last executing test programs: 7.508235644s ago: executing program 0 (id=1960): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109202) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) gettid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x9, 0xc2, 0x0, 0x2d83, 0x9, 0x100, 0x0, 0x7}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$usbfs(0x0, 0x76, 0x101301) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0xe000, 0x8000000, {0x77359400}, {0x0, 0xc, 0x0, 0x0, 0xfc, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0x40000008}) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) epoll_create1(0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x402, 0x0) syz_io_uring_setup(0x186, &(0x7f0000000540)={0x0, 0x3416, 0x13100, 0x1}, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100000000000000000000003000000011"], 0x3c}}, 0x8000) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000600), 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x0, 0x5802, 0x294, 0x0, 0x294, 0x3b0, 0x325, 0x378, 0x3b0, 0x378, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [], [0x0, 0xffffffff], 'macvtap0\x00', 'macsec0\x00', {0xff}}, 0x0, 0x230, 0x278, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'gre0\x00', {0x0, 0x8000004, 0x0, 0x20, 0x2, 0x1, 0x7fbfffff, 0x0, 0x8}, {0x20000000000}}}, @common=@unspec=@quota={{0x38}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'wg0\x00', {0x2}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x4, 0x1, 0x0, 'snmp_trap\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) syz_open_dev$hidraw(&(0x7f0000000080), 0x7fff, 0x400) 6.716330172s ago: executing program 1 (id=1966): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f00000001c0)) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b800000019000100fcffffff00000000e000000200000000000000000000000000000000000000000000000000000000000000000000fffd0a00000087000000", @ANYRES64=r2, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000200000000ff00"/112], 0xb8}}, 0xc040014) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000140001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000002000000000000000000000080000000000000000000925985ad1e9e19f00ae810ad3d3e00000500000000000000fbffffffffffffff00000000000000000000000000004000000000000000000243b200000000000002000000000000000000000000000000b5b15902b2fbafb49b4b339045a16fa428611484327a199e4565b5646a808d1efcca9709958d7181e3fe4a480e279f30956b87e9d6182d45e9fabb3c47d9460ab0211e170ff2b0183cf8a6b76acd7a00afc33c8a8d4c8f1b3d42fd3e0008000000f8feb0fff7ca5066a0ff239b127bd58cb31687ac476861429af42d4724dee8b6a1d85e0d46d58444ca3adca540be220060c67936f2158c54d5e18756d7401dbdb86837"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xd) openat$ttynull(0xffffffffffffff9c, 0x0, 0x103902, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x11) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="9d2dc9fee88f27964295cd9f45b5a124"], 0x1, 0x0, 0x0) chmod(&(0x7f00000001c0)='./file0\x00', 0x44) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[], 0x1, 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0xb) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000001300)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="403ad16ff5004b01e90000c9610000007a000000", @ANYRES8], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x20000014) socket$nl_generic(0x10, 0x3, 0x10) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r7, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r6, 0x3ba0, &(0x7f0000000280)={0x48, 0x15, r8}) 6.179502997s ago: executing program 1 (id=1967): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) getsockname$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @local}, &(0x7f0000000240)=0x10) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2}, 0x1, 0x0, 0x0, 0x24040044}, 0x40c0080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) recvmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) shutdown(r5, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x18) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000028c0)) getresgid(&(0x7f0000002900), &(0x7f0000002940), &(0x7f0000002980)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000029c0)) socket$inet(0x2, 0x4000000000000001, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 5.643734036s ago: executing program 3 (id=1973): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, &(0x7f0000000300)={{@align=0x80, {0x8, 0x6, 0x83, 0x140000000}}, {{[0x6, 0x7, 0x80, 0x3f86]}, 0x0, 0x1, 0x2000000a, 0x0, &(0x7f0000000280)=[{{@align=0x2, {0x60, 0x2, 0x2, 0xff}}, 0x1, 0x0, '\x00\x00\x00\x00/media#.'}, {{@align=0x5, {0x8, 0xb, 0x9, 0x3}}, 0x5, 0x0, './\x00'}, {{@_ha_fsid={[0x3, 0x8]}, {0x6, 0x5, 0x1000, 0x5}}, 0xc0ea, 0x0, '/dev/media#\x00'}]}}) r1 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$FS_IOC_GETFSSYSFSPATH(r3, 0x80811501, &(0x7f0000000440)={0x80}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "9c01641956257e9bb02d8c11c69772aa1b80b49fead085b74bf94191ac5ff3e0"}) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r2, 0x0, 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1efff9, 0x4, &(0x7f0000000240)=0xfc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r3, 0xa7ae6000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x80, &(0x7f0000000500)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) symlink(0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x15, 0x2, @thr={0x0, 0x0}}, 0x0) ptrace(0x10, r4) r5 = socket$inet6(0xa, 0x80802, 0x0) unshare(0x8040480) read$snapshot(r0, &(0x7f0000000340)=""/81, 0x51) shutdown(r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0xfff}}, './file0\x00'}) open_tree(r6, &(0x7f00000001c0)='./file0\x00', 0x80000) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') openat(r7, &(0x7f0000000080)='./file1\x00', 0x42, 0x84) ppoll(&(0x7f0000000140)=[{r5, 0x5}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) ptrace$setregs(0x1a, r4, 0xc, &(0x7f0000000000)) getsockname$tipc(r0, &(0x7f00000003c0), &(0x7f0000000400)=0x10) ioctl$MEDIA_REQUEST_IOC_QUEUE(r2, 0x7c80, 0x0) 5.598038462s ago: executing program 4 (id=1974): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x181102, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x0, 0x1, 0x849a, 0x7c1, 0x4, 0x9, 0x6, 0x7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) socket(0x400000000010, 0x3, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x810) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$unix(0x1, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$inet6(0xa, 0x2, 0x0) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x404c8c4) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r9 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x8102) writev(r9, &(0x7f0000001500), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x40010, r8, 0xffffc000) syz_clone(0xb1894080, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r8, 0xc17a) 4.639603126s ago: executing program 0 (id=1975): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000d5}, 0xc010) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10600290}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@deltclass={0x68, 0x29, 0x800, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xffe0, 0xfff3}, {0x0, 0x1}, {0x6, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x9}}, @TCA_RATE={0x6, 0x5, {0x0, 0x6d}}, @tclass_kind_options=@c_qfq={{0x8}, {0x2c, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x2}, @TCA_QFQ_LMAX={0x8, 0x2, 0x7}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x10001}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x8ba}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0xfe}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r4 = socket$packet(0x11, 0x3, 0x300) epoll_create(0x100806) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r5, @ANYRES64=r4], 0x0) 4.007922488s ago: executing program 2 (id=1977): r0 = syz_open_dev$sndctrl(&(0x7f0000000640), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000100)=ANY=[@ANYBLOB="020000000800000000000000268d0000"]) ftruncate(r0, 0x4) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000200)={0x2, @sliced={0x639, [0xfff9, 0x3, 0xfeb4, 0x400, 0x2, 0x0, 0x4, 0x40, 0x8, 0x1, 0xf, 0x7f, 0x7f, 0x3, 0x7, 0x9, 0x0, 0x1ff, 0x9, 0x3, 0x6, 0x6, 0x9, 0x3, 0x5, 0x29c, 0xfffb, 0x4, 0x5, 0x0, 0x7, 0x4, 0x6562, 0x6, 0x0, 0x9, 0xfff, 0x0, 0x0, 0x81, 0xd, 0x0, 0x8, 0x1, 0xdb, 0x2, 0xfffd, 0xd], 0x10000}}) r2 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2d, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) sendfile(r5, r4, &(0x7f00000000c0)=0x58, 0x5) getsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000040)={@local}, &(0x7f00000000c0)=0x14) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={r2}) 3.646175587s ago: executing program 2 (id=1978): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f00000001c0)) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b800000019000100fcffffff00000000e000000200000000000000000000000000000000000000000000000000000000000000000000fffd0a00000087000000", @ANYRES64=r2, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000200000000ff00"/112], 0xb8}}, 0xc040014) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000140001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xd) openat$ttynull(0xffffffffffffff9c, 0x0, 0x103902, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x11) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="9d2dc9fee88f27964295cd9f45b5a124"], 0x1, 0x0, 0x0) chmod(&(0x7f00000001c0)='./file0\x00', 0x44) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[], 0x1, 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0xb) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000001300)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="403ad16ff5004b01e90000c9610000007a000000", @ANYRES8], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x20000014) socket$nl_generic(0x10, 0x3, 0x10) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r7, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r6, 0x3ba0, &(0x7f0000000280)={0x48, 0x15, r8}) 3.252286406s ago: executing program 2 (id=1979): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x1, {0x2, 0xff, 0x4}, {0x1, 0x0, 0x4}, 0xfe, 0xff}, {0x1, 0x2, {0x0, 0x0, 0x3}, {0x0, 0xf0}, 0x2}], 0x40) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="2c726f6f746d6f2c15077c789b667a6664653d3030303030303030303030153030303030303430303030", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff90adedc6, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x9}}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x5fbc81, 0x0) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000063c0)="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", 0x1856, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[], 0x0, 0x0, 0x0}) getdents64(r5, 0x0, 0x0) r6 = syz_pidfd_open(0x0, 0x0) r7 = dup(r6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x60, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, '@\x00\f', 0x2a, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, [{0x2}]}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x0, 0x20}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000b00)={&(0x7f00000002c0)="3cafe22ce82baefb55f9f6535344718e99ada816caa9bf35042a4eab4afd0aa2d5b9c51349446040b46b59e22b49765f11f76ef76399cf71a3a01e7b6c4587698683562b195c05dd7a95d0b9c483c1783d1f70bea20e81435b8af758ae48eb2ecaf0abfd615b2839328de4deee8dc48737652155224e6c0fd88c5c950f74e0aafb0eece1ec96a6463615b6ac28fea175fe2aa0e69530535f96d2df8ca6f9a5b979de2b7ee3019017931828f4ee54344160b65129a7a1382a9f630dc8a66df76c2923bf6cac01802c86fced82e904d8a941ed6a44901b", &(0x7f0000000980)=""/204, &(0x7f0000000a80)="1da7a0465f1b5f32569626580aa64e6592b5caf3018e151fdaa6123d9869fc1c7025682686a95db4b1e8911dfdda8dbc23971fe69f07251ad884f6d628db701862ee3f7273087180212de25cb15712306292674f2676abd69a6fea53bf538c498c6e4bcd", 0xfffffffffffffffd, 0x3, r7, 0x4}, 0x38) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) fadvise64(0xffffffffffffffff, 0x18, 0x0, 0x4) r9 = dup(r2) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, 0x0, 0x0) 3.160264314s ago: executing program 1 (id=1980): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x20, 0xd}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x461, 0x4e72, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0xe0, 0xe, "", [{{0x9, 0x4, 0x0, 0xc8, 0x1, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x4, 0x8, 0x1, {0x22, 0x8d}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x5, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x7, 0xa, 0x1}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x9, 0x6, 0x6, 0x40, 0x2}, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x81, 0xf, 0xfffd}]}, 0x4, [{0xab, &(0x7f0000000200)=@string={0xab, 0x3, "f415c089b64b1c9750fe298bd50794091d1f8a180e184935a93ac478d7ee1b760a9a75a9948206f6c9cf87d12608ebe38d079b16d0b8dc00930a92a798b9e6a9662df0a3200013cfa20bcec95a6cfb3d24af31e17158c4d2d0ba2b7dadf6d16dd964f5e16e3932e05c9e7e100f753d35db3a2a114ec2f881d08fe0822aa675d6c175c59b996d853a6f2e02c02af8cd42cee775dd7cc39e67457b296e64deeff9b2f8c840f25b057d83"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x401}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000007c0)={0x14, &(0x7f00000006c0)={0x40, 0xd, 0x95, {0x95, 0xf, "b9c5e7f21a45ed7befa287d6464b925b23adc3d53346941a3af01df9db81e4b9e46bd0c6072590a7a3165804cb512dd6fb38e895cd09666e09c2fa236db01838b2cbb4d0e536fcd644eb5424183178877b0452dbea652e6e3b2e60ac517e57a77cdfed924277c2a7642e496614e1ca359053bd837ba0aba4d57d4351e71fb5989c111397af140be86c7eca2e15592af1fb37ae"}}, &(0x7f0000000780)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a00)={0x44, &(0x7f0000000800)={0x0, 0xd, 0x25, "51a7bc3b238a51857dc4adc4177430d7479f343bf8d2c0de40bf90c9cbae4384bf46210dfe"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000008c0)={0x20, 0x80, 0x1c, {0x0, 0x80, 0x1, 0x1, 0x10, 0x0, 0x2, 0x0, 0x53c0, 0xc3, 0x50, 0x400}}, &(0x7f0000000900)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000940)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000980)={0x20, 0x87, 0x2, 0xb17}, &(0x7f00000009c0)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000004c0)={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 3.159546175s ago: executing program 4 (id=1981): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56fa8e", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 3.054433179s ago: executing program 4 (id=1982): inotify_init() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c00000010001fff00000000fedbdf2500200000", @ANYRES32=0x0, @ANYBLOB="81fdffff000000003c0012800b00010067656e65766500002c0002801400070000000000000000000000000000000001050009000100000008000b4000000009040006"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$RFKILL_IOC_MAX_SIZE(0xffffffffffffffff, 0x2, &(0x7f0000000340)=0xb42) sendmmsg$unix(r0, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRES8=r1, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030f96630000030303130303030302c877365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='t\x00']) statx(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0xf0cb2f4a0c2cfc5d, 0x0) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000001200)={0x50, 0x0, r4, {0x7, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x8fa}}, 0x50) read$FUSE(r3, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000000200)={0x10, 0xffffffffffffffda, r5}, 0x10) sendmsg$nl_xfrm(r2, 0x0, 0x40c0) r6 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r8, 0x10f, 0x81, &(0x7f0000000080), 