603.605441][T12104] veth0_vlan: entered promiscuous mode [ 603.642754][ T5819] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 603.678290][T12104] veth1_vlan: entered promiscuous mode [ 603.683703][ T5819] usb 2-1: USB disconnect, device number 94 [ 603.752087][ T9745] udevd[9745]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 603.794926][T12104] veth0_macvtap: entered promiscuous mode [ 603.870801][T12253] fuse: Unknown parameter '0x000000000000000b' [ 603.886951][T12104] veth1_macvtap: entered promiscuous mode [ 603.947242][T12104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 603.981187][T12104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 604.107755][ T7790] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.128719][ T7790] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.149944][ T7790] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.173129][ T7790] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.296228][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.307822][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.372639][ T7809] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.382623][ T7809] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.409420][ T5819] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 604.431271][ T5898] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 604.582948][ T5819] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 604.609173][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 604.619020][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.638563][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 604.668994][ T5819] usb 3-1: Product: syz [ 604.673198][ T5819] usb 3-1: Manufacturer: syz [ 604.682744][ T5898] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 604.704804][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.723588][ T5819] usb 3-1: SerialNumber: syz [ 604.742551][ T5898] usb 2-1: Product: syz [ 604.759234][ T5898] usb 2-1: Manufacturer: syz [ 604.763894][ T5898] usb 2-1: SerialNumber: syz [ 604.783664][ T5898] usb 2-1: config 0 descriptor?? [ 604.820289][ T5898] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 604.839306][ T5898] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 604.876551][T12091] Bluetooth: hci4: command tx timeout [ 605.509279][T12285] ======================================================= [ 605.509279][T12285] WARNING: The mand mount option has been deprecated and [ 605.509279][T12285] and is ignored by this kernel. Remove the mand [ 605.509279][T12285] option from the mount to silence this warning. [ 605.509279][T12285] ======================================================= [ 605.611986][T12285] fuse: Unknown parameter 'fd' [ 605.657112][ T5898] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 606.297544][ T5898] em28xx 2-1:0.0: board has no eeprom [ 606.559102][ T5898] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 606.578686][ T5898] em28xx 2-1:0.0: dvb set to bulk mode. [ 606.613049][ T5905] em28xx 2-1:0.0: Binding DVB extension [ 606.636192][ T5898] usb 2-1: USB disconnect, device number 95 [ 606.682703][ T5898] em28xx 2-1:0.0: Disconnecting em28xx [ 606.855087][ T5905] em28xx 2-1:0.0: Registering input extension [ 606.887484][ T5898] em28xx 2-1:0.0: Closing input extension [ 606.963804][ T5898] em28xx 2-1:0.0: Freeing device [ 607.298863][T12318] sctp: [Deprecated]: syz.1.1713 (pid 12318) Use of struct sctp_assoc_value in delayed_ack socket option. [ 607.298863][T12318] Use struct sctp_sack_info instead [ 607.316808][T12318] : renamed from dummy0 [ 607.386617][ T5819] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 607.399451][ T24] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 607.474197][ T5819] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 607.524374][ T5819] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 607.529382][ T24] usb 1-1: device descriptor read/64, error -71 [ 607.577492][ T5819] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 607.630378][ T5819] usb 3-1: USB disconnect, device number 95 [ 607.829422][ T24] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 608.009230][ T24] usb 1-1: device