last executing test programs: 14m8.917739144s ago: executing program 0 (id=212): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 14m7.568301492s ago: executing program 0 (id=215): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20a40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) sendmmsg(0xffffffffffffffff, &(0x7f0000000bc0), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40408d6}, 0x24000010) 14m6.300923267s ago: executing program 0 (id=217): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627", 0xc) 14m5.081414698s ago: executing program 0 (id=219): r0 = socket$kcm(0x10, 0x2, 0x0) mkdir(0x0, 0x1ff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0b5bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000001400)={'pcm3724\x00', [0x100, 0xd, 0x4d0, 0x2, 0x1, 0x100, 0x2001, 0x20000000, 0x8, 0x8, 0x0, 0xf, 0x1, 0x401, 0xfffd, 0x0, 0x0, 0x8, 0xea9, 0x401, 0x7, 0x12, 0x8, 0x9, 0x3, 0x7, 0x7, 0x0, 0x7, 0x7, 0x8]}) r4 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0xdc, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x5, 0xe1, 0x4, 0x0, 0x8500, 0x1003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x9ea, 0x10, 0x0, 0x8, 0x5, 0x746f, 0x8, 0x5, 0x5, 0x7fffffff, 0x4, 0x7ffd]}) r5 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x400, 0xb0, 0x5, 0x7, 0x4, 0x6, 0x2b800, 0x1, 0x80, 0x73a7, 0x0, 0x4, 0x1, 0x3, 0x4000]}, &(0x7f0000000700)=0x100) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000740)={r6, 0x5}, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000002800048024000180090001006d6574610000000014000280080002400000000e08000340000000040300000000000000000000000900020073797a3200000000140000001100010000800000000000000100000a47275418a0215334e15534c5acc4b165ea6fc1264d053906c35ad06522667a8283b87ea0abbb560b12ae35347429b5"], 0x7c}}, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r8, 0x114, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001e40)=""/4112, 0x1010}, {&(0x7f00000039c0)=""/4098, 0x1002}, {&(0x7f00000001c0)=""/219, 0xdb}, {&(0x7f0000001980)=""/189, 0xbd}, {&(0x7f0000000340)=""/61, 0x3d}], 0x5}, 0x20) 14m2.709274486s ago: executing program 0 (id=224): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, 0x0) mincore(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r4) r5 = syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$uac3(r5, &(0x7f0000000540)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io$lan78xx(r5, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="000304de45701888"]}, &(0x7f00000006c0)={0x34, 0x0, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x91}, &(0x7f0000000600)={0xc0, 0xa1, 0x4, 0xfffffffc}, &(0x7f0000000640)={0x40, 0xa0, 0x4, 0x4}, &(0x7f0000000680)={0xc0, 0xa2, 0x2f, "10b48e6ef15c81440ebc6168dc83f2f1d030ab935ad48423402f8b4b1966cf109bf4ab734f5d0d62c54687ecbd3014"}}) syz_emit_ethernet(0x3a5, &(0x7f0000000740)={@remote, @local, @val={@void, {0x8100, 0x6, 0x0, 0x1}}, {@ipv6={0x86dd, @dccp_packet={0x8, 0x6, "7c76d6", 0x36b, 0x21, 0x0, @local, @loopback, {[@fragment={0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x67}, @fragment={0x60, 0x0, 0xb0, 0x0, 0x0, 0x5, 0x67}, @hopopts={0x32, 0x7, '\x00', [@calipso={0x7, 0x38, {0x1, 0xc, 0xf, 0x401, [0xfffffffffffffffa, 0x81, 0xc6da, 0x3, 0x8001, 0x7]}}]}, @fragment={0x2f, 0x0, 0xbf, 0x0, 0x0, 0x8, 0x67}, @routing={0x87, 0x10, 0x1, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, @remote, @remote, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @dev={0xfe, 0x80, '\x00', 0x34}, @dev={0xfe, 0x80, '\x00', 0x25}, @private2, @remote]}, @dstopts={0x2c, 0x7, '\x00', [@ra={0x5, 0x2, 0x6}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x10}, @hao={0xc9, 0x10, @empty}, @hao={0xc9, 0x10, @local}, @ra={0x5, 0x2, 0x6}, @ra={0x5, 0x2, 0x5}]}, @hopopts={0x3b, 0x8, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x80, 0x0, [0xffffffffffffffff, 0x4]}}, @calipso={0x7, 0x28, {0x0, 0x8, 0xfb, 0x1ff, [0x5f, 0x6, 0x10000, 0xc8f]}}]}, @dstopts={0x16, 0xb, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @hao={0xc9, 0x10, @private0}, @jumbo={0xc2, 0x4, 0x41a}, @hao={0xc9, 0x10, @remote}, @generic={0x0, 0x21, "b6e5f5e3e529cae3752fe2fcc1b1b9948a7c53362e226dfad66e95ca76821101ed"}, @enc_lim={0x4, 0x1, 0x9}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @srh={0x1d, 0x12, 0x4, 0x9, 0x35, 0x40, 0x9, [@ipv4={'\x00', '\xff\xff', @multicast1}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private1, @dev={0xfe, 0x80, '\x00', 0x12}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}, @private1={0xfc, 0x1, '\x00', 0x1}]}], {{0x4e22, 0x4e20, 0x4, 0x1, 0x8, 0x0, 0x0, 0x7, 0x5, '\x00', 0xef, "8609f5"}, "2e3b9841dd18d65e752aac8426eb7c4e80344c0477399f4ec55675d205cb69485cc0003df60523bbc0be98a8a27e5cdc0238d1ca9a704764ee4e6e1391a4082baa7825fc83c5ee8811b0a30e9c725b55911ad763e250079ab59d53fcf3e7815f261e7dcab2fcfc3179b013ee171cf6b78f1ac009dbcd65261fda2551109b81a40f429ee113822756a1bbd2097f0bbbcc78f4d2e835b05cf33426c14ce91c7c45c4969beda40cd13f123912813a9fe845c35a77a07464d4fb592c3d979416b99a99d5b4d9763edaf6dfacff3a5a4ad2809e552688739096a40ca4d5"}}}}}}, 0x0) clock_gettime(0x0, &(0x7f0000000100)) syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') 13m58.879888848s ago: executing program 0 (id=237): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002080)=0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r4 = gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000040)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x19}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000300)=""/193, 0x95, 0x12040, &(0x7f00000002c0)={0xa, 0x4e24, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0xffab) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, 0x0) write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) 13m43.08586659s ago: executing program 32 (id=237): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002080)=0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r4 = gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000040)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x19}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000300)=""/193, 0x95, 0x12040, &(0x7f00000002c0)={0xa, 0x4e24, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0xffab) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, 0x0) write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) 14.382405079s ago: executing program 5 (id=2756): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x18, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 14.080655073s ago: executing program 1 (id=2758): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e045f2d20"], 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) close(r2) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$audion(&(0x7f0000000180), 0xfffffbff, 0x800) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000200)={0x2, 0xffff, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd27, 0x8000, {0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x3}}, 0x1c}}, 0xc000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r6) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x1c, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) ioctl$KDGKBTYPE(r0, 0x4b48, &(0x7f0000000040)) syz_usb_connect(0x2, 0x2d, &(0x7f0000000d40)={{0x12, 0x1, 0x110, 0x23, 0x6b, 0x25, 0x10, 0x681, 0x10, 0x525e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x64, 0x99, 0x10, 0x70, "", [{{0x9, 0x4, 0x7c, 0x66, 0x1, 0xa, 0x65, 0x6d, 0xf2, [], [{{0x9, 0x5, 0x2, 0x0, 0x40, 0x3, 0x0, 0x6}}]}}]}}]}}, 0x0) 9.745955435s ago: executing program 5 (id=2766): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000a80)=""/188, 0xba) write$char_usb(r1, &(0x7f0000000080)='B', 0x1) syz_usb_disconnect(r0) 8.567505922s ago: executing program 1 (id=2767): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.473431223s ago: executing program 3 (id=2770): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r4, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000000000001000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r5, &(0x7f0000000240)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x28, 0x0, 0x9, {{0xf7fffffffffffffd, 0x3, 0xd8bef8474886e58c}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.102199576s ago: executing program 4 (id=2772): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800000, 0x8, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x40, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x373, 0x0, r2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x7, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 8.032702528s ago: executing program 3 (id=2773): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1c1f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xb, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 7.059083519s ago: executing program 4 (id=2778): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = syz_io_uring_setup(0x3b50, &(0x7f0000000180)={0x0, 0x826d, 0x8, 0x1, 0x5d}, &(0x7f0000000100), &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r1, 0x12, 0x0, 0x4000000) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) chroot(0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0xc00, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000ffe000/0x1000)=nil}) 3.767436706s ago: executing program 3 (id=2780): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000007c0)={0x18, &(0x7f0000000440)={0x0, 0x0, 0x81, {0x81, 0x26, "d4815c3da636d506c5ad4e712aeb0ca9ac265574770c7d3114d958633ea06bad614b4858618c4309d6b4a27fca6aa1d23ac446d3f520ef1d7b191a590ecb12d570754ac0939eb485eaab00714dea12cbc7623d220878ff5b3ad7f484e4bca815b41e0c0b1677b225fdc7ce655b9ceb6724bc6eab8831960d6d7f3e7b330871"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.561976235s ago: executing program 4 (id=2781): syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000340)=0x1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000180)) 3.455133105s ago: executing program 5 (id=2782): syz_pidfd_open(0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0}) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0xd8000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0}) 3.37900365s ago: executing program 1 (id=2783): r0 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r4}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) socket$nl_xfrm(0x10, 0x3, 0x6) 3.355603112s ago: executing program 4 (id=2784): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'rti802\x00', [0x100, 0x7, 0xffffffff, 0x1000, 0x4, 0x5, 0x79, 0x6, 0x80008, 0x0, 0xffffffff, 0x4, 0x8, 0x1000004, 0x100, 0xd, 0xfffffffb, 0x52, 0x5, 0x7fffffff, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b5, 0x0, 0xfffffffc]}) 3.153483216s ago: executing program 4 (id=2785): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, 0x0, 0x0, 0x0) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x3}, 0x8) close(r2) r4 = getpid() socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(r4, &(0x7f0000000340)={0x38, 0x6, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0x2, 0x3, 0x5507}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) r6 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r7 = fcntl$dupfd(r6, 0x0, r6) write$binfmt_script(r7, 0x0, 0x0) write$binfmt_script(r7, &(0x7f0000001b00), 0xfffffd9d) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3a, &(0x7f0000000980)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbb359bb6539865fb0d8f60bb06000000000000002c0002000000059078ac1414ff0a0101004402000000014e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0000009078dadf"], 0x0) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 3.049678144s ago: executing program 5 (id=2786): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x21, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x621}}, @ldst={0x2, 0x1, 0x2, 0x2, 0x4, 0x2, 0xfffffffffffffff0}, @exit, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x1, 0x0, 0x3, 0x2, 0x100, 0xa782a84e31d2ac21}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000d19000/0x3000)=nil, &(0x7f0000935000/0xf000)=nil, &(0x7f0000df1000/0x4000)=nil, &(0x7f0000f2a000/0x1000)=nil, &(0x7f00008cd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000000c0)="ad665e71e4ce9a1dc9d05fdd4eb4a3914bcc71e53e5e00bcb4f2115e5615551a4bbc241802b989efb2f8e5061cd6f71b984223556b928bb5d9dba9a792923c1d8e80518fdd7abf6e42adf6472464d2d0021f501689640dc9107add0c5e2cdd0fa5466b2f72581f3191b689c9afbf4229981fa965e77e15e662c7f4a086d55bbfbc1ce0119004ddfd21f68e328ed742e851eb7c802574", 0x96}, 0x68) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listns(0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xcf67, 0x1f480, 0x2, 0x399}) io_uring_enter(r3, 0x8ae, 0x6931, 0xb2, 0x0, 0x0) r4 = eventfd2(0x9, 0x800) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000180)=r4) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r5, &(0x7f0000000580)=ANY=[@ANYBLOB='MIC\nIGAIN \'Syn'], 0x3c) close(r5) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x30dc) ioctl$NILFS_IOCTL_GET_CPINFO(r6, 0x80186e82, &(0x7f0000000500)={&(0x7f0000000340)=[{0x1, 0x0, 0x7, 0xa, 0x8, 0x10000000000000f, 0x1, 0x6}, {0x2, 0x0, 0x97, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x80, 0x6}, {0x0, 0x0, 0x80000001, 0x8, 0x8, 0x4, 0x8000000000000000, 0x2}, {0x3, 0x0, 0x8788, 0xf, 0xfffffffffffffffc, 0xe3, 0xffffffffffffffff}, {0x0, 0x0, 0x2, 0x8001, 0x1000, 0x6, 0x23e4, 0x10000}, {0x0, 0x0, 0x1, 0x5, 0x2, 0x2, 0x4, 0x2000000000000003}, {0x1, 0x0, 0x0, 0x3, 0x6, 0x80000001, 0x20d3, 0x5}], 0x7, 0x38, 0x1, 0x2}) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.964446226s ago: executing program 1 (id=2787): r0 = syz_open_procfs(0x0, &(0x7f000001e680)='net/protocols\x00') socket$packet(0x11, 0x2, 0x300) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019080)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x3}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000f40)={0x6, 0x118, 0xfa00, {{0x9, 0x8, "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", 0x0, 0x7, 0x8, 0x5, 0x2, 0x3, 0x8}}}, 0x120) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0x66, 0x0, 0x0) accept4$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c, 0x80000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendto$inet6(r4, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) close(r4) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000003000128009000100766c616e000000002000028006000100030000000c0002000c0000001c0000000600050088a8000008000500", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 1.622765087s ago: executing program 1 (id=2789): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r3, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r1, &(0x7f0000006340)="7c7a6a069306f2c5ddf91f36944f207a1bd11284b4445fa3507bbc5def2e6fec4bb7c6001eafe381e277221f30085acd5d0c251f7c60c23874c04db6aa516f773dd2e57e746d1a085193c8b7664fceb1fe764d87f4395c66e5d4eee443a555692ebe80f3a11b8be74963f1a18c1d0cd71dec65e609e065e14615d2e8b283e55b4aa8b485f81ce52443d61fac9f08cf34f2997c05a63f98f988cfcea9a5650b37dff5817e5033b3912c226bd9bf68b528dec710584242fbdcf7dd0d55e394d3742039e6960bb589fb9ba18ac8e9e82cdbd08e9b584d0a8224cae3e9dd91e25699549007dc0d99165a73cda1c99fc48f6bfdb900c60e4481222505c58cc1108fbaf317d361d1f2d78f6db6e14b283ca9f1927f4f8a0f6f52818be03c7b257aec57f06a0a4279131a2bb0a13b23ab188ea50a686abb2f7e4d0f7a166f358e4cb886b7fbdf51cd9a153410dcc4cc5db7e8e94cc9ba2371a328480ad20f51d7fa012f367a0a8f9c882c47b5f714f0e1b35f72b2261989513c1428d648aa8ab8c12c87dfea38d5be0d49097fce804c9cd2ac8f61b68579853129351e3bcdbdae3371d2b12a150d94b3097161c226c50a1d2c1f8b4c10a986e21dbbb854ad1d26d0ce5d950835d14664ee8f58c537f5256b761b4707fe8d46cc1658798d285310a1cff127b1280cab3f1f633569391d5a7cc08aa1d108b93c38df397d90bbb81753930934df7dcaf8f960dff660fe239aa15cf48872668cacf4d664dc0809fe9d780ab202c3a968abb56655267c907eb3343809b2407105a5c14d53a3b17a9a1552314d27e13daf48a2bb7b2c9fc15aba9ae1d6325c11fbe8432c067efa72878ca56c6463b6cf4d29646905422908a4a1f7741d0049febed4fc2b7cc27154031e50a0ab297826383935bef6a0f968db92128e8a940509b5368146bdcacc852b9d0b4ae9624635f9e69f3a7bc8e6f3340c7de46f49feb20a46f11aef464fa6696a60865bdd0c40b1c411c9661fa9f6393a33a7eb4afaef3eb1ab4634a42baeea780ac6c0c4fc8cf7a92cf0592f993ac85bdfd6c18ba4b7cf4c4438a8330413de8365b4a080234f59edefca0c5ce9697b20cc7b71d04438c00cf3d557bd03b5e1b86e167d2d6e09714135ef720667d0f2e7ca54da419d1bf6722eda31381059216009cd8c99ba1d7f9ebc1bc021457a195fa5be2f0727a84cf4cac5e080f22c836a4955d5ed06bee2eec0d39abc5f459ac43596fee3b341dfbd7ce6f4e57ea42e1e8d4f65880b8b77d2ee27dc1efe95ff1bacf5aa14933456b68645380d0f2ef6284b9946857456d64f4cb656998e99e3e286f596b31c69a69d0ee8444ed838ca2f0ead1be9538e4e927239d0e65a3f871dcad33881f69592eed93a9fafc934aefa67bb87d582d0ae4cfbb5c50325774bbc259a277749751228d3610f95fd56e9fbccb288eca1b14c8255b6996a59c91efbb08440ed91cdd53b0aab82600906904cee2a117a06157e24fa822e1cf4f9db4c2e8a5e842cfc503e578e69002fbae194b6bc7c8b69aac7359292109b712eb49d21946f5ea2745ab77ef59950dcfd926df2aef20e85f2a14554aabb417f15c725c73edd4853926ad6c525afa2c65de213cee799c18d1ced9424d10d7076fc5862579702a5f91031381f41cb8d9899ab514cfa1c8c51437df9710271d8cf69e8900921cba296703f1a7b5234500c1625884fea594d836a930b06142a6e577cd9c2a32cae65e712624abeeffc423a5d5ed7bd75fcb1a82ecec8acd0da9918a5c7c189f14f8cdf37062f93b87f9188501556060ffc6eac435cb1624f2af688316366e03cfb869eacf83d9d45fce910c3347f810b614c2e4291e70471ca2b574241c3f3d9740c6a45c7296a2f275acbde72e513ef4e5a1123a57c2eb1bd023af716c16a7747204338f60b6e3ac514af50b21952c21592aefb6149828a5183ba581d5ee8647f374645ff941bab67bef760ce353b456c4b51c5d3a0c5372b1773b944ad67a92937dd838e1b6f550a1dca975d6230e430bcc278afed54e0621008b2f850107b0244359e3747be5282630452d432e5df0fd160795effed150f9396a7da5a1e4dce0c8f62280ff2fbfaa813859a671208b4b9f05fe450729b0efad83a790acd688a90e5fee5550de4ddeac70ecd125ad076c4e2b68652e6ea520e2b6b339b4b9dc219d853e06b9aa79d022e53607213fc254e15ec3e6b776d2b562997e0fe52b98c58e1c0316b22a4219460053da87e7baff7dc1892c2de2f324dd1169b977f3a6698d0234c78de3e46ba5824f3e373f264e8d28fbb4cc108a41fdecd4b629d92b0a65f84366bf504eb5a894ba40c89f9df854dc469fa174ac85cb8d2adfdc099ca9848a1032b2e2f375bd1544dfb69e33492e1a4b921ad7ff17c4c7e357ff69f42d2301c302ee2ed313f0e9a20ebfe028a8737d6e38bf179940179cb779b70c2276264cb4f23249db7d5f179baa842b70f5b287cf74ce1ff6b70a56be8f2fe15aeadca229804923d28a793838bc605eaf5dcd362f757577ebdac54b09fd73326720d3522d002a41a3b5f2450f48286a5ea45836b5ee77fc415f47e0716049ec2610d607737fd5a73b066b4876f9d744f6b3486b088dd3bfc3d393a27c6c799ce078e2ee348257b5ec1ba9de76da2a67ca912dc2dd5afc70834ceecbb8bd41f6e790294cacd5891bef1b4e2124dcd6dffdedee8f16b3bddc030429dcb0f98e6fe0649cb14eed3293fa4933b2ab8c0ec0ff4dbbced1e32dceb317252e715b872b00478cbd7b0275b7394a0ccfe9887410b32f1ce9266b3b83470ec982cf908507d3ad0cc366bff3759388b624701b3e0dc0e7928386b155b50b42a8e352622516beeeddfb79866a2eb1d360802cd19d62fd171267a0fece5f54e315a8cd49c41072f2a7a0baab5aadae2c1ff28e285b642f8d3869321bd18b4aed107feaa12d055b179a8ab7b50e2796d287a196e280d527b526c45c8aa98696d88a02d923d06fedf51336c0695c218e70448073921971093ea44b5352e10ce6cec26d082b93f69958165bd986f56650a62224c2d9fd044bd8fefd33544c6bd141b4cc211a087fa57c09e195c8edffe559048db738d1395f5e2625dd7cd035b8c76aad6c238fb52a7c5ff0965fc7122a5899746ca88abd699d6078623722fff92726e18613519f2b1927504fd5cb7a38ffa373c3883022f0387953530834affb5f05e0f44c24caa75561b2b63994493ab857fdc30900586fed09298d846e5936869b43d81c4b91902028e57a8f2da16355ccb7a77d29ecc8e66015e979b2f3edc5b8d77c45348dea55c9ed6b7465acf899f4bc1a7edcae0b0daf69ff85c504eea1294620b6d3dbb004575044a5ae7c110010c2cf39827fbdab3b42ac35d147fc53bb5e7de6c47091dc80c14b8da494b2e913d1a52085e29af19edc4a417346c5a896a3851cb6132511e0627d190b77623c8a3bb6085eff22ede7127f7988a1d388fb70ea20d5c1b2424c5aa83532bc5162a5d177968b4a46583f2d4b92d04a5f19145221aeaf724d92ea1d4dfb53021b47585bbe5ce35f8d09a83e13fdb1de8e52dc646d41e810879ce9c830959c3ee93f11a16d030d141863244395e3f847505fe6d9594a34009fec9a743c033b9793335684cc5c3d0eb0ad094f40a60264b02cd88c583c850d99c5b9c6c5dcef467ca3ea38f2aa42f5657cd940aeb12960efa18d571e4f958b9cd90918e069a486d84f214617ce29c0f2c26bf84f12f5036f26a8de0c8359f572654bf5ee06d38f741c464976d95ae3fdda45c2ed2d08ef71d3590e82d235e0fa357c568158791a195d4a2d9615e1edc85be64cfd169f925ffc4f636f86783cf43624a77bdb9b172228097f02f391df00668dafbd9932298b23cfadfd1b8d14a25cb408a440f930f0813de73c1eb2eb4b3c802d718a672453d0038965c6dc98db96fb4e06f1fda72782d0839