0x4a) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f00000000c0)=0x2009, 0x4) sendmmsg$inet(r8, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 2.944772801s ago: executing program 0 (id=1983): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4006, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_coalesce={0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x400000}}) 2.664342947s ago: executing program 0 (id=1984): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x9, 0x4d032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xffffffffffff0f00) 2.471100488s ago: executing program 0 (id=1985): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109202) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) gettid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x9, 0xc2, 0x0, 0x2d83, 0x9, 0x100, 0x0, 0x7}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$usbfs(0x0, 0x76, 0x101301) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0xe000, 0x8000000, {0x77359400}, {0x0, 0xc, 0x0, 0x0, 0xfc, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0x40000008}) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) epoll_create1(0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x402, 0x0) syz_io_uring_setup(0x186, &(0x7f0000000540)={0x0, 0x3416, 0x13100, 0x1}, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100000000000000000000003000000011"], 0x3c}}, 0x8000) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000600), 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x0, 0x5802, 0x294, 0x0, 0x294, 0x3b0, 0x325, 0x378, 0x3b0, 0x378, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [], [0x0, 0xffffffff], 'macvtap0\x00', 'macsec0\x00', {0xff}}, 0x0, 0x230, 0x278, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'gre0\x00', {0x0, 0x8000004, 0x0, 0x20, 0x2, 0x1, 0x7fbfffff, 0x0, 0x8}, {0x20000000000}}}, @common=@unspec=@quota={{0x38}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'wg0\x00', {0x2}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x4, 0x1, 0x0, 'snmp_trap\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) syz_open_dev$hidraw(&(0x7f0000000080), 0x7fff, 0x400) 2.421829774s ago: executing program 3 (id=1986): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c00000003000000050000000900010073797a3000000000090003007344ff300000000050000000060a030000000000000000000500000008000b40000000002800048024000180090001006d6574610000000014000280080001400000000208000240000000010900010073797a3000000000140000001100010000000000000000000300000a"], 0xc4}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1d4, 0x1, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFQA_PAYLOAD={0xf9, 0xa, "cd24c6e6b9a2db24d345286d2ff9ba0fcfe7ea8acf029b8def2b0c3f23af0b2d88e8585deeebc54e0c2d68913e7b26265591a7701e6eb9b5aa2c38c57dbe6e0640931d31b1c68a5f17f2e46658965cc1a451f2e2885220d3904b4076784845a017588d89604ee9dfb5c9debf3b390a67c276c62a294b4e85cc6e12d958ddf0fa5fe5bcfd34479a04d8a0b54ab1a6c2295ce3d7c93c1c636aceedf28829aaec124df0f11ea5eeeff037b5d947e67673972d7964866f52bca32a1ad3908ef708be864191e1605a02d74424bf0ad3c2cecb36a9a0449b21e7a49c557dbd3a9b3bc876ccd293ea703f3e9b51c15eec6aca730d9cfe3511"}, @NFQA_EXP={0x18, 0xf, 0x0, 0x1, [@CTA_EXPECT_MASK={0x14, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x62bc}]}]}, @NFQA_CT={0xac, 0xb, 0x0, 0x1, [@CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x81}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_TUPLE_MASTER={0x8c, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xbd}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3a}}}}]}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044880) (async) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1d4, 0x1, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFQA_PAYLOAD={0xf9, 0xa, "cd24c6e6b9a2db24d345286d2ff9ba0fcfe7ea8acf029b8def2b0c3f23af0b2d88e8585deeebc54e0c2d68913e7b26265591a7701e6eb9b5aa2c38c57dbe6e0640931d31b1c68a5f17f2e46658965cc1a451f2e2885220d3904b4076784845a017588d89604ee9dfb5c9debf3b390a67c276c62a294b4e85cc6e12d958ddf0fa5fe5bcfd34479a04d8a0b54ab1a6c2295ce3d7c93c1c636aceedf28829aaec124df0f11ea5eeeff037b5d947e67673972d7964866f52bca32a1ad3908ef708be864191e1605a02d74424bf0ad3c2cecb36a9a0449b21e7a49c557dbd3a9b3bc876ccd293ea703f3e9b51c15eec6aca730d9cfe3511"}, @NFQA_EXP={0x18, 0xf, 0x0, 0x1, [@CTA_EXPECT_MASK={0x14, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x62bc}]}]}, @NFQA_CT={0xac, 0xb, 0x0, 0x1, [@CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x81}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_TUPLE_MASTER={0x8c, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xbd}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3a}}}}]}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044880) 2.260399655s ago: executing program 2 (id=1987): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ecm(0x3, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024a00010100000009040000160202000005241b"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x24008070}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000000104050000000002002cf1b93256fba300000003000000f6ff2e0000000036b9289ab0b38e"], 0x14}}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}, @typed={0x8, 0x17, 0x0, 0x0, @u32=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) 2.259395443s ago: executing program 1 (id=1988): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000005780)='./file0\x00', 0x9400002f) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e24, @empty}], 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x4c, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x30}}}}, [@NL80211_ATTR_SSID={0x1b, 0x34, @random="58f1d125e7e07e4e9166bac37349415f5187f93a291da3"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x4024850}, 0x4004040) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1000000008021100000108021100000008021112000020000100000001000100"], 0x20) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) 1.942975285s ago: executing program 4 (id=1989): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f00000001c0)) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b800000019000100fcffffff00000000e000000200000000000000000000000000000000000000000000000000000000000000000000fffd0a00000087000000", @ANYRES64=r2, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000200000000ff00"/112], 0xb8}}, 0xc040014) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000140001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xd) openat$ttynull(0xffffffffffffff9c, 0x0, 0x103902, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x11) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="9d2dc9fee88f27964295cd9f45b5a124"], 0x1, 0x0, 0x0) chmod(&(0x7f00000001c0)='./file0\x00', 0x44) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[], 0x1, 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0xb) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000001300)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="403ad16ff5004b01e90000c9610000007a000000", @ANYRES8], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x20000014) socket$nl_generic(0x10, 0x3, 0x10) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r7, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r6, 0x3ba0, &(0x7f0000000280)={0x48, 0x15, r8}) 1.64178506s ago: executing program 4 (id=1990): syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x191802) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) (async) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) (async, rerun: 32) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (rerun: 32) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (rerun: 32) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r2, 0x0, 0x2, 0x0, 0x0) (async) getsockopt(r2, 0x0, 0x794, 0x0, &(0x7f00000000c0)) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (rerun: 32) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000780)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c00050004c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000140)={0x15}) (async, rerun: 64) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x3c, &(0x7f0000000100)=0x4a77, 0x4) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0xc2800, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02080000000000000008000009"], 0x50) (async, rerun: 64) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') (rerun: 64) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000240)={0x200000, 0x0, 0x8}, 0x18) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0d00000003000000040000000400000001000000", @ANYRES32=r6], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r7}, &(0x7f0000000840), &(0x7f0000000880)=r6}, 0x20) (async, rerun: 64) unshare(0x22020600) (rerun: 64) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r7, &(0x7f0000000900)}, 0x20) read$FUSE(r5, &(0x7f0000004440)={0x2020}, 0xfdf5) (async) landlock_restrict_self(r0, 0x0) (async) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) 1.260358209s ago: executing program 1 (id=1991): listen(0xffffffffffffffff, 0x0) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) (async) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x4, 0x0}}, 0xf1}, 0x1c) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) setitimer(0x1, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000040)="42d7386debb9c100", 0x8, 0xfffffffffffffffe) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000006800010000000000fddbdf250200000000000000060008"], 0x30}, 0x1, 0x0, 0x0, 0x4402}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x0, 0x4c, 0x0, 0x148, 0x73, 0x278, 0x258, 0x258, 0x278, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x148, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x8000000, 0x0, 0x2, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@SET2={0x30}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'xfrm0\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x1b) (async) writev(r3, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000200)="8ad4c1e4", 0x4}], 0x2) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) clock_gettime(0x0, &(0x7f0000001c80)={0x0, 0x0}) recvmmsg$unix(r4, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/55, 0x37}, {&(0x7f0000000240)=""/77, 0x4d}], 0x2, &(0x7f0000000780)}}], 0x1, 0x10040, &(0x7f0000001cc0)={r5, r6+10000000}) 1.252032894s ago: executing program 4 (id=1992): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f00000000c0)=""/104, 0x12) r3 = fcntl$dupfd(r0, 0x0, r0) write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0080070009000600080000000000635a0b42002c0600fe8000000000000000000000001000bbff0100000000000000000000000000010000000000000000000000000000000000004e2200004e240000000000000004000000030000000400000001"], 0x62) socket$kcm(0xa, 0x3, 0x87) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 861.647544ms ago: executing program 1 (id=1993): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b04f, 0x15b30}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_MTU={0x8, 0x4, 0x1ff}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x2, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb2, 0x0, 0x8, {0x80008, 0xffffffff}, 0x3, 0x2}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0xb) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10f, 0x4}) syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002140)={0xf, {"a2e3ad214fc752f91b500e0f30f70e06d038e7ff7fc6e5539b3275078b089b3b08385d090890e0878f0e1ac6e7049b3d6d959bffe8d178708c523c921b1b5b31300d3b5d0736cd3b78130baa61d8e809fc889b0709b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b906000000783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51015f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ff33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f761f13a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a99cc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000029566e78000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebbd633500", 0x1000}}, 0x1006) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r5, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000440)=[{0x12, '\x00', @st={0x4, [{0x3, @svalue=0x6}, {0x2, @svalue=0x7fffffff}, {0x1, @uvalue=0x200000007fffffff}, {0x1, @uvalue=0x560}]}, 0x4}, {0x2, '\x00', @st={0x4, [{0x2, @uvalue=0x101}, {0x1, @uvalue=0x40}, {0x2, @uvalue=0x2}, {0x0, @svalue=0x7}]}, 0x9}, {0x22, '\x00', @st={0x4, [{0x2, @svalue=0x4}, {0x0, @uvalue=0xffffffffffffffff}, {0x3, @uvalue=0x3}, {0x1, @svalue=0x4f}]}, 0xe6}]}) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000400)) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)=0x7) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x2324e5) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r8, 0xc0884113, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r9, r2, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000800)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x40000000000002, 0x400000000024}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x5, 0x1, 0x100010}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 653.11503ms ago: executing program 3 (id=1994): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) clock_gettime(0x5, &(0x7f0000000140)) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000140)={r3}, &(0x7f0000000200)=0x8) socket$nl_route(0x10, 0x3, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x58}}, 0x0) 566.350953ms ago: executing program 3 (id=1995): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x9, 0x4d032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xfffffffffffffff4) 488.131455ms ago: executing program 2 (id=1996): r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x48, r4, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x20000328) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000040)=0x23, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000500)={0x0, 0xfe5, 0x3ff}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000900)={{r0}, {@val={r6}, @actul_num={@void, 0x7, 0x4b}}}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x800, &(0x7f0000000100)={0x2, 0xce2b, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) 216.458042ms ago: executing program 3 (id=1997): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1f, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000006000000ab937d60"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="85000000050000006d000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}, 0x1, 0x0, 0x0, 0x20008880}, 0x0) 207.429027ms ago: executing program 0 (id=1998): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01"], 0xfc}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_audit(0x10, 0x3, 0x9) dup2(r1, r0) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x200c0810}, 0x44004) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ff8000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0xfffffffffffffffd, 0x801) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r4 = dup(r3) r5 = epoll_create(0x7) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000240)={0x9000000b}) write$P9_RSTATFS(r4, &(0x7f0000000100)={0x43, 0x9, 0x1, {0x569142f7, 0x0, 0x100000001, 0x0, 0x7f, 0x5, 0x7, 0x200, 0x6}}, 0x43) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0xd, "0062ba7d820700000000000000000000096304"}) r6 = syz_open_pts(r3, 0x80) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) dup3(r6, r3, 0x80000) read(r3, &(0x7f00000002c0)=""/228, 0xe4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a30000000001400038008000240000000000800014000000000140000001100"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="88010000170a0101"], 