descriptor read/64, error -71 [ 608.049030][ T5819] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 608.157809][T12332] fuse: Unknown parameter '0x000000000000000b' [ 608.170717][ T24] usb usb1-port1: attempt power cycle [ 608.388122][ T5819] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 608.428520][ T5819] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 608.455606][ T5819] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 608.477299][ T5819] usb 3-1: config 0 interface 0 has no altsetting 0 [ 608.510043][ T5819] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 608.543504][ T5819] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 608.587067][ T5819] usb 3-1: config 0 interface 0 has no altsetting 0 [ 608.627448][ T5819] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 608.659179][ T24] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 608.659367][ T5905] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 608.674782][ T5819] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 608.689640][ T24] usb 1-1: device descriptor read/8, error -71 [ 608.699652][ T5819] usb 3-1: config 0 interface 0 has no altsetting 0 [ 608.739007][ T5819] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 608.748190][ T5819] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 608.770137][ T5819] usb 3-1: config 0 interface 0 has no altsetting 0 [ 608.785451][ T5819] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 608.921515][ T5905] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 609.005685][ T5819] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 609.017560][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.019054][ T24] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 609.025695][ T5905] usb 2-1: Product: syz [ 609.039119][ T5819] usb 3-1: config 0 interface 0 has no altsetting 0 [ 609.049019][ T5905] usb 2-1: Manufacturer: syz [ 609.053892][ T5905] usb 2-1: SerialNumber: syz [ 609.059363][ T5819] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 609.068269][ T5819] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 609.080394][ T5819] usb 3-1: config 0 interface 0 has no altsetting 0 [ 609.089736][ T5819] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 609.100919][ T5819] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 609.102382][ T24] usb 1-1: device descriptor read/8, error -71 [ 609.112112][ T5819] usb 3-1: config 0 interface 0 has no altsetting 0 [ 609.113579][ T5819] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 609.154513][ T5819] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 609.174245][ T5819] usb 3-1: config 0 interface 0 has no altsetting 0 [ 609.201560][ T5819] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 609.215142][ T5819] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 609.223935][ T5819] usb 3-1: Product: syz [ 609.228236][ T5819] usb 3-1: Manufacturer: syz [ 609.233108][ T5819] usb 3-1: SerialNumber: syz [ 609.240688][ T5819] usb 3-1: config 0 descriptor?? [ 609.259488][ T24] usb usb1-port1: unable to enumerate USB device [ 609.384379][ T5819] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 609.421427][ T5905] usb 2-1: USB disconnect, device number 96 [ 609.491412][ T9745] udevd[9745]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 609.500558][ T5819] usb 3-1: USB disconnect, device number 96 [ 609.539456][ T5819] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 610.189040][ T5819] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 610.531814][ T5819] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 610.540753][ T5819] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 610.559833][ T5819] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 610.576465][ T5819] usb 3-1: config 220 has no interface number 2 [ 610.587944][ T5819] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 610.601538][ T5819] usb 3-1: config 220 interface 0 has no altsetting 0 [ 610.651214][ T5819] usb 3-1: config 220 interface 76 has no altsetting 0 [ 610.654601][ T24] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 610.658570][ T5819] usb 3-1: config 220 interface 1 has no altsetting 0 [ 610.692556][ T5819] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 610.702317][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.710562][ T5905] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 610.730839][ T5819] usb 3-1: Product: syz [ 610.735015][ T5819] usb 3-1: Manufacturer: syz [ 610.744646][ T5819] usb 3-1: SerialNumber: syz [ 610.807606][ T5819] usb 3-1: can't set config #220, error -71 [ 610.827708][ T5819] usb 3-1: USB disconnect, device number 97 [ 610.832867][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 610.848626][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 610.907797][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 610.919315][ T5905] usb 1-1: Using ep0 maxpacket: 16 [ 610.924823][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 610.926496][ T5905] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 610.934742][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 610.934770][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 610.935982][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 611.026154][ T24] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 611.028550][ T5905] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 611.035308][ T24] usb 2-1: Manufacturer: syz [ 611.070092][ T5905] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 611.071214][ T24] usb 2-1: config 0 descriptor?? [ 611.144056][T12368] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1729'. [ 611.189634][ T5905] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 611.231177][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.279034][ T5905] usb 1-1: Product: syz [ 611.283287][ T5905] usb 1-1: Manufacturer: syz [ 611.288061][ T5905] usb 1-1: SerialNumber: syz [ 611.379022][ T24] rc_core: IR keymap rc-hauppauge not found [ 611.385237][ T24] Registered IR keymap rc-empty [ 611.390716][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 611.399026][ T29] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 611.409388][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 611.435573][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 611.451678][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input47 [ 611.532838][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 611.554718][ T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 611.565283][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 611.572775][ T29] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 611.622936][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 611.634583][ T29] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 611.648231][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.657440][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 611.671317][ T29] usb 3-1: config 0 descriptor?? [ 611.679088][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 611.704149][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 611.832208][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 611.891186][ T5905] usb 1-1: 0:2 : does not exist [ 611.919477][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 611.965845][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 611.999265][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 612.084113][T12383] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.28.0.0 [ 612.091003][T12383] PKCS7: Only support pkcs7_signedData type [ 612.250226][ T24] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 612.260815][ T24] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 612.290354][ T24] usb 2-1: USB disconnect, device number 97 [ 612.787327][T12390] fuse: Unknown parameter 'fd0x000000000000000b' [ 613.204457][T12355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.220050][T12355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.485298][T12397] netlink: 276 bytes leftover after parsing attributes in process `syz.5.1733'. [ 613.656407][ T5905] usb 1-1: USB disconnect, device number 93 [ 613.845919][ T9745] udevd[9745]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 614.017281][ T10] usb 3-1: USB disconnect, device number 98 [ 614.332574][T12417] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1740'. [ 614.446773][T12428] netlink: 