d4e8b477ebdb2c73510db44f643ec7dc4fcb837806853caa35cf622aff9d44381d3f7adae00650cbb6f0334ceca14ec982dfb5817d7fd49251c203b6463a09c14885f754603291ccf0a7ceaa57284ee751774fa5ad72f9f7a32fa542947af40601e98057895f2869d4ec2db0d73930962535fc9e12ba7e6777cb458592bee505b367012ebd27b256fa0fac1452cf3b28eab573549b7c7a13752ca0189768f738d5f8030fe999f7bdc466d67bb32937ae469f1a1e21fac2ae2ab92a0a260bf0e9ce20625e82f88d0ed4d13876aed768765d77433bb9137d92d622df502aef574de82fe28063128fe5a1787ced99734c2f3f221e80d3baefd367d01d950ee1bc981b4b5ff86b2a96ab78fa3c1201303cab473103d89bb185afc77dd2cb7ac1564045036fe9fcf85af5d73a7553bc45bf5e221564540982db2f81e612e7c1715d3498b8d7851c0160146d6eaae9e30c81dedfca8e7122fcb69b26b396629b723f1e1822b8d5d8f2ac583728a5ab40010f88aa42f37f2031a3e99d8d6661e63f86f65af521066ea6af89c89e1748521b8368cd03409e895a941025ee777653f55e66cd1a0cca21308666260c3b9a306ddadb322eb1d09f7b27fd570cd35b6ec88bb391e3ae4745e17fb4dd7aef1d75b4ebb91e6e7789b241566d7c0cc97a3a126ed50b0cb621e015414f62641afd85bad78470463f86d8287aa56d331911c23c4cae8e5dfea33f3789c03d61f51c590417b5ff9f1aa35ab6a15364296c5f9399216ce565210a4075ac5e43e916850774a127f9174d95b43d839e056b4a7d679bb8804951ca171c0b59f4d6f32c4fe8f908b9a1614591f5d1e1cf3348e02317ec4655c693417a4c4e7007a8db02faa1634f8eea9c9bbe5b149ce2279953a54884392dc7251dd38670fd59d9d1da5203340909d50f779e864339014bcb545d825cdcccedc558a1d01a2784b8f499ce9fa2ddb0dd1dc0b93d1b282a96cb4ecf152474dbc4b2853b30c8e5fcea85bdab949f5eb1e98d81c102c349f680230082db5aba9e20209c35b16598507d28211b49763b598a7e60519d5b28b67c027cb2657cf2ac7c7455291fcfe63f0b43afcd3afaea934da97c209d02e5b47a686c1c284aeee5d662fd9d9be7c576259d9f1a36fc0f7fe329a1da1dbe078381233940745fc28a56db98b1a8442325168158e3f0b3cbf8a368d19dd20cdfc1c4f3893a30a49223050159b0bb8b7c59ca705ae25453988d87ca6cdd2bd2fe37847ba67cbcf7a494925a8598b7b50a741c9ced10ea08e35c422b79265561a07f40ebb89bc46069a1c1ad95949fe757a76ff6b5386a043abc967c367a9d86b54d374e573540dfc1f6d396f398abe9735f523b778fd124ac1e1eb832a66dd4b1838a50e6a4eb1b95b8a60a94f067b24d1194976c539d5ec287a261bf25904575be3ff49e7411a8dc09739649828124c14fc2b89dad1f3f5725db2e45f5a447cd3e4bdf9e1e95c5ad7c76fcf0c1021cb6c32e6985e1d113030d534eecb0dff2554183ee18da2da5d21a8b994a81f05e0e6ae89b20bffb4be333d1956270da23e9905830921b1f3d615a56a20b11d45ccd1d22b910e33f475a92c31fa5b4675ddee18336d0ee7b75c07df2a9d4ad53d83142219a00aef15e1e9dace0f039d63a530fdf671a54aba3882dad0d439632af5576726c3aa095cc1a0a03063e8a6581b78bef501acc24b05a0150d8f683c90e8e5e283a49f898906dab926e544ead48cb9bf9a6e1bf140b5273443b8cb8166b2d8a5464a3e9d9f4246ac81ea91b33a0b399dde9f5efaf792bb04cfa028f40b7c92db2d9c33e16ef58b9263350879ea94e581a1187b2d1931b1cd7606a76bd8943b7c3098a33bdf476960af7bdf2854b1336e72feb603b8bb2242df0839d157843d369a50a615068ff5d99ecebe8dc19158a6c654e853cedf860a727bf8140c062f5d307fdcd150ad0af03d2c3a913b91047858ed6382d2d2d30f5c0bd419c2cd4047f225107ea8bf4a3a69384f16b5b5bb2655bdb750db4e975794592987df95f6a90374b0a08769b2c957faa16a21270196afba76b4527f01f0c5db7fa16e2da81fc49336e20bc3ee1ccbcb62255c84513d9ceb706f03c25000517070c03b7bce838e6b6cbc7f767959fbd62e11ab7ea6d760cff674a4296e6185eb348028b472290922160f3ea36c22c8375a016f505017c0a0e041dd8e52b4f19ccfc701109a19391a059d77db239d40a06d84a6f0ccd08aaad764e53ad1da19ee825a4d25ca7cd538289bffe135486ec1614e28b3682c7081a1b0a2c7272f4e36f6d0d9e68d84209126dc59312d48eed1c63c90efeadd472259392c28746abf394c5c6c97d3fb00b70a74c313a817ee1719c33f16d58f297fc7eacbca5803df115745079c5434e851ad6c1f0e8ba0bdbb66cbb6789b89a23526b476ad0f2cea0907e72702f93d37bdfe7b39fb9b33fb1111e58f5c45db8cc38afe4e03a318aa0690afb870a67aeda7da9640fdad1e1f551dd4757c69b4f523b616e502514a2e35495916f2e5ddab1ad9534644d99ec56e818caba173773aa5e45104deb869b23063eaea5542d3bc503a6948b83779aa46879443cad02477451b46429f1f67560c31d4377f96031ab94866a73be753c4ab91cc6576c3991c3423103ebae604e887c56cbacb9e95b8b46300b62e698a6456a0d175cf682eacabbe301e0b0ea34f963daed0dc6c1b75fa5e3870959913e69e61911d9ff646e9c6bab33fe566871027e861577c4d7fdfdf94ce7ac1a3f6d29daf28d660431a89c0b56c4b95090e2ca5df62c1e5c5dbf98f067751819d4c5914aa33883b7b521aab30d14e1cfae74fcf3ad4b2cf9448009d3223ad984e0c50f92d465573a6fc2894f8a5d4e855316738ecfd6a6c157d39b5c44d80a7cba944cf9f7a701899859821cf2bc248459f7a350fefba53c1481a7197f024f2eb74251455c06f4b82dfcf3ccf3e3b98b898fa1b16c310125e5e9fd4019acccbe91b4d842ddd52ee56f6d3112dec80159d6d3ef93bca70e7afcccb223361c39addbe3c429934cd0ae35f36a8f6309f08e36b27341db1f21fd8a148b239361b31a85f53bd1ad49fadace6c64d5f4363427fb2f268e8aec6d81cdb7f1252baa4652dc55881661114bf98cdf17190379591f0e22dc97e790f53f463bbb0ad0ead78ddf7dfe2e26052acc31cfe52b822afd5ec5c75957106cb5c368c09252ff3e4f624d90e599279fb985ecdb7d8880dfe05ac2d2da83e34e2b9b88f5dd60107a4509902fcddf4a36605e5c7a2606a4aea9fd4b5b24ca6b67d6945d133869cf9276d8c30b08c2a9f4bf03f4e0b956fd5f3c80b958ac5c41e4115b6708799c3102bd8b6c7fe17ff8c3f89c7437255faf69d1e16074086dd44d038bc0211ac74743169b462dbc085d77bf45eea72bf8348308bf48feea02d739a0fee9fbf71023ef8c6828da1aec8618cc2345ff663f88bc52a990e6b9591425435b0c7900ea4068f5aa6345e94254e259a71290fa23281658a6a165d1dee10dcb355518264824665ff2c5538de9ae4487782911f79e0bb09bc2c2d8e0d91b33cbec839075c9b38c848e9d2fad7368e96c1932042c3e85fd95b7d4500e6cae9e649082e9d5ca6f2cf91fc7ecaccc1049525d4325003424cacbd6eb5b8cc30b6893bd1ef46a8e7cbcc87dc2dda5c802ef1f8bb607c7457eb161254dc0feb60ed5ed0383fdb4db91d7e41d45c8eb80c1981e801ef05703f97f8710a2e00eb0559f854f700f946937b9e68c75ad6d0015d5d79be5423d0d846bc76f92ea7ebb0302b3d3c695c0aafa83b2bf029a444709cbf2cefbdcc7eaf3dd7a16f8ca8c861e883db10d433f7fec547be45e6829962e430bb3c93e8cdfb342c1cb7e53d8a6ea625d5574c4b4303f61c4338a658e652ab2bc0029c0a78a5114f495a439956909cf42128cb4348affbecb20b7fea98e22160e9a58e7666a00e7b37fbec4bd3860d66a39d1232a57e8cc50710c5c666f7efa98f16f9a02d843c94b0842a383945d06899998ff2fd01ffb58ab53ea89b2c93634c48d0420edb9791b8e451b35b534b8b2874c4859c684cd14afb5335a2555c75ad9df018635bb7131a7ef204ccecfed33a675fc51687e3f8818406fbf58e7b5fde1ca96153817e1b632e89a78d967eb6a34af1dac0d9ffa448b7b9bac27afc305a7b47febbe0a37036c18aef6852b1b2759d67479f9edb169e796d949844a1624b1e832a2eee9be36dc5866d6fde431cfcbd4e305d322c9dd07f83b5b361daaa74bfc9fbce8b447210c327468659ecbb0a5fc20d0cb79de7d1d70bf251c81d5f38711f3f4bd4752685b077058beb465711b1359d2a7d2f59216c5a807121bb97e7ccacc46526e4072f1d6de3b487d492fed0995e2273fa3bb115bd08d32d8e57eb2aa8f9d3b81babd1b8334c3a5e69422b75502ced3793d07b9bdf38e9d9fa1d2e48c7886dfc41985e8ffc49f09c4ba58ddc3b4cbf562b591f8939ced5d18214a77cc753075334a157373cc33cbc07a731cd6342492f5e05f78108e627bc88777203c76632bbe0120924c7a51bbfc9dc789a5695b7c95ef544935032fb81d499c454a2d78727875c20bc8a48a9f23cf6595c17c9cdaa8d04bab8ac567ebd3bbcdb40e11f1893fea3970f176f75f38d17d6ee1bd4ab76c660723a776bc72319199ab82c40ac4a9f4f475e8fd4643a4be8601cb5172e112c236c7c430078601bf183a59a03885e994c1116a9d4ef275790ff2417ffd85b43274fc57654466fa394958aeb11f343c3439604af13997011af70b67df1a9dfa4cdb751a2dc3e5bbf42f7b9ebc6dcebb2dbdc57d7a2cef7409dba307b7cf6eab148a924566341d035cabc877c68d0fbfaebdd39c16304b63a1bae376fb4650708bf5695dfd7ffc01f43f0021f622de0b116ea494454497337a0ec469963de7f9d2b1d6c5a7a0a7835777a78a2b9e16eec696446981d2fea550f011419b96f7b2018d027b87fc715521b0302bd7b5b3bc5f033346029eced73df07dd1bb1f91848376b40b9e9da7233e7832edcc7b54ef6fd320d19efce78d58ea7020fbbdf77612dc8a4f3281915ac9706f346e405b9f489f8f2e9a2decb8d18bec1e5f735a4ec69bba4dc5d36c9c1cc50b92fe67b2cdd53fa671c0cbe331abdf46787e7c9912b951aa20700dba6cf5a209fe5c9c61ef62a8e2e572ec774b2d0f42d570633fc44d44826e848d47a8f386a5704e0a3eaf1d06617181aeb166334ab55d5aedccb27abf19a42a480930e25465721336c70a2ea7799d21a3659124ac9503efc99c1b13ca2b9723e3e338055f9b3cef7502017ebbb09a64b06462db353a5c562101cb7fbf29e056deeb1ff0c7bc877210c941c87401ceae52bcecc83e87655069ab931bd813c1a87d67554f5d2cf435e6dd92a515c22f5d5a9a44ebc81e9c4849104343b80824005619312a9e349d996e366d381da42edad1a560bf5e31ecd049e92ceaf42954958600a7868599fe10e9b34587368d3044250c3d1a8ba6c8dcb6d318d4f9e71c2d33fc74cb57620a8343258d072f3aa767b4b178f3f66d5a713dae2426296c12edf9ee37636869e30df64cd3855fae20bc7602c1b7e6c8246ed4be71231a5ec7b5e7a9ebb08bf8667d8f2900ecdb0a0addc14a2328eebc448db13013e6a3c1a661065e5ac0a04b5171bd84c9d9d947a6c31257ed13a966530c5e20168c100117cf82b4c00ea3ad00ea65e1af89535b3f11a1418ddad33db8cec281543732d2ff4eab54b12cc95f7d872e75bc01bf6c580540b0e26413c6c2321ddfb0447bdb6acf05ddf2bb92534a3a5f37d6da882289f6fefc6a213cdfcf34902137fa3b982b2b4c27c611f08909a18405482f1e3a2bf3635d3e970457541da16e37bb3c422cceeb484bb64c78724431a543ecf4ca851914c1555e3b785ec87bba3769927f6c29f80e7ae8632bdb9acdddf7c3b5580740d9b2bfc25086c9566844136f3fac74f429121f86c378c68c20a194b0c98b1e92991954cbf60477e217a2e25297fc7b18972e40c531ec19e1eea193bbc8893392d8528c6a0375bcb4b082d20d5c47cb330bbb4b74b91ab55d4a0d3e1dee8182c581e8e70ac30108eeb7185c6ea3f786881ad124e1404651ee95cdb0fbb0d0f4a2b43c795ec1cd4e46234a88862d57903ce878b641004fb637341e5d6bf5163f1a3467b828f6eea96c3c2bb79503687867e11eec32dec452e0fdd2eaacfc0a477ee839ef049855da734d18212142dfe2a95ab9ad9bc4f98c3bfa34134c7e6c9f8669303314d4e8c1bc5475e8fcf418cbdb3246ebf393d911cdfee8f2550dc1593ece59ced81a4ffb2484f9c8ebed0aed8d418138445c4e96b209adcc4afd70f09901662daa2c8c557d6039768d97e6b9518f0de4ac2e0187ba08a4a9128d3e632fca102137338b5e568f12c7bd28db772c800fb5f4d4e683b201840731bb7c034235cd73313cde88891bbb31597bb537696e6c987302297f9717b8053779aed447d33ef9129e84d3031fa9b453bd5731fb010ffd19a9133e0ccbec2461cdd31ba294d68c60a8535b15584bab6e6d0ce6c1cef4755bd5f7d90f4debb40af1437a19a96ef9c0709692156152091c7efb58f2d39a65b96416dc09e8091ae08d9be5235a3c1ec062862baa1aab788f28e83ba4635cecc6671f2320f42b4f711e7d0fcad89d6727d3630da1ef35e32dee39eda665946abe6224f17f2acc29e62518fd51eb7f193d9bb16c38204069098c293fdce24c1c79229fd08622a4256b581cffce12e46c20248dc902753f0e3c91f9685b3d45f984620e262b3487d67d152f1c50de3fd2067a9d3debf715f346dd2f712c55545336a9036ba82bb06cfae59a48d083c3388f77790c9639fa0a9c33f4c66c7513042bffb765c2a4b3657dddf0ea094d8d79018f66c8ef8e9df980a89906275edf4a467a5db0a623976899f0efd167aab6ff385cdde59027a95a570277cb94ebce503906c28527e3114eb9ed739d0c2f4cf82786b35c0054718f47381ed8ce9b107e1f1019be5fc877166da667036f0c1b84e2b5118b5f4babc052d997e5f1e8c4cf45eb26430b74d9e1df3735b8d5df559903143d983e974bed6cc608c2580a991bdd3628ec676d348de8752cafa80c1661f162e35c25fc0ba0198423f83214fed800f9355ac8ea67951cfeeb3736b50c1e14d45d33aa25fc72c38702bd5dd217842e54114f4799c45ff1b7cec9729382ff7fc3ff80cbe1a13d03e19eecd7de676f6791fe34143ae30c97da9623907d974a37b65d0ef5d46b718d58541c6b1902814de71218ca7396ceb5fdacdc3cf4d110862402e7cc6254f1e44e28593fd443290262db75fd482ce1d305d6bf9fd3e5e0efbedac5a4d097650b111e6e9e1b2c66a23ac5bf27ed78d25d1a54c16ca4287126736c2f17ab73e683798c29d16481775ada8e20d94b00b6b29654b18f60e2853fdc7d3ba55d7df660db90288b6f440efd19f0478047b12c7b07ab2b1c9529597e6462d20612e6c3b6d1b1d11305f8ddc811860450504b7cbf9794edd0d07c25ab6307d74afdce958355eb919dcb1fcb8038c6dd5e774ee398dc8553a9ddeb551f", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r4, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) dup3(r1, r4, 0x6700000000000000) close_range(r0, 0xffffffffffffffff, 0x0) 1.395037424s ago: executing program 5 (id=2790): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000040)="0f080f017806f2460f38f1e6423d79000000970a090003000005000000ba000000000f303e2e0f00d2b805000000660f571d040000000f01d9450f3566baf80cb8a25a918def66bafc0c66ed67410fc7ba1a8b0000", 0x55}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.225865057s ago: executing program 5 (id=2791): syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005c3f6b200304a4bc23d7010203010902120001000000000904d4"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0xc000000, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000068000100f33c07dbdb2502000200000000002f000b0000"], 0x1c}}, 0x4000) ftruncate(r0, 0x94) r2 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r2, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x4, 0x200001}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[{0x10, 0x29, 0x36}], 0x10}}], 0x1, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) 1.156211565s ago: executing program 1 (id=2792): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff9909", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000a80)=""/188, 0xba) write$char_usb(r1, &(0x7f0000000080)='B', 0x1) syz_usb_disconnect(r0) 903.847243ms ago: executing program 4 (id=2793): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 769.990055ms ago: executing program 2 (id=2794): syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) bind$pptp(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000340)=0x1) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000180)) 731.589407ms ago: executing program 2 (id=2795): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'rti802\x00', [0x100, 0x7, 0xffffffff, 0x1000, 0x4, 0x5, 0x79, 0x6, 0x80008, 0x0, 0xffffffff, 0x4, 0x8, 0x1000004, 0x100, 0xd, 0xfffffffb, 0x52, 0x5, 0x7fffffff, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b5, 0x0, 0xfffffffc]}) 661.330256ms ago: executing program 2 (id=2796): syz_pidfd_open(0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0}) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0xd8000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0}) 495.053861ms ago: executing program 2 (id=2797): r0 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r4}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) socket$nl_xfrm(0x10, 0x3, 0x6) 408.703817ms ago: executing program 3 (id=2798): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0x4, {0xa, 0x4e21, 0xd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}}, 0x3a) syz_emit_ethernet(0x3b6, &(0x7f0000000440)=ANY=[@ANYBLOB="61fe71b72b5f1780c202090086dd60d2330000000000000000bbff02000000000000000000000000000186009078000002001100000000000000030aa78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af18020001ffffffffffffff80260004000318fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649f"], 0x0) 239.813ms ago: executing program 2 (id=2799): pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) socket$packet(0x11, 0x2, 0x300) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000019080)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x3}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000f40)={0x6, 0x118, 0xfa00, {{0x9, 0x8, "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", 0x0, 0x7, 0x8, 0x5, 0x2, 0x3, 0x8}}}, 0x120) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r2, 0x11, 0x66, 0x0, 0x0) accept4$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c, 0x80000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendto$inet6(r3, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) close(r3) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000003000128009000100766c616e000000002000028006000100030000000c0002000c0000001c0000000600050088a8000008000500", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 176.595244ms ago: executing program 3 (id=2800): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a000000", 0x4) setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r1, &(0x7f00000004c0)="b0", 0x1, 0x1f4, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e23, 0x3, @local}}}, 0x84) 66.247388ms ago: executing program 2 (id=2801): timer_create(0x0, 0x0, &(0x7f0000000300)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xb, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xd}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1200}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) fanotify_init(0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000300)=0x3ff, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r4 = socket(0x10, 0x3, 0x0) listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x16, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x92}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd25, 0x25dfdbfe, {0x60, 0x0, 0x0, r6, {}, {0x1, 0xa}, {0x7, 0x3}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x2000c0b0) 0s ago: executing program 3 (id=2802): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000016c0)=[{&(0x7f0000000580)="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", 0x3c7}], 0x1) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") kernel console output (not intermixed with test programs): nging to 0x8F [ 963.968720][T10868] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 964.007749][T10868] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 964.045850][T10868] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 964.059685][ T5722] usb 3-1: Using ep0 maxpacket: 8 [ 964.078975][ T5722] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 964.097531][ T5722] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 964.116683][T10868] usb 6-1: config 168 interface 0 has no altsetting 0 [ 964.140779][T10868] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 964.149998][ T5722] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 964.161960][T13451] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 964.187401][T10868] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 964.210441][ T5722] usb 3-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 964.243340][T10868] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 964.259495][ T5722] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 964.287532][T10868] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 964.321137][ T5722] usb 3-1: config 168 interface 0 has no altsetting 0 [ 964.334992][T10868] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 964.363923][T13451] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 964.374930][ T5722] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 964.390738][ T5722] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 964.406988][T10868] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 964.421987][T13451] usb 2-1: config 0 interface 0 has no altsetting 0 [ 964.456303][ T5722] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 964.476797][T10868] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 964.490505][T13451] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 964.512351][T13451] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.534456][ T5722] usb 3-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 964.555848][T10868] usb 6-1: config 168 interface 0 has no altsetting 0 [ 964.571657][T13451] usb 2-1: Product: syz [ 964.597770][T10868] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 964.606585][T13451] usb 2-1: Manufacturer: syz [ 964.612849][ T5722] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 964.640997][T13451] usb 2-1: SerialNumber: syz [ 964.651010][T10868] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 964.678918][T13451] usb 2-1: config 0 descriptor?? [ 964.693684][ T5722] usb 3-1: config 168 interface 0 has no altsetting 0 [ 964.711772][T10868] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 964.729166][T13451] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 964.746600][ T5722] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 964.764376][ T5722] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 964.780850][T10868] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 964.803258][T13451] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 964.825621][ T5722] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 964.845358][T10868] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 964.859889][T13451] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 964.885495][ T5722] usb 3-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 964.900570][T13451] usb 2-1: media controller created [ 964.910437][T10868] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 964.946974][ T5722] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 964.966916][T13451] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 964.980866][T10868] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 965.027349][ T5722] usb 3-1: config 168 interface 0 has no altsetting 0 [ 965.053952][T10868] usb 6-1: config 168 interface 0 has no altsetting 0 [ 965.089773][ T5722] usb 3-1: string descriptor 0 read error: -22 [ 965.105785][T10868] usb 6-1: string descriptor 0 read error: -22 [ 965.121310][ T5722] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 965.148723][T10868] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 965.176339][ T4979] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 965.191301][ T5722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.206067][T13451] DVB: Unable to find symbol tda10046_attach() [ 965.217347][T10868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.227323][ T4979] loop4: partition table partially beyond EOD, truncated [ 965.243510][T13451] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 965.259971][ T4979] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 965.269369][ T5722] adutux 3-1:168.0: interrupt endpoints not found [ 965.278891][T14890] kvm: user requested TSC rate below hardware speed [ 965.289233][T13451] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 965.308751][T10868] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 965.391754][T10868] usb 6-1: USB disconnect, device number 69 [ 965.527680][ T5729] usb 3-1: USB disconnect, device number 87 [ 965.584915][ T5632] udevd[5632]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 965.852672][ T5722] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 966.013796][ T5722] usb 5-1: Using ep0 maxpacket: 8 [ 966.030200][ T5722] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 966.040075][ T5722] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 966.068948][ T5722] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 966.099306][ T5722] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 966.116904][ T5722] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 966.131779][ T5722] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 966.141644][ T5722] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.171650][T13451] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 966.207628][T13451] usb 2-1: USB disconnect, device number 93 [ 966.362866][ T5729] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 966.374110][ T5722] usb 5-1: usb_control_msg returned -32 [ 966.384923][ T5722] usbtmc 5-1:16.0: can't read capabilities [ 966.532498][ T5729] usb 4-1: Using ep0 maxpacket: 32 [ 966.545321][ T5729] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 966.569842][ T5729] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 966.606891][ T5729] usb 4-1: config 0 interface 0 has no altsetting 0 [ 966.621306][ T5729] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 966.632222][ T5729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.645585][ T5729] usb 4-1: Product: syz [ 966.651151][T14896] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 966.658329][ T189] usb 5-1: USB disconnect, device number 88 [ 966.664704][ T5729] usb 4-1: Manufacturer: syz [ 966.680453][ T5729] usb 4-1: SerialNumber: syz [ 966.705468][ T5729] usb 4-1: config 0 descriptor?? [ 966.712924][ T5722] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 966.876027][ T5722] usb 3-1: Using ep0 maxpacket: 32 [ 966.896612][ T5722] usb 3-1: config 0 has no interfaces? [ 966.909333][ T5722] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 966.930616][ T5722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.947856][ T5722] usb 3-1: Product: syz [ 966.959678][ T5722] usb 3-1: Manufacturer: syz [ 966.972039][ T5722] usb 3-1: SerialNumber: syz [ 966.989252][ T5722] usb 3-1: config 0 descriptor?? [ 967.130259][ T5729] gs_usb 4-1:0.0: Configuring for 22 interfaces [ 967.137007][T10868] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 967.295651][T10868] usb 5-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 967.317262][T10868] usb 5-1: config 0 interface 0 has no altsetting 0 [ 967.335374][T10868] usb 5-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 967.359657][T10868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.384259][T10868] usb 5-1: config 0 descriptor?? [ 967.535381][T14941] loop4: detected capacity change from 0 to 7 [ 967.549333][ T5729] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 967.579944][T14941] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 967.590413][ T5729] gs_usb 4-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 967.609346][T14941] loop4: partition table partially beyond EOD, truncated [ 967.633192][ T5729] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 967.679293][T14941] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 967.696009][ T5729] usb 4-1: USB disconnect, device number 82 [ 967.707819][T14945] kvm: user requested TSC rate below hardware speed [ 967.812020][T10868] usbhid 5-1:0.0: can't add hid device: -71 [ 967.834570][T10868] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 967.891647][T10868] usb 5-1: USB disconnect, device number 89 [ 968.176951][ T5722] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 968.292484][ T5729] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 968.345379][ T4979] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 968.350792][ T5722] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 968.361815][ T4979] loop4: partition table partially beyond EOD, truncated [ 968.369057][ T5722] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 968.379346][ T4979] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 968.387828][ T5722] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.411753][ T5722] usb 2-1: config 0 descriptor?? [ 968.438446][ T5722] pwc: Askey VC010 type 2 USB webcam detected. [ 968.452581][ T5729] usb 6-1: Using ep0 maxpacket: 8 [ 968.474325][ T5729] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 968.497886][ T5729] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 968.516278][ T5729] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 968.529033][ T5729] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 968.541369][ T5729] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 968.554414][ T5729] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 968.566386][ T5729] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 968.580909][ T5729] usb 6-1: config 168 interface 0 has no altsetting 0 [ 968.588997][ T5729] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 968.597195][ T5729] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 968.609847][ T5729] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 968.626719][ T5729] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 968.641053][ T5729] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 968.653332][ T5729] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 968.666349][ T5729] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 968.680222][ T5729] usb 6-1: config 168 interface 0 has no altsetting 0 [ 968.688174][ T5729] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 968.696050][ T5729] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 968.708044][ T5729] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 968.722253][ T189] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 968.733748][ T5729] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 968.747052][ T5729] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 968.758767][ T5729] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 968.770707][ T5729] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 968.786065][ T5729] usb 6-1: config 168 interface 0 has no altsetting 0 [ 968.797201][ T5729] usb 6-1: string descriptor 0 read error: -22 [ 968.803805][ T5729] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 968.814023][ T5729] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.839120][ T5729] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 968.850099][ T5722] pwc: recv_control_msg error -32 req 02 val 2b00 [ 968.860655][ T5722] pwc: recv_control_msg error -32 req 02 val 2700 [ 968.878310][ T5722] pwc: recv_control_msg error -32 req 02 val 2c00 [ 968.888568][ T5722] pwc: recv_control_msg error -32 req 04 val 1000 [ 968.895387][ T189] usb 5-1: Using ep0 maxpacket: 16 [ 968.903248][ T5722] pwc: recv_control_msg error -32 req 04 val 1300 [ 968.910593][ T5722] pwc: recv_control_msg error -32 req 04 val 1400 [ 968.918129][ T189] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 968.929454][ T189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 968.940784][ T189] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 968.957697][ T189] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 968.967587][ T189] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 968.975950][ T189] usb 5-1: Manufacturer: syz [ 968.990947][ T189] usb 5-1: config 0 descriptor?? [ 969.129873][ T5722] pwc: recv_control_msg error -71 req 02 val 2100 [ 969.143990][ T5722] pwc: recv_control_msg error -71 req 04 val 1500 [ 969.153937][ T189] usb 6-1: USB disconnect, device number 70 [ 969.161719][T14943] usb 6-1: Couldn't submit interrupt_out_urb -19 [ 969.182954][ T5722] pwc: recv_control_msg error -71 req 02 val 2500 [ 969.225753][ T5722] pwc: recv_control_msg error -71 req 02 val 2400 [ 969.252329][ T5722] pwc: recv_control_msg error -71 req 02 val 2600 [ 969.270276][ T5722] pwc: recv_control_msg error -71 req 02 val 2900 [ 969.287788][ T5722] pwc: recv_control_msg error -71 req 02 val 2800 [ 969.306733][ T5722] pwc: recv_control_msg error -71 req 04 val 1100 [ 969.330955][ T5722] pwc: recv_control_msg error -71 req 04 val 1200 [ 969.345410][T14964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2455'. [ 969.359214][ T5722] pwc: Registered as video103. [ 969.382228][ T5722] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input62 [ 969.452773][ T5722] usb 2-1: USB disconnect, device number 94 [ 969.528393][ T189] usb 3-1: USB disconnect, device number 88 [ 969.842960][ T5729] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 969.975649][T14985] kvm: user requested TSC rate below hardware speed [ 970.014882][ T5729] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 970.045346][ T5729] usb 4-1: config 0 interface 0 has no altsetting 0 [ 970.076825][ T5729] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 970.105060][ T5729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.143119][ T5729] usb 4-1: Product: syz [ 970.156923][ T5729] usb 4-1: Manufacturer: syz [ 970.179667][ T5729] usb 4-1: SerialNumber: syz [ 970.212101][ T5729] usb 4-1: config 0 descriptor?? [ 970.249568][ T5729] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 970.288462][ T5729] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 970.327844][ T5729] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 970.360274][ T5729] usb 4-1: media controller created [ 970.408691][ T5729] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 970.549137][ T5729] DVB: Unable to find symbol tda10046_attach() [ 970.583982][ T5729] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 970.614824][ T5729] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 971.188185][T15020] binder: 15019:15020 ioctl 4018620d 0 returned -22 [ 971.344569][T15022] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2467'. [ 971.428916][T15022] netlink: 'syz.1.2467': attribute type 16 has an invalid length. [ 971.445587][T15022] netlink: 'syz.1.2467': attribute type 17 has an invalid length. [ 971.528807][T15022] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 971.549396][ T5722] usb 5-1: USB disconnect, device number 90 [ 971.615662][T13451] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 971.712114][ T5729] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 971.727830][T15026] loop4: detected capacity change from 0 to 7 [ 971.773170][ T5729] usb 4-1: USB disconnect, device number 83 [ 971.800319][T15026] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 971.842702][T13451] usb 6-1: Using ep0 maxpacket: 32 [ 971.863621][T15029] kvm: user requested TSC rate below hardware speed [ 971.881989][T13451] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 971.899523][T15026] loop4: partition table partially beyond EOD, truncated [ 971.920429][T13451] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 971.954230][T13451] usb 6-1: config 0 has no interface number 0 [ 971.986332][T15026] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 972.005685][T13451] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 972.036871][T13451] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.087798][T13451] usb 6-1: Product: syz [ 972.115577][T13451] usb 6-1: Manufacturer: syz [ 972.156018][T13451] usb 6-1: SerialNumber: syz [ 972.193326][T13451] usb 6-1: config 0 descriptor?? [ 972.205331][T15032] syzkaller0: entered promiscuous mode [ 972.233403][T15032] syzkaller0: entered allmulticast mode [ 972.404602][T13451] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 972.532966][T15042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2475'. [ 972.593917][T13451] usb 2-1: Using ep0 maxpacket: 16 [ 972.617818][T13451] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 972.660113][T13451] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 972.710506][T13451] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 972.755159][T13451] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.794906][T13451] usb 2-1: config 0 descriptor?? [ 972.805267][ T5729] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 972.885130][T15053] binder: 15052:15053 ioctl 4018620d 0 returned -22 [ 972.982898][ T5729] usb 5-1: Using ep0 maxpacket: 8 [ 972.999276][ T5729] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 973.021901][ T5729] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 973.073365][ T5729] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 973.118872][T15060] netlink: 8188 bytes leftover after parsing attributes in process `syz.2.2479'. [ 973.129167][ T5729] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 973.150512][T15060] openvswitch: netlink: Flow key attr not present in new flow. [ 973.162064][ T5729] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 973.198390][ T5729] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 973.234490][ T5729] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 973.270189][T13451] usbhid 2-1:0.0: can't add hid device: -32 [ 973.294047][T13451] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 973.306536][ T5729] usb 5-1: config 168 interface 0 has no altsetting 0 [ 973.339617][ T5729] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 973.347744][T13451] usb 2-1: USB disconnect, device number 95 [ 973.380049][ T5729] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 973.447154][ T5729] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 973.494098][ T5729] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 973.536856][ T5729] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 973.560420][ T5729] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 973.599841][ T5729] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 973.641786][ T5729] usb 5-1: config 168 interface 0 has no altsetting 0 [ 973.668173][ T5729] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 973.687633][ T5729] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 973.726221][ T5729] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 973.762070][ T5729] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 973.823947][ T5729] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 973.885275][ T5729] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 973.939911][ T5729] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 973.990953][ T5729] usb 5-1: config 168 interface 0 has no altsetting 0 [ 974.020703][ T5729] usb 5-1: string descriptor 0 read error: -22 [ 974.036295][ T5729] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 974.070556][ T5729] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.137915][ T5729] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 974.204532][T15087] kvm: user requested TSC rate below hardware speed [ 974.439227][ T5729] usb 6-1: USB disconnect, device number 71 [ 974.490929][ T5722] usb 5-1: USB disconnect, device number 91 [ 974.497123][T15028] usb 5-1: Couldn't submit interrupt_out_urb -19 [ 974.721543][T15094] syzkaller0: entered promiscuous mode [ 974.758495][T15094] syzkaller0: entered allmulticast mode [ 975.494708][T15119] binder: 15118:15119 ioctl c0306201 0 returned -14 [ 975.659722][ T30] audit: type=1400 audit(1785239445.782:1008): avc: denied { connect } for pid=15120 comm="syz.4.2495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 976.472976][ T5722] usb 6-1: new full-speed USB device number 72 using dummy_hcd [ 976.655306][ T5722] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 976.694172][T15156] syzkaller0: entered promiscuous mode [ 976.715166][ T5722] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 976.739890][T15156] syzkaller0: entered allmulticast mode [ 976.746610][T15158] loop4: detected capacity change from 0 to 7 [ 976.776801][T15158] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 976.798112][ T5722] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 976.814645][T15158] loop4: partition table partially beyond EOD, truncated [ 976.860595][ T5722] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 976.892751][ T5722] usb 6-1: Product: syz [ 976.898658][T15158] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 976.908919][ T5722] usb 6-1: Manufacturer: syz [ 976.918801][ T5722] usb 6-1: SerialNumber: syz [ 976.957090][ T5722] usb 6-1: config 0 descriptor?? [ 976.991201][ T5722] usb 6-1: no audio or video endpoints found [ 977.200628][ T189] usb 6-1: USB disconnect, device number 72 [ 977.341250][ T4979] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 977.367609][ T4979] loop4: partition table partially beyond EOD, truncated [ 977.402103][ T4979] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 977.542691][ T5722] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 977.655729][T15184] syzkaller0: entered promiscuous mode [ 977.666562][T15184] syzkaller0: entered allmulticast mode [ 977.714849][ T5722] usb 4-1: unable to get BOS descriptor or descriptor too short [ 977.760225][ T5722] usb 4-1: not running at top speed; connect to a high speed hub [ 977.780617][ T5722] usb 4-1: config 160 has an invalid interface number: 187 but max is 0 [ 977.809435][ T5722] usb 4-1: config 160 has no interface number 0 [ 977.835478][ T5722] usb 4-1: config 160 interface 187 altsetting 8 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 977.847722][ T189] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 977.897461][ T5722] usb 4-1: config 160 interface 187 altsetting 8 endpoint 0x84 has invalid maxpacket 49717, setting to 64 [ 977.943630][ T5722] usb 4-1: config 160 interface 187 altsetting 8 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 977.961230][ T5722] usb 4-1: config 160 interface 187 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 977.980734][ T5722] usb 4-1: config 160 interface 187 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 978.016072][ T5722] usb 4-1: config 160 interface 187 altsetting 8 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 978.029579][ T189] usb 3-1: Using ep0 maxpacket: 8 [ 978.050685][ T189] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 978.062078][ T5722] usb 4-1: config 160 interface 187 altsetting 8 has an endpoint descriptor with address 0xE9, changing to 0x89 [ 978.075103][ T189] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 978.089258][ T5722] usb 4-1: config 160 interface 187 altsetting 8 endpoint 0x89 has invalid maxpacket 18397, setting to 64 [ 978.100934][ T189] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 978.113253][ T5722] usb 4-1: config 160 interface 187 altsetting 8 has 8 endpoint descriptors, different from the interface descriptor's value: 6 [ 978.126763][ T189] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 978.139056][ T189] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 978.155892][ T5722] usb 4-1: config 160 interface 187 has no altsetting 0 [ 978.163322][ T189] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 978.175021][T13451] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 978.184547][ T5722] usb 4-1: New USB device found, idVendor=0caa, idProduct=3001, bcdDevice=3e.c2 [ 978.194445][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.202744][ T189] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 978.216585][ T5722] usb 4-1: Product: syz [ 978.220780][ T5722] usb 4-1: Manufacturer: syz [ 978.226150][ T189] usb 3-1: config 168 interface 0 has no altsetting 0 [ 978.242517][ T5722] usb 4-1: SerialNumber: syz [ 978.265837][T15174] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 