0x188}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x121881, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x305) fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) 173.734343ms ago: executing program 2 (id=1999): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x4a) write$UHID_INPUT(r1, &(0x7f0000000580)={0xc, {"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", 0x1000}}, 0x1065) 0s ago: executing program 3 (id=2000): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f00000001c0)) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b800000019000100fcffffff00000000e000000200000000000000000000000000000000000000000000000000000000000000000000fffd0a00000087000000", @ANYRES64=r2, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000200000000ff00"/112], 0xb8}}, 0xc040014) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000140001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xd) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x103902, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x11) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="9d2dc9fee88f27964295cd9f45b5a124"], 0x1, 0x0, 0x0) chmod(&(0x7f00000001c0)='./file0\x00', 0x44) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[], 0x1, 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0xb) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000001300)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="403ad16ff5004b01e90000c9610000007a000000", @ANYRES8], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x20000014) socket$nl_generic(0x10, 0x3, 0x10) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r7, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r6, 0x3ba0, &(0x7f0000000280)={0x48, 0x15, r8}) kernel console output (not intermixed with test programs): tered allmulticast mode [ 435.044910][T18246] bond3: left promiscuous mode [ 435.052381][T18246] bond3: entered allmulticast mode [ 435.067116][T18246] bridge2: entered allmulticast mode [ 435.084863][T18246] syztnl0: entered allmulticast mode [ 435.095461][T18246] syztnl1: entered allmulticast mode [ 435.103251][T18246] bond4: entered allmulticast mode [ 435.113318][T18246] vlan0: entered allmulticast mode [ 435.128479][T18246] ip6gretap1: entered allmulticast mode [ 435.139927][T18246] tipc: Resetting bearer [ 435.225625][T18246] syzkaller0: left promiscuous mode [ 435.233515][T18246] bond5: left promiscuous mode [ 435.240288][T18246] bridge3: left promiscuous mode [ 435.248541][T18246] bridge4: left promiscuous mode [ 435.267814][T18246] ip6gre1: entered allmulticast mode [ 435.279588][T18246] batadv1: entered allmulticast mode [ 435.306946][T18246] bridge5: entered allmulticast mode [ 435.378509][T18246] mac80211_hwsim hwsim16 wlan2: entered allmulticast mode [ 435.389128][T18262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.435861][T18262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.603931][ T9] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 435.799037][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.841317][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 435.857890][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.886870][ T9] usb 5-1: Product: syz [ 435.901120][ T9] usb 5-1: Manufacturer: syz [ 435.917478][ T9] usb 5-1: SerialNumber: syz [ 436.013907][T18366] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1602'. [ 436.151532][ T9] cdc_ncm 5-1:1.0: bind() failure [ 436.197114][ T9] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 436.227005][ T9] cdc_ncm 5-1:1.1: bind() failure [ 436.264759][ T9] usb 5-1: USB disconnect, device number 86 [ 436.789131][T18415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.076722][T18440] netlink: 'syz.3.1613': attribute type 1 has an invalid length. [ 437.231910][T18440] 8021q: adding VLAN 0 to HW filter on device bond2 [ 437.339771][T18476] bond2: (slave gretap1): making interface the new active one [ 437.400885][T18476] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 437.549611][ T24] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 437.793350][ T24] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 437.816680][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 437.880513][ T24] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 437.934122][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 437.978491][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.099847][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 438.145688][ T24] usb 5-1: invalid MIDI out EP 0 [ 438.304046][ T9] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 438.399493][T18474] bridge0: left allmulticast mode [ 438.528700][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 438.569564][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.590017][ T24] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 438.690773][ T9] usb 4-1: Product: syz [ 438.712307][ T9] usb 4-1: Manufacturer: syz [ 438.759402][ T9] usb 4-1: SerialNumber: syz [ 439.254006][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 439.318648][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 439.985868][T18565] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1620'. [ 440.174454][ T9056] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 440.199726][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.202488][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.364949][ T9056] usb 2-1: too many configurations: 126, using maximum allowed: 8 [ 440.519706][ T9056] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 440.551320][ T9056] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.578633][ T9056] usb 2-1: Product: syz [ 440.596708][ T9056] usb 2-1: Manufacturer: syz [ 440.603932][ T9056] usb 2-1: SerialNumber: syz [ 440.869929][T18561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.882582][T18561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.902007][T18561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.926615][T18561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.949302][T18561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.963833][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 440.977393][T18561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.996363][ T9059] usb 5-1: USB disconnect, device number 87 [ 441.025751][T18561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.101861][T18561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.236180][T18561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.331505][T18561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.378289][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000044. ret = -EPROTO [ 441.399892][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 441.433556][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 441.449116][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 441.495625][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 441.507305][ T9056] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 441.540852][ T9] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 441.550665][ T9056] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 441.588253][ T9056] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 441.604133][ T24] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 441.619873][ T9] usb 4-1: USB disconnect, device number 66 [ 441.758120][ T9056] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 441.814665][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 441.831885][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.858941][ T9056] usb 2-1: USB disconnect, device number 66 [ 441.947036][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.981740][ T24] usb 5-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 442.009651][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.055101][ T24] usb 5-1: config 0 descriptor?? [ 442.480293][ T24] cherry 0003:046A:0027.0014: unknown main item tag 0x3 [ 442.518990][ T24] cherry 0003:046A:0027.0014: unknown main item tag 0x1 [ 442.547592][ T24] cherry 0003:046A:0027.0014: bogus close delimiter [ 442.576158][ T24] cherry 0003:046A:0027.0014: item 0 0 2 10 parsing failed [ 442.614849][ T24] cherry 0003:046A:0027.0014: probe with driver cherry failed with error -22 [ 442.684001][ T24] usb 5-1: USB disconnect, device number 88 [ 442.700336][ T9056] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 442.901441][T18658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1627'. [ 442.929228][ T9056] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 442.948903][T18659] PM: Enabling pm_trace changes system date and time during resume. [ 442.948903][T18659] PM: Correct system time has to be restored manually after resume. [ 442.989554][ T9056] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.015034][ T9056] usb 4-1: Product: syz [ 443.034301][ T9056] usb 4-1: Manufacturer: syz [ 443.040795][ T9056] usb 4-1: SerialNumber: syz [ 443.082481][ T9056] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 443.102168][ T9] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 443.225648][ T24] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 443.411249][T18670] fuse: Bad value for 'fd' [ 443.430177][ T24] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 443.457938][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.475871][ T24] usb 3-1: Product: syz [ 443.478418][T18679] dlm: non-version read from control device 8192 [ 443.490092][ T24] usb 3-1: Manufacturer: syz [ 443.499926][ T24] usb 3-1: SerialNumber: syz [ 443.550000][T18684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1631'. [ 443.592517][ T9056] usb 4-1: USB disconnect, device number 67 [ 443.925302][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 443.956965][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 444.173961][ T9] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 444.183108][ T9] ath9k_htc: Failed to initialize the device [ 444.200554][ T9056] usb 4-1: ath9k_htc: USB layer deinitialized [ 444.466478][T18702] netlink: 'syz.3.1633': attribute type 21 has an invalid length. [ 444.478082][T18702] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1633'. [ 444.495456][T18702] netlink: 'syz.3.1633': attribute type 5 has an invalid length. [ 444.503447][T18702] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1633'. [ 444.601296][ T9070] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 444.685206][ T9070] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 445.521325][ T9] usb 1-1: new low-speed USB device number 34 using dummy_hcd [ 445.716282][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 445.750082][T18662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.772539][T18728] loop8: detected capacity change from 0 to 8 [ 445.779615][T18662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.807465][ T9] usb 1-1: config 242 has an invalid interface number: 40 but max is 0 [ 445.832591][T18728] Dev loop8: unable to read RDB block 8 [ 445.844317][T18728] loop8: unable to read partition table [ 445.851690][ T9] usb 1-1: config 242 has no interface number 0 [ 445.877938][ T9] usb 1-1: config 242 interface 40 altsetting 4 endpoint 0xD is Bulk; changing to Interrupt [ 445.889169][T18728] loop8: partition table beyond EOD, truncated [ 445.919201][ T9] usb 1-1: config 242 interface 40 altsetting 4 endpoint 0x6 has invalid maxpacket 512, setting to 8 [ 445.930365][T18728] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 445.966606][ T9] usb 1-1: config 242 interface 40 has no altsetting 0 [ 446.000396][ T9] usb 1-1: string descriptor 0 read error: -22 [ 446.021559][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=44.11 [ 446.053920][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.130633][T18717] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 446.193705][ T9] hdpvr 1-1:242.40: Could not find bulk-in endpoint [ 446.220585][ T9] hdpvr 1-1:242.40: probe with driver hdpvr failed with error -12 [ 446.419278][ T9] usb 1-1: USB disconnect, device number 34 [ 447.061687][T18759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1643'. [ 447.078580][T18759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1643'. [ 447.427566][T18777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1644'. [ 447.529287][T18781] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 447.557920][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e4. ret = -EPROTO [ 447.585352][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 447.598019][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 447.607991][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 447.619501][ T24] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 447.636383][ T24] usb 3-1: USB disconnect, device number 69 [ 447.643962][ T9] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 447.654173][ T5692] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 447.805743][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 447.814152][ T5692] usb 1-1: Using ep0 maxpacket: 8 [ 447.816823][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 447.831518][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 447.836251][ T5692] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 447.841994][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 447.854129][ T5692] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 447.858633][ T9] usb 2-1: SerialNumber: syz [ 447.885992][ T5692] usb 1-1: Product: syz [ 447.891733][ T5692] usb 1-1: Manufacturer: syz [ 447.896892][ T5692] usb 1-1: SerialNumber: syz [ 447.909694][ T5692] usb 1-1: config 0 descriptor?? [ 447.923000][ T5692] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 448.122816][T18766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.135048][T18766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.312293][T18806] loop8: detected capacity change from 0 to 8 [ 448.323427][T18806] Dev loop8: unable to read RDB block 8 [ 448.340285][T18806] loop8: unable to read partition table [ 448.355771][T18806] loop8: partition table beyond EOD, truncated [ 448.372936][T18806] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 448.397106][T18766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.445358][T18766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.615035][ T9056] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 448.634046][ T5692] gspca_zc3xx: reg_r err -110 [ 448.639417][ T5692] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 448.811805][ T9056] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 448.835816][ T9056] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.856205][ T9056] usb 4-1: Product: syz [ 448.866143][ T9056] usb 4-1: Manufacturer: syz [ 448.876035][ T9056] usb 4-1: SerialNumber: syz [ 448.885600][ T9056] usb 4-1: config 0 descriptor?? [ 448.904020][T18799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.942681][ T9056] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 448.949454][ T9059] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 448.994035][T18799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.109268][ T9058] usb 1-1: USB disconnect, device number 35 [ 449.120733][ T9059] usb 5-1: unable to get BOS descriptor or descriptor too short [ 449.177021][ T9059] usb 5-1: not running at top speed; connect to a high speed hub [ 449.205770][ T9059] usb 5-1: config 43 has an invalid interface number: 2 but max is 0 [ 449.224392][ T9059] usb 5-1: config 43 has no interface number 0 [ 449.231013][ T9059] usb 5-1: config 43 interface 