'syz.2.1744': attribute type 13 has an invalid length. [ 614.612007][ T29] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 614.710015][ T10] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 614.728490][ T5905] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 614.850481][ T29] usb 1-1: config 0 has an invalid descriptor of length 95, skipping remainder of the config [ 614.861156][ T29] usb 1-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 614.871382][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.881434][ T29] usb 1-1: config 0 descriptor?? [ 614.889158][ T5898] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 614.890638][ T29] usb 1-1: bad CDC descriptors [ 614.896778][ T5905] usb 2-1: device descriptor read/64, error -71 [ 614.939179][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 614.949764][ T10] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 614.957980][ T10] usb 4-1: config 0 has no interface number 0 [ 614.980662][ T10] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 614.998180][ T10] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 615.008339][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.016430][ T10] usb 4-1: Product: syz [ 615.021473][ T10] usb 4-1: Manufacturer: syz [ 615.026067][ T10] usb 4-1: SerialNumber: syz [ 615.037277][ T10] usb 4-1: config 0 descriptor?? [ 615.045900][ T10] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 615.057599][ T10] em28xx 4-1:0.132: Video interface 132 found: [ 615.090915][ T5898] usb 6-1: Using ep0 maxpacket: 16 [ 615.096688][ T29] usb 1-1: USB disconnect, device number 94 [ 615.100362][ T5898] usb 6-1: config 254 has an invalid interface number: 252 but max is 1 [ 615.114764][ T5898] usb 6-1: config 254 has an invalid interface number: 4 but max is 1 [ 615.123197][ T5898] usb 6-1: config 254 has no interface number 0 [ 615.129775][ T5898] usb 6-1: config 254 has no interface number 1 [ 615.136163][ T5898] usb 6-1: config 254 interface 252 has no altsetting 0 [ 615.143180][ T5898] usb 6-1: config 254 interface 4 has no altsetting 0 [ 615.153289][ T5898] usb 6-1: New USB device found, idVendor=0e8d, idProduct=760a, bcdDevice=6e.c8 [ 615.162522][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.170671][ T5905] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 615.178400][ T5898] usb 6-1: Product: с [ 615.182602][ T5898] usb 6-1: Manufacturer: 鏯﯆ౣ燭겁瑱︫躄䰮䝮獫鎲冁좸陸祺泱↉즤鸼錭ㆶ⎽ʔ㷙恶叵읬䀴蓽㜶鰾Ꙛ玕-ꌯꆘ黹꼉罏踮䱧ᖀᷮ鶲ꛬ噿ﻌꡥ酹忁鋅훊㮨Ⴚꞝ愀፻䓺ℍ씬⋳텅⡌ [ 615.206881][ T5898] usb 6-1: SerialNumber: syz [ 615.329021][ T5905] usb 2-1: device descriptor read/64, error -71 [ 615.434256][ T5898] usb 6-1: USB disconnect, device number 2 [ 615.440677][ T5905] usb usb2-port1: attempt power cycle [ 615.448083][ T10] em28xx 4-1:0.132: unknown em28xx chip ID (39) [ 615.800323][ T5905] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 615.857824][ T5905] usb 2-1: device descriptor read/8, error -71 [ 616.069742][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 616.069760][ T30] audit: type=1326 audit(1773881493.744:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12459 comm="syz.0.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa879c799 code=0x7ffc0000 [ 616.108853][ T10] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 616.113610][ T30] audit: type=1326 audit(1773881493.744:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12459 comm="syz.0.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f9aa879c799 code=0x7ffc0000 [ 616.146651][ T5905] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 616.188270][ T10] em28xx 4-1:0.132: board has no eeprom [ 616.224861][ T5905] usb 2-1: device descriptor read/8, error -71 [ 616.271467][ T10] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 616.271576][ T10] em28xx 4-1:0.132: analog set to bulk mode. [ 616.282720][ T5819] em28xx 4-1:0.132: Registering V4L2 extension [ 616.329337][ T5905] usb usb2-port1: unable to enumerate USB device [ 616.402365][T12473] program syz.0.1753 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 616.416551][ T30] audit: type=1326 audit(1773881493.744:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12459 comm="syz.0.