978.275128][ T189] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 978.282841][ T5729] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 978.302074][ T189] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 978.314450][T15174] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 978.331480][ T4979] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 978.339904][T15174] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 978.352276][ T189] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 978.365670][T13451] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 978.377869][ T4979] loop4: partition table partially beyond EOD, truncated [ 978.397479][ T4979] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 978.404990][T13451] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 978.423466][ T189] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 978.455659][T13451] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 978.469041][ T189] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 978.492505][ T5729] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 978.507989][T13451] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.542624][ T5729] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 978.552282][ T189] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 978.564883][T13451] usb 2-1: Product: syz [ 978.578193][T13451] usb 2-1: Manufacturer: syz [ 978.589607][ T5729] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.617618][T13451] usb 2-1: SerialNumber: syz [ 978.622876][ T189] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 978.641662][ T5722] pl2303 4-1:160.187: pl2303 converter detected [ 978.657866][T13451] cdc_ncm 2-1:1.0: skipping garbage [ 978.675987][ T5729] usb 6-1: config 0 descriptor?? [ 978.686346][ T5722] pl2303 4-1:160.187: unknown device type, please report to linux-usb@vger.kernel.org [ 978.697605][T13451] usb 2-1: selecting invalid altsetting 1 [ 978.716341][ T4979] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 978.722104][ T189] usb 3-1: config 168 interface 0 has no altsetting 0 [ 978.734865][ T4979] loop4: partition table partially beyond EOD, truncated [ 978.748441][T15198] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2514'. [ 978.763569][ T5722] usb 4-1: USB disconnect, device number 84 [ 978.769585][ T189] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 978.783022][ T4979] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 978.798615][ T189] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 978.852297][ T189] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 978.915761][ T5729] usbhid 6-1:0.0: can't add hid device: -71 [ 978.922505][ T4979] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 978.933805][ T189] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 978.948531][ T5729] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 978.959748][ T4979] loop4: partition table partially beyond EOD, truncated [ 978.975211][ T4979] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 978.984960][ T5729] usb 6-1: USB disconnect, device number 73 [ 978.993321][ T189] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 979.008278][T15200] syzkaller0: entered promiscuous mode [ 979.025016][T15200] syzkaller0: entered allmulticast mode [ 979.039819][ T189] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 979.077373][T13451] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 979.111753][T13451] cdc_ncm 2-1:1.0: bind() failure [ 979.139773][ T189] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 979.197243][ T189] usb 3-1: config 168 interface 0 has no altsetting 0 [ 979.225289][ T189] usb 3-1: string descriptor 0 read error: -22 [ 979.241791][ T189] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 979.283682][ T4979] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 979.290761][ T189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.306347][ T4979] loop4: partition table partially beyond EOD, truncated [ 979.323029][ T189] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 979.332001][ T4979] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 979.442678][ T5729] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 979.614905][ T5729] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 979.664857][ T5729] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 979.680317][T13451] usb 3-1: USB disconnect, device number 89 [ 979.688164][T15163] usb 3-1: Couldn't submit interrupt_out_urb -19 [ 979.738441][ T5729] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.786728][ T5729] usb 6-1: config 0 descriptor?? [ 980.964417][ T5722] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 981.043122][T13451] usb 2-1: USB disconnect, device number 96 [ 981.164434][ T5722] usb 3-1: unable to get BOS descriptor or descriptor too short [ 981.175400][ T5722] usb 3-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 981.185100][ T5722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.195389][ T5722] usb 3-1: Product: syz [ 981.199644][ T5722] usb 3-1: Manufacturer: syz [ 981.204601][ T5722] usb 3-1: SerialNumber: syz [ 981.219011][ T5722] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 981.322535][ T5838] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 981.342671][T10868] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 981.428873][ T5729] aiptek 6-1:0.0: Aiptek using 400 ms programming speed [ 981.455383][ T5729] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input63 [ 981.478344][T10868] usb 5-1: device descriptor read/64, error -71 [ 981.486348][ T5838] usb 4-1: Using ep0 maxpacket: 8 [ 981.511706][ T5838] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 981.553472][ T5729] usb 6-1: USB disconnect, device number 74 [ 981.559462][ C0] aiptek 6-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 981.578583][ T5838] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 981.592316][T15255] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2525'. [ 981.611229][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.659222][ T5838] usb 4-1: Product: syz [ 981.678519][ T5838] usb 4-1: Manufacturer: syz [ 981.707667][ T5838] usb 4-1: SerialNumber: syz [ 981.738601][ T5838] usb 4-1: config 0 descriptor?? [ 981.753067][T10868] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 981.780710][ T5838] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 981.914957][T10868] usb 5-1: device descriptor read/64, error -71 [ 982.033194][T10868] usb usb5-port1: attempt power cycle [ 982.122607][ T5729] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 982.284298][ T5729] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 982.292799][ T5729] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 982.303481][ T5729] usb 6-1: config 0 has no interface number 0 [ 982.309661][ T5729] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 982.325864][ T5729] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 982.336577][ T5729] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 982.355818][ T5729] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 982.365563][ T5729] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.373857][ T5729] usb 6-1: Product: syz [ 982.378219][ T5729] usb 6-1: Manufacturer: syz [ 982.383211][T10868] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 982.391309][ T5729] usb 6-1: SerialNumber: syz [ 982.401270][ T5729] usb 6-1: config 0 descriptor?? [ 982.413260][T10868] usb 5-1: device descriptor read/8, error -71 [ 982.652572][T10868] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 982.693262][T10868] usb 5-1: device descriptor read/8, error -71 [ 982.813576][T10868] usb usb5-port1: unable to enumerate USB device [ 982.998036][ T5838] gspca_zc3xx: reg_w_i err -71 [ 983.028447][T10868] usb 6-1: USB disconnect, device number 75 [ 983.623676][ T5838] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 983.656368][ T5838] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 983.711187][ T5838] usb 4-1: USB disconnect, device number 85 [ 983.799299][ T5722] usb 3-1: USB disconnect, device number 90 [ 983.823313][T10868] usb 6-1: new full-speed USB device number 76 using dummy_hcd [ 983.864752][T15301] binder: 15300:15301 ioctl 4018620d 0 returned -22 [ 983.908937][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 983.939981][T15303] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2536'. [ 984.035241][T10868] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 984.079773][T10868] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 984.171386][T10868] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 984.234925][T10868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.276129][T10868] usb 6-1: Product: syz [ 984.317940][T10868] usb 6-1: Manufacturer: syz [ 984.364641][T10868] usb 6-1: SerialNumber: syz [ 984.421478][T10868] cdc_ncm 6-1:1.0: skipping garbage [ 984.461000][T10868] usb 6-1: selecting invalid altsetting 1 [ 984.592493][ T5729] usb 3-1: new low-speed USB device number 91 using dummy_hcd [ 984.754640][ T5729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 984.766028][ T5722] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 984.776653][ T5729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 984.788791][ T5729] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 984.803610][ T5729] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c1f, bcdDevice= 0.00 [ 984.813095][ T5729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.824365][ T5729] usb 3-1: config 0 descriptor?? [ 984.829925][T10868] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 984.840694][T15319] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 984.849273][T10868] cdc_ncm 6-1:1.0: bind() failure [ 984.885802][ T5838] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 984.934970][ T5722] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 984.957189][ T5722] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 984.973502][ T5722] usb 5-1: config 0 has no interface number 0 [ 984.979877][ T5722] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 984.991545][ T5722] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 985.005362][ T5722] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 985.020886][ T5722] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 985.030526][ T5722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.039255][ T5722] usb 5-1: Product: syz [ 985.043828][ T5722] usb 5-1: Manufacturer: syz [ 985.048450][ T5722] usb 5-1: SerialNumber: syz [ 985.053125][ T5838] usb 4-1: Using ep0 maxpacket: 8 [ 985.061292][ T5838] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 985.072436][ T5722] usb 5-1: config 0 descriptor?? [ 985.081302][ T5838] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 985.104774][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.118520][ T5838] usb 4-1: Product: syz [ 985.123091][ T5838] usb 4-1: Manufacturer: syz [ 985.127869][ T5838] usb 4-1: SerialNumber: syz [ 985.138573][ T5838] usb 4-1: config 0 descriptor?? [ 985.147560][ T5838] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 985.265454][ T5729] hid_parser_main: 34 callbacks suppressed [ 985.265472][ T5729] corsair-psu 0003:1B1C:1C1F.001A: unknown main item tag 0x6 [ 985.281043][ T5729] corsair-psu 0003:1B1C:1C1F.001A: item fetching failed at offset 24/40 [ 985.290749][ T5729] corsair-psu 0003:1B1C:1C1F.001A: probe with driver corsair-psu failed with error -22 [ 985.352566][T10868] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 985.482557][T10868] usb 2-1: device descriptor read/64, error -71 [ 985.499519][ T5729] usb 3-1: USB disconnect, device number 91 [ 985.715249][ T5729] usb 5-1: USB disconnect, device number 96 [ 985.733889][T10868] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 985.872516][T10868] usb 2-1: device descriptor read/64, error -71 [ 985.982716][T10868] usb usb2-port1: attempt power cycle [ 986.323536][T10868] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 986.356266][ T5838] gspca_zc3xx: reg_w_i err -71 [ 986.370103][T15339] syzkaller0: entered promiscuous mode [ 986.385830][T15339] syzkaller0: entered allmulticast mode [ 986.393930][T10868] usb 2-1: device descriptor read/8, error -71 [ 986.462268][ T30] audit: type=1400 audit(1785239456.582:1009): avc: denied { map } for pid=15340 comm="syz.2.2551" path="socket:[60336]" dev="sockfs" ino=60336 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 986.611180][ T5722] usb 6-1: USB disconnect, device number 76 [ 986.632764][T10868] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 986.689574][T10868] usb 2-1: device descriptor read/8, error -71 [ 986.832999][T10868] usb usb2-port1: unable to enumerate USB device [ 986.982509][T10868] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 987.003461][ T5736] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 987.022556][ T5838] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 987.029743][ T5838] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 987.066205][ T5838] usb 4-1: USB disconnect, device number 86 [ 987.144356][T10868] usb 3-1: Using ep0 maxpacket: 8 [ 987.163140][ T5736] usb 5-1: Using ep0 maxpacket: 32 [ 987.175237][T10868] usb 3-1: config index 0 descriptor too short (expected 341, got 85) [ 987.184099][T15361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2557'. [ 987.209018][ T5736] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 987.221892][T10868] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 987.241396][ T5736] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 987.274814][T10868] usb 3-1: config 1 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 987.298267][ T5736] usb 5-1: config 0 has no interface number 0 [ 987.329182][ T5736] usb 5-1: config 0 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 987.356422][T10868] usb 3-1: config 1 interface 0 has no altsetting 0 [ 987.383443][T10868] usb 3-1: New USB device found, idVendor=053c, idProduct=a4a1, bcdDevice= 0.40 [ 987.394092][ T5736] usb 5-1: config 0 interface 89 has no altsetting 0 [ 987.418982][ T5736] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 987.432312][T10868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.457246][ T5736] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.470656][T10868] usb 3-1: Product: syz [ 987.484414][T10868] usb 3-1: Manufacturer: syz [ 987.492929][ T5736] usb 5-1: Product: syz [ 987.505424][T10868] usb 3-1: SerialNumber: syz [ 987.511931][ T5736] usb 5-1: Manufacturer: syz [ 987.539567][ T5736] usb 5-1: SerialNumber: syz [ 987.567044][ T5736] usb 5-1: config 0 descriptor?? [ 988.372491][ T5736] usb 6-1: new full-speed USB device number 77 using dummy_hcd [ 988.392553][ T5838] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 988.524222][ T5736] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 988.534667][ T5736] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 988.547847][ T5838] usb 2-1: Using ep0 maxpacket: 16 [ 988.553854][ T5729] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 988.567381][ T5736] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 988.580638][ T5838] usb 2-1: config index 0 descriptor too short (expected 1810, got 18) [ 988.589793][ T5736] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.597969][ T5838] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 988.608796][ T5736] usb 6-1: Product: syz [ 988.613335][ T5838] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 988.623121][ T5736] usb 6-1: Manufacturer: syz [ 988.628047][ T5736] usb 6-1: SerialNumber: syz [ 988.634452][ T5838] usb 2-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=44.e6 [ 988.648554][ T5736] cdc_ncm 6-1:1.0: skipping garbage [ 988.657975][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.666744][ T5736] usb 6-1: selecting invalid altsetting 1 [ 988.681877][ T5838] usb 2-1: config 0 descriptor?? [ 988.735071][ T5729] usb 4-1: unable to get BOS descriptor or descriptor too short [ 988.743835][ T5729] usb 4-1: not running at top speed; connect to a high speed hub [ 988.753299][ T5729] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 988.763780][ T5729] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 988.775093][ T5729] usb 4-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 988.787588][ T5729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.797349][ T5729] usb 4-1: Product: syz [ 988.801666][ T5729] usb 4-1: Manufacturer: syz [ 988.806806][ T5729] usb 4-1: SerialNumber: syz [ 988.900939][ T5838] usb 2-1: USB disconnect, device number 101 [ 989.028595][ T5729] usb 4-1: 3:0: failed to get current value for ch 0 (-71) [ 989.042199][ T5729] usb 4-1: 3:0: cannot get min/max values for control 2 (id 3) [ 989.051057][ T5729] usb 4-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 989.061365][ T5736] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 989.068352][ T5729] usb 4-1: [3] FU [LFE Playback Volume] ch = 1, val = 0/1/1 [ 989.077125][ T5736] cdc_ncm 6-1:1.0: bind() failure [ 989.082989][ T5729] usb 4-1: 3:0: cannot get min/max values for control 3 (id 3) [ 989.107088][ T5729] usb 4-1: 3:0: cannot get min/max values for control 4 (id 3) [ 989.128786][ T5729] usb 4-1: 3:0: cannot get min/max values for control 5 (id 3) [ 989.137615][ T5729] usb 4-1: 3:0: failed to get current value for ch 0 (-71) [ 989.148937][ T5729] usb 4-1: 3:0: cannot get min/max values for control 8 (id 3) [ 989.166492][ T5729] usb 4-1: 3:0: cannot get min/max values for control 3 (id 3) [ 989.175671][ T5729] usb 4-1: 3:0: cannot get min/max values for control 5 (id 3) [ 989.201375][ T5729] usb 4-1: USB disconnect, device number 87 [ 989.412650][T10868] usb 3-1: No union descriptors [ 989.453903][T10868] usb 3-1: USB disconnect, device number 92 [ 989.581894][T15392] vlan2: entered promiscuous mode [ 989.604351][T15392] batadv0: entered promiscuous mode [ 989.639737][T15397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2568'. [ 989.782903][ T5729] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 989.818703][T10868] usb 5-1: USB disconnect, device number 97 [ 989.974693][ T5729] usb 2-1: Using ep0 maxpacket: 8 [ 989.990545][ T5729] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 990.016729][ T5729] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 990.034197][ T5729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.043056][ T5729] usb 2-1: Product: syz [ 990.047321][ T5729] usb 2-1: Manufacturer: syz [ 990.051928][ T5729] usb 2-1: SerialNumber: syz [ 990.066840][ T5729] usb 2-1: config 0 descriptor?? [ 990.078021][ T5729] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 990.182681][T10868] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 990.292768][ T5838] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 990.313610][T10868] usb 5-1: device descriptor read/64, error -71 [ 990.452450][ T5838] usb 3-1: Using ep0 maxpacket: 16 [ 990.459314][ T5838] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 990.470160][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 990.481931][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 990.494312][ T5838] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 990.504604][ T5838] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 990.519299][ T5838] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 990.528830][ T5838] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 990.537311][ T5838] usb 3-1: Manufacturer: syz [ 990.549612][ T5838] usb 3-1: config 0 descriptor?? [ 990.557530][ T5736] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 990.565385][T10868] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 990.702889][T10868] usb 5-1: device descriptor read/64, error -71 [ 990.722456][ T5736] usb 4-1: Using ep0 maxpacket: 8 [ 990.729167][ T5736] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 990.740028][ T5736] usb 4-1: config 0 has no interfaces? [ 990.748404][ T5736] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 990.758042][ T5736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.768626][ T5736] usb 4-1: Product: syz [ 990.774041][ T5736] usb 4-1: Manufacturer: syz [ 990.783316][ T5736] usb 4-1: SerialNumber: syz [ 990.799762][ T5736] usb 4-1: config 0 descriptor?? [ 990.814064][T10868] usb usb5-port1: attempt power cycle [ 990.862625][ T5838] rc_core: IR keymap rc-hauppauge not found [ 990.868620][ T5838] Registered IR keymap rc-empty [ 990.877490][ T5838] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 990.903209][ T5838] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 990.923486][ T5838] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 990.937633][ T5838] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input66 [ 990.953510][ T5838] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 990.972543][ T5838] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 990.993908][ T5838] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 991.012550][ T5838] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 991.032693][ T5838] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 991.052543][ T5838] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 991.072484][ T5838] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 991.094786][ T5838] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 991.122672][ T5838] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 991.142595][ T5838] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 991.161290][ T5722] usb 6-1: USB disconnect, device number 77 [ 991.173580][T10868] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 991.186137][ T5838] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 991.245465][T10868] usb 5-1: device descriptor read/8, error -71 [ 991.256305][ T5838] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 991.294343][ T5838] usb 3-1: USB disconnect, device number 93 [ 991.308065][ T5729] gspca_zc3xx: reg_w_i err -71 [ 991.513401][T10868] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 991.534216][T10868] usb 5-1: device descriptor read/8, error -71 [ 991.644741][T10868] usb usb5-port1: unable to enumerate USB device [ 991.911981][T15427] vlan2: entered promiscuous mode [ 991.945252][ T5729] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 991.958817][ T5729] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 991.990947][ T5729] usb 2-1: USB disconnect, device number 102 [ 992.251254][T15438] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2584'. [ 992.373083][ T5838] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 992.525651][ T5838] usb 3-1: unable to get BOS descriptor or descriptor too short [ 992.535958][ T5838] usb 3-1: not running at top speed; connect to a high speed hub [ 992.545377][ T5838] usb 3-1: config 160 has an invalid interface number: 187 but max is 0 [ 992.554662][ T5838] usb 3-1: config 160 has no interface number 0 [ 992.560999][ T5838] usb 3-1: config 160 interface 187 has no altsetting 0 [ 992.570277][ T5838] usb 3-1: New USB device found, idVendor=0caa, idProduct=3001, bcdDevice=3e.c2 [ 992.580099][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.588321][T10868] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 992.596933][ T5838] usb 3-1: Product: syz [ 992.601313][ T5838] usb 3-1: Manufacturer: syz [ 992.607024][ T5838] usb 3-1: SerialNumber: syz [ 992.755705][T10868] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 992.766157][T10868] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 992.779633][T10868] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 992.796089][T10868] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 992.805818][T10868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.814628][T10868] usb 2-1: Product: syz [ 992.831313][ T5838] pl2303 3-1:160.187: required endpoints missing [ 992.839862][T10868] usb 2-1: Manufacturer: syz [ 992.851424][T10868] usb 2-1: SerialNumber: syz [ 992.870259][ T5838] usb 3-1: USB disconnect, device number 94 [ 992.905692][T10868] cdc_ncm 2-1:1.0: skipping garbage [ 993.292556][ T5729] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 993.322822][ T5722] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 993.359192][ T5838] usb 4-1: USB disconnect, device number 88 [ 993.456471][ T5729] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 993.483490][ T5729] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 993.503309][ T5722] usb 5-1: Using ep0 maxpacket: 32 [ 993.516522][ T5729] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.533773][ T5722] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 993.559875][ T5722] usb 5-1: config 0 has no interface number 0 [ 993.573916][ T5729] usb 6-1: config 0 descriptor?? [ 993.595132][ T5722] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 993.639513][ T5722] usb 5-1: config 0 interface 89 has no altsetting 0 [ 993.661981][ T5722] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 993.696124][ T5722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.731306][ T5722] usb 5-1: Product: syz [ 993.757843][ T5722] usb 5-1: Manufacturer: syz [ 993.764463][ T5722] usb 5-1: SerialNumber: syz [ 993.766473][ T5722] usb 5-1: config 0 descriptor?? [ 993.771423][ T5722] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 993.771448][ T5722] em28xx 5-1:0.89: Video interface 89 found: [ 993.825821][T15448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.826129][T15448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 993.914056][T10868] cdc_ncm 2-1:1.0: bind() failure [ 993.975295][T10868] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 994.008781][T10868] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 994.041367][T10868] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 994.077189][T10868] usb 2-1: USB disconnect, device number 103 [ 994.306134][T15466] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2596'. [ 994.396026][ T5722] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 994.603572][T10868] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 994.734438][T13451] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 994.762507][T10868] usb 4-1: Using ep0 maxpacket: 16 [ 994.769525][T10868] usb 4-1: config index 0 descriptor too short (expected 1810, got 18) [ 994.778424][T10868] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 994.787812][T10868] usb 4-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=44.e6 [ 994.801008][T10868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.815459][T10868] usb 4-1: config 0 descriptor?? [ 994.893053][T13451] usb 2-1: Using ep0 maxpacket: 32 [ 994.911709][T13451] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 994.933097][T13451] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 994.964598][T13451] usb 2-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice=10.00 [ 994.989599][T13451] usb 2-1: New USB device strings: Mfr=0, Product=31, SerialNumber=0 [ 995.010907][T13451] usb 2-1: Product: syz [ 995.029449][ T5722] em28xx 5-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 995.051081][T13451] usb 2-1: config 0 descriptor?? [ 995.064541][T10868] usb 4-1: USB disconnect, device number 89 [ 995.093353][ T5722] em28xx 5-1:0.89: board has no eeprom [ 995.182510][ T5722] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 995.190486][ T5722] em28xx 5-1:0.89: analog set to bulk mode. [ 995.197745][ T5838] em28xx 5-1:0.89: Registering V4L2 extension [ 995.209781][ T5722] usb 5-1: USB disconnect, device number 102 [ 995.235509][ T5722] em28xx 5-1:0.89: Disconnecting em28xx [ 995.279494][ T5838] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 995.294499][ T5838] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 995.301780][ T5838] em28xx 5-1:0.89: No AC97 audio processor [ 995.310021][ T5838] usb 5-1: Decoder not found [ 995.315168][ T5838] em28xx 5-1:0.89: failed to create media graph [ 995.321462][ T5838] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 995.331083][ T5838] em28xx 5-1:0.89: Registering snapshot button... [ 995.341016][ T5838] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input67 [ 995.355835][ T5838] em28xx 5-1:0.89: Remote control support is not available for this card. [ 995.365510][ T5722] em28xx 5-1:0.89: Closing input extension [ 995.371379][ T5722] em28xx 5-1:0.89: Deregistering snapshot button [ 995.384036][T13451] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 995.401192][ T5722] em28xx 5-1:0.89: Freeing device [ 995.522557][T13451] usb 3-1: device descriptor read/64, error -71 [ 995.673582][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.743120][ T30] audit: type=1326 audit(1785239465.862:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15479 comm="syz.4.2602" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302239de99 code=0x7ffc0000 [ 995.785738][T13451] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 995.814885][ T30] audit: type=1326 audit(1785239465.862:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15479 comm="syz.4.2602" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302239de99 code=0x7ffc0000 [ 995.881022][ T30] audit: type=1326 audit(1785239465.892:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15479 comm="syz.4.2602" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f302239de99 code=0x7ffc0000 [ 995.932502][T13451] usb 3-1: device descriptor read/64, error -71 [ 995.946314][ T30] audit: type=1326 audit(1785239465.922:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15479 comm="syz.4.2602" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302239de99 code=0x7ffc0000 [ 996.006340][ T30] audit: type=1326 audit(1785239465.922:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15479 comm="syz.4.2602" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302239de99 code=0x7ffc0000 [ 996.062772][T13451] usb usb3-port1: attempt power cycle [ 996.100870][ T5729] usbhid 6-1:0.0: can't add hid device: -71 [ 996.134027][ T5729] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 996.157572][ T30] audit: type=1326 audit(1785239465.982:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15479 comm="syz.4.2602" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f302239de99 code=0x7ffc0000 [ 996.219594][ T5729] usb 6-1: USB disconnect, device number 78 [ 996.327374][ T30] audit: type=1326 audit(1785239465.982:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15479 comm="syz.4.2602" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302239de99 code=0x7ffc0000 [ 996.407774][T15496] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2607'. [ 996.432497][T13451] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 996.463785][ T30] audit: type=1326 audit(1785239465.982:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15479 comm="syz.4.2602" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302239de99 code=0x7ffc0000 [ 996.507669][T13451] usb 3-1: device descriptor read/8, error -71 [ 996.605636][ T30] audit: type=1326 audit(1785239466.112:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15479 comm="syz.4.2602" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f302239de99 code=0x7ffc0000 [ 996.756887][ T30] audit: type=1326 audit(1785239466.532:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15479 comm="syz.4.2602" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302239de99 code=0x7ffc0000 [ 996.794328][T13451] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 996.836472][T13451] usb 3-1: device descriptor read/8, error -71 [ 996.965026][T13451] usb usb3-port1: unable to enumerate USB device [ 997.513245][ T5838] usb 2-1: USB disconnect, device number 104 [ 997.722817][T13451] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 997.894842][T13451] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 997.923164][T13451] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 997.942564][ T5838] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 997.950603][T13451] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.975258][T13451] usb 5-1: config 0 descriptor?? [ 997.996831][T15513] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 998.062668][T10868] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 998.112590][ T5838] usb 2-1: Using ep0 maxpacket: 8 [ 998.121206][ T5838] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 998.131634][ T5838] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 998.163931][ T5838] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 998.224026][ T5838] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 998.253044][T10868] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 998.284329][T10868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.302853][ T5838] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 998.322828][T10868] usb 4-1: Product: syz [ 998.336898][T10868] usb 4-1: Manufacturer: syz [ 998.347016][ T5838] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 998.367553][T10868] usb 4-1: SerialNumber: syz [ 998.387164][T10868] usb 4-1: config 0 descriptor?? [ 998.402209][ T5838] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 998.418057][T10868] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 998.428080][T15528] syzkaller0: entered promiscuous mode [ 998.439536][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.450059][T15528] syzkaller0: entered allmulticast mode [ 998.461395][T13451] logitech-djreceiver 0003:046D:C71F.001B: unknown main item tag 0x0 [ 998.478885][ T5838] usbtmc 2-1:16.0: bulk endpoints not found [ 998.496384][T13451] logitech-djreceiver 0003:046D:C71F.001B: unknown main item tag 0x0 [ 998.545241][ T5729] usb 6-1: new full-speed USB device number 79 using dummy_hcd [ 998.560023][T13451] logitech-djreceiver 0003:046D:C71F.001B: unknown main item tag 0x0 [ 998.570546][T13451] logitech-djreceiver 0003:046D:C71F.001B: unknown main item tag 0x0 [ 998.580828][T13451] logitech-djreceiver 0003:046D:C71F.001B: unknown main item tag 0x0 [ 998.591902][T13451] logitech-djreceiver 0003:046D:C71F.001B: unknown main item tag 0x0 [ 998.620653][T10868] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 998.639149][T13451] logitech-djreceiver 0003:046D:C71F.001B: unknown main item tag 0x0 [ 998.660988][T10868] sq905c 4-1:0.0: Get version command failed [ 998.676065][T13451] logitech-djreceiver 0003:046D:C71F.001B: unknown main item tag 0x0 [ 998.687770][T10868] sq905c 4-1:0.0: probe with driver sq905c failed with error -71 [ 998.709062][T13451] logitech-djreceiver 0003:046D:C71F.001B: unknown main item tag 0x0 [ 998.725440][T10868] usb 4-1: USB disconnect, device number 90 [ 998.731481][ T5729] usb 6-1: config 0 has no interfaces? [ 998.747709][ T5729] usb 6-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 998.758764][T13451] logitech-djreceiver 0003:046D:C71F.001B: unknown main item tag 0x0 [ 998.774922][ T5729] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.791225][T13451] logitech-djreceiver 0003:046D:C71F.001B: collection stack underflow [ 998.799900][ T5729] usb 6-1: Product: syz [ 998.804865][ T5729] usb 6-1: Manufacturer: syz [ 998.809544][T13451] logitech-djreceiver 0003:046D:C71F.001B: item 0 1 0 12 parsing failed [ 998.819516][ T5729] usb 6-1: SerialNumber: syz [ 998.826001][T13451] logitech-djreceiver 0003:046D:C71F.001B: logi_dj_probe: parse failed [ 998.836210][ T5729] usb 6-1: config 0 descriptor?? [ 998.849361][T13451] logitech-djreceiver 0003:046D:C71F.001B: probe with driver logitech-djreceiver failed with error -22 [ 998.885203][T13451] usb 5-1: USB disconnect, device number 103 [ 998.942575][ T5736] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 999.074996][T10868] usb 6-1: USB disconnect, device number 79 [ 999.105207][ T5736] usb 3-1: unable to get BOS descriptor or descriptor too short [ 999.113862][ T5736] usb 3-1: not running at top speed; connect to a high speed hub [ 999.122865][ T5736] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 999.146911][ T5736] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 999.182221][ T5736] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 999.205893][ T5736] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.223750][ T5736] usb 3-1: Product: syz [ 999.234542][ T5736] usb 3-1: Manufacturer: syz [ 999.251469][ T5736] usb 3-1: SerialNumber: syz [ 999.296546][T15535] input: syz0 as /devices/virtual/input/input68 [ 999.412225][T15536] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 999.440386][T15536] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 999.487365][T15530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 999.497633][T15530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 999.520479][T15530] syz_tun: entered promiscuous mode [ 999.589789][T15539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2620'. [ 999.619266][T15539] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2620'. [ 999.660655][T15539] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2620'. [ 999.670124][T10868] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 999.699750][T15539] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=15539 comm=syz.2.2620 [ 999.784542][ T5736] usb 3-1: 3:0: failed to get current value for ch 0 (-71) [ 999.806217][ T5736] usb 3-1: 3:0: cannot get min/max values for control 2 (id 3) [ 999.834035][T10868] usb 5-1: Using ep0 maxpacket: 32 [ 999.841542][ T5736] usb 3-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 999.858364][T10868] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 999.876674][ T5736] usb 3-1: [3] FU [LFE Playback Volume] ch = 1, val = 0/1/1 [ 999.886167][T10868] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 999.906511][ T5736] usb 3-1: 3:0: cannot get min/max values for control 3 (id 3) [ 999.920560][T10868] usb 5-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice=10.00 [ 999.935710][ T5736] usb 3-1: 3:0: cannot get min/max values for control 4 (id 3) [ 999.946801][T10868] usb 5-1: New USB device strings: Mfr=0, Product=31, SerialNumber=0 [ 999.957939][ T5736] usb 3-1: 3:0: cannot get min/max values for control 5 (id 3) [ 999.976855][T10868] usb 5-1: Product: syz [ 999.987793][ T5736] usb 3-1: 3:0: failed to get current value for ch 0 (-71) [ 1000.005305][T10868] usb 5-1: config 0 descriptor?? [ 1000.029221][ T5736] usb 3-1: 3:0: cannot get min/max values for control 8 (id 3) [ 1000.105266][ T5736] usb 3-1: 3:0: cannot get min/max values for control 3 (id 3) [ 1000.138114][ T5736] usb 3-1: 3:0: cannot get min/max values for control 5 (id 3) [ 1000.207753][ T5736] usb 3-1: USB disconnect, device number 99 [ 1000.363834][T10868] usb 6-1: new low-speed USB device number 80 using dummy_hcd [ 1000.432494][ T5729] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1000.534163][T10868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1000.545526][T10868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 1000.557056][T10868] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1000.570551][T10868] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1c1f, bcdDevice= 0.00 [ 1000.581020][T10868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.590094][ T5729] usb 4-1: Using ep0 maxpacket: 8 [ 1000.597953][ T5729] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1000.613616][T10868] usb 6-1: config 0 descriptor?? [ 1000.628658][T15549] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1000.641769][ T5729] usb 4-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1000.653385][ T5838] usb 2-1: USB disconnect, device number 105 [ 1000.700354][ T5729] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1000.712916][ T5736] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1000.739720][ T5729] usb 4-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1000.758664][ T5729] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1000.769800][ T5729] usb 4-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1000.782753][ T5729] usb 4-1: string descriptor 0 read error: -22 [ 1000.789050][ T5729] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1000.808497][ T5729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.826349][ T5729] usb 4-1: rejected 3 configurations due to insufficient available bus power [ 1000.836681][ T5729] usb 4-1: no configuration chosen from 3 choices [ 1000.882511][ T5736] usb 3-1: Using ep0 maxpacket: 8 [ 1000.889693][ T5736] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.900320][ T5736] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1000.911707][ T5736] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1000.921920][ T5736] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.930171][ T5736] usb 3-1: Product: syz [ 1000.936147][ T5736] usb 3-1: Manufacturer: syz [ 1000.940831][ T5736] usb 3-1: SerialNumber: syz [ 1000.950176][ T5736] usb 3-1: config 0 descriptor?? [ 1001.062619][ T5838] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1001.078463][T10868] corsair-psu 0003:1B1C:1C1F.001C: item fetching failed at offset 24/40 [ 1001.089686][T10868] corsair-psu 0003:1B1C:1C1F.001C: probe with driver corsair-psu failed with error -22 [ 1001.192804][ T5838] usb 2-1: device descriptor read/64, error -71 [ 1001.279380][T10868] usb 6-1: USB disconnect, device number 80 [ 1001.432780][ T5838] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1001.562524][ T5838] usb 2-1: device descriptor read/64, error -71 [ 1001.673343][ T5838] usb usb2-port1: attempt power cycle [ 1002.012546][ T5838] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1002.033454][ T5838] usb 2-1: device descriptor read/8, error -71 [ 1002.181930][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880562ccc00: rx timeout, send abort [ 1002.205295][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1002.205307][ T30] audit: type=1400 audit(1785239472.332:1022): avc: denied { read } for pid=4961 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1002.238828][ T30] audit: type=1400 audit(1785239472.332:1023): avc: denied { search } for pid=4961 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1002.261528][ T30] audit: type=1400 audit(1785239472.332:1024): avc: denied { write search } for pid=4961 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1002.286694][ T30] audit: type=1400 audit(1785239472.332:1025): avc: denied { add_name } for pid=4961 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1002.307705][ T5838] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1002.317045][ T30] audit: type=1400 audit(1785239472.332:1026): avc: denied { create } for pid=4961 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1002.338572][ T5838] usb 2-1: device descriptor read/8, error -71 [ 1002.345802][ T30] audit: type=1400 audit(1785239472.332:1027): avc: denied { append open } for pid=4961 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1002.369900][ T30] audit: type=1400 audit(1785239472.332:1028): avc: denied { getattr } for pid=4961 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1002.434698][ T5736] usb 5-1: USB disconnect, device number 104 [ 1002.454804][ T5838] usb usb2-port1: unable to enumerate USB device [ 1002.681967][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880562cc000: rx timeout, send abort [ 1002.694452][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880562ccc00: abort rx timeout. Force session deactivation [ 1002.794152][ T5736] usb 5-1: new full-speed USB device number 105 using dummy_hcd [ 1002.964063][ T5736] usb 5-1: config 0 has no interfaces? [ 1002.971324][ T5736] usb 5-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 1002.981639][ T5736] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.990335][ T5736] usb 5-1: Product: syz [ 1002.995094][ T5736] usb 5-1: Manufacturer: syz [ 1002.999878][ T5736] usb 5-1: SerialNumber: syz [ 1003.019550][ T5736] usb 5-1: config 0 descriptor?? [ 1003.190264][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880562cc000: abort rx timeout. Force session deactivation [ 1003.224470][ T5838] usb 4-1: USB disconnect, device number 91 [ 1003.255270][T10868] usb 5-1: USB disconnect, device number 105 [ 1003.428443][ T5838] usb 3-1: USB disconnect, device number 100 [ 1003.489045][T15576] syzkaller0: entered promiscuous mode [ 1003.518102][T15576] syzkaller0: entered allmulticast mode [ 1005.542512][ T5722] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1005.722114][ T5722] usb 2-1: Using ep0 maxpacket: 8 [ 1005.742785][ T5722] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1005.760891][ T5722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.808325][ T5722] usb 2-1: Product: syz [ 1005.820969][ T5722] usb 2-1: Manufacturer: syz [ 1005.830864][ T5722] usb 2-1: SerialNumber: syz [ 1005.871376][ T5722] usb 2-1: config 0 descriptor?? [ 1006.086380][ T5722] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1006.291219][ T5722] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1008.098401][ T5722] usb 2-1: USB disconnect, device number 110 [ 1010.269803][T15620] tipc: Enabling of bearer rejected, failed to enable media [ 1010.952806][ T5736] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1011.135204][ T5736] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.196996][ T5736] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1011.282060][ T5736] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1011.331382][ T5736] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.364207][ T5838] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1011.408655][ T5736] usb 3-1: config 0 descriptor?? [ 1011.466275][ T5736] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1011.553077][ T5838] usb 6-1: Using ep0 maxpacket: 16 [ 1011.605960][ T5838] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1011.677943][ T5838] usb 6-1: New USB device found, idVendor=3888, idProduct=8f73, bcdDevice= 0.00 [ 1011.718786][ T5838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.764331][ T5838] usb 6-1: config 0 descriptor?? [ 1011.950989][T15666] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2662'. [ 1012.029920][ T5838] usbhid 6-1:0.0: can't add hid device: -71 [ 1012.042296][ T5722] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1012.070293][ T5838] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1012.085507][ T30] audit: type=1400 audit(1785239482.202:1029): avc: denied { append } for pid=15650 comm="syz.5.2658" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1012.137251][ T5838] usb 6-1: USB disconnect, device number 81 [ 1012.191360][T15665] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15665 comm=syz.1.2662 [ 1012.282533][ T5722] usb 5-1: Using ep0 maxpacket: 8 [ 1012.294533][ T5722] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1012.308567][ T5722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.328962][ T5722] usb 5-1: Product: syz [ 1012.352719][ T5722] usb 5-1: Manufacturer: syz [ 1012.368382][ T5722] usb 5-1: SerialNumber: syz [ 1012.391704][ T5722] usb 5-1: config 0 descriptor?? [ 1012.626081][ T5722] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1012.840183][ T5722] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1013.430872][ T5838] hid_parser_main: 355 callbacks suppressed [ 1013.430891][ T5838] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1013.493954][T15688] dvmrp8: entered allmulticast mode [ 1013.615516][ T5838] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1013.739285][ T5722] usb 3-1: USB disconnect, device number 101 [ 1014.087517][ T30] audit: type=1326 audit(1785239484.212:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15684 comm="syz.3.2669" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6fbd9de99 code=0x0 [ 1014.482541][T10868] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1014.614950][ T5838] usb 5-1: USB disconnect, device number 106 [ 1014.670829][T10868] usb 4-1: no configurations [ 1014.702354][T10868] usb 4-1: can't read configurations, error -22 [ 1014.894577][T10868] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1015.071548][T15719] binder: BINDER_SET_CONTEXT_MGR already set [ 1015.104083][T10868] usb 4-1: no configurations [ 1015.114946][T15719] binder: 15717:15719 ioctl 4018620d 2000000000c0 returned -16 [ 1015.127603][T10868] usb 4-1: can't read configurations, error -22 [ 1015.159418][T10868] usb usb4-port1: attempt power cycle [ 1015.168308][T15719] binder: 15717:15719 ioctl 4018620d 0 returned -22 [ 1015.205129][T15719] binder: 15717:15719 ioctl c0306201 200000000240 returned -11 [ 1015.532518][T10868] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1015.540340][ T5722] usb 5-1: new full-speed USB device number 107 using dummy_hcd [ 1015.583743][T10868] usb 4-1: no configurations [ 1015.599412][T10868] usb 4-1: can't read configurations, error -22 [ 1015.713667][ T5722] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0xA has an invalid bInterval 0, changing to 4 [ 1015.742555][T10868] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1015.755454][ T5838] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1015.765977][ T5722] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1015.790509][ T5722] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1015.804356][T10868] usb 4-1: no configurations [ 1015.819623][T10868] usb 4-1: can't read configurations, error -22 [ 1015.833523][ T5722] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1015.849716][T10868] usb usb4-port1: unable to enumerate USB device [ 1015.865510][ T5722] usb 5-1: Product: syz [ 1015.878929][ T5722] usb 5-1: Manufacturer: syz [ 1015.895481][ T5722] usb 5-1: SerialNumber: syz [ 1015.916107][ T5722] usb 5-1: config 0 descriptor?? [ 1015.932568][ T5838] usb 6-1: Using ep0 maxpacket: 16 [ 1015.949536][ T5722] usb 5-1: selecting invalid altsetting 0 [ 1015.960861][ T5838] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1015.999458][ T5838] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1016.058791][ T5838] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1016.086057][ T5838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.113395][ T5838] usb 6-1: Product: syz [ 1016.125958][ T5838] usb 6-1: Manufacturer: syz [ 1016.139483][ T5838] usb 6-1: SerialNumber: syz [ 1016.197520][ T5838] usb 6-1: config 0 descriptor?? [ 1016.241777][ T5838] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1016.284833][ T5838] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1016.833288][ T5838] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1016.855351][ T5838] em28xx 6-1:0.0: Config register raw data: 0x00 [ 1016.972249][T15740] loop4: detected capacity change from 0 to 7 [ 1017.143722][T15740] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 1017.175563][T15740] loop4: partition table partially beyond EOD, truncated [ 1017.553790][T15740] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 1018.005915][T15758] binder: 15757:15758 ioctl 4018620d 0 returned -22 [ 1018.020805][ T5838] usb 5-1: USB disconnect, device number 107 [ 1018.054653][T15758] binder: 15757:15758 ioctl c0306201 200000000240 returned -11 [ 1018.083297][ T4979] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 1018.110868][ T4979] loop4: partition table partially beyond EOD, truncated [ 1018.148034][ T4979] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 1018.412491][ T5729] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1018.508259][T15767] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1018.565734][ T5722] usb 6-1: USB disconnect, device number 82 [ 1018.606569][ T5722] em28xx 6-1:0.0: Disconnecting em28xx [ 1018.617202][ T5729] usb 4-1: Using ep0 maxpacket: 8 [ 1018.647993][ T5722] em28xx 6-1:0.0: Freeing device [ 1018.666257][ T5729] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1018.724497][ T5729] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1018.812809][ T5729] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1018.869584][ T5729] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1018.933868][ T5729] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1018.992242][ T5729] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1019.019002][ T5838] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1019.060999][ T5729] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1019.125416][ T5729] usb 4-1: config 168 interface 0 has no altsetting 0 [ 1019.157223][ T5729] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1019.172595][ T5838] usb 5-1: device descriptor read/64, error -71 [ 1019.195012][ T5729] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1019.243506][ T5729] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1019.291735][ T5729] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1019.340360][ T5729] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1019.392476][ T5729] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1019.443823][ T5838] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1019.461512][ T5729] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1019.529995][ T5729] usb 4-1: config 168 interface 0 has no altsetting 0 [ 1019.561864][ T5729] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1019.595241][ T5729] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1019.623337][ T5838] usb 5-1: device descriptor read/64, error -71 [ 1019.650862][ T5729] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1019.709518][ T5729] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1019.756661][ T5838] usb usb5-port1: attempt power cycle [ 1019.784603][ T5729] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1020.309932][ T5729] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1020.560429][ T5838] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1020.811713][ T5729] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1020.859016][ T5838] usb 5-1: device descriptor read/8, error -71 [ 1020.921662][ T5729] usb 4-1: config 168 interface 0 has no altsetting 0 [ 1020.981211][ T5729] usb 4-1: string descriptor 0 read error: -71 [ 1021.014215][ T5729] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1021.081337][ T5729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.133586][ T5838] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1021.164755][ T5729] usb 4-1: can't set config #168, error -71 [ 1021.216923][ T5838] usb 5-1: device descriptor read/8, error -71 [ 1021.331274][ T5729] usb 4-1: USB disconnect, device number 96 [ 1021.357412][T15794] binder: BINDER_SET_CONTEXT_MGR already set [ 1021.559938][T15794] binder: 15792:15794 ioctl 4018620d 2000000000c0 returned -16 [ 1021.620679][T15794] binder: BINDER_SET_CONTEXT_MGR already set [ 1021.633594][ T5838] usb usb5-port1: unable to enumerate USB device [ 1021.661772][T15794] binder: 15792:15794 ioctl 4018620d 200000000040 returned -16 [ 1021.670017][T10868] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 1021.694764][T15801] binder: 15792:15801 ioctl c0306201 0 returned -14 [ 1021.707406][T15794] binder: 15792:15794 ioctl c0306201 200000000240 returned -11 [ 1021.956854][T10868] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1022.172965][ T5838] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1023.006086][T10868] usb 2-1: not running at top speed; connect to a high speed hub [ 1023.056155][T15804] ALSA: mixer_oss: invalid OSS volume '' [ 1023.069818][T15804] netlink: 'syz.5.2706': attribute type 1 has an invalid length. [ 1023.080366][T10868] usb 2-1: config 160 has an invalid interface number: 187 but max is 0 [ 1023.124555][T10868] usb 2-1: config 160 has no interface number 0 [ 1023.158248][T10868] usb 2-1: config 160 interface 187 altsetting 8 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 1023.181774][ T5838] usb 5-1: Using ep0 maxpacket: 16 [ 1023.237914][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1023.274322][T10868] usb 2-1: config 160 interface 187 altsetting 8 endpoint 0x84 has invalid maxpacket 49717, setting to 64 [ 1023.301735][ T5838] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1023.881683][T10868] usb 2-1: config 160 interface 187 altsetting 8 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 1024.226391][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.296984][ T5838] usb 5-1: Product: syz [ 1024.311099][T10868] usb 2-1: config 160 interface 187 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 1024.344788][ T5838] usb 5-1: Manufacturer: syz [ 1024.376520][ T5838] usb 5-1: SerialNumber: syz [ 1024.396538][T10868] usb 2-1: config 160 interface 187 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 1024.437188][ T5838] usb 5-1: config 0 descriptor?? [ 1024.509858][ T5838] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1024.522997][T10868] usb 2-1: config 160 interface 187 altsetting 8 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 1024.571720][ T5838] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 1024.578733][ T5736] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1024.607514][T10868] usb 2-1: config 160 interface 187 has no altsetting 0 [ 1024.655502][T10868] usb 2-1: string descriptor 0 read error: -71 [ 1024.696400][T10868] usb 2-1: New USB device found, idVendor=0caa, idProduct=3001, bcdDevice=3e.c2 [ 1024.734896][ T5838] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1024.765193][T10868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.783391][ T5736] usb 6-1: Using ep0 maxpacket: 32 [ 1024.829853][ T5736] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1024.868263][T10868] usb 2-1: can't set config #160, error -71 [ 1024.876137][ T5838] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1024.905278][ T5736] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 126, using maximum allowed: 30 [ 1024.938929][T10868] usb 2-1: USB disconnect, device number 111 [ 1024.948240][ T5838] em28xx 5-1:0.0: board has no eeprom [ 1024.978572][ T5736] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 126 [ 1025.041477][ T5736] usb 6-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice=10.00 [ 1025.052706][ T5838] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1025.073391][ T5838] em28xx 5-1:0.0: dvb set to bulk mode. [ 1025.083157][ T5736] usb 6-1: New USB device strings: Mfr=0, Product=31, SerialNumber=0 [ 1025.098302][ T5729] em28xx 5-1:0.0: Binding DVB extension [ 1025.121418][ T5838] usb 5-1: USB disconnect, device number 112 [ 1025.132973][ T5736] usb 6-1: Product: syz [ 1025.168263][ T5736] usb 6-1: config 0 descriptor?? [ 1025.176345][ T5838] em28xx 5-1:0.0: Disconnecting em28xx [ 1025.221020][ T5736] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1025.277162][T10868] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1025.295863][ T5729] em28xx 5-1:0.0: Registering input extension [ 1025.330415][ T5838] em28xx 5-1:0.0: Closing input extension [ 1025.399424][ T5838] em28xx 5-1:0.0: Freeing device [ 1025.462679][T10868] usb 2-1: Using ep0 maxpacket: 16 [ 1025.485674][T10868] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.506928][T15833] binder: 15832:15833 ioctl c0306201 0 returned -14 [ 1025.519837][T10868] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1025.530371][T15833] binder: 15832:15833 ioctl c0306201 200000000240 returned -11 [ 1025.539053][T10868] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1025.568500][T10868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.605861][T10868] usb 2-1: config 0 descriptor?? [ 1025.799739][ T5838] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1026.828634][T15838] ALSA: mixer_oss: invalid OSS volume 'IGAI€' [ 1026.836231][T15838] netlink: 'syz.2.2718': attribute type 1 has an invalid length. [ 1026.901751][T15842] syzkaller0: entered promiscuous mode [ 1026.907974][T15842] syzkaller0: entered allmulticast mode [ 1026.934920][T10868] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1026.942912][ T5838] usb 5-1: device descriptor read/64, error -71 [ 1027.105585][T10868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1027.126119][T10868] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1027.146472][T10868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.168954][T10868] usb 4-1: config 0 descriptor?? [ 1027.187254][T15835] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1027.194665][ T5838] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1027.311382][ T5729] usb 6-1: USB disconnect, device number 83 [ 1027.333052][ T5838] usb 5-1: device descriptor read/64, error -71 [ 1027.410659][T15853] binder: BINDER_SET_CONTEXT_MGR already set [ 1027.424315][T15853] binder: 15852:15853 ioctl 4018620d 2000000000c0 returned -16 [ 1027.447427][T15853] binder: BINDER_SET_CONTEXT_MGR already set [ 1027.461558][T15853] binder: 15852:15853 ioctl 4018620d 2000000002c0 returned -16 [ 1027.474346][ T5838] usb usb5-port1: attempt power cycle [ 1027.485435][T15853] binder: 15852:15853 ioctl c0306201 200000000240 returned -11 [ 1027.640624][T10868] logitech-djreceiver 0003:046D:C71F.001E: unknown main item tag 0x0 [ 1027.668420][T10868] logitech-djreceiver 0003:046D:C71F.001E: unknown main item tag 0x0 [ 1027.708765][T10868] logitech-djreceiver 