2 has no altsetting 0 [ 449.261919][ T9059] usb 5-1: string descriptor 0 read error: -22 [ 449.289858][ T9059] usb 5-1: Dual-Role OTG device on HNP port [ 449.309771][ T9059] usb 5-1: New USB device found, idVendor=1410, idProduct=a011, bcdDevice=4b.61 [ 449.327954][ T9] usb 2-1: unknown interface protocol 0x17, assuming v1 [ 449.345425][ T9059] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.357440][ T9] usb 2-1: 0:2 : does not exist [ 449.364526][ T9] usb 2-1: unit 3 not found! [ 449.394643][ T9059] hub 5-1:43.2: bad descriptor, ignoring hub [ 449.409270][ T9059] hub 5-1:43.2: probe with driver hub failed with error -5 [ 449.482822][ T9] usb 2-1: USB disconnect, device number 67 [ 449.528483][T17362] udevd[17362]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 449.734438][ T9059] usb 5-1: USB disconnect, device number 89 [ 449.789957][T18808] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1649'. [ 449.814387][T18808] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1649'. [ 449.856461][ T9056] gspca_sunplus: reg_w_riv err -71 [ 449.867874][ T9056] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 449.889357][T18867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1653'. [ 449.913519][ T9056] usb 4-1: USB disconnect, device number 68 [ 449.928279][T18867] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 450.084830][T18885] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1654'. [ 450.626379][ T9056] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 450.639315][T18905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1659'. [ 450.813890][ T9056] usb 5-1: Using ep0 maxpacket: 8 [ 450.836849][ T9056] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 450.873298][ T9056] usb 5-1: config 0 has no interface number 0 [ 450.895907][ T9056] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 450.915688][ T9056] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 450.928619][ T9056] usb 5-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 450.940308][ T9056] usb 5-1: Product: syz [ 450.955105][ T9056] usb 5-1: config 0 descriptor?? [ 450.986882][ T9056] iowarrior 5-1:0.8: IOWarrior product=0x1512, serial= interface=8 now attached to iowarrior0 [ 451.036365][T18914] loop8: detected capacity change from 0 to 8 [ 451.074815][T18914] Dev loop8: unable to read RDB block 8 [ 451.111095][T18914] loop8: unable to read partition table [ 451.126522][T18914] loop8: partition table beyond EOD, truncated [ 451.142412][T18914] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 451.748362][T18929] netlink: 'syz.2.1664': attribute type 6 has an invalid length. [ 451.945103][ T29] audit: type=1326 audit(1777401842.788:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18911 comm="syz.0.1663" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f496619cdd9 code=0x0 [ 452.110587][T18961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1663'. [ 452.274058][ T9056] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 452.456248][ T9056] usb 2-1: Using ep0 maxpacket: 16 [ 452.484908][ T9056] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.525945][ T9056] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 452.562636][ T9056] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 452.590461][ T9056] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 452.620416][ T9056] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 452.633105][ T9056] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 452.638745][ T5692] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 452.669360][ T9056] usb 2-1: SerialNumber: syz [ 452.699677][T18967] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 452.716169][T18967] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 452.750713][ T9056] hub 2-1:1.0: bad descriptor, ignoring hub [ 452.785544][ T9056] hub 2-1:1.0: probe with driver hub failed with error -5 [ 452.830705][ T5692] usb 3-1: Using ep0 maxpacket: 32 [ 452.848100][T18988] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1673'. [ 452.858287][ T5692] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 452.877052][ T5692] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.888183][ T5692] usb 3-1: config 0 has no interface number 0 [ 452.907575][ T5692] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 452.923052][ T5692] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.931932][ T5692] usb 3-1: Product: syz [ 452.936515][ T5692] usb 3-1: Manufacturer: syz [ 452.941178][ T5692] usb 3-1: SerialNumber: syz [ 452.951570][T18967] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 452.963756][ T5692] usb 3-1: config 0 descriptor?? [ 452.964887][T18967] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 453.007278][ T5692] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 453.028262][ T5692] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 453.043947][ T9059] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 453.219514][ T9059] usb 4-1: config 9 has an invalid interface number: 164 but max is 1 [ 453.251042][ T9059] usb 4-1: config 9 has an invalid interface number: 82 but max is 1 [ 453.261207][ T9059] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 453.272465][ T9059] usb 4-1: config 9 has no interface number 0 [ 453.279301][ T9059] usb 4-1: config 9 has no interface number 1 [ 453.286651][ T9059] usb 4-1: config 9 interface 164 altsetting 1 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 453.299263][ T9059] usb 4-1: config 9 interface 164 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 453.311384][ T9059] usb 4-1: config 9 interface 164 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 453.323136][ T9059] usb 4-1: config 9 interface 164 altsetting 1 endpoint 0x5 has invalid maxpacket 1648, setting to 64 [ 453.334850][ T9059] usb 4-1: config 9 interface 164 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 453.347527][ T9059] usb 4-1: config 9 interface 164 altsetting 1 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 453.359811][ T9059] usb 4-1: config 9 interface 164 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 453.371939][ T9059] usb 4-1: config 9 interface 164 altsetting 1 has 7 endpoint descriptors, different from the interface descriptor's value: 15 [ 453.418822][ T9056] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 453.427647][T19001] loop8: detected capacity change from 0 to 8 [ 453.435879][ T9059] usb 4-1: config 9 interface 82 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 453.445885][T19001] Dev loop8: unable to read RDB block 8 [ 453.459225][ T5692] usb 5-1: USB disconnect, device number 90 [ 453.468217][T19001] loop8: unable to read partition table [ 453.484599][T19001] loop8: partition table beyond EOD, truncated [ 453.495862][ T9056] usb 2-1: USB disconnect, device number 68 [ 453.502883][ T9059] usb 4-1: config 9 interface 164 has no altsetting 0 [ 453.510110][T19001] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 453.523663][ T9059] usb 4-1: config 9 interface 82 has no altsetting 0 [ 453.589432][ T9059] usb 4-1: New USB device found, idVendor=0499, idProduct=1017, bcdDevice=56.9b [ 453.635254][ T9059] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.664921][ T9059] usb 4-1: Product: syz [ 453.675976][ T9059] usb 4-1: Manufacturer: syz [ 453.689517][ T9059] usb 4-1: SerialNumber: syz [ 453.715687][T18983] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 453.780906][T19026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1676'. [ 453.970603][ T9059] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 453.982001][ T9059] snd-usb-audio 4-1:9.164: probe with driver snd-usb-audio failed with error -2 [ 454.024850][ T9059] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 454.129680][ T9059] snd-usb-audio 4-1:9.82: probe with driver snd-usb-audio failed with error -2 [ 454.163009][ T9059] usb 4-1: USB disconnect, device number 69 [ 454.211491][T17362] udevd[17362]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:9.82/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 454.533972][ T9056] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 454.703923][ T9056] usb 1-1: device descriptor read/64, error -71 [ 454.941427][T19085] loop5: detected capacity change from 0 to 7 [ 454.954157][ T9056] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 455.093903][ T9056] usb 1-1: device descriptor read/64, error -71 [ 455.176955][ T9] usb 3-1: USB disconnect, device number 70 [ 455.222823][ T9056] usb usb1-port1: attempt power cycle [ 455.613881][ T9056] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 455.644476][ T9056] usb 1-1: device descriptor read/8, error -71 [ 455.694228][T19085] Dev loop5: unable to read RDB block 7 [ 455.722881][T19085] loop5: unable to read partition table [ 455.755717][T19085] loop5: partition table beyond EOD, truncated [ 455.788973][T19085] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 455.894011][ T9056] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 455.927763][ T9056] usb 1-1: device descriptor read/8, error -71 [ 456.064387][ T9056] usb usb1-port1: unable to enumerate USB device [ 456.103879][ T5692] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 456.293980][ T5692] usb 4-1: Using ep0 maxpacket: 32 [ 456.312610][ T5692] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 456.328863][ T5692] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.353130][ T5692] usb 4-1: Product: syz [ 456.358653][ T5692] usb 4-1: Manufacturer: syz [ 456.363469][ T5692] usb 4-1: SerialNumber: syz [ 456.389319][ T5692] usb 4-1: config 0 descriptor?? [ 456.423179][ T5692] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 457.359201][T19128] netlink: 'syz.4.1694': attribute type 11 has an invalid length. [ 457.652291][T19137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1695'. [ 457.710614][T19132] loop8: detected capacity change from 0 to 8 [ 457.735860][ T5692] gspca_ov534_9: reg_w failed -110 [ 457.741805][T19132] Dev loop8: unable to read RDB block 8 [ 457.749534][T19132] loop8: unable to read partition table [ 457.765903][T19132] loop8: partition table beyond EOD, truncated [ 457.806594][T19132] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 457.899342][T19140] netlink: 'syz.2.1696': attribute type 1 has an invalid length. [ 457.930210][T19140] netlink: 'syz.2.1696': attribute type 2 has an invalid length. [ 457.980613][T19140] netlink: 'syz.2.1696': attribute type 1 has an invalid length. [ 458.030109][T19140] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1696'. [ 458.054051][ T5692] gspca_ov534_9: Unknown sensor 0000 [ 458.054155][ T5692] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 458.143294][ T9056] usb 4-1: USB disconnect, device number 70 [ 458.430151][T19191] program syz.0.1699 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 458.441249][T19188] nvme_fabrics: unknown parameter or missing value '/' in ctrl creation request [ 458.523916][ T9] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 458.575060][T19189] netlink: 'syz.4.1698': attribute type 6 has an invalid length. [ 458.653958][ T9] usb 3-1: device descriptor read/64, error -71 [ 458.903898][ T9] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 459.043913][ T9] usb 3-1: device descriptor read/64, error -71 [ 459.124979][T19207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.164733][ T9] usb usb3-port1: attempt power cycle [ 459.246821][T19213] kAFS: unable to lookup cell '(,cL' [ 459.504169][ T9] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 459.536619][ T9] usb 3-1: device descriptor read/8, error -71 [ 459.553921][T19227] fuse: Bad value for 'fd' [ 459.572634][T19232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1710'. [ 459.716558][T19237] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1711'. [ 459.793943][ T9] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 459.835690][ T9] usb 3-1: device descriptor read/8, error -71 [ 459.964399][ T9] usb usb3-port1: unable to enumerate USB device [ 460.041399][T19261] kAFS: unable to lookup cell '(,cL' [ 460.163962][ T9058] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 460.303996][ T9058] usb 4-1: device descriptor read/64, error -71 [ 460.464097][ T9] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 460.554121][ T9058] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 460.627700][ T9] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 460.637115][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.645259][ T9] usb 5-1: Product: syz [ 460.649745][ T9] usb 5-1: Manufacturer: syz [ 460.661175][ T9] usb 5-1: SerialNumber: syz [ 460.670257][ T9] usb 5-1: config 0 descriptor?? [ 460.674267][ T5692] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 460.689143][ T9058] usb 4-1: device descriptor read/64, error -71 [ 460.696755][ T9] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 460.827079][ T9058] usb usb4-port1: attempt power cycle [ 460.833901][ T5692] usb 2-1: Using ep0 maxpacket: 32 [ 460.843160][ T5692] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 460.852612][ T5692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.860763][ T5692] usb 2-1: Product: syz [ 460.865126][ T5692] usb 2-1: Manufacturer: syz [ 460.869790][ T5692] usb 2-1: SerialNumber: syz [ 460.878542][ T5692] usb 2-1: config 0 descriptor?? [ 460.886942][T19270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.903455][ T5692] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 460.918786][T19270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.945377][T19270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.957308][T19270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.968380][T19270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.980020][T19270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.991042][T19270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.007710][T19270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.021795][T19270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.031706][T19270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.113524][ T9] gspca_stk1135: reg_w 0x0 err -71 [ 461.124830][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 461.131287][ T9] gspca_stk1135: Sensor write failed [ 461.138437][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 461.145092][ T9] gspca_stk1135: Sensor write failed [ 461.151354][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 461.171995][ T9058] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 461.180483][ T9] gspca_stk1135: Sensor read failed [ 461.187861][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 461.206032][ T9058] usb 4-1: device descriptor read/8, error -71 [ 461.213375][ T9] gspca_stk1135: Sensor read failed [ 461.224931][ T9] gspca_stk1135: Detected sensor type unknown (0x0) [ 461.231654][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 461.238958][ T9] gspca_stk1135: Sensor read failed [ 461.244636][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 461.251040][ T9] gspca_stk1135: Sensor read failed [ 461.271911][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 461.304254][ T9] gspca_stk1135: Sensor write failed [ 461.314135][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 461.332258][ T9] gspca_stk1135: Sensor write failed [ 461.338802][ T9] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 461.382440][ T24] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 461.382963][ T9] usb 5-1: USB disconnect, device number 91 [ 461.446516][T19322] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1725'. [ 