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa879c799 code=0x7ffc0000 [ 616.416596][ T30] audit: type=1326 audit(1773881493.744:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12459 comm="syz.0.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9aa879c799 code=0x7ffc0000 [ 616.416632][ T30] audit: type=1326 audit(1773881493.744:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12459 comm="syz.0.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa879c799 code=0x7ffc0000 [ 616.416668][ T30] audit: type=1326 audit(1773881493.744:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12459 comm="syz.0.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f9aa879c799 code=0x7ffc0000 [ 616.416704][ T30] audit: type=1326 audit(1773881493.744:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12459 comm="syz.0.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa879c799 code=0x7ffc0000 [ 616.416747][ T30] audit: type=1326 audit(1773881493.744:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12459 comm="syz.0.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9aa879c799 code=0x7ffc0000 [ 616.416782][ T30] audit: type=1326 audit(1773881493.744:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12459 comm="syz.0.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa879c799 code=0x7ffc0000 [ 616.416817][ T30] audit: type=1326 audit(1773881493.754:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12459 comm="syz.0.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9aa879c799 code=0x7ffc0000 [ 616.469082][ T5905] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 616.483945][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 616.670829][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 616.834226][ T10] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 616.843651][ T5905] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 616.852299][ T5905] usb 3-1: config 1 has no interface number 0 [ 616.858469][ T5905] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 616.873232][ T5905] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4 [ 616.885127][ T10] usb 6-1: config 1 has no interface number 1 [ 616.895580][ T5905] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 608 [ 616.905751][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 616.921634][ T5905] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.934062][ T10] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 616.950989][ T5905] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 616.961657][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.970355][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 616.980123][ T5905] usb 3-1: Product: syz [ 616.985321][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.993676][ T5905] usb 3-1: Manufacturer: syz [ 616.998420][ T10] usb 6-1: Product: syz [ 617.002687][ T5905] usb 3-1: SerialNumber: syz [ 617.008080][ T10] usb 6-1: Manufacturer: syz [ 617.017466][ T10] usb 6-1: SerialNumber: syz [ 617.023989][T12470] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 617.039735][T12470] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 617.127327][ T5905] usb 3-1: Error in usbnet_get_endpoints (-22) [ 617.150728][T12469] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 617.374074][T12469] Cannot find add_set index 0 as target [ 617.402221][ T10] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 617.410322][ T10] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 617.432119][ T5819] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 617.451921][ T5819] em28xx 4-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 617.483701][ T5819] em28xx 4-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 617.530266][ T5819] em28xx 4-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 617.553688][ T5925] usb 4-1: USB disconnect, device number 92 [ 617.561469][ T5925] em28xx 4-1:0.132: Disconnecting em28xx [ 617.585177][ T10] usb 6-1: USB disconnect, device number 3 [ 617.684069][T12492] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1755'. [ 617.736388][ T9631] udevd[9631]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 617.787623][ T5819] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 