0003:046D:C71F.001E: unknown main item tag 0x0 [ 1027.741102][T10868] logitech-djreceiver 0003:046D:C71F.001E: unknown main item tag 0x0 [ 1027.770779][T10868] logitech-djreceiver 0003:046D:C71F.001E: unknown main item tag 0x0 [ 1027.796833][T10868] logitech-djreceiver 0003:046D:C71F.001E: unknown main item tag 0x0 [ 1027.834072][ T5838] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1027.843433][T10868] logitech-djreceiver 0003:046D:C71F.001E: unknown main item tag 0x0 [ 1027.911206][T10868] logitech-djreceiver 0003:046D:C71F.001E: unknown main item tag 0x0 [ 1027.935303][ T5729] usb 2-1: USB disconnect, device number 112 [ 1027.989478][T10868] logitech-djreceiver 0003:046D:C71F.001E: unknown main item tag 0x0 [ 1028.058896][T10868] logitech-djreceiver 0003:046D:C71F.001E: unknown main item tag 0x0 [ 1028.101356][ T5838] usb 5-1: device not accepting address 115, error -71 [ 1028.135553][T10868] logitech-djreceiver 0003:046D:C71F.001E: collection stack underflow [ 1028.177013][T15866] binder: BINDER_SET_CONTEXT_MGR already set [ 1028.193527][T10868] logitech-djreceiver 0003:046D:C71F.001E: item 0 1 0 12 parsing failed [ 1028.214272][T15866] binder: 15865:15866 ioctl 4018620d 2000000000c0 returned -16 [ 1028.306483][T10868] logitech-djreceiver 0003:046D:C71F.001E: logi_dj_probe: parse failed [ 1028.906000][ T5722] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1029.135837][T15873] binder: 15865:15873 ioctl c0306201 0 returned -14 [ 1029.388088][T10868] logitech-djreceiver 0003:046D:C71F.001E: probe with driver logitech-djreceiver failed with error -22 [ 1029.474547][T15868] ALSA: mixer_oss: invalid OSS volume 'IGAI€' [ 1029.487810][T15868] netlink: 'syz.2.2729': attribute type 1 has an invalid length. [ 1029.507982][T10868] usb 4-1: USB disconnect, device number 97 [ 1029.530008][T15875] syzkaller0: entered promiscuous mode [ 1029.543557][ T5722] usb 2-1: device descriptor read/64, error -71 [ 1029.570868][T15875] syzkaller0: entered allmulticast mode [ 1029.815444][ T5722] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1029.883084][T10868] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 1029.904632][ T30] audit: type=1326 audit(1785239500.032:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15884 comm="syz.2.2734" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26f59de99 code=0x7ffc0000 [ 1030.014020][ T5722] usb 2-1: device descriptor read/64, error -71 [ 1030.066143][ T30] audit: type=1326 audit(1785239500.062:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15884 comm="syz.2.2734" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe26f59de99 code=0x7ffc0000 [ 1030.102715][T10868] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.147376][T10868] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1030.174959][ T5722] usb usb2-port1: attempt power cycle [ 1030.211309][T10868] usb 4-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 1030.260735][ T30] audit: type=1326 audit(1785239500.102:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15884 comm="syz.2.2734" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26f59de99 code=0x7ffc0000 [ 1030.302083][T10868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.334364][T15893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2734'. [ 1030.349966][T10868] usb 4-1: Product: syz [ 1030.367130][T10868] usb 4-1: Manufacturer: syz [ 1030.385883][T10868] usb 4-1: SerialNumber: syz [ 1030.420666][T10868] usb 4-1: config 0 descriptor?? [ 1030.426849][ T30] audit: type=1326 audit(1785239500.172:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15884 comm="syz.2.2734" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fe26f59de99 code=0x7ffc0000 [ 1030.562504][ T5722] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1031.133302][T10868] usb 4-1: USB disconnect, device number 98 [ 1031.522817][ T5722] usb 2-1: device descriptor read/8, error -71 [ 1031.665189][ T30] audit: type=1326 audit(1785239501.712:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15884 comm="syz.2.2734" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26f59de99 code=0x7ffc0000 [ 1031.753476][T15913] binder: BINDER_SET_CONTEXT_MGR already set [ 1031.802507][T15913] binder: 15912:15913 ioctl 4018620d 2000000000c0 returned -16 [ 1031.822988][T15913] binder: BINDER_SET_CONTEXT_MGR already set [ 1031.833061][ T5838] usb 6-1: new full-speed USB device number 84 using dummy_hcd [ 1031.846296][T15913] binder: 15912:15913 ioctl 4018620d 200000000040 returned -16 [ 1031.877710][T15913] binder: 15912:15913 ioctl c0306201 200000000240 returned -11 [ 1031.966058][T15917] binder: BINDER_SET_CONTEXT_MGR already set [ 1031.979266][T15917] binder: 15916:15917 ioctl 4018620d 200000000100 returned -16 [ 1032.000560][ T5838] usb 6-1: config 100 has an invalid interface number: 124 but max is 0 [ 1032.010908][T15917] binder: BINDER_SET_CONTEXT_MGR already set [ 1032.022585][T10868] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1032.030275][ T5838] usb 6-1: config 100 has no interface number 0 [ 1032.038694][T15917] binder: 15916:15917 ioctl 4018620d 200000001000 returned -16 [ 1032.052495][ T5838] usb 6-1: config 100 interface 124 has no altsetting 0 [ 1032.075970][ T5838] usb 6-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=52.5e [ 1032.101189][ T5838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.140271][ T5838] usb 6-1: Product: syz [ 1032.158784][ T5838] usb 6-1: Manufacturer: syz [ 1032.182843][T10868] usb 4-1: device descriptor read/64, error -71 [ 1032.190267][ T5838] usb 6-1: SerialNumber: syz [ 1032.332478][ T5722] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1032.354417][ T5722] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1032.365896][ T5722] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1032.376849][ T5722] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.388664][ T5722] usb 2-1: config 0 descriptor?? [ 1032.400759][T15911] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1032.432341][ T5838] idmouse 6-1:100.124: Unable to find bulk-in endpoint. [ 1032.440004][T10868] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1032.467255][ T5838] usb 6-1: USB disconnect, device number 84 [ 1032.473892][ T5729] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1032.582526][T10868] usb 4-1: device descriptor read/64, error -71 [ 1032.635132][ T5729] usb 3-1: Using ep0 maxpacket: 8 [ 1032.642077][ T5729] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1032.654046][ T5729] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1032.664376][ T5729] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1032.675329][ T5729] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1032.685730][ T5729] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1032.699545][T10868] usb usb4-port1: attempt power cycle [ 1032.705134][ T5729] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1032.715619][ T5729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.820648][ T5722] hid_parser_main: 354 callbacks suppressed [ 1032.820666][ T5722] logitech-djreceiver 0003:046D:C71F.001F: unknown main item tag 0x0 [ 1032.837715][ T5722] logitech-djreceiver 0003:046D:C71F.001F: unknown main item tag 0x0 [ 1032.847782][ T5722] logitech-djreceiver 0003:046D:C71F.001F: unknown main item tag 0x0 [ 1032.856812][ T5722] logitech-djreceiver 0003:046D:C71F.001F: unknown main item tag 0x0 [ 1032.866936][ T5722] logitech-djreceiver 0003:046D:C71F.001F: unknown main item tag 0x0 [ 1032.876565][ T5722] logitech-djreceiver 0003:046D:C71F.001F: unknown main item tag 0x0 [ 1032.885173][ T5722] logitech-djreceiver 0003:046D:C71F.001F: unknown main item tag 0x0 [ 1032.893875][ T5722] logitech-djreceiver 0003:046D:C71F.001F: unknown main item tag 0x0 [ 1032.902218][ T5722] logitech-djreceiver 0003:046D:C71F.001F: unknown main item tag 0x0 [ 1032.910766][ T5722] logitech-djreceiver 0003:046D:C71F.001F: unknown main item tag 0x0 [ 1032.921800][ T5722] logitech-djreceiver 0003:046D:C71F.001F: collection stack underflow [ 1032.931549][ T5729] usb 3-1: usb_control_msg returned -32 [ 1032.937515][ T5722] logitech-djreceiver 0003:046D:C71F.001F: item 0 1 0 12 parsing failed [ 1032.946676][ T5729] usbtmc 3-1:16.0: can't read capabilities [ 1032.954859][ T5722] logitech-djreceiver 0003:046D:C71F.001F: logi_dj_probe: parse failed [ 1032.984784][ T5722] logitech-djreceiver 0003:046D:C71F.001F: probe with driver logitech-djreceiver failed with error -22 [ 1033.063216][T10868] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1033.103478][T10868] usb 4-1: device descriptor read/8, error -71 [ 1033.139638][ T30] audit: type=1400 audit(1785239503.262:1036): avc: denied { connect } for pid=15926 comm="syz.4.2748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1033.188112][ T5722] usb 3-1: USB disconnect, device number 102 [ 1033.194463][T15922] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 1033.247368][ T5729] usb 2-1: USB disconnect, device number 116 [ 1033.353018][T10868] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1033.383094][T10868] usb 4-1: device descriptor read/8, error -71 [ 1033.482486][ T189] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1033.503834][T10868] usb usb4-port1: unable to enumerate USB device [ 1033.642952][ T189] usb 6-1: Using ep0 maxpacket: 8 [ 1033.653837][ T189] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1033.677703][ T189] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1033.689346][ T5722] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 1033.708685][ T189] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1033.733752][ T189] usb 6-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 1033.763478][ T189] usb 6-1: config 168 interface 0 has no altsetting 0 [ 1033.789230][ T189] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1033.824310][ T189] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1033.865219][ T5722] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1033.883736][ T189] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1033.898914][ T5722] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1033.935435][ T189] usb 6-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 1033.951678][ T5722] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1034.108148][ T5722] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1034.117455][ T189] usb 6-1: config 168 interface 0 has no altsetting 0 [ 1034.128735][ T189] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1034.146762][ T5722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.138598][ T189] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1037.331271][ T5722] usb 3-1: can't set config #16, error -71 [ 1037.355038][ T189] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1037.421358][ T5722] usb 3-1: USB disconnect, device number 103 [ 1037.467348][ T189] usb 6-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 1037.509004][T15947] binder: BINDER_SET_CONTEXT_MGR already set [ 1037.551496][T15950] binder: BINDER_SET_CONTEXT_MGR already set [ 1037.577455][T15947] binder: 15943:15947 ioctl 4018620d 200000000040 returned -16 [ 1037.593704][ T189] usb 6-1: config 168 interface 0 has no altsetting 0 [ 1037.608623][T15950] binder: 15946:15950 ioctl 4018620d 200000001000 returned -16 [ 1037.632925][ T189] usb 6-1: string descriptor 0 read error: -71 [ 1037.658121][ T189] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1037.719096][ T189] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.793845][ T189] usb 6-1: can't set config #168, error -71 [ 1037.842038][T15957] binder: 15956:15957 ioctl c0306201 200000000240 returned -11 [ 1037.864516][ T189] usb 6-1: USB disconnect, device number 85 [ 1038.622522][ T189] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1039.075487][T15964] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2760'. [ 1039.193784][ T189] usb 6-1: device descriptor read/64, error -71 [ 1039.352801][ T5736] usb 2-1: new full-speed USB device number 117 using dummy_hcd [ 1039.462616][ T189] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1039.524974][ T5736] usb 2-1: config 100 has an invalid interface number: 124 but max is 0 [ 1039.560522][ T5736] usb 2-1: config 100 has no interface number 0 [ 1039.585385][ T5736] usb 2-1: config 100 interface 124 has no altsetting 0 [ 1039.620644][ T5736] usb 2-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=52.5e [ 1039.633303][ T189] usb 6-1: device descriptor read/64, error -71 [ 1039.680767][ T5736] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.722645][ T5736] usb 2-1: Product: syz [ 1039.740974][ T5736] usb 2-1: Manufacturer: syz [ 1039.758592][ T5736] usb 2-1: SerialNumber: syz [ 1039.772852][ T189] usb usb6-port1: attempt power cycle [ 1039.991986][ T5736] idmouse 2-1:100.124: Unable to find bulk-in endpoint. [ 1040.025061][ T5736] usb 2-1: USB disconnect, device number 117 [ 1040.981066][T10868] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1041.981422][ T189] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1042.984556][ T189] usb 6-1: device not accepting address 88, error -71 [ 1043.264129][T10868] usb 4-1: device descriptor read/all, error -71 [ 1043.402627][T15989] binder: BINDER_SET_CONTEXT_MGR already set [ 1043.441719][T15989] binder: 15987:15989 ioctl 4018620d 2000000000c0 returned -16 [ 1043.508104][T15992] binder: BINDER_SET_CONTEXT_MGR already set [ 1043.534606][T15992] binder: 15987:15992 ioctl 4018620d 200000000040 returned -16 [ 1043.584263][ T5838] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1043.593755][ T189] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1043.621858][T15994] fuse: Unknown parameter '0x0000000000000008' [ 1043.633445][ T189] usb 6-1: Using ep0 maxpacket: 8 [ 1043.666599][ T189] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1043.719767][ T189] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1043.765355][ T5838] usb 2-1: Using ep0 maxpacket: 32 [ 1043.791097][ T5838] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 1043.805235][ T189] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1043.839189][ T5838] usb 2-1: config 0 has no interface number 0 [ 1043.868486][ T189] usb 6-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 1043.887625][ T5838] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1043.920058][ T5838] usb 2-1: config 0 interface 89 has no altsetting 0 [ 1043.935700][ T189] usb 6-1: config 168 interface 0 has no altsetting 0 [ 1043.957444][ T5838] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1043.975720][ T189] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1043.996606][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.017634][ T189] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1044.037407][ T5838] usb 2-1: Product: syz [ 1044.060813][ T5838] usb 2-1: Manufacturer: syz [ 1044.081480][ T189] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1044.099180][ T5838] usb 2-1: SerialNumber: syz [ 1044.134956][ T189] usb 6-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 1044.153321][T10868] usb 4-1: new low-speed USB device number 104 using dummy_hcd [ 1044.174558][ T5838] usb 2-1: config 0 descriptor?? [ 1044.200139][T16006] input: syz0 as /devices/virtual/input/input70 [ 1044.210417][ T5838] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1044.225467][ T189] usb 6-1: config 168 interface 0 has no altsetting 0 [ 1044.242110][ T189] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1044.256198][ T5838] em28xx 2-1:0.89: Video interface 89 found: [ 1044.291013][ T189] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1044.344417][T10868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1044.359116][ T189] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1044.394705][T10868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 1044.415069][ T189] usb 6-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 1044.480812][T10868] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1044.508761][ T189] usb 6-1: config 168 interface 0 has no altsetting 0 [ 1044.541171][T10868] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c1f, bcdDevice= 0.00 [ 1044.575087][ T189] usb 6-1: string descriptor 0 read error: -22 [ 1044.585370][ T189] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1044.600041][T10868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.624198][ T189] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.640474][T10868] usb 4-1: config 0 descriptor?? [ 1044.660840][T16002] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1044.685513][ T189] adutux 6-1:168.0: interrupt endpoints not found [ 1044.923019][ T5838] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 1044.938942][ T189] usb 6-1: USB disconnect, device number 89 [ 1045.926103][T10868] usbhid 4-1:0.0: can't add hid device: -71 [ 1045.941269][T10868] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1045.955420][T10868] usb 4-1: USB disconnect, device number 104 [ 1046.925708][ T5838] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1046.943859][ T5838] em28xx 2-1:0.89: board has no eeprom [ 1047.012548][ T5838] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 1047.989241][ T5838] em28xx 2-1:0.89: analog set to bulk mode. [ 1048.189511][ T5736] em28xx 2-1:0.89: Registering V4L2 extension [ 1048.216033][ T5838] usb 2-1: USB disconnect, device number 118 [ 1048.256159][ T5838] em28xx 2-1:0.89: Disconnecting em28xx [ 1048.424079][ T5736] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 1048.473782][ T5736] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 1048.491908][T16028] binder: BINDER_SET_CONTEXT_MGR already set [ 1048.529394][ T5736] em28xx 2-1:0.89: No AC97 audio processor [ 1048.544979][T16028] binder: 16027:16028 ioctl 4018620d 2000000000c0 returned -16 [ 1048.565311][T16032] binder: BINDER_SET_CONTEXT_MGR already set [ 1048.596234][T16028] binder: BINDER_SET_CONTEXT_MGR already set [ 1048.605101][T16032] binder: 16030:16032 ioctl 4018620d 200000001000 returned -16 [ 1048.613950][ T5736] usb 2-1: Decoder not found [ 1048.641089][ T5736] em28xx 2-1:0.89: failed to create media graph [ 1048.660547][T16028] binder: 16027:16028 ioctl 4018620d 200000000040 returned -16 [ 1048.672641][T10868] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1048.687899][ T5736] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 1048.769795][ T5736] em28xx 2-1:0.89: Registering snapshot button... [ 1048.809472][ T5736] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input71 [ 1048.853978][T10868] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1049.414825][ T5736] em28xx 2-1:0.89: Remote control support is not available for this card. [ 1049.909879][T10868] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1049.961157][ T5838] em28xx 2-1:0.89: Closing input extension [ 1049.988268][T10868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.016307][ T5838] em28xx 2-1:0.89: Deregistering snapshot button [ 1050.063207][T16041] netlink: 'syz.5.2786': attribute type 1 has an invalid length. [ 1050.074156][T10868] usb 4-1: config 0 descriptor?? [ 1050.119878][T10868] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1050.226439][ T5838] em28xx 2-1:0.89: Freeing device [ 1050.832548][ T5838] usb 6-1: new full-speed USB device number 90 using dummy_hcd [ 1050.943082][T10868] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1051.003757][ T5838] usb 6-1: config 0 has an invalid interface number: 212 but max is 0 [ 1051.024599][ T5838] usb 6-1: config 0 has no interface number 0 [ 1051.040174][ T5838] usb 6-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 1051.064174][ T5838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.093020][ T5838] usb 6-1: Product: syz [ 1051.101742][ T5838] usb 6-1: Manufacturer: syz [ 1051.113423][T10868] usb 2-1: Using ep0 maxpacket: 8 [ 1051.118688][ T5838] usb 6-1: SerialNumber: syz [ 1051.128691][T10868] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1051.154517][ T5838] usb 6-1: config 0 descriptor?? [ 1051.172276][T10868] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1051.191457][ T5838] ftdi_sio 6-1:0.212: FTDI USB Serial Device converter detected [ 1051.214706][T16074] binder: 16073:16074 ioctl c0306201 200000000240 returned -11 [ 1051.223737][ T5838] ftdi_sio ttyUSB0: unknown device type: 0xd723 [ 1051.230358][T10868] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1051.242553][ T189] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1051.268461][T10868] usb 2-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 1051.323150][T10868] usb 2-1: config 168 interface 0 has no altsetting 0 [ 1051.352788][T10868] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1051.366740][T16076] binder: BINDER_SET_CONTEXT_MGR already set [ 1051.379574][ T5736] usb 4-1: USB disconnect, device number 105 [ 1051.400319][T10868] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1051.414031][ T189] usb 5-1: Using ep0 maxpacket: 32 [ 1051.421586][T16076] binder: 16075:16076 ioctl 4018620d 200000001000 returned -16 [ 1051.450199][ T189] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 1051.464219][T16063] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2791'. [ 1051.485926][ T189] usb 5-1: config 0 has no interface number 0 [ 1051.492196][T10868] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1051.520140][ T189] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1051.538481][ T5838] usb 6-1: USB disconnect, device number 90 [ 1051.559538][T10868] usb 2-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 1051.588095][ T5838] ftdi_sio 6-1:0.212: device disconnected [ 1051.599707][ T189] usb 5-1: config 0 interface 89 has no altsetting 0 [ 1051.646529][ T189] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1051.665025][T10868] usb 2-1: config 168 interface 0 has no altsetting 0 [ 1051.687278][ T189] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.703089][T10868] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1051.727539][ T189] usb 5-1: Product: syz [ 1051.747475][T10868] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1051.759602][ T189] usb 5-1: Manufacturer: syz [ 1051.781018][ T189] usb 5-1: SerialNumber: syz [ 1051.813082][T10868] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1051.826005][ T189] usb 5-1: config 0 descriptor?? [ 1051.862715][ T189] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1052.052562][T10868] usb 2-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 1052.155978][ T5736] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1057.677963][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.715031][ T189] em28xx 5-1:0.89: Video interface 89 found: [ 1061.956949][ C0] sched: DL replenish lagged too much [ 1119.898253][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1212.962526][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1212.970105][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16067/1:b..l P7416/1:b..l [ 1212.979911][ C0] rcu: (detected by 0, t=10502 jiffies, g=178153, q=1258001 ncpus=1) [ 1212.988081][ C0] task:kworker/u8:15 state:R running task stack:22440 pid:7416 tgid:7416 ppid:2 task_flags:0x4248060 flags:0x00080000 [ 1213.003232][ C0] Workqueue: writeback wb_workfn (flush-8:0) [ 1213.009526][ C0] Call Trace: [ 1213.012815][ C0] [ 1213.015728][ C0] __schedule+0x125c/0x6730 [ 1213.020422][ C0] ? __pfx___schedule+0x10/0x10 [ 1213.025249][ C0] ? mark_held_locks+0x40/0x70 [ 1213.030071][ C0] preempt_schedule_irq+0x50/0x90 [ 1213.035077][ C0] irqentry_exit+0x205/0xa00 [ 1213.039714][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1213.045746][ C0] RIP: 0010:__read_once_word_nocheck+0x0/0x10 [ 1213.051838][ C0] Code: e9 c2 fa ff ff 48 c7 c7 58 c2 cb 8b e8 19 8e c2 00 e9 1e fa ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <48> 8b 07 e9 d8 f7 05 0a 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 [ 1213.071422][ C0] RSP: 0018:ffffc900051fe8c8 EFLAGS: 00000202 [ 1213.077553][ C0] RAX: ffffc90005200001 RBX: 0000000000000001 RCX: ffffffff91c60048 [ 1213.085498][ C0] RDX: ffffc900051ffd01 RSI: ffffc900051ffd80 RDI: ffffc900051ffd80 [ 1213.093512][ C0] RBP: ffffc900051ffd80 R08: 0000000000000001 R09: 0000000000000007 [ 1213.101458][ C0] R10: 0000000000000200 R11: 000000000000cf7f R12: ffffc900051fe990 [ 1213.109401][ C0] R13: ffffc900051fe940 R14: ffffc900051ffdb0 R15: ffffc900051fe974 [ 1213.119790][ C0] unwind_next_frame+0x1561/0x2090 [ 1213.124882][ C0] ? process_one_work+0xa23/0x1940 [ 1213.130042][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1213.136217][ C0] arch_stack_walk+0x94/0xf0 [ 1213.140896][ C0] ? worker_thread+0x5ef/0xe50 [ 1213.145638][ C0] stack_trace_save+0x8e/0xc0 [ 1213.150288][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1213.155655][ C0] ? find_held_lock+0x2b/0x80 [ 1213.160314][ C0] ? __mmu_notifier_invalidate_range_end+0x35b/0x430 [ 1213.167039][ C0] kasan_save_stack+0x30/0x50 [ 1213.171721][ C0] ? kasan_save_stack+0x30/0x50 [ 1213.176545][ C0] ? kasan_save_track+0x14/0x30 [ 1213.181383][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 1213.186379][ C0] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 1213.192029][ C0] ? bio_alloc_bioset+0x173/0x1060 [ 1213.197248][ C0] ? ext4_bio_write_folio+0xdad/0x1eb0 [ 1213.202774][ C0] ? mpage_process_page_bufs+0x473/0x8d0 [ 1213.208472][ C0] ? mpage_prepare_extent_to_map+0xb50/0x1920 [ 1213.214521][ C0] ? ext4_do_writepages+0x9f9/0x3ed0 [ 1213.219782][ C0] ? ext4_writepages+0x347/0x750 [ 1213.224690][ C0] ? do_writepages+0x278/0x600 [ 1213.229501][ C0] ? __writeback_single_inode+0x164/0x1300 [ 1213.235313][ C0] ? writeback_sb_inodes+0x766/0x1c50 [ 1213.240661][ C0] ? __writeback_inodes_wb+0xf8/0x2d0 [ 1213.246012][ C0] ? wb_writeback+0x6f6/0xb50 [ 1213.250684][ C0] ? wb_workfn+0x93f/0xc80 [ 1213.255071][ C0] ? process_one_work+0xa23/0x1940 [ 1213.260193][ C0] kasan_save_track+0x14/0x30 [ 1213.264851][ C0] __kasan_slab_alloc+0x89/0x90 [ 1213.269681][ C0] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 1213.275115][ C0] ? bio_alloc_bioset+0x173/0x1060 [ 1213.280213][ C0] bio_alloc_bioset+0x173/0x1060 [ 1213.285138][ C0] ? __pfx_bio_alloc_bioset+0x10/0x10 [ 1213.290491][ C0] ? find_held_lock+0x2b/0x80 [ 1213.295165][ C0] ? folio_clear_dirty_for_io+0x34d/0x960 [ 1213.300877][ C0] ? folio_clear_dirty_for_io+0x34d/0x960 [ 1213.306589][ C0] ext4_bio_write_folio+0xdad/0x1eb0 [ 1213.311879][ C0] mpage_process_page_bufs+0x473/0x8d0 [ 1213.317336][ C0] mpage_prepare_extent_to_map+0xb50/0x1920 [ 1213.323220][ C0] ? __pfx_mpage_prepare_extent_to_map+0x10/0x10 [ 1213.329546][ C0] ? ext4_init_io_end+0x24/0x170 [ 1213.334464][ C0] ext4_do_writepages+0x9f9/0x3ed0 [ 1213.339561][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1213.345693][ C0] ? arch_stack_walk+0x94/0xf0 [ 1213.350496][ C0] ? stack_trace_save+0x8e/0xc0 [ 1213.355324][ C0] ? __pfx_ext4_do_writepages+0x10/0x10 [ 1213.360877][ C0] ? ext4_writepages+0x347/0x750 [ 1213.365787][ C0] ext4_writepages+0x347/0x750 [ 1213.370549][ C0] ? __pfx_ext4_writepages+0x10/0x10 [ 1213.375836][ C0] ? do_writepages+0x4b5/0x600 [ 1213.380586][ C0] ? do_writepages+0x4b5/0x600 [ 1213.385331][ C0] ? __pfx_ext4_writepages+0x10/0x10 [ 1213.390591][ C0] do_writepages+0x278/0x600 [ 1213.395184][ C0] ? __pfx_do_writepages+0x10/0x10 [ 1213.400273][ C0] __writeback_single_inode+0x164/0x1300 [ 1213.405901][ C0] ? find_held_lock+0x2b/0x80 [ 1213.410561][ C0] ? __pfx___writeback_single_inode+0x10/0x10 [ 1213.416604][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 1213.421781][ C0] writeback_sb_inodes+0x766/0x1c50 [ 1213.426970][ C0] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1213.432622][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1213.437529][ C0] ? move_expired_inodes+0x5ea/0x8f0 [ 1213.442801][ C0] __writeback_inodes_wb+0xf8/0x2d0 [ 1213.447981][ C0] ? __pfx___writeback_inodes_wb+0x10/0x10 [ 1213.453765][ C0] ? queue_io+0x287/0x530 [ 1213.458076][ C0] wb_writeback+0x6f6/0xb50 [ 1213.462557][ C0] ? __pfx_wb_writeback+0x10/0x10 [ 1213.467572][ C0] ? get_nr_inodes+0x100/0x150 [ 1213.472390][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1213.477578][ C0] wb_workfn+0x93f/0xc80 [ 1213.481807][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1213.487588][ C0] ? __pfx_wb_workfn+0x10/0x10 [ 1213.492355][ C0] ? rcu_is_watching+0x12/0xc0 [ 1213.497194][ C0] process_one_work+0xa23/0x1940 [ 1213.502132][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1213.507493][ C0] ? __pfx_wb_workfn+0x10/0x10 [ 1213.512232][ C0] worker_thread+0x5ef/0xe50 [ 1213.516802][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1213.521905][ C0] ? kthread+0x13a/0x450 [ 1213.526176][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1213.531261][ C0] kthread+0x370/0x450 [ 1213.535304][ C0] ? __pfx_kthread+0x10/0x10 [ 1213.539867][ C0] ret_from_fork+0x72b/0xd50 [ 1213.544452][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1213.549543][ C0] ? __switch_to+0x800/0x10f0 [ 1213.554268][ C0] ? __pfx_kthread+0x10/0x10 [ 1213.558838][ C0] ret_from_fork_asm+0x1a/0x30 [ 1213.563669][ C0] [ 1213.566693][ C0] task:syz.4.2793 state:R running task stack:27144 pid:16067 tgid:16067 ppid:5612 task_flags:0x40044c flags:0x00080002 [ 1213.580239][ C0] Call Trace: [ 1213.583502][ C0] [ 1213.586409][ C0] __schedule+0x125c/0x6730 [ 1213.590896][ C0] ? lock_acquire+0x1b9/0x370 [ 1213.595555][ C0] ? find_held_lock+0x2b/0x80 [ 1213.600212][ C0] ? __pfx___schedule+0x10/0x10 [ 1213.605039][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 1213.610387][ C0] preempt_schedule_common+0x42/0xc0 [ 1213.615648][ C0] preempt_schedule_thunk+0x16/0x40 [ 1213.620826][ C0] _raw_spin_unlock+0x3e/0x50 [ 1213.625503][ C0] __zap_vma_range+0x16f7/0x4a30 [ 1213.630483][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 1213.635746][ C0] ? find_held_lock+0x2b/0x80 [ 1213.640406][ C0] unmap_vmas+0x299/0x5f0 [ 1213.644716][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 1213.649559][ C0] ? mas_next_slot+0x10a3/0x1960 [ 1213.654576][ C0] exit_mmap+0x1ef/0xa00 [ 1213.658833][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1213.663595][ C0] ? rcu_is_watching+0x12/0xc0 [ 1213.668363][ C0] ? uprobe_clear_state+0x49/0x260 [ 1213.673560][ C0] ? find_held_lock+0x2b/0x80 [ 1213.678223][ C0] ? uprobe_clear_state+0x5f/0x260 [ 1213.683321][ C0] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1213.688944][ C0] ? arch_uprobe_clear_state+0x107/0x150 [ 1213.694616][ C0] __mmput+0x12a/0x410 [ 1213.698694][ C0] mmput+0x67/0x80 [ 1213.702391][ C0] do_exit+0x8b1/0x2ae0 [ 1213.706576][ C0] ? __pfx_do_exit+0x10/0x10 [ 1213.711145][ C0] ? do_raw_spin_lock+0x128/0x260 [ 1213.716150][ C0] ? find_held_lock+0x2b/0x80 [ 1213.720804][ C0] ? get_signal+0x7e0/0x21e0 [ 1213.725422][ C0] do_group_exit+0xd5/0x2a0 [ 1213.729900][ C0] get_signal+0x1ec7/0x21e0 [ 1213.734392][ C0] ? __pfx_get_signal+0x10/0x10 [ 1213.739218][ C0] ? do_futex+0x190/0x440 [ 1213.743589][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 1213.749116][ C0] ? ktime_get+0x22c/0x320 [ 1213.753558][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1213.759699][ C0] exit_to_user_mode_loop+0x139/0x6f0 [ 1213.765083][ C0] ? rcu_is_watching+0x12/0xc0 [ 1213.769827][ C0] do_syscall_64+0x666/0x870 [ 1213.774441][ C0] ? clear_bhb_loop+0x40/0x90 [ 1213.779112][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.784980][ C0] RIP: 0033:0x7f302239de99 [ 1213.789435][ C0] RSP: 002b:00007ffeaae6b288 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1213.797821][ C0] RAX: ffffffffffffff92 RBX: 0000000000100f9f RCX: 00007f302239de99 [ 1213.805776][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f302262609c [ 1213.813735][ C0] RBP: 000000000000015e R08: 0000000000000001 R09: 0000000000000000 [ 1213.821677][ C0] R10: 00007ffeaae6b390 R11: 0000000000000246 R12: 00007ffeaae6b3b0 [ 1213.829705][ C0] R13: 00007f302262609c R14: 00000000001010fd R15: 00007ffeaae6b390 [ 1213.837658][ C0] [ 1213.840673][ C0] rcu: rcu_preempt kthread starved for 302 jiffies! g178153 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1213.851749][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1213.861691][ C0] rcu: RCU grace-period kthread stack dump: [ 1213.867549][ C0] task:rcu_preempt state:R running task stack:26680 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1213.881077][ C0] Call Trace: [ 1213.884335][ C0] [ 1213.887247][ C0] __schedule+0x125c/0x6730 [ 1213.891742][ C0] ? __pfx___schedule+0x10/0x10 [ 1213.896563][ C0] ? find_held_lock+0x2b/0x80 [ 1213.901217][ C0] ? schedule+0x225/0x2c0 [ 1213.905525][ C0] schedule+0xdd/0x2c0 [ 1213.909578][ C0] schedule_timeout+0x127/0x280 [ 1213.914408][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1213.919758][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1213.925019][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1213.930795][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 1213.936282][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 1213.941023][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1213.946282][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1213.951194][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1213.956364][ C0] ? rcu_is_watching+0x12/0xc0 [ 1213.961108][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1213.966890][ C0] rcu_gp_kthread+0x179/0x230 [ 1213.971544][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1213.976716][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1213.982498][ C0] ? __kthread_parkme+0x18c/0x230 [ 1213.987573][ C0] ? kthread+0x13a/0x450 [ 1213.991786][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1213.996960][ C0] kthread+0x370/0x450 [ 1214.001019][ C0] ? __pfx_kthread+0x10/0x10 [ 1214.005581][ C0] ret_from_fork+0x72b/0xd50 [ 1214.010152][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1214.015253][ C0] ? __switch_to+0x800/0x10f0 [ 1214.019902][ C0] ? __pfx_kthread+0x10/0x10 [ 1214.024480][ C0] ret_from_fork_asm+0x1a/0x30 [ 1214.029250][ C0] [ 1214.032242][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1214.038765][ C0] CPU: 0 UID: 0 PID: 3224 Comm: kworker/R-bat_e Tainted: G L syzkaller #0 PREEMPT(full) [ 1214.050025][ C0] Tainted: [L]=SOFTLOCKUP [ 1214.054319][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1214.064350][ C0] Workqueue: bat_events batadv_tt_purge [ 1214.069970][ C0] RIP: 0010:unwind_next_frame+0xd4c/0x2090 [ 1214.075752][ C0] Code: 80 3c 16 00 0f 85 b2 0f 00 00 48 8b 14 24 49 89 45 48 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 e8 0d 00 00 <4c> 89 e2 4d 89 75 38 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 [ 1214.095370][ C0] RSP: 0018:ffffc90000007108 EFLAGS: 00000246 [ 1214.101408][ C0] RAX: dffffc0000000000 RBX: 0000000000000002 RCX: ffffffff91d3a5da [ 1214.109350][ C0] RDX: 1ffff92000000e36 RSI: 1ffff92000000e38 RDI: ffffc900000074e0 [ 1214.117292][ C0] RBP: ffffc900000071c0 R08: ffffffff91d3a5de R09: 0000000000000007 [ 1214.125233][ C0] R10: 0000000000000200 R11: 0000000000017ae8 R12: ffffc900000071c8 [ 1214.133179][ C0] R13: ffffc90000007178 R14: ffffc900000074e8 R15: ffffc900000071ac [ 1214.141177][ C0] FS: 0000000000000000(0000) GS:ffff888123ddc000(0000) knlGS:0000000000000000 [ 1214.150086][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1214.156642][ C0] CR2: 000020000000d000 CR3: 000000005c7c4000 CR4: 00000000003526f0 [ 1214.164592][ C0] Call Trace: [ 1214.167846][ C0] [ 1214.170733][ C0] ? kasan_save_free_info+0x3b/0x70 [ 1214.175917][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1214.182060][ C0] arch_stack_walk+0x94/0xf0 [ 1214.186635][ C0] ? __kasan_slab_free+0x5f/0x80 [ 1214.191547][ C0] ? skb_free_head+0xb9/0x160 [ 1214.196309][ C0] stack_trace_save+0x8e/0xc0 [ 1214.200961][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1214.206304][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1214.211224][ C0] ? __lock_acquire+0x49f/0x1a40 [ 1214.216143][ C0] kasan_save_stack+0x30/0x50 [ 1214.220795][ C0] ? kasan_save_stack+0x30/0x50 [ 1214.225619][ C0] ? kasan_save_track+0x14/0x30 [ 1214.230443][ C0] ? kasan_save_free_info+0x3b/0x70 [ 1214.235641][ C0] kasan_save_track+0x14/0x30 [ 1214.240310][ C0] kasan_save_free_info+0x3b/0x70 [ 1214.245310][ C0] __kasan_slab_free+0x5f/0x80 [ 1214.250046][ C0] ? napi_pp_put_page+0x360/0x390 [ 1214.255043][ C0] kfree+0x22b/0x6c0 [ 1214.258940][ C0] ? mark_held_locks+0x40/0x70 [ 1214.263681][ C0] skb_free_head+0xb9/0x160 [ 1214.268174][ C0] skb_release_data+0x6c5/0x8e0 [ 1214.273007][ C0] consume_skb+0xc4/0x110 [ 1214.277327][ C0] nft_synproxy_do_eval+0xa24/0xce0 [ 1214.282623][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1214.288319][ C0] ? kasan_save_track+0x14/0x30 [ 1214.293143][ C0] ? kasan_save_free_info+0x3b/0x70 [ 1214.298335][ C0] ? sk_skb_reason_drop+0x10f/0x1b0 [ 1214.303508][ C0] ? __netif_receive_skb_core.constprop.0+0x571/0x3530 [ 1214.310380][ C0] ? __netif_receive_skb_one_core+0xb0/0x1e0 [ 1214.316353][ C0] ? __netif_receive_skb+0x1f/0x120 [ 1214.321528][ C0] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 1214.326961][ C0] nft_do_chain+0x2e5/0x19d0 [ 1214.331611][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 1214.336613][ C0] ? mark_held_locks+0x40/0x70 [ 1214.341368][ C0] ? __local_bh_enable_ip+0x9e/0x120 [ 1214.346630][ C0] ? __local_bh_enable_ip+0x9e/0x120 [ 1214.351891][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1214.357073][ C0] nft_do_chain_inet+0xf3/0x400 [ 1214.361959][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1214.367419][ C0] ? __pfx_ipt_do_table+0x10/0x10 [ 1214.372564][ C0] ? nf_nat_ipv4_local_in+0x181/0x730 [ 1214.377969][ C0] nf_hook_slow+0xbf/0x220 [ 1214.382433][ C0] nf_hook.constprop.0+0x2a6/0x750 [ 1214.387587][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1214.393548][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 1214.399158][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1214.404248][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1214.410205][ C0] ? ip_rcv_finish_core+0x7ec/0x2c30 [ 1214.415468][ C0] ip_local_deliver+0x163/0x1f0 [ 1214.420296][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 1214.425660][ C0] ip_rcv+0x33a/0x3c0 [ 1214.429649][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1214.434148][ C0] __netif_receive_skb_one_core+0x197/0x1e0 [ 1214.440019][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1214.446427][ C0] ? lock_acquire+0x1b9/0x370 [ 1214.451080][ C0] ? process_backlog+0x32a/0x1580 [ 1214.456076][ C0] ? process_backlog+0x32a/0x1580 [ 1214.461074][ C0] __netif_receive_skb+0x1f/0x120 [ 1214.466072][ C0] process_backlog+0x37a/0x1580 [ 1214.470902][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 1214.476247][ C0] net_rx_action+0xa40/0xf20 [ 1214.480815][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1214.485899][ C0] ? mark_held_locks+0x40/0x70 [ 1214.490637][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1214.495808][ C0] ? tmigr_handle_remote+0x132/0x380 [ 1214.501072][ C0] ? mark_held_locks+0x40/0x70 [ 1214.505810][ C0] handle_softirqs+0x1ea/0x9b0 [ 1214.510550][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1214.515847][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1214.521107][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 1214.526711][ C0] ? batadv_tt_purge+0x25d/0xbd0 [ 1214.531626][ C0] do_softirq+0xac/0xe0 [ 1214.535760][ C0] [ 1214.538664][ C0] [ 1214.541572][ C0] __local_bh_enable_ip+0xf8/0x120 [ 1214.546659][ C0] batadv_tt_purge+0x25d/0xbd0 [ 1214.551404][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 1214.556673][ C0] ? rcu_is_watching+0x12/0xc0 [ 1214.561423][ C0] process_one_work+0xa23/0x1940 [ 1214.566359][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1214.571709][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 1214.576989][ C0] rescuer_thread+0x905/0x14a0 [ 1214.581818][ C0] ? rescuer_thread+0x240/0x14a0 [ 1214.586727][ C0] ? rescuer_thread+0x118/0x14a0 [ 1214.591636][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 1214.596819][ C0] ? __kthread_parkme+0x18c/0x230 [ 1214.601824][ C0] ? kthread+0x13a/0x450 [ 1214.606039][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 1214.611211][ C0] kthread+0x370/0x450 [ 1214.615256][ C0] ? __pfx_kthread+0x10/0x10 [ 1214.619818][ C0] ret_from_fork+0x72b/0xd50 [ 1214.624386][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1214.629473][ C0] ? __switch_to+0x800/0x10f0 [ 1214.634122][ C0] ? __pfx_kthread+0x10/0x10 [ 1214.638682][ C0] ret_from_fork_asm+0x1a/0x30 [ 1214.643432][ C0] [ 1214.725632][ T1312] ieee802154 phy1 wpan1: encryption failed: -22