461.473998][ T9058] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 461.508834][ T24] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 461.511769][ T9058] usb 4-1: device descriptor read/8, error -71 [ 461.526502][T19329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1725'. [ 461.616089][ T5692] gspca_ov534_9: reg_w failed -110 [ 461.665980][ T9058] usb usb4-port1: unable to enumerate USB device [ 461.944811][T19359] kAFS: unable to lookup cell '(,cL' [ 462.028130][ T5692] gspca_ov534_9: Unknown sensor 0000 [ 462.028229][ T5692] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 462.164627][T19279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.186410][T19279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.378519][T19382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1731'. [ 462.459182][T19385] ptrace attach of "./syz-executor exec"[5637] was attempted by "./syz-executor exec"[19385] [ 462.584008][ T9] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 462.733954][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 462.745862][ T9] usb 1-1: config 253 has an invalid interface number: 20 but max is 2 [ 462.754375][ T9] usb 1-1: config 253 has an invalid interface number: 9 but max is 2 [ 462.762618][ T9] usb 1-1: config 253 contains an unexpected descriptor of type 0x1, skipping [ 462.771886][ T9] usb 1-1: config 253 has an invalid interface number: 42 but max is 2 [ 462.780475][ T9] usb 1-1: config 253 has an invalid interface number: 126 but max is 2 [ 462.789271][ T9] usb 1-1: config 253 has 4 interfaces, different from the descriptor's value: 3 [ 462.798881][ T9] usb 1-1: config 253 has no interface number 0 [ 462.805532][ T9] usb 1-1: config 253 has no interface number 1 [ 462.811931][ T9] usb 1-1: config 253 has no interface number 2 [ 462.818391][ T9] usb 1-1: config 253 has no interface number 3 [ 462.825002][ T9] usb 1-1: config 253 interface 20 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 462.835171][ T9] usb 1-1: config 253 interface 20 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 462.846533][ T9] usb 1-1: config 253 interface 20 altsetting 1 bulk endpoint 0xE has invalid maxpacket 1023 [ 462.857123][ T9] usb 1-1: config 253 interface 20 altsetting 1 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 462.868454][ T9] usb 1-1: config 253 interface 20 altsetting 1 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 462.879814][ T9] usb 1-1: config 253 interface 9 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 462.890897][ T9] usb 1-1: config 253 interface 9 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 462.902645][ T9] usb 1-1: config 253 interface 9 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 462.914446][ T9] usb 1-1: config 253 interface 9 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 462.933880][ T9] usb 1-1: config 253 interface 9 altsetting 0 has an endpoint descriptor with address 0x15, changing to 0x5 [ 462.959701][ T9] usb 1-1: config 253 interface 9 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 462.974663][ T9] usb 1-1: config 253 interface 9 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 462.988778][ T9] usb 1-1: config 253 interface 9 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 462.999958][ T9] usb 1-1: config 253 interface 9 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 463.018185][ T9] usb 1-1: config 253 interface 9 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 463.040982][ T9] usb 1-1: config 253 interface 9 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 463.058110][ T9] usb 1-1: config 253 interface 9 altsetting 0 has 14 endpoint descriptors, different from the interface descriptor's value: 13 [ 463.075069][ T9] usb 1-1: config 253 interface 42 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 463.087235][ T9] usb 1-1: config 253 interface 42 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 463.099329][ T9] usb 1-1: config 253 interface 42 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 463.110418][ T9] usb 1-1: config 253 interface 42 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 463.121557][ T9] usb 1-1: config 253 interface 42 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 463.160807][ T9] usb 1-1: config 253 interface 42 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 463.196960][ T9] usb 1-1: config 253 interface 42 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 463.222434][ T9] usb 1-1: config 253 interface 42 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 463.241311][ T9] usb 1-1: config 253 interface 42 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 463.253164][ T9] usb 1-1: config 253 interface 42 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 463.264233][ T9] usb 1-1: config 253 interface 42 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 463.281303][ T9] usb 1-1: config 253 interface 42 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 463.293245][ T9] usb 1-1: config 253 interface 42 altsetting 3 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 463.304563][ T9] usb 1-1: config 253 interface 42 altsetting 3 has 14 endpoint descriptors, different from the interface descriptor's value: 16 [ 463.318332][ T9] usb 1-1: too many endpoints for config 253 interface 126 altsetting 73: 161, using maximum allowed: 30 [ 463.329876][ T9] usb 1-1: config 253 interface 126 altsetting 73 has a duplicate endpoint with address 0x5, skipping [ 463.351387][ T9] usb 1-1: config 253 interface 126 altsetting 73 has a duplicate endpoint with address 0x2, skipping [ 463.366943][ T9] usb 1-1: config 253 interface 126 altsetting 73 has 2 endpoint descriptors, different from the interface descriptor's value: 161 [ 463.408717][ T9] usb 1-1: config 253 interface 20 has no altsetting 0 [ 463.437972][ T9] usb 1-1: config 253 interface 42 has no altsetting 0 [ 463.468500][ T9] usb 1-1: config 253 interface 126 has no altsetting 0 [ 463.486604][ T9] usb 1-1: New USB device found, idVendor=0951, idProduct=1697, bcdDevice= 1.00 [ 463.504282][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.516706][ T9] usb 1-1: Product: ᰁ [ 463.527226][ T9] usb 1-1: Manufacturer: Ј [ 463.531814][ T9] usb 1-1: SerialNumber: 鈾䱒쌗⽽ሒ᛫㛁溺浃됬䆬剈ࢱఘ噂쳈彟禓畅슁괉ᬗࡦ䞏糷料扙짝뤡憥큘鼷懚ꪸنﲢ淎貀퀖嫊ॱ孫Ꞝ薂ﺆ쒣៼쮜ͽ㇫錼‫紱觥౏㉇콫䨃믦ꋩ㓋帜៩㉷ᇊ폃麮⫎㹊袬鰙Ӑ劢얹浃茲Ϭ렞儖骅⌖랁퀻Ȉਛ櫅笶킲 [ 463.577379][T19378] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 463.585693][T19378] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 463.833948][ T24] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 463.871647][ T29] audit: type=1326 audit(1777401854.708:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19414 comm="syz.2.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788d39cdd9 code=0x7ffc0000 [ 463.918598][ T29] audit: type=1326 audit(1777401854.748:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19414 comm="syz.2.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788d39cdd9 code=0x7ffc0000 [ 463.963564][ T29] audit: type=1326 audit(1777401854.788:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19414 comm="syz.2.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f788d39cdd9 code=0x7ffc0000 [ 463.986823][ T29] audit: type=1326 audit(1777401854.788:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19414 comm="syz.2.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788d39cdd9 code=0x7ffc0000 [ 464.024159][ T29] audit: type=1326 audit(1777401854.788:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19414 comm="syz.2.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788d39cdd9 code=0x7ffc0000 [ 464.046849][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 464.064603][ T24] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 464.073809][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 464.089800][ T24] usb 5-1: config 0 has no interface number 0 [ 464.103644][ T29] audit: type=1326 audit(1777401854.788:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19414 comm="syz.2.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f788d39cdd9 code=0x7ffc0000 [ 464.131184][ T24] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 464.153909][T19421] kAFS: unable to lookup cell '(,cL' [ 464.173415][ T24] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 464.201890][ T29] audit: type=1326 audit(1777401854.788:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19414 comm="syz.2.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788d39cdd9 code=0x7ffc0000 [ 464.225376][ T24] usb 5-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 464.259530][ T24] usb 5-1: Product: syz [ 464.279597][ T24] usb 5-1: config 0 descriptor?? [ 464.301547][ T29] audit: type=1326 audit(1777401854.788:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19414 comm="syz.2.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788d39cdd9 code=0x7ffc0000 [ 464.330030][ T9058] usb 2-1: USB disconnect, device number 69 [ 464.362555][ T29] audit: type=1326 audit(1777401854.788:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19414 comm="syz.2.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f788d39cdd9 code=0x7ffc0000 [ 464.389291][ T24] iowarrior 5-1:0.8: IOWarrior product=0x1512, serial= interface=8 now attached to iowarrior0 [ 464.411617][ T29] audit: type=1326 audit(1777401854.788:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19414 comm="syz.2.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788d39cdd9 code=0x7ffc0000 [ 464.630722][ T9] usb-storage 1-1:253.20: USB Mass Storage device detected [ 464.653564][ T9] usb-storage 1-1:253.20: Quirks match for vid 0951 pid 1697: 200 [ 464.723328][T19437] macsec2: entered promiscuous mode [ 464.747869][ T9] usb-storage 1-1:253.9: USB Mass Storage device detected [ 464.754279][T19437] macsec2: entered allmulticast mode [ 464.793527][ T9] usb-storage 1-1:253.9: Quirks match for vid 0951 pid 1697: 200 [ 464.977824][ T9] usb-storage 1-1:253.42: USB Mass Storage device detected [ 465.017792][ T9] usb-storage 1-1:253.42: Quirks match for vid 0951 pid 1697: 200 [ 465.148034][ T9] usb-storage 1-1:253.126: USB Mass Storage device detected [ 465.180441][ T9] usb-storage 1-1:253.126: Quirks match for vid 0951 pid 1697: 200 [ 465.277691][ T9] usb 1-1: USB disconnect, device number 40 [ 465.354776][ T24] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 465.534000][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 465.544614][T19508] fuse: Unknown parameter ' d' [ 465.551073][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 465.576173][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.591763][ T24] usb 2-1: Product: syz [ 465.596315][ T24] usb 2-1: Manufacturer: syz [ 465.601029][ T24] usb 2-1: SerialNumber: syz [ 465.609584][ T24] usb 2-1: config 0 descriptor?? [ 465.634090][ T9] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 465.783954][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 465.793513][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.804170][ T9] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.815888][ T9] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.826741][ T9] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 465.828975][ T24] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 465.841145][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 465.860607][ T9] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 465.869783][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.881993][ T9] usb 1-1: config 0 descriptor?? [ 466.023224][T19515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1750'. [ 466.036574][T19515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1750'. [ 466.131030][T19492] netlink: 'syz.0.1748': attribute type 13 has an invalid length. [ 466.139252][T19492] netlink: 'syz.0.1748': attribute type 17 has an invalid length. [ 466.210933][T19522] kAFS: unable to lookup cell '(,cL' [ 466.469451][T19527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.487186][T19527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.600382][ T5692] usb 5-1: USB disconnect, device number 92 [ 466.673968][ T9070] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 466.844961][T19492] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.879226][T19541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1753'. [ 467.007705][T19492] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 467.020016][T19492] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 467.038420][T19492] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 467.067030][ T24] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 467.138005][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 467.165764][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 467.188919][ T9] usb 1-1: USB disconnect, device number 41 [ 467.213904][ T5692] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 467.401956][T19581] ip6gretap1: entered allmulticast mode [ 467.408111][ T5692] usb 5-1: Using ep0 maxpacket: 16 [ 467.416319][T19581] bond2: entered allmulticast mode [ 467.422142][T19581] gretap1: entered allmulticast mode [ 467.429121][ T5692] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.439808][ T5692] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 467.452813][ T5692] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 467.464552][T19581] dummy0.0: entered allmulticast mode [ 467.470178][T19581] mac80211_hwsim hwsim17 wlan3: entered allmulticast mode [ 467.477545][ T5692] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 467.487753][ T9070] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 467.495564][ T5692] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 467.509276][T19581] macsec2: left promiscuous mode [ 467.516934][ T5692] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 467.526362][ T5692] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 467.534635][ T5692] usb 5-1: Manufacturer: syz [ 467.543548][ T5692] usb 5-1: config 0 descriptor?? [ 467.601189][T19585] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1757'. [ 467.663943][ T9070] usb 3-1: Using ep0 maxpacket: 32 [ 467.670715][ T9070] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 467.680451][ T9070] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.703210][ T9070] usb 3-1: config 0 descriptor?? [ 467.843905][ T5692] rc_core: IR keymap rc-hauppauge not found [ 467.850331][ T5692] Registered IR keymap rc-empty [ 467.856193][ T5751] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 467.872355][ T5692] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 467.894636][ T5692] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 467.925897][ T5692] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 467.939088][ T9070] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 467.950020][ T5692] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input54 [ 467.966597][ T9070] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 467.980170][ T9070] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 467.990350][ T5692] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 468.007829][ T5751] usb 4-1: device descriptor read/64, error -71 [ 468.016816][ T9070] usb 3-1: media controller created [ 468.034080][ T5692] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 468.072722][ T9070] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 468.081416][ T5692] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 468.084187][ T9] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 468.105937][ T5692] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 468.122555][ T9056] usb 2-1: USB disconnect, device number 70 [ 468.137109][ T5692] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 468.184595][ T5692] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 468.214804][ T5692] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 468.233943][ T5692] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 468.251011][ T9070] DVB: Unable to find symbol dib7000p_attach() [ 468.257842][ T5692] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 468.265631][ T5751] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 468.273423][ T9070] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 468.276118][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.294063][ T5692] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 468.329060][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.340687][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 468.355310][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 468.367437][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.380945][ T5692] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 468.408495][ T5692] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 468.425662][ T5751] usb 4-1: device descriptor read/64, error -71 [ 468.431993][ T9] usb 1-1: config 0 descriptor?? [ 468.456527][ T5692] usb 5-1: USB disconnect, device number 93 [ 468.502980][ T9070] rc_core: IR keymap rc-dib0700-rc5 not found [ 468.513274][ T9070] Registered IR keymap rc-empty [ 468.541431][ T9070] dvb-usb: could not initialize remote control. [ 468.562433][ T9070] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 468.574165][ T5751] usb usb4-port1: attempt power cycle [ 468.625926][ T9070] usb 3-1: USB disconnect, device number 76 [ 468.687295][T19635] gtp0: entered allmulticast mode [ 468.698156][T19635] team0: Device gtp0 is of different type [ 468.777739][ T9070] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 468.878422][ T9] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 468.960518][ T5751] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 469.005309][ T5751] usb 4-1: device descriptor read/8, error -71 [ 469.206992][T19683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1761'. [ 469.236814][T19683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1761'. [ 469.247958][ T5751] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 469.274767][ T5751] usb 4-1: device descriptor read/8, error -71 [ 469.345256][T19695] kAFS: unable to lookup cell '(,cL' [ 469.394889][ T5751] usb usb4-port1: unable to enumerate USB device [ 469.402190][T19697] tunl0: Caught tx_queue_len zero misconfig [ 469.465849][ T9] usb 1-1: USB disconnect, device number 42 [ 469.653916][ T5751] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 469.813932][ T5751] usb 3-1: Using ep0 maxpacket: 8 [ 469.821573][ T5751] usb 3-1: unable to get BOS descriptor or descriptor too short [ 469.831216][ T5751] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 469.842398][ T5751] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 469.852534][ T5751] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 469.873430][ T5751] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 469.886427][ T5751] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 469.896382][ T5751] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 469.910064][ T5751] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 469.919686][ T5751] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.928049][ T5751] usb 3-1: Product: syz [ 469.932305][ T5751] usb 3-1: Manufacturer: syz [ 469.937682][ T5751] usb 3-1: SerialNumber: syz [ 469.943945][ T9] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 469.953754][ T5751] usb 3-1: config 0 descriptor?? [ 469.965851][ T5751] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 470.086859][T19733] IPv6: NLM_F_CREATE should be specified when creating new route [ 470.104345][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 470.122077][ T9] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 470.132224][ T9] usb 1-1: config 0 has no interface number 0 [ 470.139165][ T9] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 470.157730][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 470.168303][ T9] usb 1-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 470.177118][T19698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.196723][ T9] usb 1-1: Product: syz [ 470.212260][T19698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.220641][ T9] usb 1-1: config 0 descriptor?? [ 470.238437][T19698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.261852][T19698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.285950][T19698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.299929][ T9] iowarrior 1-1:0.8: IOWarrior product=0x1512, serial= interface=8 now attached to iowarrior0 [ 470.328237][T19698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.387782][T19757] xt_hl: Unknown Hop Limit match mode: 206 [ 470.393943][T19756] xt_hl: Unknown Hop Limit match mode: 206 [ 470.408541][T19698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.418516][T14849] udevd[14849]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 470.441198][T19698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.454201][T19698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.472478][T19698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.497878][T19758] syzkaller1: entered promiscuous mode [ 470.518677][T19758] syzkaller1: entered allmulticast mode [ 470.566506][T19697] syzkaller1: entered promiscuous mode [ 470.572266][T19697] syzkaller1: entered allmulticast mode [ 470.584952][ T9056] usb 3-1: USB disconnect, device number 77 [ 470.807970][T19787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.828367][T19787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.915539][T19787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.926966][T19787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.946241][T19787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.957335][T19787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.023903][ T9056] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 471.155625][ T9056] usb 5-1: device descriptor read/64, error -71 [ 471.254394][ T5751] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 471.404023][ T9056] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 471.464031][ T5751] usb 4-1: Using ep0 maxpacket: 8 [ 471.486772][ T5751] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 471.511420][ T5751] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.532525][ T5751] usb 4-1: Product: syz [ 471.543315][ T5751] usb 4-1: Manufacturer: syz [ 471.555045][ T5751] usb 4-1: SerialNumber: syz [ 471.564392][ T9056] usb 5-1: device descriptor read/64, error -71 [ 471.570835][T19814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1772'. [ 471.581482][T19814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1772'. [ 471.585121][T19816] kAFS: unable to lookup cell '(,cL' [ 471.600871][ T5751] usb 4-1: config 0 descriptor?? [ 471.684772][ T9056] usb usb5-port1: attempt power cycle [ 471.814592][ T5751] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 471.918409][T19824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.928214][T19824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.944001][T19824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.956355][T19824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.972447][T19824] netlink: 'syz.1.1774': attribute type 39 has an invalid length. [ 472.004149][ T9] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 472.055827][ T9056] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 472.096407][ T9056] usb 5-1: device descriptor read/8, error -71 [ 472.343918][ T9056] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 472.364578][ T9056] usb 5-1: device descriptor read/8, error -71 [ 472.474313][ T9056] usb usb5-port1: unable to enumerate USB device [ 472.587619][ T9056] usb 1-1: USB disconnect, device number 43 [ 472.749290][T19862] program syz.0.1776 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 473.065393][ T5751] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 473.089072][T19875] syzkaller0: entered promiscuous mode [ 473.095343][T19875] syzkaller0: entered allmulticast mode [ 473.704758][T19921] kAFS: unable to lookup cell '(,cL' [ 473.714022][ T5751] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 473.881871][ T5751] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.905560][ T5751] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.937997][ T5751] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 473.952139][ T5751] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 473.962149][ T5751] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.987771][ T9058] usb 4-1: USB disconnect, device number 79 [ 473.995721][ T5751] usb 2-1: config 0 descriptor?? [ 474.094162][ T9] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 474.246414][ T9] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 474.256028][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 474.268831][ T9] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 474.278287][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.286436][ T9] usb 3-1: Product: syz [ 474.290805][ T9] usb 3-1: Manufacturer: syz [ 474.295739][ T9] usb 3-1: SerialNumber: syz [ 474.303959][ T5692] usb 5-1: new full-speed USB device number 98 using dummy_hcd [ 474.303977][ T9] usb 3-1: config 0 descriptor?? [ 474.316883][ T9] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 474.437072][ T5751] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 474.474308][ T9070] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 474.484432][ T5692] usb 5-1: config 5 has an invalid interface number: 230 but max is 0 [ 474.499032][ T5751] usb 2-1: USB disconnect, device number 72 [ 474.520192][ T5692] usb 5-1: config 5 has no interface number 0 [ 474.539553][ T5692] usb 5-1: config 5 interface 230 has no altsetting 0 [ 474.579419][ T5692] usb 5-1: New USB device found, idVendor=0424, idProduct=7801, bcdDevice=e0.9e [ 474.608510][ T5692] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.636278][ T5692] usb 5-1: Product: syz [ 474.647589][ T5692] usb 5-1: Manufacturer: syz [ 474.662790][ T5692] usb 5-1: SerialNumber: syz [ 474.668270][ T9070] usb 1-1: Using ep0 maxpacket: 8 [ 474.689156][ T9070] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 474.709551][ T9070] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 474.724708][T19974] fido_id[19974]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 474.739394][ T9070] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 474.755343][ T9070] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 474.777692][ T9070] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 474.791281][ T9070] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 474.817811][ T9070] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.924729][ T5692] usb 5-1: USB disconnect, device number 98 [ 475.058959][ T9070] usb 1-1: usb_control_msg returned -32 [ 475.064746][ T9070] usbtmc 1-1:16.0: can't read capabilities [ 475.127699][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 475.127737][ T29] audit: type=1326 audit(1777401865.968:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19922 comm="syz.2.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788d39cdd9 code=0x7ffc0000 [ 475.157184][ T29] audit: type=1326 audit(1777401865.968:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19922 comm="syz.2.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f788d39cdd9 code=0x7ffc0000 [ 475.176325][ T9058] usb 2-1: new low-speed USB device number 73 using dummy_hcd [ 475.181460][ T29] audit: type=1326 audit(1777401865.968:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19922 comm="syz.2.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788d39cdd9 code=0x7ffc0000 [ 475.223714][ T29] audit: type=1326 audit(1777401865.968:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19922 comm="syz.2.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788d39cdd9 code=0x7ffc0000 [ 475.247282][ T29] audit: type=1326 audit(1777401865.968:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19922 comm="syz.2.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f788d39ca6b code=0x7ffc0000 [ 475.272282][ T29] audit: type=1326 audit(1777401865.968:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19922 comm="syz.2.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788d39cdd9 code=0x7ffc0000 [ 475.341349][ T29] audit: type=1326 audit(1777401865.978:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19922 comm="syz.2.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f788d39ca6b code=0x7ffc0000 [ 475.367578][ T29] audit: type=1326 audit(1777401865.978:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19922 comm="syz.2.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f788d35d60e code=0x7ffc0000 [ 475.391991][ T29] audit: type=1326 audit(1777401866.178:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19922 comm="syz.2.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788d39cdd9 code=0x7ffc0000 [ 475.415689][ T9058] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 475.444540][ T9058] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 475.462267][ T29] audit: type=1326 audit(1777401866.178:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19922 comm="syz.2.