617.816256][ T5819] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 617.840942][ T5819] em28xx 4-1:0.132: No AC97 audio processor [ 617.877364][T12501] veth1_macvtap: left promiscuous mode [ 617.883240][T12501] macsec0: entered allmulticast mode [ 617.941744][T12501] veth1_macvtap: entered promiscuous mode [ 617.956780][T12501] veth1_macvtap: entered allmulticast mode [ 617.971532][ T5819] usb 4-1: Decoder not found [ 617.986919][ T5819] em28xx 4-1:0.132: failed to create media graph [ 617.999112][ T5905] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 618.019031][T12501] macsec0: left allmulticast mode [ 618.024115][T12501] veth1_macvtap: left allmulticast mode [ 618.036314][ T5819] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 618.092190][ T5819] em28xx 4-1:0.132: Remote control support is not available for this card. [ 618.092436][T12502] ================================================================== [ 618.108873][T12502] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 618.116434][T12502] Read of size 8 at addr ffff888057828748 by task v4l_id/12502 [ 618.124073][T12502] [ 618.126408][T12502] CPU: 1 UID: 0 PID: 12502 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 618.126433][T12502] Tainted: [L]=SOFTLOCKUP [ 618.126440][T12502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 618.126451][T12502] Call Trace: [ 618.126459][T12502] [ 618.126466][T12502] dump_stack_lvl+0xe8/0x150 [ 618.126492][T12502] print_report+0xba/0x230 [ 618.126511][T12502] ? v4l2_fh_open+0xac/0x420 [ 618.126529][T12502] kasan_report+0x117/0x150 [ 618.126550][T12502] ? v4l2_fh_open+0xac/0x420 [ 618.126572][T12502] v4l2_fh_open+0xac/0x420 [ 618.126591][T12502] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 618.126612][T12502] em28xx_v4l2_open+0x157/0x9a0 [ 618.126628][T12502] ? do_raw_spin_lock+0x12b/0x2f0 [ 618.126654][T12502] v4l2_open+0x1bf/0x3a0 [ 618.126675][T12502] chrdev_open+0x4cd/0x5e0 [ 618.126695][T12502] ? __pfx_chrdev_open+0x10/0x10 [ 618.126712][T12502] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 618.126732][T12502] ? __pfx_chrdev_open+0x10/0x10 [ 618.126749][T12502] do_dentry_open+0x785/0x14e0 [ 618.126775][T12502] vfs_open+0x3b/0x340 [ 618.126793][T12502] ? path_openat+0x2df0/0x3860 [ 618.126812][T12502] path_openat+0x2e08/0x3860 [ 618.126834][T12502] ? __pfx_stack_trace_save+0x10/0x10 [ 618.126852][T12502] ? stack_depot_save_flags+0x33/0x810 [ 618.126877][T12502] ? __pfx_path_openat+0x10/0x10 [ 618.126893][T12502] ? __x64_sys_openat+0x138/0x170 [ 618.126913][T12502] ? do_syscall_64+0x14d/0xf80 [ 618.126930][T12502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.126949][T12502] ? __lock_acquire+0x6b5/0x2cf0 [ 618.126970][T12502] do_file_open+0x23e/0x4a0 [ 618.126989][T12502] ? __pfx_do_file_open+0x10/0x10 [ 618.127014][T12502] ? _raw_spin_unlock+0x28/0x50 [ 618.127035][T12502] ? alloc_fd+0x64b/0x6c0 [ 618.127058][T12502] do_sys_openat2+0x113/0x200 [ 618.127080][T12502] ? __pfx_do_sys_openat2+0x10/0x10 [ 618.127100][T12502] ? exc_page_fault+0x6a/0xc0 [ 618.127118][T12502] ? do_user_addr_fault+0xc6f/0x1340 [ 618.127139][T12502] __x64_sys_openat+0x138/0x170 [ 618.127162][T12502] do_syscall_64+0x14d/0xf80 [ 618.127178][T12502] ? trace_irq_disable+0x3b/0x150 [ 618.127199][T12502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.127216][T12502] ? clear_bhb_loop+0x40/0x90 [ 618.127233][T12502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.127249][T12502] RIP: 0033:0x7f9b422a7407 [ 618.127265][T12502] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 618.127279][T12502] RSP: 002b:00007ffc6bdc5e30 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 618.127297][T12502] RAX: ffffffffffffffda RBX: 00007f9b4293d880 RCX: 00007f9b422a7407 [ 618.127309][T12502] RDX: 0000000000000000 RSI: 00007ffc6bdc7f1b RDI: ffffffffffffff9c [ 618.127321][T12502] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 618.127331][T12502] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 618.127341][T12502] R13: 00007ffc6bdc6080 R14: 00007f9b42a42000 R15: 000055e470a504d8 [ 618.127360][T12502] [ 618.127366][T12502] [ 618.428213][T12502] Allocated by task 5819: [ 