last executing test programs: 15m53.801603054s ago: executing program 3 (id=227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x20000090) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x989680}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c056055b50102030109021200010000000009"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x5, 0xa, 0x10002}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) fdatasync(0xffffffffffffffff) sendmsg$netlink(r2, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001a00)={0x10, 0x25, 0x4, 0x70bd26, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x20000801}, 0x40010) r5 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r5, 0x0, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) recvmmsg(r2, &(0x7f00000086c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000880)=""/4111, 0x100f}], 0x2}, 0xa}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000005c0)=""/233, 0xe9}, {&(0x7f0000000100)=""/119, 0x77}, {0x0}, {0x0}], 0x4}, 0x1000}], 0x3, 0x8042, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000040)="e2", 0x12d8) 15m47.862282636s ago: executing program 3 (id=236): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f00000001c0)=0x4, 0x4) 15m43.221849048s ago: executing program 3 (id=242): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x478) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) shmget$private(0x0, 0x400000, 0x800, &(0x7f000000e000/0x400000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1f00, 0x12) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) setrlimit(0x7, &(0x7f0000000400)) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0xffffffffffffffff) syz_emit_ethernet(0x124, &(0x7f0000000180)={@multicast, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @igmp={{0x17, 0x4, 0x1, 0x3, 0x112, 0x65, 0x0, 0x3, 0x2, 0x0, @loopback, @broadcast, {[@timestamp_prespec={0x44, 0x1c, 0x82, 0x3, 0x9, [{@private=0xa010101, 0x25}, {@loopback, 0xa31}, {@broadcast, 0x7}]}, @timestamp_prespec={0x44, 0x2c, 0xf1, 0x3, 0x5, [{@empty, 0xffffffff}, {@multicast2, 0x6}, {@loopback, 0xa}, {@empty, 0x1}, {@empty, 0xff}]}]}}, {0x15, 0xf8, 0x0, @remote, "e9bbb266df9457ff7f59256412011365ccbdbe59f3ca1c05b49f4b1a65645cbc929a9b23363650181ee11d722ffec9cec792f0fe9cc70d4c4a48c836df340b65bf3c1e7431a2dc78e84d9940a2582c425dc833fb1d2e2f3fbeb5a08d256b5f48bd9e2709899b18c9a45360b1b242f14aacc8d08f02b3e64f5ae221f54b1cf240c5802ef593cce467f937b4c6d61d8682b58a81d6720b642f09048d3b72a3238706f0c200e04a047c23f32f882a9c"}}}}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x26d, 0x0, 0x9800000002000000}]}) openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) 15m40.440153166s ago: executing program 3 (id=248): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x7) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/dev_mcast\x00') pread64(r4, &(0x7f0000000040)=""/30, 0x1e, 0x8001) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c) shutdown(r2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000080000000800090002000000"], 0x24}}, 0x10) sendmsg$key(r5, &(0x7f0000000380)={0x40000000, 0x0, 0x0}, 0x40040) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @local, 0x1}]}, &(0x7f0000000100)=0xc) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, 0x0, &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b///\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x680, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000000)={0x253, 0x4, 0x5, 0x8000000000000100, 0x6}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) fsopen(&(0x7f0000000080)='ocfs2_dlmfs\x00', 0x1) read$FUSE(r4, &(0x7f0000004100)={0x2020, 0x0, 0x0}, 0x2020) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f00000000c0)='./file0\x00', r4, 0x4000, r4}, 0x18) sync() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYRES16=r5, @ANYBLOB, @ANYRESHEX=r0], 0x40}, 0x1, 0x0, 0x0, 0x24002010}, 0x0) r6 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x17}, 0x94) syz_usb_control_io$uac2(r6, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000540)={&(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000002c0), &(0x7f0000000380), 0x0, 0x0, 0x400000000000000b}) 15m20.640955832s ago: executing program 32 (id=256): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x680, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000000)={0x253, 0x4, 0x5, 0x8000000000000100, 0x6}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) fsopen(&(0x7f0000000080)='ocfs2_dlmfs\x00', 0x1) read$FUSE(r4, &(0x7f0000004100)={0x2020, 0x0, 0x0}, 0x2020) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f00000000c0)='./file0\x00', r4, 0x4000, r4}, 0x18) sync() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYRES16=r5, @ANYBLOB, @ANYRESHEX=r0], 0x40}, 0x1, 0x0, 0x0, 0x24002010}, 0x0) r6 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x17}, 0x94) syz_usb_control_io$uac2(r6, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000540)={&(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000002c0), &(0x7f0000000380), 0x0, 0x0, 0x400000000000000b}) 11m41.575765802s ago: executing program 2 (id=493): pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) socket(0x10, 0x803, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)={[{@nfs_export_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) 11m38.604152647s ago: executing program 2 (id=498): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x10, 0x9]}}) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 11m37.62672372s ago: executing program 2 (id=500): socket$kcm(0xa, 0x2, 0x73) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xb, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 11m32.933735792s ago: executing program 2 (id=508): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800599c6d0e0000"], 0xfe33) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) socket$kcm(0x10, 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d4", @ANYRES32=r1]) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x10, 0x0, 0x2, 0x6}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 11m29.05325103s ago: executing program 2 (id=516): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, 0x0, 0x0) r6 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 11m27.342032694s ago: executing program 2 (id=518): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x24008000) 11m11.748729891s ago: executing program 33 (id=518): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x24008000) 15.344707021s ago: executing program 0 (id=2948): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)={0x100, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_EXPECT_NAT={0x48, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_TUPLE={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_TUPLE={0x4}]}, @CTA_EXPECT_NAT={0x94, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x17}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0x100}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 14.844336426s ago: executing program 0 (id=2950): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = socket$packet(0x11, 0x2, 0x300) socket$l2tp6(0xa, 0x2, 0x73) socket$packet(0x11, 0x3, 0x300) socket$inet(0x2, 0x3, 0x8) socket$kcm(0x29, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='net/kcm\x00') socket$nl_route(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24", @ANYRES8=r2, @ANYRES64=r0], 0x0) 12.703951567s ago: executing program 0 (id=2964): socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b7403340861a22753635f1020301090212"], 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9.245264162s ago: executing program 4 (id=2973): socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff7ffc}]}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c", @ANYRES8=r0, @ANYBLOB='\a'], 0x0) 9.138204126s ago: executing program 0 (id=2975): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000bc0)='D', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002580)}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000300)="7daad44510df7dc335e66c0e962a5ce64120016d3750175c423665dfd246d084c8e400b6c006f6c74ec8219e7bd29464ba326c26805a2b900e958cf88ed55de49f9400fdcf60ff1066757c78148f12b72720a63042cd274e883c9ccf0169c55d8fdbac66fa9acbfe3178cff055c59f582b1d64628b896898b9734298b75f7d23345e45e62e3a70e77d59a60afa4b543eae17ac165b13f818b7805741425fb718d691dcb6c67f51aae4dcc6875ee298353ecb", 0xb2}, {&(0x7f00000003c0)="1f125f61cc5d556d973ab358911b8772f398c25f5ef41d1ce58a62ea8e5cb1cb411cd89d45dd3267f001ba6e9698e9cf32f12d8ba96abdf5f2b0e86d30bb5c7c924be08c4fb3de1c6f7839fbaa6b86869b1263a76297b0639c50e4840c698d2778d4914ef6d3910359738c62e93f58722bfd7bbea8fa9c97ec3c7a3e1cfee6920b38e1cac0e47fad4cab9a77c66b91332406c46e324e50fd6751caf659b9e1278e47256ff7b3dd494ce5e06bb18eae091e1cb0509f91", 0xb6}, {&(0x7f0000000540)="ead66fa4e8be0d4d9690c554a0e30356a3959c7833394e13d60c3156f904da0150ef968210846cc953b76c516564312c0559c2", 0x33}, {&(0x7f00000005c0)="8518fed30943e2faab84a71895536356ac933c1b0b2b42a0f0b9f53a909c994f9043bd76c5678e951e31b2a38823719e1995827f5ec43e308ab99106eb1b9b078594d4e684a30561776c83cb09abdff93b9e80fe626f5965d0f7263a1d46d231abd76d854685e1bd8f325184fad3", 0x6e}], 0x4}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000000c0)='q', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f00000025c0)='F\a', 0x2}], 0x1}}], 0x5, 0x2090) 8.781845508s ago: executing program 0 (id=2978): bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3, 0x3}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) socket$packet(0x11, 0x3, 0x300) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r3, r4, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r5, r1) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect(0x3, 0x0, 0x0, 0x0) 7.734581819s ago: executing program 6 (id=2982): bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_usb_connect(0x5, 0x36, 0x0, 0x0) socket(0xa, 0x3, 0x3a) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) 7.631808841s ago: executing program 4 (id=2984): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0x1, 0x0, 0x100}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000080)=0x80000001, 0x4) 7.027429728s ago: executing program 4 (id=2987): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) 5.770285962s ago: executing program 4 (id=2991): syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x3af4701e) sendfile(r2, r0, 0x0, 0x10000a006) 5.39498583s ago: executing program 5 (id=2993): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x10}, {{0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000940)=""/161, 0xa1}], 0x2}, 0x9}], 0x2, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0], 0x48}}, 0x0) 5.231761433s ago: executing program 4 (id=2994): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x89fb, &(0x7f0000000040)={'bond0\x00', 0x10000}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r2, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x65) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) move_pages(0x0, 0x2, &(0x7f0000000040)=[&(0x7f000009a000/0xb000)=nil, &(0x7f00000d7000/0x4000)=nil], &(0x7f00000000c0), 0x0, 0x2) mkdir(0x0, 0x76) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB]) madvise(&(0x7f00006a0000/0x4000)=nil, 0x4000, 0x15) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[]) syz_usb_connect(0x2, 0x3b, 0x0, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0}) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x2002) unshare(0x8040480) 4.829716118s ago: executing program 0 (id=2997): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x7, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xa5}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x404c040}, 0x20004000) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r5, &(0x7f0000000200)=[{&(0x7f0000000000)='4', 0x1}], 0x1) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, 0x0) 4.499831238s ago: executing program 6 (id=2999): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)={0x194, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_EXPECT_NAT={0xdc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x9c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3f}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_TUPLE={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, @CTA_EXPECT_NAT={0x94, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x17}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0x194}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 4.147177768s ago: executing program 5 (id=3001): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x74) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 4.103521513s ago: executing program 6 (id=3002): fcntl$lock(0xffffffffffffffff, 0x24, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$midi(0x2, 0x31, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x9e8, 0x62, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0xff, 0x40, 0x28, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x3, [], [{{0x9, 0x5, 0x85, 0x3, 0x8, 0x6, 0xd1, 0x18, {0x4}}}]}}}}}]}}, 0x0) 3.966747318s ago: executing program 1 (id=3003): syz_open_dev$vim2m(0x0, 0x8, 0x2) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e8, 0x800, 0x3, 0x37d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa70f, 0x20, 0x2, 0x2da}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x122b, 0x40, 0x3, 0x2de}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5398, 0x1000, 0x0, 0x1c6}}], 0x4, &(0x7f0000001940)={0x2e, 0xea9dd2b7a4239087, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, '\x00', {0x0, 0x7f, 0x0, 0x0}}, &(0x7f00000019c0)) syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002140)={0xf, {"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", 0x1000}}, 0x1006) 3.830454782s ago: executing program 5 (id=3004): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x8c}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f000003c000/0x4000)=nil, 0x4000}, 0x1}) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r0, 0x6) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) 3.414448732s ago: executing program 1 (id=3005): syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x3af4701e) sendfile(r2, r0, 0x0, 0x10000a006) 3.170158638s ago: executing program 4 (id=3006): bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3, 0x3}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) socket$packet(0x11, 0x3, 0x300) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8652b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r3, r4, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r5, r1) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect(0x3, 0x0, 0x0, 0x0) 3.025595606s ago: executing program 5 (id=3007): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4008025) add_key$user(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001000010400000000feffffff00000000", @ANYRES32=0x0, @ANYBLOB="020d000001a1010014000300776c616e3100"/28], 0x40}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 2.919027292s ago: executing program 1 (id=3008): socket(0x2000000000000021, 0x2, 0x10000000000002) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180), 0x4) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x0, 0x1, &(0x7f00000001c0)="ce"}], 0x1}) syz_io_uring_setup(0x17, &(0x7f0000000140)={0x0, 0xb9c4, 0x21000, 0x3, 0x361}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) 2.618498372s ago: executing program 6 (id=3009): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22801, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f0000000080)={0x2, 0x0, [{0x119, 0x0, 0x9e2}, {0xc0011882, 0x0, 0x4}]}) 2.565937663s ago: executing program 1 (id=3010): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000140)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x1f00, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c603, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x74}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b7403340861a22753635f1020301090212"], 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.046828598s ago: executing program 1 (id=3011): kexec_load(0x3, 0x4, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68", 0x4f, 0x5, 0xff}, {&(0x7f0000000200), 0x0, 0x5, 0x4}, {0x0, 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a50fb6", 0x45}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d622301673217", 0xa0}], 0x4}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.9662736s ago: executing program 5 (id=3012): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)={0x174, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_EXPECT_NAT={0xbc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x7c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xd41420621ab748a8}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_TUPLE={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, @CTA_EXPECT_NAT={0x94, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x17}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0x174}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 1.891020317s ago: executing program 6 (id=3013): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x80000002, 0x4) sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9025a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x20000040) 1.715332953s ago: executing program 1 (id=3014): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x74) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 1.51498206s ago: executing program 5 (id=3015): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0) sendfile(r3, r2, &(0x7f0000000080)=0xb, 0x8) socket(0xf, 0x3, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) socket(0x1e, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) r4 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) poll(&(0x7f0000000040)=[{r4, 0x1}], 0x1, 0x101) r5 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000300)={0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000180)={0x0, 0x0, r6, 0x0}) write$tcp_congestion(r3, &(0x7f0000000100)='yeah\x00', 0x5) ioctl$DRM_IOCTL_MODE_DIRTYFB(r2, 0xc01864b1, &(0x7f0000000080)={r7, 0x3, 0x6, 0x0, &(0x7f0000000380)}) ioctl$SNDCTL_DSP_POST(r5, 0x5008, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000002c0)={0x0, 0x0, r7, 0x0, 0x0, 0x6, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb0100180000000000000000000000000000000200000000002555dc11df233df32c44a6da9c5f446be02b68f1f6b73b4d0f859be3437fe7a5e023ba2c4488bb3776c2dd6efe0bb0417b63fb35de9834b147c8452f1e40b0f3d5f755c9ac31147d3cbaf278f97acb58d8eda1573f7f2d8210291a8430bf9bbdc13f8af3787cb2096cd805662fc9f9ca4e1f725e9606344dd640f4128f659240be7697eaee9c3b46f8410fa9"], &(0x7f0000000f40)=""/4077, 0x1a, 0xfed, 0x5}, 0x28) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r9, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0xdba7, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) close_range(r1, r8, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 0s ago: executing program 6 (id=3017): read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) readv(r1, &(0x7f0000000240)=[{0x0}, {&(0x7f0000001040)=""/203, 0xcb}], 0x2) kernel console output (not intermixed with test programs): nfig [ 1027.581981][ T8466] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1027.582000][ T8466] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1027.582017][ T8466] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1027.582032][ T8466] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1027.584406][ T8466] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1027.584434][ T8466] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1027.584454][ T8466] usb 1-1: Product: syz [ 1027.584470][ T8466] usb 1-1: Manufacturer: syz [ 1027.584485][ T8466] usb 1-1: SerialNumber: syz [ 1027.615727][ T5713] usb usb5-port1: unable to enumerate USB device [ 1027.700907][ T8466] usb 1-1: config 0 descriptor?? [ 1027.735647][ T820] usb 2-1: new low-speed USB device number 84 using dummy_hcd [ 1027.756762][ T820] usb 2-1: device descriptor read/8, error -71 [ 1027.866324][ T820] usb usb2-port1: unable to enumerate USB device [ 1027.920701][ T8466] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1027.920911][ T8466] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 1027.951387][ T8466] usb 1-1: USB disconnect, device number 83 [ 1029.490952][T13619] fuse: Bad value for 'group_id' [ 1029.490972][T13619] fuse: Bad value for 'group_id' [ 1029.798945][T13628] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1029.857941][T13629] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1030.425719][ T820] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1030.578836][ T820] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.578863][ T820] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1030.580119][ T820] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1030.580146][ T820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1030.580177][ T820] usb 5-1: SerialNumber: syz [ 1030.854148][ T820] usb 5-1: 0:2 : does not exist [ 1030.938986][ T820] usb 5-1: USB disconnect, device number 78 [ 1031.114108][ T9295] udevd[9295]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1032.955710][ T8466] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 1033.107284][ T8466] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1033.107317][ T8466] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1033.107333][ T8466] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1033.107350][ T8466] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1033.107364][ T8466] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1033.109750][ T8466] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1033.109768][ T8466] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1033.109781][ T8466] usb 6-1: Product: syz [ 1033.109790][ T8466] usb 6-1: Manufacturer: syz [ 1033.109800][ T8466] usb 6-1: SerialNumber: syz [ 1033.113360][ T8466] usb 6-1: config 0 descriptor?? [ 1033.389375][ T8466] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1033.389609][ T8466] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 1033.429810][ T821] usb 6-1: USB disconnect, device number 19 [ 1034.745687][ T8466] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1034.895749][ T8466] usb 6-1: Using ep0 maxpacket: 16 [ 1034.898115][ T8466] usb 6-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 1034.898138][ T8466] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x86 has an invalid bInterval 51, changing to 9 [ 1034.898158][ T8466] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x86 has invalid maxpacket 33540, setting to 1024 [ 1034.898177][ T8466] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1034.898200][ T8466] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1034.898217][ T8466] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.901828][ T8466] usb 6-1: config 0 descriptor?? [ 1035.265804][T13676] Set syz1 is full, maxelem 65536 reached [ 1035.330777][ T8466] usbhid 6-1:0.0: can't add hid device: -71 [ 1035.330922][ T8466] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1035.355706][ T8466] usb 6-1: USB disconnect, device number 20 [ 1035.736195][T13680] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2181'. [ 1038.162355][T13700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2186'. [ 1039.835673][ T820] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1040.334287][ T820] usb 2-1: Using ep0 maxpacket: 16 [ 1041.101443][ T820] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1041.101485][ T820] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1041.101523][ T820] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1041.101545][ T820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.116137][ T820] usb 2-1: config 0 descriptor?? [ 1041.571786][T13724] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2193'. [ 1041.613274][ T820] mcp2221 0003:04D8:00DD.0006: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 1042.019928][ T820] usb 2-1: USB disconnect, device number 85 [ 1042.594220][T13742] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2200'. [ 1045.176874][ T5713] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1045.255724][ T821] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1045.335647][ T5713] usb 6-1: Using ep0 maxpacket: 8 [ 1045.338020][ T5713] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 1045.338046][ T5713] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1045.338066][ T5713] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1045.340860][ T5713] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1045.340889][ T5713] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.340911][ T5713] usb 6-1: Product: syz [ 1045.340927][ T5713] usb 6-1: Manufacturer: syz [ 1045.340943][ T5713] usb 6-1: SerialNumber: syz [ 1045.429682][ T5713] usb 6-1: config 0 descriptor?? [ 1045.432209][ T821] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1045.432233][ T821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.432250][ T821] usb 5-1: Product: syz [ 1045.432261][ T821] usb 5-1: Manufacturer: syz [ 1045.432272][ T821] usb 5-1: SerialNumber: syz [ 1045.732606][ T5713] usb 6-1: USB disconnect, device number 21 [ 1045.911376][ T821] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1045.911434][ T821] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1046.035671][ T5734] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 1046.185020][T13764] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2207'. [ 1046.197573][ T5734] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.197624][ T5734] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1046.197712][ T5734] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1046.197735][ T5734] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1046.200587][ T5734] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1046.200604][ T5734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1046.200617][ T5734] usb 2-1: Product: syz [ 1046.200643][ T5734] usb 2-1: Manufacturer: syz [ 1046.200653][ T5734] usb 2-1: SerialNumber: syz [ 1046.269022][ T5734] usb 2-1: config 0 descriptor?? [ 1046.305299][ T5734] radio-si470x 2-1:0.0: could not find interrupt in endpoint [ 1046.305440][ T5734] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 1046.329759][ T5734] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1046.913750][T13774] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1046.935171][T13774] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1046.967131][ T5734] usb 1-1: new low-speed USB device number 84 using dummy_hcd [ 1047.105707][ T9372] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1047.106188][ T5734] usb 1-1: device descriptor read/64, error -71 [ 1047.146110][ T821] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1047.275699][ T9372] usb 7-1: Using ep0 maxpacket: 16 [ 1047.279732][ T9372] usb 7-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 1047.279755][ T9372] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x86 has an invalid bInterval 51, changing to 9 [ 1047.279772][ T9372] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x86 has invalid maxpacket 33540, setting to 1024 [ 1047.279791][ T9372] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1047.279850][ T9372] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1047.279866][ T9372] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.359941][ T9372] usb 7-1: config 0 descriptor?? [ 1047.378666][ T5734] usb 1-1: new low-speed USB device number 85 using dummy_hcd [ 1047.525922][ T5734] usb 1-1: device descriptor read/64, error -71 [ 1047.646412][ T5734] usb usb1-port1: attempt power cycle [ 1047.776031][ C0] raw-gadget.3 gadget.6: ignoring, device is not running [ 1047.777484][ T9372] usbhid 7-1:0.0: can't add hid device: -71 [ 1047.778085][ T9372] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1047.811791][ T821] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -EPROTO [ 1047.812313][ T821] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1047.812366][ T821] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1047.824959][ T9372] usb 7-1: USB disconnect, device number 65 [ 1047.838189][ T821] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1047.877044][ T821] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1047.891048][ T821] usb 5-1: USB disconnect, device number 79 [ 1047.971038][T13778] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2213'. [ 1047.996142][ T5734] usb 1-1: new low-speed USB device number 86 using dummy_hcd [ 1048.016746][ T5734] usb 1-1: device descriptor read/8, error -71 [ 1048.325748][ T5734] usb 1-1: new low-speed USB device number 87 using dummy_hcd [ 1048.347488][ T5734] usb 1-1: device descriptor read/8, error -71 [ 1048.475940][ T5734] usb usb1-port1: unable to enumerate USB device [ 1048.675767][ T820] usb 2-1: USB disconnect, device number 86 [ 1049.041687][T13780] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2214'. [ 1049.323539][T13786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2216'. [ 1049.323631][T13786] netlink: 'syz.1.2216': attribute type 2 has an invalid length. [ 1049.323666][T13786] netlink: 'syz.1.2216': attribute type 1 has an invalid length. [ 1049.427604][T13786] 9p: Bad value for 'wfdno' [ 1050.325689][ T820] usb 7-1: new full-speed USB device number 66 using dummy_hcd [ 1050.425751][ T821] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1050.478867][ T820] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1050.478924][ T820] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1050.478949][ T820] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1050.483197][ T820] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1050.483226][ T820] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.483247][ T820] usb 7-1: Product: syz [ 1050.483262][ T820] usb 7-1: Manufacturer: syz [ 1050.483277][ T820] usb 7-1: SerialNumber: syz [ 1050.607981][ T821] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1050.608016][ T821] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1050.608064][ T821] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1050.608090][ T821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.656448][ T821] usb 6-1: config 0 descriptor?? [ 1050.750125][T13780] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1050.812891][T13792] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2219'. [ 1051.095123][ T821] cp2112 0003:10C4:EA90.0007: item fetching failed at offset 5/7 [ 1051.107938][ T821] cp2112 0003:10C4:EA90.0007: parse failed [ 1051.108194][ T821] cp2112 0003:10C4:EA90.0007: probe with driver cp2112 failed with error -22 [ 1051.291044][ T5734] usb 6-1: USB disconnect, device number 22 [ 1051.358919][T13780] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1051.577710][ T820] cdc_ncm 7-1:1.0: bind() failure [ 1051.632889][ T820] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1051.637971][ T820] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1051.654565][ T820] usbtest 7-1:1.1: probe with driver usbtest failed with error -71 [ 1051.691458][ T820] usb 7-1: USB disconnect, device number 66 [ 1052.610660][T13817] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2227'. [ 1052.755737][ T5734] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 1052.967188][ T820] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1052.990483][ T5734] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1052.990542][ T5734] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1052.990572][ T5734] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1052.990598][ T5734] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1052.993691][ T5734] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1052.993720][ T5734] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1052.993743][ T5734] usb 6-1: Product: syz [ 1052.993758][ T5734] usb 6-1: Manufacturer: syz [ 1052.993773][ T5734] usb 6-1: SerialNumber: syz [ 1053.080927][ T5734] usb 6-1: config 0 descriptor?? [ 1053.103994][ T5734] radio-si470x 6-1:0.0: could not find interrupt in endpoint [ 1053.104061][ T5734] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 1053.104451][ T5734] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1053.152083][ T820] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1053.152113][ T820] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.152133][ T820] usb 7-1: Product: syz [ 1053.152147][ T820] usb 7-1: Manufacturer: syz [ 1053.152162][ T820] usb 7-1: SerialNumber: syz [ 1053.662673][ T820] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1053.662733][ T820] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1054.486762][ T820] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1054.486822][ T820] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1054.550941][ T820] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1054.588264][ T820] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 1054.687291][ T820] usb 7-1: USB disconnect, device number 67 [ 1054.825697][ T5867] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 1054.943884][T13827] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2231'. [ 1054.989604][ T5867] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1054.989641][ T5867] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1054.989666][ T5867] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1054.989701][ T5867] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1054.989734][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.045180][ T5867] usb 5-1: config 0 descriptor?? [ 1055.544571][ T5734] usb 6-1: USB disconnect, device number 23 [ 1055.621624][ T5867] hid-steam 0003:28DE:1102.0008: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 1057.094809][T13847] netlink: 'syz.5.2237': attribute type 2 has an invalid length. [ 1057.094858][T13847] netlink: 'syz.5.2237': attribute type 1 has an invalid length. [ 1057.095087][T13847] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2237'. [ 1058.046731][T13847] kthread_run failed with err -4 [ 1058.326078][ T5867] usb 5-1: USB disconnect, device number 80 [ 1059.475448][T13855] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2240'. [ 1060.965704][T11871] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 1060.965815][ T821] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1061.045673][ T5867] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1061.119745][T11871] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1061.119796][T11871] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1061.119823][T11871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1061.119845][T11871] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1061.123182][ T821] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1061.123209][ T821] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.123229][ T821] usb 7-1: Product: syz [ 1061.123227][T11871] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1061.123243][ T821] usb 7-1: Manufacturer: syz [ 1061.123251][T11871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1061.123258][ T821] usb 7-1: SerialNumber: syz [ 1061.123272][T11871] usb 6-1: Product: syz [ 1061.123291][T11871] usb 6-1: Manufacturer: syz [ 1061.123304][T11871] usb 6-1: SerialNumber: syz [ 1061.205789][ T5867] usb 5-1: Using ep0 maxpacket: 32 [ 1061.216591][ T9372] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1061.224723][ T5867] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1061.224809][ T5867] usb 5-1: config 0 has no interface number 0 [ 1061.246526][ T5867] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1061.246602][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.246669][ T5867] usb 5-1: Product: syz [ 1061.246704][ T5867] usb 5-1: Manufacturer: syz [ 1061.246746][ T5867] usb 5-1: SerialNumber: syz [ 1061.296082][T11871] usb 6-1: config 0 descriptor?? [ 1061.305160][T11871] radio-si470x 6-1:0.0: could not find interrupt in endpoint [ 1061.305246][T11871] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 1061.322693][ T5867] usb 5-1: config 0 descriptor?? [ 1061.332176][T11871] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1061.356169][ T5867] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1061.375736][ T9372] usb 2-1: Using ep0 maxpacket: 8 [ 1061.377822][ T9372] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 1061.419355][ T9372] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1061.419383][ T9372] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.419398][ T9372] usb 2-1: Product: syz [ 1061.419408][ T9372] usb 2-1: Manufacturer: syz [ 1061.419418][ T9372] usb 2-1: SerialNumber: syz [ 1061.460219][ T9372] usb 2-1: config 0 descriptor?? [ 1061.489622][ T9372] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1061.489758][ T9372] usb 2-1: setting power ON [ 1061.493568][ T9372] dvb-usb: bulk message failed: -22 (2/0) [ 1061.594523][ T5867] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1061.672976][ T5867] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1061.706839][ T9372] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1061.707882][ T9372] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1061.707924][ T9372] usb 2-1: media controller created [ 1061.771110][ T821] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1061.771154][ T821] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1061.844336][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 6 [ 1061.864568][ T9372] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1061.953288][ T9372] usb 2-1: selecting invalid altsetting 6 [ 1061.953306][ T9372] usb 2-1: digital interface selection failed (-22) [ 1061.953317][ T9372] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1061.955340][ T9372] usb 2-1: setting power OFF [ 1062.003668][ T9372] dvb-usb: bulk message failed: -22 (2/0) [ 1062.003688][ T9372] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1062.003697][ T9372] (NULL device *): no alternate interface [ 1062.052385][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1062.072172][T11871] usb 5-1: USB disconnect, device number 81 [ 1062.130872][T11871] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1062.251418][T11871] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1062.253412][T11871] quatech2 5-1:0.51: device disconnected [ 1062.281708][ T821] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1062.281747][ T821] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1062.282326][ T821] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1062.331791][ T9372] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1062.343034][ T9372] usb 2-1: USB disconnect, device number 87 [ 1062.359826][ T821] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 1062.418334][ T821] usb 7-1: USB disconnect, device number 68 [ 1063.487758][T11871] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1064.050586][T11871] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1064.050617][T11871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.050637][T11871] usb 1-1: Product: syz [ 1064.050651][T11871] usb 1-1: Manufacturer: syz [ 1064.050666][T11871] usb 1-1: SerialNumber: syz [ 1064.129931][ T9372] usb 6-1: USB disconnect, device number 24 [ 1064.477422][T13891] tipc: Enabled bearer , priority 0 [ 1064.493322][T13891] syzkaller0: entered promiscuous mode [ 1064.493360][T13891] syzkaller0: entered allmulticast mode [ 1064.509437][T11871] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1064.509486][T11871] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1064.575226][T13891] sch_tbf: peakrate 11 is lower than or equals to rate 2048 ! [ 1064.928762][T13894] tipc: Resetting bearer [ 1064.957433][T13890] tipc: Resetting bearer [ 1065.098376][T13890] tipc: Disabling bearer [ 1065.995293][T13900] loop5: detected capacity change from 0 to 7 [ 1066.066507][T13900] Dev loop5: unable to read RDB block 7 [ 1066.066541][T13900] loop5: AHDI p1 [ 1066.066801][T13900] loop5: partition table partially beyond EOD, truncated [ 1066.192778][T11871] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1067.128238][T11871] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -EPROTO [ 1067.128642][T11871] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1067.128675][T11871] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1067.129215][T11871] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1067.209950][T11871] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1067.265770][T11871] usb 1-1: USB disconnect, device number 88 [ 1067.655711][ T9372] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 1067.858856][ T9372] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1067.858891][ T9372] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1067.858914][ T9372] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1067.858946][ T9372] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1067.858969][ T9372] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.870762][ T9372] usb 5-1: config 0 descriptor?? [ 1068.411838][ T9538] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1068.533349][ T9372] hid-steam 0003:28DE:1102.0009: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 1068.982110][T13929] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2261'. [ 1069.055812][ T9538] usb 6-1: Using ep0 maxpacket: 8 [ 1069.058587][ T9538] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1069.058643][ T9538] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1069.058668][ T9538] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1069.058694][ T9538] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1069.058727][ T9538] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1069.058771][ T9538] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1069.058795][ T9538] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.360782][ T9538] usb 6-1: GET_CAPABILITIES returned 0 [ 1069.360848][ T9538] usbtmc 6-1:16.0: can't read capabilities [ 1069.820861][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1070.083880][T13926] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 1070.108013][T11871] usb 6-1: USB disconnect, device number 25 [ 1070.533751][T11871] usb 5-1: USB disconnect, device number 82 [ 1070.845131][T13946] loop9: detected capacity change from 0 to 7 [ 1070.951253][T13946] Dev loop9: unable to read RDB block 7 [ 1070.951324][T13946] loop9: unable to read partition table [ 1070.951573][T13946] loop9: partition table beyond EOD, truncated [ 1070.951614][T13946] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1071.640066][T13950] netlink: set zone limit has 4 unknown bytes [ 1072.236365][ T821] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1073.563218][ T821] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1073.563275][ T821] usb 5-1: no configurations [ 1073.563283][ T821] usb 5-1: can't read configurations, error -22 [ 1074.027331][T11871] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1074.298847][T11871] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1074.298878][T11871] usb 6-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1074.298898][T11871] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1074.298943][T11871] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1074.300874][T11871] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1074.300901][T11871] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1074.300921][T11871] usb 6-1: Product: syz [ 1074.300935][T11871] usb 6-1: Manufacturer: syz [ 1074.461813][T13972] netlink: 'syz.0.2279': attribute type 2 has an invalid length. [ 1074.461861][T13972] netlink: 'syz.0.2279': attribute type 1 has an invalid length. [ 1074.462061][T13972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2279'. [ 1074.581622][T13972] 9p: Bad value for 'wfdno' [ 1075.308374][T11871] cdc_wdm 6-1:1.0: skipping garbage [ 1075.308395][T11871] cdc_wdm 6-1:1.0: skipping garbage [ 1075.308409][T11871] cdc_wdm 6-1:1.0: skipping garbage [ 1075.308445][T11871] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1075.513607][T11871] usb 6-1: USB disconnect, device number 26 [ 1075.786129][ T9538] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 1075.948003][ T9538] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1075.948037][ T9538] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1075.948069][ T9538] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1075.948092][ T9538] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1075.948109][ T9538] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.973062][ T9538] usb 2-1: config 0 descriptor?? [ 1076.983157][ T9538] hid-steam 0003:28DE:1102.000A: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 1077.208548][T13988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2280'. [ 1077.606167][ T8466] usb 7-1: new low-speed USB device number 69 using dummy_hcd [ 1077.869455][ T8466] usb 7-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 1077.869483][ T8466] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1077.869547][ T8466] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1077.869588][ T8466] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1077.869610][ T8466] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.943643][ T8466] hub 7-1:1.0: bad descriptor, ignoring hub [ 1077.943680][ T8466] hub 7-1:1.0: probe with driver hub failed with error -5 [ 1077.944626][ T8466] cdc_wdm 7-1:1.0: skipping garbage [ 1077.944643][ T8466] cdc_wdm 7-1:1.0: skipping garbage [ 1077.944673][ T8466] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1078.619137][ T9538] usb 2-1: USB disconnect, device number 88 [ 1079.136160][ T5867] usb 7-1: USB disconnect, device number 69 [ 1079.185655][ T9538] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1079.266596][ T821] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1079.352107][ T9538] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1079.352141][ T9538] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.352162][ T9538] usb 2-1: Product: syz [ 1079.352178][ T9538] usb 2-1: Manufacturer: syz [ 1079.352194][ T9538] usb 2-1: SerialNumber: syz [ 1080.164620][ T821] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1080.164648][ T821] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1080.164667][ T821] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1080.164717][ T821] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 1080.164742][ T821] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 1080.164767][ T821] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 1080.231336][ T821] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1080.231367][ T821] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1080.231386][ T821] usb 5-1: Product: syz [ 1080.231400][ T821] usb 5-1: Manufacturer: syz [ 1080.287252][ T821] cdc_wdm 5-1:1.0: skipping garbage [ 1080.287272][ T821] cdc_wdm 5-1:1.0: skipping garbage [ 1080.287371][ T821] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1080.593771][ T8466] usb 5-1: USB disconnect, device number 85 [ 1080.790367][ T9538] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1080.790501][ T9538] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1080.934812][T14027] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2298'. [ 1081.161750][T14031] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2299'. [ 1082.360496][ T9538] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1082.802141][ T9538] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -EPROTO [ 1082.802652][ T9538] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1082.802705][ T9538] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1082.803909][ T9538] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1082.870599][ T9538] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1082.915839][ T9538] usb 2-1: USB disconnect, device number 89 [ 1085.166702][ T821] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1085.327234][ T821] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1085.327275][ T821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.327297][ T821] usb 1-1: Product: syz [ 1085.327312][ T821] usb 1-1: Manufacturer: syz [ 1085.327326][ T821] usb 1-1: SerialNumber: syz [ 1085.786141][ T821] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1085.786211][ T821] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1085.965717][ T9538] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1085.992794][T14086] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2319'. [ 1086.071580][T14086] netlink: 124 bytes leftover after parsing attributes in process `syz.6.2319'. [ 1086.115663][ T9538] usb 2-1: Using ep0 maxpacket: 16 [ 1086.119707][ T9538] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1086.124745][ T9538] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1086.124772][ T9538] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.124886][ T9538] usb 2-1: Product: syz [ 1086.124901][ T9538] usb 2-1: Manufacturer: syz [ 1086.124916][ T9538] usb 2-1: SerialNumber: syz [ 1086.201130][ T9538] usb 2-1: config 0 descriptor?? [ 1086.253311][ T9538] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1086.253344][ T9538] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 1086.876665][ T821] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1086.876726][ T821] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1086.877673][ T821] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1086.962738][ T821] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1087.011990][ T821] usb 1-1: USB disconnect, device number 89 [ 1087.305118][ T9538] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1087.595630][ T821] usb 7-1: new full-speed USB device number 70 using dummy_hcd [ 1087.769864][ T821] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1087.769897][ T821] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1087.769920][ T821] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1087.769953][ T821] usb 7-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1087.769975][ T821] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.933497][ T821] usb 7-1: config 0 descriptor?? [ 1087.944303][ T9538] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1087.944330][ T9538] em28xx 2-1:0.0: board has no eeprom [ 1088.665682][ T9538] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1088.665711][ T9538] em28xx 2-1:0.0: dvb set to bulk mode. [ 1088.669641][ T10] em28xx 2-1:0.0: Binding DVB extension [ 1088.737986][ T9538] usb 2-1: USB disconnect, device number 90 [ 1088.867095][ T9538] em28xx 2-1:0.0: Disconnecting em28xx [ 1089.002041][ T10] em28xx 2-1:0.0: Registering input extension [ 1089.037916][ T9538] em28xx 2-1:0.0: Closing input extension [ 1089.108805][ T821] hid-steam 0003:28DE:1102.000B: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.6-1/input0 [ 1089.139155][ T821] usb 7-1: USB disconnect, device number 70 [ 1089.176600][T14108] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2326'. [ 1089.266634][ T9538] em28xx 2-1:0.0: Freeing device [ 1089.296089][T14106] fido_id[14106]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 1091.142819][T14132] netlink: 'syz.5.2332': attribute type 2 has an invalid length. [ 1091.142841][T14132] netlink: 'syz.5.2332': attribute type 1 has an invalid length. [ 1091.142871][T14132] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2332'. [ 1091.149789][T14132] 9p: Bad value for 'wfdno' [ 1092.288062][T14130] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2333'. [ 1092.685654][ T820] usb 6-1: new low-speed USB device number 27 using dummy_hcd [ 1092.795170][T14144] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2339'. [ 1092.883792][ T820] usb 6-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 1092.883818][ T820] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1092.883859][ T820] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1092.883898][ T820] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1092.883920][ T820] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.957967][ T820] hub 6-1:1.0: bad descriptor, ignoring hub [ 1092.957997][T14148] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2340'. [ 1092.958004][ T820] hub 6-1:1.0: probe with driver hub failed with error -5 [ 1092.959239][ T820] cdc_wdm 6-1:1.0: skipping garbage [ 1092.959255][ T820] cdc_wdm 6-1:1.0: skipping garbage [ 1092.959282][ T820] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1093.084034][T14148] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.084441][T14148] bridge0: port 1(bridge_slave_0) entered disabled state [ 1093.215752][ T821] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 1093.266023][ T820] usb 6-1: USB disconnect, device number 27 [ 1093.377521][ T821] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1093.377584][ T821] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1093.377613][ T821] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1093.377641][ T821] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1093.379940][ T821] usb 2-1: New USB device found, idVendor=0525, idProduct=aea1, bcdDevice= 0.1c [ 1093.379968][ T821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.379988][ T821] usb 2-1: Product: syz [ 1093.380002][ T821] usb 2-1: Manufacturer: syz [ 1093.380016][ T821] usb 2-1: SerialNumber: syz [ 1093.557442][T14146] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1093.564223][ T821] cdc_mbim 2-1:1.0: skipping garbage [ 1093.564252][ T821] usb 2-1: selecting invalid altsetting 1 [ 1094.036687][ T821] cdc_mbim 2-1:1.0: failed GET_NTB_PARAMETERS [ 1094.036763][ T821] cdc_mbim 2-1:1.0: bind() failure [ 1094.045035][ T821] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1094.045077][ T821] cdc_ncm 2-1:1.1: bind() failure [ 1094.115369][ T821] usb 2-1: USB disconnect, device number 91 [ 1094.215648][T11871] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1094.345782][T11871] usb 7-1: device descriptor read/64, error -71 [ 1094.607014][T11871] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1094.755615][T11871] usb 7-1: device descriptor read/64, error -71 [ 1094.866017][T11871] usb usb7-port1: attempt power cycle [ 1095.205667][T11871] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1095.226367][T11871] usb 7-1: device descriptor read/8, error -71 [ 1095.333732][T14175] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2351'. [ 1095.545654][T11871] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1095.567012][T11871] usb 7-1: device descriptor read/8, error -71 [ 1095.678222][T11871] usb usb7-port1: unable to enumerate USB device [ 1096.555649][T11871] usb 1-1: new low-speed USB device number 90 using dummy_hcd [ 1096.661183][T14193] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2359'. [ 1096.662702][T14193] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.662982][T14193] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.717489][T11871] usb 1-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 1096.717518][T11871] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1096.717572][T11871] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1096.717603][T11871] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1096.717620][T11871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.787901][T11871] hub 1-1:1.0: bad descriptor, ignoring hub [ 1096.787927][T11871] hub 1-1:1.0: probe with driver hub failed with error -5 [ 1096.788555][T11871] cdc_wdm 1-1:1.0: skipping garbage [ 1096.788564][T11871] cdc_wdm 1-1:1.0: skipping garbage [ 1096.788586][T11871] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1097.088403][ T8466] usb 1-1: USB disconnect, device number 90 [ 1097.253297][T14199] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2363'. [ 1097.289383][T14199] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2363'. [ 1097.474731][T14203] netlink: set zone limit has 4 unknown bytes [ 1097.516393][T14208] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2365'. [ 1097.978723][T14214] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2368'. [ 1099.825649][T14021] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 1100.000266][T14021] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.000319][T14021] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1100.000349][T14021] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1100.000368][T14021] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1100.000384][T14021] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1100.003090][T14021] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1100.003120][T14021] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1100.003142][T14021] usb 6-1: Product: syz [ 1100.003158][T14021] usb 6-1: Manufacturer: syz [ 1100.003174][T14021] usb 6-1: SerialNumber: syz [ 1100.111205][T14021] usb 6-1: config 0 descriptor?? [ 1100.341301][T14021] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1100.342650][T14021] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 1100.512279][T14021] usb 6-1: USB disconnect, device number 28 [ 1101.869016][T14249] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2377'. [ 1102.255668][ T8466] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1102.405694][ T8466] usb 5-1: Using ep0 maxpacket: 32 [ 1102.407571][ T8466] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1102.407594][ T8466] usb 5-1: config 0 has no interface number 0 [ 1102.412506][ T8466] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1102.412532][ T8466] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.412551][ T8466] usb 5-1: Product: syz [ 1102.412566][ T8466] usb 5-1: Manufacturer: syz [ 1102.412583][ T8466] usb 5-1: SerialNumber: syz [ 1102.465924][ T8466] usb 5-1: config 0 descriptor?? [ 1102.492171][ T8466] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1102.579052][T14259] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2383'. [ 1102.793075][ T8466] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1102.865660][ T9372] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1102.917904][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 6 [ 1102.944198][ T8466] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1103.015557][ T9372] usb 6-1: Using ep0 maxpacket: 16 [ 1103.019451][ T9372] usb 6-1: config 0 has no interfaces? [ 1103.043475][ T9372] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1103.043501][ T9372] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.043523][ T9372] usb 6-1: Product: syz [ 1103.043532][ T9372] usb 6-1: Manufacturer: syz [ 1103.043542][ T9372] usb 6-1: SerialNumber: syz [ 1103.103827][ T9372] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1103.103851][ T9372] r8152-cfgselector 6-1: config 0 descriptor?? [ 1103.219408][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1103.220214][ T8466] usb 5-1: USB disconnect, device number 86 [ 1103.347300][ T8466] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1103.467887][ T8466] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1103.468020][ T9372] r8152-cfgselector 6-1: USB disconnect, device number 29 [ 1103.475279][ T8466] quatech2 5-1:0.51: device disconnected [ 1103.655712][ T821] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1103.807538][ T821] usb 2-1: Using ep0 maxpacket: 16 [ 1103.812741][ T821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1103.833295][ T821] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1103.833323][ T821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.833345][ T821] usb 2-1: Product: syz [ 1103.833359][ T821] usb 2-1: Manufacturer: syz [ 1103.833374][ T821] usb 2-1: SerialNumber: syz [ 1103.876256][ T821] usb 2-1: config 0 descriptor?? [ 1103.903325][ T821] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1103.904231][ T821] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 1104.531592][ T821] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1104.750840][T14285] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2391'. [ 1105.370049][T14286] kthread_run failed with err -4 [ 1105.682621][T14276] netlink: set zone limit has 4 unknown bytes [ 1105.748985][ T821] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1105.749007][ T821] em28xx 2-1:0.0: board has no eeprom [ 1105.855762][ T821] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1105.855789][ T821] em28xx 2-1:0.0: dvb set to bulk mode. [ 1105.856123][ T9538] em28xx 2-1:0.0: Binding DVB extension [ 1105.904860][ T821] usb 2-1: USB disconnect, device number 92 [ 1105.921638][ T821] em28xx 2-1:0.0: Disconnecting em28xx [ 1106.065879][ T9538] em28xx 2-1:0.0: Registering input extension [ 1106.072432][ T821] em28xx 2-1:0.0: Closing input extension [ 1106.664349][ T821] em28xx 2-1:0.0: Freeing device [ 1106.965634][T14021] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 1107.123858][T14021] usb 5-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 1107.123893][T14021] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.123916][T14021] usb 5-1: Product: syz [ 1107.123932][T14021] usb 5-1: Manufacturer: syz [ 1107.123949][T14021] usb 5-1: SerialNumber: syz [ 1107.457852][T14021] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1107.575751][T14021] usb 5-1: USB disconnect, device number 87 [ 1107.728472][ T5599] udevd[5599]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1108.302477][T14317] could not allocate digest TFM handle -q4O(0&qf=*΀j$;}'jO [ 1108.726107][ T5339] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1109.016331][ T5339] usb 5-1: device descriptor read/64, error -71 [ 1109.261926][T14321] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2404'. [ 1109.505912][ T5339] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1109.644698][T14321] netlink: 'syz.5.2404': attribute type 28 has an invalid length. [ 1109.644720][T14321] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2404'. [ 1109.663051][ T5339] usb 5-1: device descriptor read/64, error -71 [ 1109.663447][T14321] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2404'. [ 1109.663478][T14321] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2404'. [ 1109.766053][ T5339] usb usb5-port1: attempt power cycle [ 1110.136268][ T5339] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1110.156303][ T5339] usb 5-1: device descriptor read/8, error -71 [ 1110.309582][T14331] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2408'. [ 1110.395672][ T5339] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1110.416323][ T5339] usb 5-1: device descriptor read/8, error -71 [ 1110.530048][ T5339] usb usb5-port1: unable to enumerate USB device [ 1110.885619][ T5339] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1111.035603][ T5339] usb 2-1: Using ep0 maxpacket: 16 [ 1111.037527][ T5339] usb 2-1: config 252 has an invalid interface number: 15 but max is 0 [ 1111.037555][ T5339] usb 2-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 1111.037578][ T5339] usb 2-1: config 252 has no interface number 0 [ 1111.037659][ T5339] usb 2-1: config 252 interface 15 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1111.040159][ T5339] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 1111.040186][ T5339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.040207][ T5339] usb 2-1: Product: syz [ 1111.040226][ T5339] usb 2-1: Manufacturer: syz [ 1111.040237][ T5339] usb 2-1: SerialNumber: syz [ 1111.102205][T11871] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 1111.144050][ T5339] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1111.260224][ T55] usb 2-1: Failed to submit usb control message: -71 [ 1111.260264][ T55] usb 2-1: unable to send the bmi data to the device: -71 [ 1111.260285][ T55] usb 2-1: unable to get target info from device [ 1111.260303][ T55] usb 2-1: could not get target info (-71) [ 1111.260323][ T55] usb 2-1: could not probe fw (-71) [ 1111.260808][ T5339] usb 2-1: USB disconnect, device number 93 [ 1111.319877][T11871] usb 1-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 1111.319907][T11871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.319927][T11871] usb 1-1: Product: syz [ 1111.319941][T11871] usb 1-1: Manufacturer: syz [ 1111.319956][T11871] usb 1-1: SerialNumber: syz [ 1111.674007][T11871] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1111.741249][T11871] usb 1-1: USB disconnect, device number 91 [ 1111.785620][ T9372] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 1111.944410][ T9372] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1111.944444][ T9372] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.944467][ T9372] usb 7-1: Product: syz [ 1111.944483][ T9372] usb 7-1: Manufacturer: syz [ 1111.944500][ T9372] usb 7-1: SerialNumber: syz [ 1111.994703][ T5597] udevd[5597]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1113.178139][ T9372] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1113.178200][ T9372] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1113.637789][T14368] Invalid argument reading file caps for ./file0 [ 1113.950737][ T821] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1114.079103][T14375] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2421'. [ 1114.108341][ T821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1114.108462][ T821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1114.108486][ T821] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1114.108527][ T821] usb 2-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 1114.108601][ T821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.174574][ T821] usb 2-1: config 0 descriptor?? [ 1114.608906][ T821] playstation 0003:054C:09CC.000C: unknown main item tag 0x0 [ 1114.608941][ T821] playstation 0003:054C:09CC.000C: unknown main item tag 0x0 [ 1114.608969][ T821] playstation 0003:054C:09CC.000C: unknown main item tag 0x0 [ 1114.608995][ T821] playstation 0003:054C:09CC.000C: unknown main item tag 0x0 [ 1114.609065][ T821] playstation 0003:054C:09CC.000C: unknown main item tag 0x0 [ 1114.609089][ T821] playstation 0003:054C:09CC.000C: unknown main item tag 0x0 [ 1114.709848][ T821] playstation 0003:054C:09CC.000C: hidraw0: USB HID vff.fd Device [HID 054c:09cc] on usb-dummy_hcd.1-1/input0 [ 1114.789305][ T9372] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 1114.791316][ T9372] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1114.791839][ T9372] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1114.791900][ T9372] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1114.792862][ T9372] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1114.867318][ T821] playstation 0003:054C:09CC.000C: Failed to retrieve feature with reportID 18: -71 [ 1114.867348][ T821] playstation 0003:054C:09CC.000C: Failed to retrieve DualShock4 pairing info: -71 [ 1114.867399][ T821] playstation 0003:054C:09CC.000C: Failed to get MAC address from DualShock4 [ 1114.867435][ T821] playstation 0003:054C:09CC.000C: Failed to create dualshock4. [ 1114.868372][ T9372] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 1114.979408][ T9372] usb 7-1: USB disconnect, device number 75 [ 1115.027586][ T821] playstation 0003:054C:09CC.000C: probe with driver playstation failed with error -71 [ 1115.076229][ T9294] udevd[9294]: setting mode of /dev/bus/usb/007/075 to 020664 failed: No such file or directory [ 1115.076442][ T9294] udevd[9294]: setting owner of /dev/bus/usb/007/075 to uid=0, gid=0 failed: No such file or directory [ 1115.077371][T14385] could not allocate digest TFM handle -q4O(0&qf=*΀j$;}'jO [ 1115.122781][ T821] usb 2-1: USB disconnect, device number 94 [ 1115.206078][ T5867] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1115.355604][ T5867] usb 6-1: Using ep0 maxpacket: 32 [ 1115.359137][ T5867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1115.359178][ T5867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1115.359224][ T5867] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1115.359257][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.374269][ T9538] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1115.426925][ T5867] usb 6-1: config 0 descriptor?? [ 1115.545673][ T9538] usb 5-1: device descriptor read/64, error -71 [ 1115.816069][ T9538] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1115.874792][ T5867] savu 0003:1E7D:2D5A.000D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 1115.895619][ T9372] usb 7-1: new full-speed USB device number 76 using dummy_hcd [ 1115.948498][ T9538] usb 5-1: device descriptor read/64, error -71 [ 1116.025645][ T10] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 1116.048874][ T9372] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1116.048908][ T9372] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1116.048932][ T9372] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1116.048965][ T9372] usb 7-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1116.048989][ T9372] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.056060][ T9538] usb usb5-port1: attempt power cycle [ 1116.111985][ T9372] usb 7-1: config 0 descriptor?? [ 1116.115323][T11871] usb 6-1: USB disconnect, device number 30 [ 1116.201918][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1116.201956][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1116.201974][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1116.201992][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1116.202007][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1116.204781][ T10] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1116.204802][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1116.204816][ T10] usb 2-1: Product: syz [ 1116.204827][ T10] usb 2-1: Manufacturer: syz [ 1116.204852][ T10] usb 2-1: SerialNumber: syz [ 1116.319775][ T10] usb 2-1: config 0 descriptor?? [ 1116.415657][ T9538] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1116.436982][ T9538] usb 5-1: device descriptor read/8, error -71 [ 1116.556883][ T10] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1116.556911][ T10] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1116.565228][ T9372] hid-steam 0003:28DE:1102.000E: unknown main item tag 0x0 [ 1116.565254][ T9372] hid-steam 0003:28DE:1102.000E: unknown main item tag 0x0 [ 1116.565273][ T9372] hid-steam 0003:28DE:1102.000E: unknown main item tag 0x0 [ 1116.565295][ T9372] hid-steam 0003:28DE:1102.000E: unknown main item tag 0x0 [ 1116.675932][ T9372] hid-steam 0003:28DE:1102.000E: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.6-1/input0 [ 1116.697235][ T9538] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1116.724973][ T9538] usb 5-1: device descriptor read/8, error -71 [ 1116.755630][ T10] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1116.755654][ T10] radio-si470x 2-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 1116.755943][ T10] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 1116.760191][ C0] raw-gadget.3 gadget.1: ignoring, device is not running [ 1116.760734][ C0] raw-gadget.3 gadget.1: ignoring, device is not running [ 1116.808734][T11871] usb 7-1: USB disconnect, device number 76 [ 1116.825891][ T9538] usb usb5-port1: unable to enumerate USB device [ 1116.880450][T14395] fido_id[14395]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 1116.903343][ T10] usb 2-1: USB disconnect, device number 95 [ 1118.623656][T14412] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2434'. [ 1118.623696][T14412] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2434'. [ 1118.632475][T14410] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2432'. [ 1118.725680][ T9538] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1118.738492][T11871] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1118.896477][T11871] usb 6-1: Using ep0 maxpacket: 16 [ 1118.901269][T11871] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1118.901308][T11871] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1118.904363][T11871] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1118.904390][T11871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.904420][T11871] usb 6-1: Product: syz [ 1118.904434][T11871] usb 6-1: Manufacturer: syz [ 1118.904449][T11871] usb 6-1: SerialNumber: syz [ 1118.982076][T11871] usb 6-1: 0:2 : does not exist [ 1119.189445][T11871] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1119.262215][ T9538] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1119.262369][ T9538] usb 2-1: no configurations [ 1119.262385][ T9538] usb 2-1: can't read configurations, error -22 [ 1119.319554][T11871] usb 6-1: USB disconnect, device number 31 [ 1119.488850][ T9295] udevd[9295]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1120.347163][T11871] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 1120.824637][T11871] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1120.837673][T11871] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1120.838158][T11871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1120.838720][T11871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1120.838837][T11871] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1121.169911][T11871] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1121.169946][T11871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1121.169969][T11871] usb 6-1: Product: syz [ 1121.169986][T11871] usb 6-1: Manufacturer: syz [ 1121.170002][T11871] usb 6-1: SerialNumber: syz [ 1121.266668][T14439] could not allocate digest TFM handle -q4O(0&qf=*΀j$;}'jO [ 1121.461245][T11871] usb 6-1: config 0 descriptor?? [ 1121.684391][T11871] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1121.684418][T11871] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1121.705657][ T9372] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 1121.826488][T14443] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2445'. [ 1121.845714][ T9372] usb 7-1: device descriptor read/64, error -71 [ 1121.882965][T11871] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1121.882988][T11871] radio-si470x 6-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 1121.883265][T11871] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 1121.947860][T11871] usb 6-1: USB disconnect, device number 32 [ 1122.095838][ T9372] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 1122.247656][ T9372] usb 7-1: device descriptor read/64, error -71 [ 1122.357488][ T9372] usb usb7-port1: attempt power cycle [ 1122.697076][ T9372] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 1122.718222][ T9372] usb 7-1: device descriptor read/8, error -71 [ 1122.835793][ T8466] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1122.965685][ T9372] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 1122.987220][ T9372] usb 7-1: device descriptor read/8, error -71 [ 1123.058468][ T10] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1123.095212][ T8466] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1123.095297][ T8466] usb 5-1: no configurations [ 1123.095313][ T8466] usb 5-1: can't read configurations, error -22 [ 1123.114763][ T9372] usb usb7-port1: unable to enumerate USB device [ 1123.215550][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1123.220182][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1123.220208][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1123.223643][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1123.223683][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.223706][ T10] usb 6-1: Product: syz [ 1123.223723][ T10] usb 6-1: Manufacturer: syz [ 1123.223739][ T10] usb 6-1: SerialNumber: syz [ 1123.313470][ T10] usb 6-1: 0:2 : does not exist [ 1123.500998][ T10] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1123.582962][ T10] usb 6-1: USB disconnect, device number 33 [ 1123.674241][ T9295] udevd[9295]: setting mode of /dev/bus/usb/006/033 to 020664 failed: No such file or directory [ 1123.674379][ T9295] udevd[9295]: setting owner of /dev/bus/usb/006/033 to uid=0, gid=0 failed: No such file or directory [ 1123.766521][ T9295] udevd[9295]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1123.866595][T14465] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2453'. [ 1124.112334][T14465] netlink: 'syz.1.2453': attribute type 28 has an invalid length. [ 1124.112357][T14465] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2453'. [ 1126.067818][T14486] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2458'. [ 1126.547360][T14475] kthread_run failed with err -4 [ 1131.041496][T14519] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2470'. [ 1131.349325][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1133.565662][ T5611] Bluetooth: hci4: command 0x0406 tx timeout [ 1134.008640][T14534] Invalid argument reading file caps for ./file0 [ 1134.215615][ T9372] usb 7-1: new full-speed USB device number 81 using dummy_hcd [ 1134.245716][ T8466] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1134.383719][ T9372] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1134.383759][ T9372] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1134.383779][ T9372] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1134.383799][ T9372] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1134.383816][ T9372] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1134.445440][ T9372] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1134.445705][ T9372] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1134.445729][ T9372] usb 7-1: Product: syz [ 1134.445744][ T9372] usb 7-1: Manufacturer: syz [ 1134.445760][ T9372] usb 7-1: SerialNumber: syz [ 1134.489599][ T9372] usb 7-1: config 0 descriptor?? [ 1134.497438][ T8466] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1134.497528][ T8466] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1134.497596][ T8466] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1134.497703][ T8466] usb 5-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 1134.497776][ T8466] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.558282][ T8466] usb 5-1: config 0 descriptor?? [ 1134.717332][ T9372] radio-si470x 7-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1134.717361][ T9372] radio-si470x 7-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1134.910622][T14542] capability: warning: `syz.0.2479' uses 32-bit capabilities (legacy support in use) [ 1134.925531][ T9372] radio-si470x 7-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1134.925554][ T9372] radio-si470x 7-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 1134.925821][ T9372] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -5 [ 1134.964214][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 1134.964597][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 1135.001753][T11871] usb 7-1: USB disconnect, device number 81 [ 1135.042722][ T8466] hid_parser_main: 1 callbacks suppressed [ 1135.042740][ T8466] playstation 0003:054C:09CC.000F: unknown main item tag 0x0 [ 1135.042760][ T8466] playstation 0003:054C:09CC.000F: unknown main item tag 0x0 [ 1135.042778][ T8466] playstation 0003:054C:09CC.000F: unknown main item tag 0x0 [ 1135.042795][ T8466] playstation 0003:054C:09CC.000F: unknown main item tag 0x0 [ 1135.042813][ T8466] playstation 0003:054C:09CC.000F: unknown main item tag 0x0 [ 1135.042830][ T8466] playstation 0003:054C:09CC.000F: unknown main item tag 0x0 [ 1135.112974][ T8466] playstation 0003:054C:09CC.000F: hidraw0: USB HID vff.fd Device [HID 054c:09cc] on usb-dummy_hcd.4-1/input0 [ 1135.225082][ T8466] playstation 0003:054C:09CC.000F: Invalid reportID received, expected 18 got 56 [ 1135.225111][ T8466] playstation 0003:054C:09CC.000F: Failed to retrieve DualShock4 pairing info: -22 [ 1135.225161][ T8466] playstation 0003:054C:09CC.000F: Failed to get MAC address from DualShock4 [ 1135.225178][ T8466] playstation 0003:054C:09CC.000F: Failed to create dualshock4. [ 1135.290128][ T8466] playstation 0003:054C:09CC.000F: probe with driver playstation failed with error -22 [ 1135.474838][T11871] usb 5-1: USB disconnect, device number 98 [ 1135.829021][T14556] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2484'. [ 1138.058148][T14596] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2498'. [ 1138.605627][ T8466] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 1138.769254][ T8466] usb 6-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 1138.769288][ T8466] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.769311][ T8466] usb 6-1: Product: syz [ 1138.769326][ T8466] usb 6-1: Manufacturer: syz [ 1138.769342][ T8466] usb 6-1: SerialNumber: syz [ 1139.313657][T14612] syzkaller0: entered promiscuous mode [ 1139.313712][T14612] syzkaller0: entered allmulticast mode [ 1139.565121][T14612] tipc: Started in network mode [ 1139.565151][T14612] tipc: Node identity 1eef8dde51c1, cluster identity 4711 [ 1139.618617][T14612] tipc: Enabled bearer , priority 0 [ 1139.732350][T14611] tipc: Resetting bearer [ 1139.806101][ T8466] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1139.980566][T14611] tipc: Disabling bearer [ 1140.039019][ T8466] usb 6-1: USB disconnect, device number 34 [ 1140.355284][ T5597] udevd[5597]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1140.536724][T14631] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2512'. [ 1140.735608][T14021] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 1140.808570][T14638] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2514'. [ 1140.969399][T14021] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1140.969500][T14021] usb 7-1: no configurations [ 1140.969514][T14021] usb 7-1: can't read configurations, error -22 [ 1141.459104][T14643] 9p: Bad value for 'rfdno' [ 1141.650243][ T36] audit: type=1326 audit(1780114912.832:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14642 comm="syz.5.2516" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff66c30ce59 code=0x0 [ 1141.827918][T14648] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2518'. [ 1143.304258][T14676] syzkaller0: entered promiscuous mode [ 1143.304285][T14676] syzkaller0: entered allmulticast mode [ 1143.552765][T14689] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2533'. [ 1143.815625][T11871] usb 1-1: new full-speed USB device number 92 using dummy_hcd [ 1143.927927][T14021] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 1143.977938][T11871] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1143.977988][T11871] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1143.978018][T11871] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1144.035441][T11871] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1144.036208][T11871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.036231][T11871] usb 1-1: Product: syz [ 1144.036247][T11871] usb 1-1: Manufacturer: syz [ 1144.036262][T11871] usb 1-1: SerialNumber: syz [ 1144.507477][T14684] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1144.508026][T14684] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1144.546512][T14021] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1144.546600][T14021] usb 7-1: no configurations [ 1144.546616][T14021] usb 7-1: can't read configurations, error -22 [ 1145.163997][T14684] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1145.164156][T14684] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1145.549886][T11871] cdc_ncm 1-1:1.0: failed to get mac address [ 1145.550356][T11871] cdc_ncm 1-1:1.0: bind() failure [ 1145.612649][T11871] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1145.614737][T11871] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1145.627032][T11871] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 1145.664470][T11871] usb 1-1: USB disconnect, device number 92 [ 1147.251496][T14717] 9p: Bad value for 'rfdno' [ 1147.450077][ T36] audit: type=1326 audit(1780114918.642:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14715 comm="syz.6.2546" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97c8b6ce59 code=0x0 [ 1150.098380][T14758] Invalid argument reading file caps for ./file0 [ 1150.335700][ T9372] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1150.503292][ T9372] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1150.503327][ T9372] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1150.503353][ T9372] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1150.503396][ T9372] usb 1-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 1150.503422][ T9372] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.566155][ T9372] usb 1-1: config 0 descriptor?? [ 1150.735791][ T5867] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1150.896399][ T5867] usb 6-1: Using ep0 maxpacket: 16 [ 1150.901685][ T5867] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1150.923818][ T5867] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1150.923849][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.923923][ T5867] usb 6-1: Product: syz [ 1150.923939][ T5867] usb 6-1: Manufacturer: syz [ 1150.923955][ T5867] usb 6-1: SerialNumber: syz [ 1150.976215][ T5867] usb 6-1: config 0 descriptor?? [ 1151.022337][ T9372] playstation 0003:054C:09CC.0010: unknown main item tag 0x0 [ 1151.022394][ T9372] playstation 0003:054C:09CC.0010: unknown main item tag 0x0 [ 1151.022423][ T9372] playstation 0003:054C:09CC.0010: unknown main item tag 0x0 [ 1151.022453][ T9372] playstation 0003:054C:09CC.0010: unknown main item tag 0x0 [ 1151.022481][ T9372] playstation 0003:054C:09CC.0010: unknown main item tag 0x0 [ 1151.022538][ T9372] playstation 0003:054C:09CC.0010: unknown main item tag 0x0 [ 1151.079084][ T9372] playstation 0003:054C:09CC.0010: hidraw0: USB HID vff.fd Device [HID 054c:09cc] on usb-dummy_hcd.0-1/input0 [ 1151.196050][ T9372] playstation 0003:054C:09CC.0010: Invalid reportID received, expected 18 got 56 [ 1151.196080][ T9372] playstation 0003:054C:09CC.0010: Failed to retrieve DualShock4 pairing info: -22 [ 1151.196133][ T9372] playstation 0003:054C:09CC.0010: Failed to get MAC address from DualShock4 [ 1151.196152][ T9372] playstation 0003:054C:09CC.0010: Failed to create dualshock4. [ 1151.269295][ T9372] playstation 0003:054C:09CC.0010: probe with driver playstation failed with error -22 [ 1151.408368][ T820] usb 1-1: USB disconnect, device number 93 [ 1151.925742][ T820] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1152.076456][ T820] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1152.077609][ T820] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1152.077659][ T820] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1152.077685][ T820] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1152.079002][ T820] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1152.079060][ T820] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1152.079081][ T820] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1152.080190][ T820] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1152.080242][ T820] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1152.080293][ T820] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1152.081476][ T820] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1152.081529][ T820] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1152.081559][ T820] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1152.082760][ T820] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1152.082811][ T820] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1152.082839][ T820] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1152.083943][ T820] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1152.083995][ T820] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1152.084014][ T820] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1152.085102][ T820] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1152.085154][ T820] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1152.085183][ T820] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1152.205756][ T820] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1152.205816][ T820] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1152.205846][ T820] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1152.243330][ T820] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1152.243429][ T820] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1152.243493][ T820] usb 5-1: Product: syz [ 1152.243535][ T820] usb 5-1: Manufacturer: syz [ 1152.244359][ T820] usb 5-1: SerialNumber: syz [ 1152.335421][ T820] usb 5-1: config 0 descriptor?? [ 1152.412329][ T820] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 1152.855854][ T5867] usb 5-1: USB disconnect, device number 99 [ 1152.896008][ T5867] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 1153.645664][T14802] 9p: Bad value for 'rfdno' [ 1153.859183][ T820] usb 6-1: USB disconnect, device number 35 [ 1156.965269][ T5867] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1157.107903][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1157.107939][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1157.107964][ T5867] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1157.108008][ T5867] usb 5-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 1157.108034][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.113657][ T5867] usb 5-1: config 0 descriptor?? [ 1157.463396][T14835] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2589'. [ 1157.567219][ T5867] playstation 0003:054C:09CC.0011: unknown main item tag 0x0 [ 1157.567252][ T5867] playstation 0003:054C:09CC.0011: unknown main item tag 0x0 [ 1157.567278][ T5867] playstation 0003:054C:09CC.0011: unknown main item tag 0x0 [ 1157.567302][ T5867] playstation 0003:054C:09CC.0011: unknown main item tag 0x0 [ 1157.567327][ T5867] playstation 0003:054C:09CC.0011: unknown main item tag 0x0 [ 1157.567351][ T5867] playstation 0003:054C:09CC.0011: unknown main item tag 0x0 [ 1157.635685][ T5867] playstation 0003:054C:09CC.0011: hidraw0: USB HID vff.fd Device [HID 054c:09cc] on usb-dummy_hcd.4-1/input0 [ 1157.685612][ T9372] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 1157.767758][ T5867] playstation 0003:054C:09CC.0011: Invalid reportID received, expected 18 got 56 [ 1157.767785][ T5867] playstation 0003:054C:09CC.0011: Failed to retrieve DualShock4 pairing info: -22 [ 1157.767834][ T5867] playstation 0003:054C:09CC.0011: Failed to get MAC address from DualShock4 [ 1157.767849][ T5867] playstation 0003:054C:09CC.0011: Failed to create dualshock4. [ 1157.832382][ T5867] playstation 0003:054C:09CC.0011: probe with driver playstation failed with error -22 [ 1157.860518][ T9372] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1157.860547][ T9372] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.860568][ T9372] usb 7-1: Product: syz [ 1157.860582][ T9372] usb 7-1: Manufacturer: syz [ 1157.860597][ T9372] usb 7-1: SerialNumber: syz [ 1158.027080][ T820] usb 5-1: USB disconnect, device number 100 [ 1158.324024][ T9372] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1158.324089][ T9372] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1158.765617][ T820] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1158.920924][ T820] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1158.920970][ T820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.920990][ T820] usb 6-1: Product: syz [ 1158.921006][ T820] usb 6-1: Manufacturer: syz [ 1158.921021][ T820] usb 6-1: SerialNumber: syz [ 1159.346852][ T9372] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 1159.346914][ T9372] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1159.347820][ T9372] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1159.423020][ T9372] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 1159.424280][ T820] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1159.424340][ T820] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1159.480299][ T9372] usb 7-1: USB disconnect, device number 86 [ 1160.656222][ T820] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1160.658964][ T820] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1160.665903][ T820] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1160.666066][ T820] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1160.671327][ T820] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1160.745321][ T820] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1160.835371][ T820] usb 6-1: USB disconnect, device number 36 [ 1162.095656][ T5867] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 1162.225702][ T5867] usb 7-1: device descriptor read/64, error -71 [ 1162.466444][ T5867] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 1162.618552][ T5867] usb 7-1: device descriptor read/64, error -71 [ 1162.726071][ T5867] usb usb7-port1: attempt power cycle [ 1162.786242][T14938] Invalid argument reading file caps for ./file0 [ 1163.091327][ T5867] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 1163.106361][ T5867] usb 7-1: device descriptor read/8, error -71 [ 1163.345683][ T5867] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 1163.366439][ T5867] usb 7-1: device descriptor read/8, error -71 [ 1163.455662][T11871] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1163.475899][ T5867] usb usb7-port1: unable to enumerate USB device [ 1163.615344][T11871] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1163.615390][T11871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.615412][T11871] usb 5-1: Product: syz [ 1163.617005][T11871] usb 5-1: Manufacturer: syz [ 1163.617025][T11871] usb 5-1: SerialNumber: syz [ 1164.069222][T11871] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1164.069299][T11871] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1165.083374][T11871] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 1165.083424][T11871] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1165.164539][T14985] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2637'. [ 1165.166110][T11871] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1165.205292][T11871] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 1165.349773][T14985] netlink: 'syz.6.2637': attribute type 28 has an invalid length. [ 1165.349814][T14985] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2637'. [ 1165.353525][T14985] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2637'. [ 1165.353563][T14985] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2637'. [ 1166.510027][T15012] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2647'. [ 1169.184733][T14021] usb 5-1: USB disconnect, device number 101 [ 1170.155744][T15041] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2656'. [ 1170.155793][T15041] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2656'. [ 1170.214651][T15039] bond1: entered promiscuous mode [ 1170.215234][T15039] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1170.523973][T15052] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2661'. [ 1170.575862][ T820] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1170.625684][T14021] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1170.725751][ T820] usb 5-1: Using ep0 maxpacket: 8 [ 1170.728113][ T820] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1170.728171][ T820] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1170.728187][ T820] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1170.728204][ T820] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1170.728220][ T820] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1170.728249][ T820] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1170.728265][ T820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.843391][T14021] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1170.843424][T14021] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.843447][T14021] usb 1-1: Product: syz [ 1170.843462][T14021] usb 1-1: Manufacturer: syz [ 1170.843479][T14021] usb 1-1: SerialNumber: syz [ 1171.066687][ T820] usb 5-1: usb_control_msg returned -32 [ 1171.066740][ T820] usbtmc 5-1:16.0: can't read capabilities [ 1171.205032][T15064] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2665'. [ 1171.276688][T15064] netlink: 124 bytes leftover after parsing attributes in process `syz.5.2665'. [ 1171.338255][T14021] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1171.338312][T14021] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1172.039971][ T5867] usb 5-1: USB disconnect, device number 102 [ 1172.353860][T14021] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 1172.353908][T14021] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1172.354503][T14021] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1172.426213][T14021] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 1172.805599][ T8466] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1172.964274][ T8466] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1172.964308][ T8466] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.964339][ T8466] usb 6-1: Product: syz [ 1172.964355][ T8466] usb 6-1: Manufacturer: syz [ 1172.964371][ T8466] usb 6-1: SerialNumber: syz [ 1172.997177][T15084] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2674'. [ 1173.422967][ T8466] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1173.423028][ T8466] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1174.269710][ T8466] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1174.269751][ T8466] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1174.272422][ T8466] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1174.343000][ T8466] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1174.402070][ T8466] usb 6-1: USB disconnect, device number 37 [ 1174.607834][ T5867] usb 1-1: USB disconnect, device number 94 [ 1175.325754][ T5867] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1175.516114][ T5867] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1175.516150][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.516172][ T5867] usb 6-1: Product: syz [ 1175.516189][ T5867] usb 6-1: Manufacturer: syz [ 1175.516205][ T5867] usb 6-1: SerialNumber: syz [ 1175.925659][T14021] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 1175.985658][ T5867] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1175.985720][ T5867] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1176.101392][T14021] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1176.101428][T14021] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.101484][T14021] usb 7-1: Product: syz [ 1176.101496][T14021] usb 7-1: Manufacturer: syz [ 1176.101506][T14021] usb 7-1: SerialNumber: syz [ 1176.554548][T14021] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1176.555020][T14021] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1177.196594][ T5867] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1177.197480][ T5867] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1177.198609][ T5867] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1177.198883][ T5867] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1177.264407][ T5867] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1177.297577][ T5867] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1177.324800][ T5867] usb 6-1: USB disconnect, device number 38 [ 1177.591613][T14021] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 1177.591654][T14021] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1177.592257][T14021] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1177.656975][T14021] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 1177.693649][T14021] usb 7-1: USB disconnect, device number 91 [ 1178.225656][ T820] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1178.375640][ T820] usb 6-1: Using ep0 maxpacket: 8 [ 1178.378507][ T820] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1178.378534][ T820] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1178.378581][ T820] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1178.378605][ T820] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.669849][T15186] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1180.055728][ T9538] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1180.245585][ T9538] usb 1-1: Using ep0 maxpacket: 16 [ 1180.249407][ T9538] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1180.249432][ T9538] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1180.253599][ T9538] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1180.253626][ T9538] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.253647][ T9538] usb 1-1: Product: syz [ 1180.253661][ T9538] usb 1-1: Manufacturer: syz [ 1180.253676][ T9538] usb 1-1: SerialNumber: syz [ 1180.353774][ T9538] usb 1-1: 0:2 : does not exist [ 1180.551642][ T9538] usb 1-1: USB disconnect, device number 95 [ 1181.013407][ T5867] usb 6-1: USB disconnect, device number 39 [ 1182.132540][T15228] capability: warning: `syz.6.2734' uses deprecated v2 capabilities in a way that may be insecure [ 1182.275718][ T5867] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1182.437972][ T5867] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1182.438002][ T5867] usb 5-1: config 0 has no interfaces? [ 1182.443046][ T5867] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1182.443079][ T5867] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1182.443500][ T5867] usb 5-1: Product: syz [ 1182.443519][ T5867] usb 5-1: Manufacturer: syz [ 1182.443535][ T5867] usb 5-1: SerialNumber: syz [ 1182.486410][ T5867] usb 5-1: config 0 descriptor?? [ 1182.704989][ T820] usb 5-1: USB disconnect, device number 103 [ 1183.056759][T15243] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1183.560210][T15255] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.2746'. [ 1185.598349][ T5867] usb 7-1: new full-speed USB device number 92 using dummy_hcd [ 1185.749389][ T5867] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1185.749973][ T5867] usb 7-1: not running at top speed; connect to a high speed hub [ 1185.751115][ T5867] usb 7-1: config 3 has an invalid interface number: 166 but max is 0 [ 1185.751140][ T5867] usb 7-1: config 3 has no interface number 0 [ 1185.751171][ T5867] usb 7-1: config 3 interface 166 has no altsetting 0 [ 1185.753477][ T5867] usb 7-1: New USB device found, idVendor=0c45, idProduct=624f, bcdDevice=e8.db [ 1185.753503][ T5867] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.753530][ T5867] usb 7-1: Product: syz [ 1185.753540][ T5867] usb 7-1: Manufacturer: syz [ 1185.753550][ T5867] usb 7-1: SerialNumber: syz [ 1186.083090][ T5867] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:624f [ 1186.085190][ T5867] gspca_sn9c20x: Write register 1000 failed -71 [ 1186.085216][ T5867] gspca_sn9c20x: Device initialization failed [ 1186.085296][ T5867] gspca_sn9c20x 7-1:3.166: probe with driver gspca_sn9c20x failed with error -71 [ 1186.124879][ T5867] usb 7-1: USB disconnect, device number 92 [ 1186.755597][ T5713] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1186.865567][ T820] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1186.913585][ T5713] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1186.913615][ T5713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.913698][ T5713] usb 1-1: Product: syz [ 1186.913712][ T5713] usb 1-1: Manufacturer: syz [ 1186.913725][ T5713] usb 1-1: SerialNumber: syz [ 1187.025576][ T820] usb 5-1: Using ep0 maxpacket: 16 [ 1187.027894][ T820] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1187.027917][ T820] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1187.033168][ T820] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1187.033194][ T820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.033477][ T820] usb 5-1: Product: syz [ 1187.033495][ T820] usb 5-1: Manufacturer: syz [ 1187.033509][ T820] usb 5-1: SerialNumber: syz [ 1187.154681][ T820] usb 5-1: 0:2 : does not exist [ 1187.324792][ T5867] usb 5-1: USB disconnect, device number 104 [ 1187.383388][ T5713] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1187.383569][ T5713] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1188.400008][ T5713] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 1188.400068][ T5713] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1188.461599][ T5713] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1188.493046][ T5713] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1188.528817][ T5713] usb 1-1: USB disconnect, device number 96 [ 1188.830521][ T9538] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1188.947505][ T9538] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1189.326253][ T820] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 1189.340188][T15347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2790'. [ 1189.340219][T15347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2790'. [ 1189.501704][ T820] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1189.501737][ T820] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.501758][ T820] usb 7-1: Product: syz [ 1189.501774][ T820] usb 7-1: Manufacturer: syz [ 1189.501790][ T820] usb 7-1: SerialNumber: syz [ 1189.975504][ T820] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1189.975568][ T820] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1190.075678][ T9538] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1190.225646][ T9538] usb 1-1: Using ep0 maxpacket: 16 [ 1190.241479][ T9538] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1190.241508][ T9538] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1190.257368][ T9538] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1190.257430][ T9538] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.257469][ T9538] usb 1-1: Product: syz [ 1190.257484][ T9538] usb 1-1: Manufacturer: syz [ 1190.257499][ T9538] usb 1-1: SerialNumber: syz [ 1190.310243][ T9538] usb 1-1: 0:2 : does not exist [ 1190.511271][ T9538] usb 1-1: USB disconnect, device number 97 [ 1190.706720][ T5598] udevd[5598]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1190.795613][ T8466] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 1190.948453][ T8466] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1190.949341][ T8466] usb 6-1: not running at top speed; connect to a high speed hub [ 1190.951780][ T8466] usb 6-1: config 3 has an invalid interface number: 166 but max is 0 [ 1190.951826][ T8466] usb 6-1: config 3 has no interface number 0 [ 1190.951860][ T8466] usb 6-1: config 3 interface 166 has no altsetting 0 [ 1190.954910][ T8466] usb 6-1: New USB device found, idVendor=0c45, idProduct=624f, bcdDevice=e8.db [ 1190.954938][ T8466] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.955012][ T8466] usb 6-1: Product: syz [ 1190.955029][ T8466] usb 6-1: Manufacturer: syz [ 1190.955045][ T8466] usb 6-1: SerialNumber: syz [ 1191.194914][ T820] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1191.208423][ T820] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1191.209884][ T820] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1191.210484][ T820] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1191.261029][ T820] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1191.292275][ T8466] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:624f [ 1191.294354][ T8466] gspca_sn9c20x: Write register 1000 failed -71 [ 1191.294371][ T8466] gspca_sn9c20x: Device initialization failed [ 1191.294446][ T8466] gspca_sn9c20x 6-1:3.166: probe with driver gspca_sn9c20x failed with error -71 [ 1191.331970][ T8466] usb 6-1: USB disconnect, device number 40 [ 1191.333646][ T820] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 1191.379015][ T820] usb 7-1: USB disconnect, device number 93 [ 1192.462592][T15393] netlink: 'syz.0.2809': attribute type 2 has an invalid length. [ 1192.462639][T15393] netlink: 'syz.0.2809': attribute type 1 has an invalid length. [ 1192.462828][T15393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2809'. [ 1193.286688][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1195.263829][T15434] input: syz1 as /devices/virtual/input/input27 [ 1195.393574][T15439] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2828'. [ 1197.143971][T15469] binder_alloc: 15467: binder_alloc_buf, no vma [ 1197.222021][ T59] Bluetooth: hci4: unexpected event for opcode 0x0009 [ 1197.834513][T15483] could not allocate digest TFM handle -q4O(0&qf=*΀j$;}'jO [ 1198.097176][ T5713] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1198.225690][ T5713] usb 1-1: device descriptor read/64, error -71 [ 1198.465679][ T5713] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1198.595597][ T5713] usb 1-1: device descriptor read/64, error -71 [ 1198.706065][ T5713] usb usb1-port1: attempt power cycle [ 1199.045611][ T5713] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1199.067073][ T5713] usb 1-1: device descriptor read/8, error -71 [ 1199.305589][ T5713] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1199.327384][ T5713] usb 1-1: device descriptor read/8, error -71 [ 1199.436006][ T5713] usb usb1-port1: unable to enumerate USB device [ 1201.705576][ T9372] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1201.879660][ T9372] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1201.879725][ T9372] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1201.879772][ T9372] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1201.879811][ T9372] usb 5-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 1201.879837][ T9372] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.953044][ T9372] usb 5-1: config 0 descriptor?? [ 1201.971342][T15551] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1202.377485][ T9372] wacom 0003:056A:0000.0013: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 1202.410422][ T9372] wacom 0003:056A:0000.0013: hidraw0: USB HID v0.00 Device [HID 056a:0000] on usb-dummy_hcd.4-1/input0 [ 1202.433939][ T9372] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0000.0013/input/input28 [ 1202.705559][ T9372] usb 5-1: USB disconnect, device number 105 [ 1208.875861][ T5713] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 1209.042716][ T5713] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1209.042747][ T5713] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.042767][ T5713] usb 7-1: Product: syz [ 1209.042782][ T5713] usb 7-1: Manufacturer: syz [ 1209.042797][ T5713] usb 7-1: SerialNumber: syz [ 1209.505609][ T8466] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1209.529194][ T5713] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1209.529256][ T5713] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1209.655607][ T8466] usb 1-1: Using ep0 maxpacket: 8 [ 1209.660158][ T8466] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1209.660218][ T8466] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1209.660314][ T8466] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1209.660343][ T8466] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1209.660739][ T8466] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1209.661082][ T8466] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1209.661110][ T8466] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.983428][ T8466] usb 1-1: usb_control_msg returned -32 [ 1209.983705][ T8466] usbtmc 1-1:16.0: can't read capabilities [ 1210.276190][T14021] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1210.428443][T14021] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1210.428496][T14021] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1210.428525][T14021] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1210.428566][T14021] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1210.428589][T14021] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.529594][T14021] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1210.534660][T14021] usb 5-1: invalid MIDI out EP 0 [ 1210.548319][ T5713] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 1210.548394][ T5713] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1210.549687][ T5713] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1210.623389][ T5713] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -32 [ 1210.663271][ T8466] usb 1-1: USB disconnect, device number 102 [ 1210.995589][ T5713] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1211.086265][T14021] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1211.145585][ T5713] usb 6-1: Using ep0 maxpacket: 16 [ 1211.148516][ T5713] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1211.148541][ T5713] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1211.151443][ T5713] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1211.151469][ T5713] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.151488][ T5713] usb 6-1: Product: syz [ 1211.151505][ T5713] usb 6-1: Manufacturer: syz [ 1211.151516][ T5713] usb 6-1: SerialNumber: syz [ 1211.225729][ T5713] usb 6-1: 0:2 : does not exist [ 1211.419562][ T9372] usb 6-1: USB disconnect, device number 41 [ 1212.545758][ T5713] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1212.570076][T14021] usb 7-1: USB disconnect, device number 94 [ 1212.704181][ T5713] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1212.704264][ T5713] usb 6-1: no configurations [ 1212.704277][ T5713] usb 6-1: can't read configurations, error -22 [ 1213.049533][T11871] usb 5-1: USB disconnect, device number 106 [ 1213.851725][T15648] netlink: 17780 bytes leftover after parsing attributes in process `syz.4.2913'. [ 1214.336150][T15653] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2915'. [ 1214.336273][T15653] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2915'. [ 1214.404632][T15653] syzkaller0: entered promiscuous mode [ 1214.404660][T15653] syzkaller0: entered allmulticast mode [ 1215.575594][ T5339] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1215.733247][ T5339] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1215.733336][ T5339] usb 6-1: no configurations [ 1215.733351][ T5339] usb 6-1: can't read configurations, error -22 [ 1215.885664][T11871] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1216.035538][T11871] usb 5-1: Using ep0 maxpacket: 8 [ 1216.041314][T11871] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1216.041343][T11871] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1216.041393][T11871] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1216.041418][T11871] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1216.041444][T11871] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1216.041488][T11871] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1216.041514][T11871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.145994][T11871] usbtmc 5-1:16.0: bulk endpoints not found [ 1217.331680][ T5867] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1217.455606][ T8466] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 1217.486416][ T5867] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1217.605553][ T8466] usb 7-1: Using ep0 maxpacket: 8 [ 1217.609802][ T8466] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1217.609874][ T8466] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1217.609902][ T8466] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1217.609947][ T8466] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1217.613979][ T8466] usb 7-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1217.614006][ T8466] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.614028][ T8466] usb 7-1: Product: syz [ 1217.614043][ T8466] usb 7-1: Manufacturer: syz [ 1217.614058][ T8466] usb 7-1: SerialNumber: syz [ 1217.707613][ T8466] usb 7-1: config 0 descriptor?? [ 1217.709088][T15702] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1217.929231][ T8466] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 1217.951681][ T8466] input: Griffin SoundKnob as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input31 [ 1218.170587][ C1] powermate: config urb returned -71 [ 1218.171348][ T9372] usb 7-1: USB disconnect, device number 95 [ 1218.180489][ C1] powermate: config urb returned -71 [ 1218.180508][ C1] powermate: usb_submit_urb(config) failed [ 1218.214381][T15713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2940'. [ 1218.356076][T15713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2940'. [ 1218.358592][ T1430] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1218.359714][ T1430] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1218.359757][ T1430] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1218.359793][ T1430] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1218.660379][ T9372] usb 5-1: USB disconnect, device number 107 [ 1219.027328][ T5867] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1219.175600][ T5867] usb 6-1: Using ep0 maxpacket: 32 [ 1219.183237][ T5867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 103, changing to 10 [ 1219.183270][ T5867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25970, setting to 1024 [ 1219.183311][ T5867] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1219.183335][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.239658][ T5867] usb 6-1: config 0 descriptor?? [ 1219.240643][T15718] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1219.290238][ T5867] hub 6-1:0.0: USB hub found [ 1219.664590][ T5867] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 1219.906327][ T5867] usbhid 6-1:0.0: can't add hid device: -71 [ 1219.906426][ T5867] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1219.951418][ T5867] usb 6-1: USB disconnect, device number 46 [ 1220.245673][T14021] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1220.399731][T14021] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1220.399759][T14021] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1220.402496][T14021] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1220.402524][T14021] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1220.402545][T14021] usb 1-1: SerialNumber: syz [ 1220.575559][ T8466] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1220.666552][T14021] usb 1-1: cannot find UAC_HEADER [ 1220.725580][ T8466] usb 5-1: Using ep0 maxpacket: 16 [ 1220.728355][ T8466] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1220.728377][ T8466] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1220.730786][ T8466] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1220.730811][ T8466] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.730825][ T8466] usb 5-1: Product: syz [ 1220.730835][ T8466] usb 5-1: Manufacturer: syz [ 1220.730845][ T8466] usb 5-1: SerialNumber: syz [ 1220.832102][T14021] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1220.834260][ T8466] usb 5-1: 0:2 : does not exist [ 1220.834357][ T8466] usb 5-1: unit 13 not found! [ 1220.863994][T14021] usb 1-1: USB disconnect, device number 103 [ 1220.942559][T15588] udevd[15588]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1221.000361][ T8466] usb 5-1: USB disconnect, device number 108 [ 1221.223902][T15588] udevd[15588]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1223.607504][ T5867] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1223.769230][ T5867] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1223.769280][ T5867] usb 1-1: config 0 has no interfaces? [ 1223.772765][ T5867] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1223.772793][ T5867] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1223.772815][ T5867] usb 1-1: Product: syz [ 1223.772830][ T5867] usb 1-1: Manufacturer: syz [ 1223.772845][ T5867] usb 1-1: SerialNumber: syz [ 1223.831445][ T5867] usb 1-1: config 0 descriptor?? [ 1224.063592][ T5339] usb 1-1: USB disconnect, device number 104 [ 1225.585573][T14021] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1225.736955][T14021] usb 5-1: Using ep0 maxpacket: 16 [ 1225.740575][T14021] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.740601][T14021] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1225.743600][T14021] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1225.743620][T14021] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.743636][T14021] usb 5-1: Product: syz [ 1225.743646][T14021] usb 5-1: Manufacturer: syz [ 1225.743657][T14021] usb 5-1: SerialNumber: syz [ 1225.858527][T14021] usb 5-1: 0:2 : does not exist [ 1225.860725][T14021] usb 5-1: unit 6 not found! [ 1226.025690][T14021] usb 5-1: USB disconnect, device number 109 [ 1226.359022][T15596] udevd[15596]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1227.755541][ T8466] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 1227.911192][ T8466] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1227.911221][ T8466] usb 6-1: config 0 has no interface number 0 [ 1227.911264][ T8466] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1227.911291][ T8466] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1227.911318][ T8466] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1227.962809][ T8466] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1227.962841][ T8466] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1227.962864][ T8466] usb 6-1: Product: syz [ 1227.962880][ T8466] usb 6-1: SerialNumber: syz [ 1227.998459][ T8466] usb 6-1: config 0 descriptor?? [ 1228.023314][ T8466] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 1228.057697][ T8466] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input32 [ 1228.224051][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1228.227437][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1228.227693][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1228.227958][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1228.228197][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1228.228440][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1228.228682][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1228.228934][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1228.229167][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1228.229397][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1228.294967][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1228.294981][ T9538] usb 6-1: USB disconnect, device number 47 [ 1228.391243][ T9538] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1230.395635][ T8466] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1230.546488][ T8466] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1230.548543][ T8466] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1230.548597][ T8466] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1230.548618][ T8466] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1230.549708][ T8466] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1230.549775][ T8466] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1230.549795][ T8466] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1230.552114][ T8466] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1230.552172][ T8466] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1230.552193][ T8466] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1230.553348][ T8466] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1230.553404][ T8466] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1230.553425][ T8466] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1230.554763][ T8466] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1230.554819][ T8466] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1230.554840][ T8466] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1230.675549][ T8466] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1230.675608][ T8466] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1230.675637][ T8466] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1230.715621][ T9538] usb 7-1: new full-speed USB device number 96 using dummy_hcd [ 1230.715645][ T8466] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1230.715693][ T8466] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1230.715721][ T8466] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1230.745578][ T8466] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1230.745637][ T8466] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1230.745666][ T8466] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1230.787477][ T8466] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1230.787507][ T8466] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1230.787529][ T8466] usb 1-1: Product: syz [ 1230.787544][ T8466] usb 1-1: Manufacturer: syz [ 1230.787558][ T8466] usb 1-1: SerialNumber: syz [ 1230.806488][ T8466] usb 1-1: config 0 descriptor?? [ 1230.839780][ T8466] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 1230.878240][ T9538] usb 7-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 1230.878272][ T9538] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.878294][ T9538] usb 7-1: Product: syz [ 1230.878311][ T9538] usb 7-1: Manufacturer: syz [ 1230.878326][ T9538] usb 7-1: SerialNumber: syz [ 1231.602372][T15900] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3007'. [ 1231.658142][ T9538] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1231.932158][ T9538] usb 7-1: USB disconnect, device number 96 [ 1231.953101][T11871] usb 1-1: USB disconnect, device number 105 [ 1232.059808][T11871] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 1232.267327][T15900] mac80211_hwsim hwsim25 wlan1: entered promiscuous mode [ 1233.370730][ T9372] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1233.474904][ T9372] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1233.850820][ T5611] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1233.907136][ T5611] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1233.914796][ T5611] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1233.994902][ T5611] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1233.999070][ T5611] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1234.366248][ T7924] ================================================================== [ 1234.366269][ T7924] BUG: KASAN: slab-use-after-free in rt_spin_lock+0x83/0x400 [ 1234.366301][ T7924] Read of size 1 at addr ffff8880368427e8 by task syz-executor/7924 [ 1234.366319][ T7924] [ 1234.366334][ T7924] CPU: 1 UID: 0 PID: 7924 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1234.366363][ T7924] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1234.366371][ T7924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1234.366385][ T7924] Call Trace: [ 1234.366393][ T7924] [ 1234.366402][ T7924] dump_stack_lvl+0xe8/0x150 [ 1234.366428][ T7924] print_address_description+0x55/0x1e0 [ 1234.366452][ T7924] ? rt_spin_lock+0x83/0x400 [ 1234.366474][ T7924] print_report+0x58/0x70 [ 1234.366474][ T7924] print_report+0x58/0x70 [ 1234.366495][ T7924] kasan_report+0x117/0x150 [ 1234.366521][ T7924] ? rt_spin_lock+0x83/0x400 [ 1234.366559][ T7924] ? bt_accept_unlink+0x7d/0x2f0 [ 1234.366588][ T7924] __kasan_check_byte+0x2a/0x40 [ 1234.366610][ T7924] lock_acquire+0x84/0x350 [ 1234.366638][ T7924] ? __local_bh_disable_ip+0x3c/0x420 [ 1234.366661][ T7924] rt_spin_lock+0x83/0x400 [ 1234.366700][ T7924] ? bt_accept_unlink+0x7d/0x2f0 [ 1234.366732][ T7924] ? __pfx_rt_spin_lock+0x10/0x10 [ 1234.366756][ T7924] ? rcu_is_watching+0x15/0xb0 [ 1234.366784][ T7924] ? __local_bh_disable_ip+0x3c/0x420 [ 1234.366807][ T7924] ? bt_accept_unlink+0x61/0x2f0 [ 1234.366839][ T7924] bt_accept_unlink+0x7d/0x2f0 [ 1234.366870][ T7924] ? lockdep_hardirqs_on+0x7a/0x110 [ 1234.366900][ T7924] ? bt_accept_unlink+0x61/0x2f0 [ 1234.366933][ T7924] l2cap_sock_teardown_cb+0x17e/0x490 [ 1234.366974][ T7924] l2cap_chan_del+0xb5/0x610 [ 1234.367001][ T7924] ? l2cap_conn_del+0x331/0x570 [ 1234.367026][ T7924] l2cap_conn_del+0x33d/0x570 [ 1234.367052][ T7924] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 1234.367076][ T7924] hci_conn_hash_flush+0x10d/0x260 [ 1234.367104][ T7924] hci_dev_close_sync+0x821/0x10e0 [ 1234.367130][ T7924] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 1234.367151][ T7924] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1234.367181][ T7924] ? hci_unregister_dev+0x212/0x5a0 [ 1234.367212][ T7924] hci_unregister_dev+0x21a/0x5a0 [ 1234.367244][ T7924] vhci_release+0x155/0x1b0 [ 1234.367266][ T7924] ? __pfx_vhci_release+0x10/0x10 [ 1234.367287][ T7924] __fput+0x461/0xa70 [ 1234.367311][ T7924] task_work_run+0x1d9/0x270 [ 1234.367340][ T7924] ? __pfx_task_work_run+0x10/0x10 [ 1234.367367][ T7924] ? do_exit+0x70a/0x22c0 [ 1234.367392][ T7924] ? kmem_cache_free+0x187/0x6c0 [ 1234.367417][ T7924] ? put_net+0x191/0x260 [ 1234.367437][ T7924] ? do_exit+0x70a/0x22c0 [ 1234.367466][ T7924] do_exit+0x70f/0x22c0 [ 1234.367494][ T7924] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1234.367525][ T7924] ? __pfx_do_exit+0x10/0x10 [ 1234.367550][ T7924] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1234.367575][ T7924] ? reacquire_held_locks+0x104/0x190 [ 1234.367605][ T7924] ? rt_spin_lock+0x1e0/0x400 [ 1234.367649][ T7924] do_group_exit+0x21b/0x2d0 [ 1234.367676][ T7924] ? rt_spin_unlock+0x160/0x200 [ 1234.367701][ T7924] get_signal+0x1284/0x1330 [ 1234.367730][ T7924] arch_do_signal_or_restart+0xbc/0x840 [ 1234.367763][ T7924] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1234.367804][ T7924] exit_to_user_mode_loop+0xa9/0x680 [ 1234.367828][ T7924] ? rcu_is_watching+0x15/0xb0 [ 1234.367857][ T7924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.367878][ T7924] do_syscall_64+0x353/0x580 [ 1234.367907][ T7924] ? trace_irq_disable+0x3b/0x140 [ 1234.367938][ T7924] ? clear_bhb_loop+0x40/0x90 [ 1234.367968][ T7924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.367997][ T7924] RIP: 0033:0x7f983132bf47 [ 1234.368020][ T7924] Code: Unable to access opcode bytes at 0x7f983132bf1d. [ 1234.368032][ T7924] RSP: 002b:00007fff5ffd72a8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 1234.368062][ T7924] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f983132bf47 [ 1234.368077][ T7924] RDX: 00007fff5ffd72d0 RSI: 00007fff5ffd7360 RDI: 00007fff5ffd7360 [ 1234.368092][ T7924] RBP: 00007fff5ffd7360 R08: 00007fff5ffd8360 R09: 00000000ffffffff [ 1234.368107][ T7924] R10: 0000000000000100 R11: 0000000000000206 R12: 00007fff5ffd83f0 [ 1234.368122][ T7924] R13: 00007f98313c21ca R14: 000000000012ceb0 R15: 00007fff5ffd8430 [ 1234.368145][ T7924] [ 1234.368154][ T7924] [ 1234.368159][ T7924] Allocated by task 4973: [ 1234.368169][ T7924] kasan_save_track+0x3e/0x80 [ 1234.368190][ T7924] __kasan_kmalloc+0x93/0xb0 [ 1234.368210][ T7924] __kmalloc_noprof+0x3e7/0x7b0 [ 1234.368238][ T7924] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1234.368261][ T7924] tomoyo_check_open_permission+0x229/0x470 [ 1234.368291][ T7924] security_file_open+0xa9/0x240 [ 1234.368314][ T7924] do_dentry_open+0x4c0/0x13e0 [ 1234.368342][ T7924] vfs_open+0x3b/0x350 [ 1234.368368][ T7924] path_openat+0x2e43/0x38a0 [ 1234.368390][ T7924] do_file_open+0x23e/0x4a0 [ 1234.368411][ T7924] do_sys_openat2+0x113/0x200 [ 1234.368438][ T7924] __x64_sys_openat+0x138/0x170 [ 1234.368455][ T7924] do_syscall_64+0x174/0x580 [ 1234.368481][ T7924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.368500][ T7924] [ 1234.368505][ T7924] Freed by task 4973: [ 1234.368515][ T7924] kasan_save_track+0x3e/0x80 [ 1234.368533][ T7924] kasan_save_free_info+0x46/0x50 [ 1234.368560][ T7924] __kasan_slab_free+0x5c/0x80 [ 1234.368581][ T7924] kfree+0x1c5/0x6c0 [ 1234.368599][ T7924] tomoyo_realpath_from_path+0x598/0x5d0 [ 1234.368621][ T7924] tomoyo_check_open_permission+0x229/0x470 [ 1234.368650][ T7924] security_file_open+0xa9/0x240 [ 1234.368667][ T7924] do_dentry_open+0x4c0/0x13e0 [ 1234.368694][ T7924] vfs_open+0x3b/0x350 [ 1234.368720][ T7924] path_openat+0x2e43/0x38a0 [ 1234.368741][ T7924] do_file_open+0x23e/0x4a0 [ 1234.368762][ T7924] do_sys_openat2+0x113/0x200 [ 1234.368790][ T7924] __x64_sys_openat+0x138/0x170 [ 1234.368807][ T7924] do_syscall_64+0x174/0x580 [ 1234.368835][ T7924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.368853][ T7924] [ 1234.368858][ T7924] The buggy address belongs to the object at ffff888036842000 [ 1234.368858][ T7924] which belongs to the cache kmalloc-4k of size 4096 [ 1234.368877][ T7924] The buggy address is located 2024 bytes inside of [ 1234.368877][ T7924] freed 4096-byte region [ffff888036842000, ffff888036843000) [ 1234.368900][ T7924] [ 1234.368906][ T7924] The buggy address belongs to the physical page: [ 1234.368925][ T7924] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x36840 [ 1234.368944][ T7924] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1234.368969][ T7924] flags: 0x80000000000040(head|node=0|zone=1) [ 1234.368994][ T7924] page_type: f5(slab) [ 1234.369013][ T7924] raw: 0080000000000040 ffff88801a00a140 dead000000000100 dead000000000122 [ 1234.369030][ T7924] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 1234.369048][ T7924] head: 0080000000000040 ffff88801a00a140 dead000000000100 dead000000000122 [ 1234.369065][ T7924] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 1234.369083][ T7924] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1234.369099][ T7924] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 1234.369110][ T7924] page dumped because: kasan: bad access detected [ 1234.369125][ T7924] page_owner tracks the page as allocated [ 1234.369133][ T7924] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4987, tgid 4987 (udevadm), ts 36776596152, free_ts 36765497996 [ 1234.369168][ T7924] post_alloc_hook+0x22d/0x280 [ 1234.369189][ T7924] get_page_from_freelist+0x28b2/0x2930 [ 1234.369226][ T7924] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1234.369249][ T7924] allocate_slab+0x77/0x660 [ 1234.369275][ T7924] refill_objects+0x33c/0x3d0 [ 1234.369298][ T7924] __pcs_replace_empty_main+0x373/0x720 [ 1234.369324][ T7924] __kmalloc_noprof+0x530/0x7b0 [ 1234.369343][ T7924] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1234.369364][ T7924] tomoyo_path_perm+0x283/0x560 [ 1234.369389][ T7924] security_inode_getattr+0x12b/0x310 [ 1234.369414][ T7924] vfs_getattr+0x23/0x70 [ 1234.369438][ T7924] vfs_statx_path+0x2b/0x230 [ 1234.369455][ T7924] vfs_statx+0x12e/0x200 [ 1234.369479][ T7924] vfs_fstatat+0x11b/0x170 [ 1234.369503][ T7924] __x64_sys_newfstatat+0x151/0x200 [ 1234.369530][ T7924] do_syscall_64+0x174/0x580 [ 1234.369555][ T7924] page last free pid 4987 tgid 4987 stack trace: [ 1234.369567][ T7924] __free_frozen_pages+0xfe5/0x10d0 [ 1234.369587][ T7924] __slab_free+0x252/0x2a0 [ 1234.369607][ T7924] qlist_free_all+0x99/0x100 [ 1234.369624][ T7924] kasan_quarantine_reduce+0x148/0x160 [ 1234.369642][ T7924] __kasan_slab_alloc+0x22/0x80 [ 1234.369661][ T7924] kmem_cache_alloc_noprof+0x33b/0x680 [ 1234.369680][ T7924] do_getname+0x2e/0x250 [ 1234.369703][ T7924] do_readlinkat+0xc8/0x510 [ 1234.369719][ T7924] __x64_sys_readlink+0x7f/0x90 [ 1234.369745][ T7924] do_syscall_64+0x174/0x580 [ 1234.369771][ T7924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.369789][ T7924] [ 1234.369794][ T7924] Memory state around the buggy address: [ 1234.369804][ T7924] ffff888036842680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1234.369818][ T7924] ffff888036842700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1234.369831][ T7924] >ffff888036842780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1234.369841][ T7924] ^ [ 1234.369852][ T7924] ffff888036842800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1234.369865][ T7924] ffff888036842880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1234.369875][ T7924] ================================================================== [ 1234.455821][ T7924] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1234.455848][ T7924] CPU: 1 UID: 0 PID: 7924 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1234.455882][ T7924] Tainted: [L]=SOFTLOCKUP [ 1234.455891][ T7924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1234.455906][ T7924] Call Trace: [ 1234.455915][ T7924] [ 1234.455924][ T7924] vpanic+0x56c/0xa60 [ 1234.455967][ T7924] ? __pfx_vpanic+0x10/0x10 [ 1234.455994][ T7924] ? __pfx___schedule+0x10/0x10 [ 1234.456028][ T7924] panic+0xc5/0xd0 [ 1234.456054][ T7924] ? __pfx_panic+0x10/0x10 [ 1234.456083][ T7924] ? preempt_schedule_common+0x82/0xd0 [ 1234.456118][ T7924] ? rt_spin_lock+0x83/0x400 [ 1234.456144][ T7924] check_panic_on_warn+0x89/0xb0 [ 1234.456176][ T7924] ? rt_spin_lock+0x83/0x400 [ 1234.456201][ T7924] end_report+0x73/0x170 [ 1234.456229][ T7924] ? rt_spin_lock+0x83/0x400 [ 1234.456252][ T7924] kasan_report+0x128/0x150 [ 1234.456281][ T7924] ? rt_spin_lock+0x83/0x400 [ 1234.456310][ T7924] ? bt_accept_unlink+0x7d/0x2f0 [ 1234.456344][ T7924] __kasan_check_byte+0x2a/0x40 [ 1234.456369][ T7924] lock_acquire+0x84/0x350 [ 1234.456401][ T7924] ? __local_bh_disable_ip+0x3c/0x420 [ 1234.456427][ T7924] rt_spin_lock+0x83/0x400 [ 1234.456453][ T7924] ? bt_accept_unlink+0x7d/0x2f0 [ 1234.456487][ T7924] ? __pfx_rt_spin_lock+0x10/0x10 [ 1234.456514][ T7924] ? rcu_is_watching+0x15/0xb0 [ 1234.456545][ T7924] ? __local_bh_disable_ip+0x3c/0x420 [ 1234.456570][ T7924] ? bt_accept_unlink+0x61/0x2f0 [ 1234.456605][ T7924] bt_accept_unlink+0x7d/0x2f0 [ 1234.456639][ T7924] ? lockdep_hardirqs_on+0x7a/0x110 [ 1234.456670][ T7924] ? bt_accept_unlink+0x61/0x2f0 [ 1234.456707][ T7924] l2cap_sock_teardown_cb+0x17e/0x490 [ 1234.456740][ T7924] l2cap_chan_del+0xb5/0x610 [ 1234.456770][ T7924] ? l2cap_conn_del+0x331/0x570 [ 1234.456797][ T7924] l2cap_conn_del+0x33d/0x570 [ 1234.456825][ T7924] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 1234.456852][ T7924] hci_conn_hash_flush+0x10d/0x260 [ 1234.456882][ T7924] hci_dev_close_sync+0x821/0x10e0 [ 1234.456910][ T7924] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 1234.456933][ T7924] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1234.456975][ T7924] ? hci_unregister_dev+0x212/0x5a0 [ 1234.457020][ T7924] hci_unregister_dev+0x21a/0x5a0 [ 1234.457055][ T7924] vhci_release+0x155/0x1b0 [ 1234.457079][ T7924] ? __pfx_vhci_release+0x10/0x10 [ 1234.457102][ T7924] __fput+0x461/0xa70 [ 1234.457127][ T7924] task_work_run+0x1d9/0x270 [ 1234.457160][ T7924] ? __pfx_task_work_run+0x10/0x10 [ 1234.457190][ T7924] ? do_exit+0x70a/0x22c0 [ 1234.457218][ T7924] ? kmem_cache_free+0x187/0x6c0 [ 1234.457247][ T7924] ? put_net+0x191/0x260 [ 1234.457268][ T7924] ? do_exit+0x70a/0x22c0 [ 1234.457299][ T7924] do_exit+0x70f/0x22c0 [ 1234.457329][ T7924] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1234.457362][ T7924] ? __pfx_do_exit+0x10/0x10 [ 1234.457389][ T7924] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1234.457416][ T7924] ? reacquire_held_locks+0x104/0x190 [ 1234.457449][ T7924] ? rt_spin_lock+0x1e0/0x400 [ 1234.457480][ T7924] do_group_exit+0x21b/0x2d0 [ 1234.457510][ T7924] ? rt_spin_unlock+0x160/0x200 [ 1234.457536][ T7924] get_signal+0x1284/0x1330 [ 1234.457568][ T7924] arch_do_signal_or_restart+0xbc/0x840 [ 1234.457604][ T7924] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1234.457646][ T7924] exit_to_user_mode_loop+0xa9/0x680 [ 1234.457673][ T7924] ? rcu_is_watching+0x15/0xb0 [ 1234.457705][ T7924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.457728][ T7924] do_syscall_64+0x353/0x580 [ 1234.457758][ T7924] ? trace_irq_disable+0x3b/0x140 [ 1234.457783][ T7924] ? clear_bhb_loop+0x40/0x90 [ 1234.457808][ T7924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.457831][ T7924] RIP: 0033:0x7f983132bf47 [ 1234.457850][ T7924] Code: Unable to access opcode bytes at 0x7f983132bf1d. [ 1234.457862][ T7924] RSP: 002b:00007fff5ffd72a8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 1234.457885][ T7924] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f983132bf47 [ 1234.457900][ T7924] RDX: 00007fff5ffd72d0 RSI: 00007fff5ffd7360 RDI: 00007fff5ffd7360 [ 1234.457915][ T7924] RBP: 00007fff5ffd7360 R08: 00007fff5ffd8360 R09: 00000000ffffffff [ 1234.457931][ T7924] R10: 0000000000000100 R11: 0000000000000206 R12: 00007fff5ffd83f0 [ 1234.457954][ T7924] R13: 00007f98313c21ca R14: 000000000012ceb0 R15: 00007fff5ffd8430 [ 1234.457979][ T7924] [ 1234.458645][ T7924] Kernel Offset: disabled