618.432524][T12502] kasan_save_track+0x3e/0x80 [ 618.437191][T12502] __kasan_kmalloc+0x93/0xb0 [ 618.441766][T12502] __kmalloc_cache_noprof+0x31c/0x660 [ 618.447122][T12502] em28xx_v4l2_init+0x10b/0x2e70 [ 618.452043][T12502] em28xx_init_extension+0x120/0x1c0 [ 618.457331][T12502] process_scheduled_works+0xb6e/0x18c0 [ 618.462861][T12502] worker_thread+0xa53/0xfc0 [ 618.467436][T12502] kthread+0x388/0x470 [ 618.471488][T12502] ret_from_fork+0x51e/0xb90 [ 618.476074][T12502] ret_from_fork_asm+0x1a/0x30 [ 618.480826][T12502] [ 618.483131][T12502] Freed by task 5819: [ 618.487088][T12502] kasan_save_track+0x3e/0x80 [ 618.491751][T12502] kasan_save_free_info+0x46/0x50 [ 618.496761][T12502] __kasan_slab_free+0x5c/0x80 [ 618.501597][T12502] kfree+0x1c1/0x630 [ 618.505472][T12502] em28xx_v4l2_init+0x1683/0x2e70 [ 618.510577][T12502] em28xx_init_extension+0x120/0x1c0 [ 618.515870][T12502] process_scheduled_works+0xb6e/0x18c0 [ 618.521401][T12502] worker_thread+0xa53/0xfc0 [ 618.525975][T12502] kthread+0x388/0x470 [ 618.530036][T12502] ret_from_fork+0x51e/0xb90 [ 618.534608][T12502] ret_from_fork_asm+0x1a/0x30 [ 618.539359][T12502] [ 618.541664][T12502] The buggy address belongs to the object at ffff888057828000 [ 618.541664][T12502] which belongs to the cache kmalloc-8k of size 8192 [ 618.555702][T12502] The buggy address is located 1864 bytes inside of [ 618.555702][T12502] freed 8192-byte region [ffff888057828000, ffff88805782a000) [ 618.569662][T12502] [ 618.572059][T12502] The buggy address belongs to the physical page: [ 618.578524][T12502] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57828 [ 618.587272][T12502] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 618.595757][T12502] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 618.603305][T12502] page_type: f5(slab) [ 618.607296][T12502] raw: 00fff00000000040 ffff88813fea6280 dead000000000100 dead000000000122 [ 618.616046][T12502] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 618.624623][T12502] head: 00fff00000000040 ffff88813fea6280 dead000000000100 dead000000000122 [ 618.633284][T12502] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 618.641938][T12502] head: 00fff00000000003 ffffea00015e0a01 00000000ffffffff 00000000ffffffff [ 618.650860][T12502] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 618.659855][T12502] page dumped because: kasan: bad access detected [ 618.666262][T12502] page_owner tracks the page as allocated [ 618.672047][T12502] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11725, tgid 11724 (syz.0.1534), ts 581210640896, free_ts 581045049273 [ 618.693479][T12502] post_alloc_hook+0x231/0x280 [ 618.698248][T12502] get_page_from_freelist+0x24dc/0x2580 [ 618.703781][T12502] __alloc_frozen_pages_noprof+0x18d/0x380 [ 618.709572][T12502] allocate_slab+0x77/0x660 [ 618.714071][T12502] refill_objects+0x331/0x3c0 [ 618.718788][T12502] __pcs_replace_empty_main+0x2e6/0x730 [ 618.724411][T12502] __kmalloc_node_track_caller_noprof+0x572/0x7b0 [ 618.730842][T12502] __alloc_skb+0x2c1/0x7d0 [ 618.735258][T12502] netlink_dump+0x190/0xe80 [ 618.739834][T12502] netlink_recvmsg+0x690/0xa50 [ 618.744606][T12502] sock_recvmsg_nosec+0x10c/0x140 [ 618.749630][T12502] ____sys_recvmsg+0x3e3/0x4a0 [ 618.754377][T12502] ___sys_recvmsg+0x215/0x590 [ 618.759040][T12502] do_recvmmsg+0x334/0x800 [ 618.763542][T12502] __x64_sys_recvmmsg+0x1b7/0x250 [ 618.768546][T12502] do_syscall_64+0x14d/0xf80 [ 618.773209][T12502] page last free pid 5193 tgid 5193 stack trace: [ 618.779518][T12502] __free_frozen_pages+0xc2b/0xdb0 [ 618.784615][T12502] __slab_free+0x263/0x2b0 [ 618.789019][T12502] qlist_free_all+0x97/0x100 [ 618.793590][T12502] kasan_quarantine_reduce+0x148/0x160 [ 618.799029][T12502] __kasan_slab_alloc+0x22/0x80 [ 618.803863][T12502] kmem_cache_alloc_noprof+0x2bc/0x650 [ 618.809305][T12502] do_getname+0x2e/0x250 [ 618.813531][T12502] do_sys_openat2+0xca/0x200 [ 618.818103][T12502] __x64_sys_openat+0x138/0x170 [ 618.823016][T12502] do_syscall_64+0x14d/0xf80 [ 618.827604][T12502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.833479][T12502] [ 618.835784][T12502] Memory state around the buggy address: [ 618.841392][T12502] ffff888057828600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 618.849431][T12502] ffff888057828680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 618.857475][T12502] >ffff888057828700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 618.865512][T12502] ^ [ 618.871903][T12502] ffff888057828780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 618.879946][T12502] ffff888057828800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 618.888008][T12502] ================================================================== [ 618.910646][ T5925] em28xx 4-1:0.132: Closing input extension SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 618.944997][T12502] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 618.952262][T12502] CPU: 1 UID: 0 PID: 12502 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 618.962862][T12502] Tainted: [L]=SOFTLOCKUP [ 618.967187][T12502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 618.977242][T12502] Call Trace: [ 618.980530][T12502] [ 618.983461][T12502] vpanic+0x56c/0xa60 [ 618.987455][T12502] ? __pfx_vpanic+0x10/0x10 [ 618.991964][T12502] panic+0xc5/0xd0 [ 618.995691][T12502] ? __pfx_panic+0x10/0x10 [ 619.000100][T12502] ? preempt_schedule_thunk+0x16/0x30 [ 619.005461][T12502] ? preempt_schedule_thunk+0x16/0x30 [ 619.010816][T12502] ? v4l2_fh_open+0xac/0x420 [ 619.015392][T12502] check_panic_on_warn+0x89/0xb0 [ 619.020340][T12502] ? v4l2_fh_open+0xac/0x420 [ 619.024918][T12502] end_report+0x73/0x180 [ 619.029154][T12502] ? v4l2_fh_open+0xac/0x420 [ 619.033728][T12502] kasan_report+0x128/0x150 [ 619.038223][T12502] ? v4l2_fh_open+0xac/0x420 [ 619.042800][T12502] v4l2_fh_open+0xac/0x420 [ 619.047289][T12502] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 619.053254][T12502] em28xx_v4l2_open+0x157/0x9a0 [ 619.058088][T12502] ? do_raw_spin_lock+0x12b/0x2f0 [ 619.063094][T12502] v4l2_open+0x1bf/0x3a0 [ 619.067322][T12502] chrdev_open+0x4cd/0x5e0 [ 619.071726][T12502] ? __pfx_chrdev_open+0x10/0x10 [ 619.076653][T12502] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 619.082971][T12502] ? __pfx_chrdev_open+0x10/0x10 [ 619.087912][T12502] do_dentry_open+0x785/0x14e0 [ 619.092673][T12502] vfs_open+0x3b/0x340 [ 619.096735][T12502] ? path_openat+0x2df0/0x3860 [ 619.101486][T12502] path_openat+0x2e08/0x3860 [ 619.106084][T12502] ? __pfx_stack_trace_save+0x10/0x10 [ 619.111625][T12502] ? stack_depot_save_flags+0x33/0x810 [ 619.117297][T12502] ? __pfx_path_openat+0x10/0x10 [ 619.122252][T12502] ? __x64_sys_openat+0x138/0x170 [ 619.127301][T12502] ? do_syscall_64+0x14d/0xf80 [ 619.132057][T12502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.138112][T12502] ? __lock_acquire+0x6b5/0x2cf0 [ 619.143044][T12502] do_file_open+0x23e/0x4a0 [ 619.147540][T12502] ? __pfx_do_file_open+0x10/0x10 [ 619.152581][T12502] ? _raw_spin_unlock+0x28/0x50 [ 619.157417][T12502] ? alloc_fd+0x64b/0x6c0 [ 619.161732][T12502] do_sys_openat2+0x113/0x200 [ 619.166495][T12502] ? __pfx_do_sys_openat2+0x10/0x10 [ 619.171681][T12502] ? exc_page_fault+0x6a/0xc0 [ 619.176342][T12502] ? do_user_addr_fault+0xc6f/0x1340 [ 619.181620][T12502] __x64_sys_openat+0x138/0x170 [ 619.186476][T12502] do_syscall_64+0x14d/0xf80 [ 619.191060][T12502] ? trace_irq_disable+0x3b/0x150 [ 619.196089][T12502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.202144][T12502] ? clear_bhb_loop+0x40/0x90 [ 619.206820][T12502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.212710][T12502] RIP: 0033:0x7f9b422a7407 [ 619.217124][T12502] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 619.237096][T12502] RSP: 002b:00007ffc6bdc5e30 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 619.245613][T12502] RAX: ffffffffffffffda RBX: 00007f9b4293d880 RCX: 00007f9b422a7407 [ 619.253623][T12502] RDX: 0000000000000000 RSI: 00007ffc6bdc7f1b RDI: ffffffffffffff9c [ 619.261593][T12502] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 619.269571][T12502] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 619.277535][T12502] R13: 00007ffc6bdc6080 R14: 00007f9b42a42000 R15: 000055e470a504d8 [ 619.285501][T12502] [ 619.288997][T12502] Kernel Offset: disabled [ 619.293309][T12502] Rebooting in 86400 seconds..