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788d39cdd9 code=0x7ffc0000 [ 475.539367][ T9058] usb 2-1: config 1 interface 0 has no altsetting 0 [ 475.589312][ T9058] usb 2-1: string descriptor 0 read error: -22 [ 475.652354][ T9058] usb 2-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 475.683956][ T5692] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 475.705423][ T9058] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 475.798293][T19924] openvswitch: netlink: IP tunnel dst address not specified [ 475.842534][ T9058] usb 2-1: 0:2 : does not exist [ 475.860393][T19925] batadv_slave_0: Caught tx_queue_len zero misconfig [ 475.915831][ T5692] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 475.951953][ T9] gspca_sunplus: reg_r err -71 [ 475.975827][ T9] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 476.009288][ T5692] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 476.031957][ T9] usb 3-1: USB disconnect, device number 78 [ 476.069926][ T5692] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 476.078597][ T9058] usb-storage 2-1:1.1: USB Mass Storage device detected [ 476.129459][ T5692] usb 4-1: Product: syz [ 476.144619][ T5692] usb 4-1: Manufacturer: syz [ 476.158893][ T5692] usb 4-1: SerialNumber: syz [ 476.400724][ T9058] usb 2-1: us122l: couldn't allocate write buffer [ 476.419069][ T9058] snd-usb-us122l 2-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 476.439353][ T5692] usblp 4-1:1.0: usblp1: USB Unidirectional printer dev 80 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 476.465650][ T9058] usb 2-1: USB disconnect, device number 73 [ 476.560556][ T9] usb 1-1: USB disconnect, device number 44 [ 476.676895][ T9059] usb 4-1: USB disconnect, device number 80 [ 476.752317][ T9059] usblp1: removed [ 476.798506][T20074] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 476.886023][T20074] x_tables: unsorted underflow at hook 3 [ 477.029493][T20084] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1796'. [ 477.544114][ T9059] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 477.728896][ T9059] usb 2-1: Using ep0 maxpacket: 8 [ 477.759699][ T9059] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 477.788207][ T9059] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.806954][ T9059] usb 2-1: Product: syz [ 477.818183][ T9059] usb 2-1: Manufacturer: syz [ 477.849793][ T9059] usb 2-1: SerialNumber: syz [ 477.871910][ T9059] usb 2-1: config 0 descriptor?? [ 478.096541][ T9059] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 478.803930][ T5692] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 478.920959][T20140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.938279][T20140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.975174][ T5692] usb 5-1: Using ep0 maxpacket: 32 [ 478.984379][ T5692] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.996155][ T9070] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 479.004558][ T5692] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.019942][ T5692] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 479.032886][ T5692] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 479.041567][ T5692] usb 5-1: Product: syz [ 479.046229][ T5692] usb 5-1: Manufacturer: syz [ 479.060624][ T5692] hub 5-1:4.0: USB hub found [ 479.064477][ T9] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 479.144144][ T5751] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 479.168978][ T9070] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 479.178491][ T9070] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.186656][ T9070] usb 3-1: Product: syz [ 479.191065][ T9070] usb 3-1: Manufacturer: syz [ 479.195787][ T9070] usb 3-1: SerialNumber: syz [ 479.204715][ T9070] usb 3-1: config 0 descriptor?? [ 479.207829][ T9] usb 1-1: device descriptor read/64, error -71 [ 479.262196][ T5692] hub 5-1:4.0: 2 ports detected [ 479.326155][ T5751] usb 4-1: config 0 has no interfaces? [ 479.332094][ T5751] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 479.342164][ T5751] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.355558][ T5751] usb 4-1: config 0 descriptor?? [ 479.374660][ T9059] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 479.463946][ T9] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 479.562900][ T9059] usb 4-1: USB disconnect, device number 81 [ 479.578325][T20141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.590483][T20141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.598008][ T9] usb 1-1: device descriptor read/64, error -71 [ 479.609214][T20141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.628555][ T9070] usb 3-1: f81604_read: reg: 105 failed: -EPIPE [ 479.642243][T20141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.646248][ T9070] f81604 3-1:0.0: Setting termination of CH#1 failed: -EPIPE [ 479.660196][ T9070] f81604 3-1:0.0: probe with driver f81604 failed with error -32 [ 479.668929][T20141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.690481][T20141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.714955][ T9] usb usb1-port1: attempt power cycle [ 479.836218][T20176] xt_nfacct: accounting object `syz1' does not exist [ 480.063905][ T9] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 480.105578][ T9] usb 1-1: device descriptor read/8, error -71 [ 480.241219][ T9059] usb 2-1: USB disconnect, device number 74 [ 480.346726][ T9070] usb 3-1: USB disconnect, device number 79 [ 480.353876][ T9] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 480.396029][ T9] usb 1-1: device descriptor read/8, error -71 [ 480.504795][ T9] usb usb1-port1: unable to enumerate USB device [ 480.507128][T20116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.560913][T20116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.589366][T20206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1814'. [ 480.681556][ T9] usb 5-1: USB disconnect, device number 99 [ 480.690433][ T5692] hub 5-1:4.0: hub_ext_port_status failed (err = -71) [ 480.799922][T20217] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 480.851398][T20225] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1816'. [ 481.347600][T20233] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1818'. [ 481.472778][T20233] bond3: option miimon: invalid value (18446744071578845313) [ 481.491570][T20233] bond3: option miimon: allowed values 0 - 2147483647 [ 481.515981][T20233] bond3 (unregistering): Released all slaves [ 482.003868][ T5692] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 482.201803][ T5692] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.215803][ T5692] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.227608][ T5692] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 482.237222][ T5692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.249018][T20323] trusted_key: encrypted_key: insufficient parameters specified [ 482.269023][ T5692] usb 3-1: config 0 descriptor?? [ 482.336437][ T9] usb 4-1: new low-speed USB device number 82 using dummy_hcd [ 482.494003][ T9059] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 482.511957][ T9] usb 4-1: Invalid ep0 maxpacket: 32 [ 482.644254][ T9] usb 4-1: new low-speed USB device number 83 using dummy_hcd [ 482.665668][ T9059] usb 2-1: not running at top speed; connect to a high speed hub [ 482.675531][ T9059] usb 2-1: config 1 has an invalid descriptor of length 190, skipping remainder of the config [ 482.685990][ T9059] usb 2-1: config 1 interface 0 has no altsetting 0 [ 482.695874][ T9059] usb 2-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 482.705352][ T9059] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.715472][ T5692] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 482.722314][ T9059] usb 2-1: Product: syz [ 482.723372][ T5692] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 482.734128][ T9059] usb 2-1: Manufacturer: ႓㋉쬞蜇ﺼꚐ䙅ﵵລ㼴쪣㲡ᵯՅ÷ꪽ⺬桕싟譴᳾饕翗깄ȫ佣巹ꛥ돆઼諻떬皏勐즩Ḝ䣣ⶀ些禑쩿㪘黤ꏃ븛⿾蹅琌ꭁ肚嘪纫鋛ꦯ㖋蕦欸蝍뫣㷼僭늓駶緐夭꾰ꦌ塄䗇‰Ŕ朝蕖ᄇꃭ謘룙鶌︻㕢雋蟦과툣膴윂ꮈ費♶ [ 482.734192][ T9059] usb 2-1: SerialNumber: syz [ 482.773731][ T5692] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 482.780975][ T5692] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 482.788410][ T5692] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 482.794354][ T9] usb 4-1: Invalid ep0 maxpacket: 32 [ 482.796761][ T5692] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 482.805489][ T9] usb usb4-port1: attempt power cycle [ 482.811114][ T5692] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 482.823920][ T9070] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 482.835118][ T5692] cp2112 0003:10C4:EA90.0019: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 482.894189][ T5751] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 482.936884][ T5692] cp2112 0003:10C4:EA90.0019: error requesting version [ 482.938714][T20303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.958197][T20303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.978227][ T9070] usb 1-1: config 171 has an invalid interface number: 109 but max is 0 [ 482.988785][ T9070] usb 1-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 483.003226][ T5692] cp2112 0003:10C4:EA90.0019: probe with driver cp2112 failed with error -32 [ 483.017495][ T9059] usb 2-1: USB disconnect, device number 75 [ 483.025248][ T9070] usb 1-1: config 171 has no interface number 0 [ 483.036590][ T9070] usb 1-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 483.072174][ T9070] usb 1-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 483.084620][ T5751] usb 5-1: Using ep0 maxpacket: 16 [ 483.092898][ T9070] usb 1-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 483.109967][ T5751] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 483.124444][ T9070] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 483.134334][ T9070] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.142757][ T9070] usb 1-1: Product: syz [ 483.149997][ T5751] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 483.159565][ T5751] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.167709][ T9070] usb 1-1: Manufacturer: syz [ 483.172867][ T9070] usb 1-1: SerialNumber: syz [ 483.175392][ T9] usb 4-1: new low-speed USB device number 84 using dummy_hcd [ 483.178943][ T5751] usb 5-1: Product: syz [ 483.191795][ T5751] usb 5-1: Manufacturer: syz [ 483.203609][T20350] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 483.207231][ T9] usb 4-1: Invalid ep0 maxpacket: 32 [ 483.220508][ T5751] usb 5-1: SerialNumber: syz [ 483.229708][ T5751] usb 5-1: config 0 descriptor?? [ 483.240174][ T5751] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 483.254045][ T5751] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 483.375446][ T9] usb 4-1: new low-speed USB device number 85 using dummy_hcd [ 483.394634][ T9] usb 4-1: Invalid ep0 maxpacket: 32 [ 483.414180][ T9] usb usb4-port1: unable to enumerate USB device [ 483.842157][T20395] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1829'. [ 484.275900][ T9070] ath6kl: Failed to submit usb control message: -110 [ 484.283973][ T9070] ath6kl: unable to send the bmi data to the device: -110 [ 484.295335][ T9070] ath6kl: Unable to send get target info: -110 [ 484.314132][T20386] ipvlan1: left allmulticast mode [ 484.330826][ T9070] ath6kl: Failed to init ath6kl core: -110 [ 484.354528][ T9070] ath6kl_usb 1-1:171.109: probe with driver ath6kl_usb failed with error -110 [ 484.414086][ T5751] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 484.544074][ T5751] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 484.571008][ T5751] em28xx 5-1:0.0: board has no eeprom [ 484.706762][ T5751] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 484.727701][ T5751] em28xx 5-1:0.0: dvb set to bulk mode. [ 484.746719][ T5692] em28xx 5-1:0.0: Binding DVB extension [ 484.930959][ T5692] em28xx 5-1:0.0: Registering input extension [ 485.081238][ T9] usb 3-1: USB disconnect, device number 80 [ 486.053947][ T5692] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 486.180290][ T9] usb 5-1: USB disconnect, device number 100 [ 486.216903][ T9] em28xx 5-1:0.0: Disconnecting em28xx [ 486.255808][ T5692] usb 4-1: config 0 has an invalid descriptor of length 187, skipping remainder of the config [ 486.267545][ T9] em28xx 5-1:0.0: Closing input extension [ 486.283930][ T5692] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 486.299573][ T5692] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 15075, setting to 64 [ 486.311123][ T5692] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 486.402853][ T5692] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 486.448880][ T5692] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 486.532302][ T9] em28xx 5-1:0.0: Freeing device [ 486.581676][ T5692] usb 4-1: Manufacturer: syz [ 486.615008][ T5692] usb 4-1: config 0 descriptor?? [ 486.673530][T20486] loop8: detected capacity change from 0 to 8 [ 486.712666][T20486] Dev loop8: unable to read RDB block 8 [ 486.755922][T20486] loop8: unable to read partition table [ 486.784863][T20486] loop8: partition table beyond EOD, truncated [ 486.816944][T20486] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 487.024618][T20496] netlink: 'syz.4.1839': attribute type 5 has an invalid length. [ 487.153970][ T5692] rc_core: IR keymap rc-hauppauge not found [ 487.174273][ T5692] Registered IR keymap rc-empty [ 487.208217][ T5692] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 487.275933][ T5692] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 487.367308][ T5692] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 487.445413][ T5751] usb 1-1: USB disconnect, device number 49 [ 487.493191][T20514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1841'. [ 487.512760][ T5692] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input57 [ 487.575320][ T5692] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 487.595527][T20514] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1841'. [ 487.636955][ T5692] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 487.685377][ T5692] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 487.734874][ T5692] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 487.774277][ T5692] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 487.819896][ T5692] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 487.855574][ T5692] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 487.910464][ T5692] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 487.918040][ T5751] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 487.981427][ T5692] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 487.996924][T20546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1844'. [ 488.044231][ T5692] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 488.094991][ T5692] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 488.120041][ T5692] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 488.133699][ T5751] usb 1-1: Using ep0 maxpacket: 8 [ 488.149140][ T5751] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 488.189089][ T5692] usb 4-1: USB disconnect, device number 86 [ 488.198828][ T5751] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.231599][ T5751] usb 1-1: Product: syz [ 488.251757][ T5751] usb 1-1: Manufacturer: syz [ 488.281162][ T5751] usb 1-1: SerialNumber: syz [ 488.307031][ T5751] usb 1-1: config 0 descriptor?? [ 488.320514][ T9] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 488.331904][ T5751] gspca_main: se401-2.14.0 probing 047d:5003 [ 488.504038][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 488.543462][ T9] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 488.570660][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.592529][ T9] usb 2-1: Product: syz [ 488.600739][ T9] usb 2-1: Manufacturer: syz [ 488.613116][ T9] usb 2-1: SerialNumber: syz [ 488.623971][ T5692] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 488.640506][ T9] usb 2-1: config 0 descriptor?? [ 488.683602][ T9] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 488.732612][ T5751] gspca_se401: Wrong descriptor type [ 488.739233][T20572] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1842'. [ 488.799083][ T5692] usb 4-1: config 2 has an invalid interface number: 228 but max is 0 [ 488.810206][ T5692] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 488.844267][ T5692] usb 4-1: config 2 has no interface number 0 [ 488.863904][ T5692] usb 4-1: config 2 interface 228 altsetting 177 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 488.883524][ T5751] usb 1-1: USB disconnect, device number 50 [ 488.896358][ T5692] usb 4-1: config 2 interface 228 has no altsetting 0 [ 488.937135][ T5692] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 488.970637][ T5692] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.004050][ T5692] usb 4-1: Product: syz [ 489.029584][ T5692] usb 4-1: Manufacturer: syz [ 489.052025][ T5692] usb 4-1: SerialNumber: syz [ 489.310490][ T5692] ims_pcu 4-1:2.228: probe with driver ims_pcu failed with error -22 [ 489.343589][ T5692] usb 4-1: USB disconnect, device number 87 [ 490.108664][T20603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1850'. [ 490.206586][T20610] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1850'. [ 490.594139][ T9059] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 490.763668][ T9059] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 490.801432][ T9059] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.816225][T20633] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1857'. [ 490.825900][ T9059] usb 5-1: Product: syz [ 490.830321][ T9059] usb 5-1: Manufacturer: syz [ 490.838024][ T9059] usb 5-1: SerialNumber: syz [ 490.869669][ T9059] usb 5-1: config 0 descriptor?? [ 490.897976][ T9059] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 490.923027][ T9059] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 490.954603][ T9059] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 490.979798][ T9059] usb 5-1: media controller created [ 491.018901][ T9059] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 491.118712][T20618] dvb-usb: bulk message failed: -22 (7/0) [ 491.251890][ T9059] DVB: Unable to find symbol mt352_attach() [ 491.344205][ T9] gspca_ov534_9: reg_r err -110 [ 491.363161][ T9059] DVB: Unable to find symbol nxt6000_attach() [ 491.376123][ T9059] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 491.412729][ T9059] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input58 [ 491.449667][ T9059] dvb-usb: schedule remote query interval to 1000 msecs. [ 491.471264][ T9059] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 491.483911][T20651] lo: Caught tx_queue_len zero misconfig [ 491.489782][ T9059] dvb-usb: bulk message failed: -22 (7/0) [ 491.503328][ T9059] dvb-usb: bulk message failed: -22 (7/0) [ 491.584954][ T9] gspca_ov534_9: Unknown sensor 0000 [ 491.585055][ T9] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 491.759633][T20657] syzkaller0: entered promiscuous mode [ 491.767737][T20657] syzkaller0: entered allmulticast mode [ 492.067560][ T9] usb 2-1: USB disconnect, device number 76 [ 492.202510][T20667] netlink: 'syz.1.1859': attribute type 3 has an invalid length. [ 492.220340][T20667] netlink: 46 bytes leftover after parsing attributes in process `syz.1.1859'. [ 492.326529][T20676] fuse: Unknown parameter 'vdL0x00000000000000030177777777777777777777700000000000000000000' [ 492.326532][T20675] fuse: Unknown parameter 'vdL0x00000000000000030177777777777777777777700000000000000000000' [ 492.355507][T20675] fuse: Unknown parameter 'default_permissionsp_id' [ 492.494238][ T9059] dvb-usb: bulk message failed: -22 (7/0) [ 492.510196][ T9059] dvb-usb: error while querying for an remote control event. [ 492.563916][ T9] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 492.737907][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 492.762517][ T9] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 492.789072][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.807213][ T9] usb 2-1: Product: syz [ 492.812968][ T9] usb 2-1: Manufacturer: syz [ 492.818140][ T9] usb 2-1: SerialNumber: syz [ 493.043355][ T9] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 493.077843][ T9] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 493.104352][ T9] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 493.126493][ T9] usb 2-1: media controller created [ 493.199315][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 493.235196][T20669] dvb-usb: bulk message failed: -22 (7/0) [ 493.332840][ T9] zl10353_read_register: readreg error (reg=127, ret==-32) [ 493.534624][ T9059] dvb-usb: bulk message failed: -22 (7/0) [ 493.552322][ T9059] dvb-usb: error while querying for an remote control event. [ 493.560248][ T9] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 493.674525][ T9] usb 2-1: USB disconnect, device number 77 [ 493.755247][ T9059] usb 5-1: USB disconnect, device number 101 [ 493.990631][ T9059] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 494.199619][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 494.199644][ T29] audit: type=1326 audit(1777401885.038:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20716 comm="syz.4.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdc299cdd9 code=0x7ffc0000 [ 494.300587][T20732] ip6tnl1: entered allmulticast mode [ 494.314207][ T29] audit: type=1326 audit(1777401885.078:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20716 comm="syz.4.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fcdc299cdd9 code=0x7ffc0000 [ 494.400517][T20732] bridge6: entered allmulticast mode [ 494.440301][ T29] audit: type=1326 audit(1777401885.078:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20716 comm="syz.4.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdc299cdd9 code=0x7ffc0000 [ 494.476102][T20732] bridge7: entered allmulticast mode [ 494.520273][T20732] bridge8: entered allmulticast mode [ 494.577960][ T29] audit: type=1326 audit(1777401885.088:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20716 comm="syz.4.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdc299cdd9 code=0x7ffc0000 [ 494.652726][ T29] audit: type=1326 audit(1777401885.188:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20716 comm="syz.4.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcdc299cdd9 code=0x7ffc0000 [ 494.684189][ T5692] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 494.767162][ T29] audit: type=1326 audit(1777401885.188:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20716 comm="syz.4.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdc299cdd9 code=0x7ffc0000 [ 494.828912][ T29] audit: type=1326 audit(1777401885.188:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20716 comm="syz.4.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcdc299cdd9 code=0x7ffc0000 [ 494.877173][ T29] audit: type=1326 audit(1777401885.188:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20716 comm="syz.4.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdc299cdd9 code=0x7ffc0000 [ 494.884420][ T5692] usb 2-1: Using ep0 maxpacket: 32 [ 494.938977][T20752] kAFS: unable to lookup cell '(,cL' [ 494.982742][ T5692] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.009473][ T5692] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 495.037621][ T5692] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 495.039807][ T29] audit: type=1326 audit(1777401885.198:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20716 comm="syz.4.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fcdc299cdd9 code=0x7ffc0000 [ 495.108663][ T5692] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.132980][ T29] audit: type=1326 audit(1777401885.198:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20716 comm="syz.4.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdc299cdd9 code=0x7ffc0000 [ 495.182651][ T5692] usb 2-1: config 0 descriptor?? [ 495.493896][ T5751] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 495.621908][ T5692] hid (null): unknown global tag 0xc [ 495.635263][ T5751] usb 4-1: device descriptor read/64, error -71 [ 495.653265][ T5692] elan 0003:04F3:074D.001A: unknown global tag 0xc [ 495.673072][ T5692] elan 0003:04F3:074D.001A: item 0 4 1 12 parsing failed [ 495.702772][ T5692] elan 0003:04F3:074D.001A: Hid Parse failed [ 495.723926][ T5692] elan 0003:04F3:074D.001A: probe with driver elan failed with error -22 [ 495.803944][ T24] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 495.883898][ T5751] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 495.903887][ T9059] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 495.977489][ T24] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 495.995091][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.030354][ T24] usb 1-1: config 0 descriptor?? [ 496.035541][ T5751] usb 4-1: device descriptor read/64, error -71 [ 496.078536][ T9059] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 496.099307][ T9059] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 496.110008][ T9059] usb 3-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 496.133282][ T9] usb 2-1: USB disconnect, device number 78 [ 496.164303][ T5751] usb usb4-port1: attempt power cycle [ 496.172336][ T9059] usb 3-1: config 220 has no interface number 2 [ 496.203532][ T9059] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 496.264878][ T9059] usb 3-1: config 220 interface 0 has no altsetting 0 [ 496.287392][ T9059] usb 3-1: config 220 interface 76 has no altsetting 0 [ 496.303882][ T9059] usb 3-1: config 220 interface 1 has no altsetting 0 [ 496.317793][ T9059] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 496.337156][ T9059] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.357655][ T9059] usb 3-1: Product: syz [ 496.375523][ T9059] usb 3-1: Manufacturer: syz [ 496.386964][ T9059] usb 3-1: SerialNumber: syz [ 496.525525][ T5751] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 496.565347][ T5751] usb 4-1: device descriptor read/8, error -71 [ 496.614417][ C1] sd 0:0:1:0: [sda] tag#2315 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 496.624993][ C1] sd 0:0:1:0: [sda] tag#2315 CDB: Read(6) 08 00 05 02 00 00 [ 496.709087][ T9059] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 496.742596][ T9059] uvcvideo 3-1:220.0: No valid video chain found. [ 496.766030][ T9059] usb 3-1: selecting invalid altsetting 0 [ 496.817967][ T9059] usb 3-1: selecting invalid altsetting 0 [ 496.826973][ T9059] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 496.843909][ T5751] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 496.882775][ T9059] usb 3-1: USB disconnect, device number 81 [ 496.903501][ T5751] usb 4-1: device descriptor read/8, error -71 [ 497.041625][ T24] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 497.049492][ T5751] usb usb4-port1: unable to enumerate USB device [ 497.057072][ T24] [drm:udl_init] *ERROR* Selecting channel failed [ 497.085123][ T9070] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 497.101091][ T24] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 497.108578][ T24] [drm] Initialized udl on minor 2 [ 497.116156][ T24] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 497.126713][ T24] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 497.139856][ T5751] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 497.150323][ T24] usb 1-1: USB disconnect, device number 51 [ 497.156671][ T5751] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 497.284578][ T9070] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 497.293563][ T9070] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 497.302643][ T9070] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 497.313841][ T9070] usb 2-1: config 0 interface 0 has no altsetting 0 [ 497.322089][ T9070] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 497.331185][ T9070] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 497.342365][ T9070] usb 2-1: config 0 interface 0 has no altsetting 0 [ 497.350452][ T9070] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 497.359561][ T9070] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 497.370710][ T9070] usb 2-1: config 0 interface 0 has no altsetting 0 [ 497.378637][ T9070] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 497.403899][ T9070] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 497.415712][ T9070] usb 2-1: config 0 interface 0 has no altsetting 0 [ 497.423707][ T9070] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 497.434184][ T9070] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 497.446207][ T9070] usb 2-1: config 0 interface 0 has no altsetting 0 [ 497.475304][ T9070] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 497.485150][ T9070] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 497.501415][ T9070] usb 2-1: config 0 interface 0 has no altsetting 0 [ 497.513021][ T9070] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 497.532796][ T9070] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 497.554298][ T9070] usb 2-1: config 0 interface 0 has no altsetting 0 [ 497.563941][ T9070] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 497.585561][ T9070] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 497.606439][ T9070] usb 2-1: config 0 interface 0 has no altsetting 0 [ 497.629977][ T9070] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 497.639843][ T9070] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 497.657161][ T9070] usb 2-1: Product: syz [ 497.667459][T20873] loop8: detected capacity change from 0 to 8 [ 497.672043][ T9070] usb 2-1: Manufacturer: syz [ 497.680943][ T9070] usb 2-1: SerialNumber: syz [ 497.687817][T20873] Dev loop8: unable to read RDB block 8 [ 497.693505][T20873] loop8: unable to read partition table [ 497.700329][T20873] loop8: partition table beyond EOD, truncated [ 497.711820][ T9070] usb 2-1: config 0 descriptor?? [ 497.721430][T20873] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 497.756037][ T9070] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 497.765204][ T9059] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 497.894360][T20884] kAFS: unable to lookup cell '(,cL' [ 497.923891][ T9059] usb 3-1: device descriptor read/64, error -71 [ 497.944996][T20887] xt_ecn: cannot match TCP bits for non-tcp packets [ 498.057936][T20833] netlink: 'syz.1.1879': attribute type 1 has an invalid length. [ 498.105107][T20833] netlink: 'syz.1.1879': attribute type 2 has an invalid length. [ 498.175861][ T9059] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 498.212263][ C1] usb 2-1: yurex_control_callback - control failed: -71 [ 498.218825][ T9] usb 2-1: USB disconnect, device number 79 [ 498.245997][ T9] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 498.324126][ T9059] usb 3-1: device descriptor read/64, error -71 [ 498.465583][ T9059] usb usb3-port1: attempt power cycle [ 498.803248][T20948] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1892'. [ 498.813895][ T9059] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 498.833934][ T9070] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 498.836381][ T9059] usb 3-1: device descriptor read/8, error -71 [ 498.987743][ T9070] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 499.012298][ T9070] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 499.025298][ T9070] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 499.037893][ T9070] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 499.048055][ T9070] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.051090][T20954] kAFS: unable to lookup cell '(,cL' [ 499.056168][ T9070] usb 5-1: Product: syz [ 499.056190][ T9070] usb 5-1: Manufacturer: syz [ 499.056206][ T9070] usb 5-1: SerialNumber: syz [ 499.075608][ T9070] usb 5-1: config 0 descriptor?? [ 499.084000][ T9059] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 499.097881][T20930] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 499.112508][T20930] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 499.116668][ T9059] usb 3-1: device descriptor read/8, error -71 [ 499.151457][ T9070] usb 5-1: ucan: probing device on interface #0 [ 499.234639][ T9059] usb usb3-port1: unable to enumerate USB device [ 499.350983][ T9070] usb 5-1: ucan: device protocol version 1949266947 is not supported [ 499.359689][ T9070] usb 5-1: ucan: probe failed; try to update the device firmware [ 500.001540][T21001] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1898'. [ 500.076981][T21006] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1900'. [ 500.095158][T21005] vlan2: entered allmulticast mode [ 500.106689][T21005] bridge5: entered allmulticast mode [ 500.248793][T21011] netlink: 'syz.1.1902': attribute type 2 has an invalid length. [ 500.698531][T21032] kAFS: unable to lookup cell '(,cL' [ 501.173969][ T9070] usb 4-1: new low-speed USB device number 92 using dummy_hcd [ 501.339426][ T9070] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 501.372228][ T9070] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 501.415837][ T9070] usb 4-1: config 1 interface 0 has no altsetting 0 [ 501.441979][ T9070] usb 4-1: New USB device found, idVendor=05ac, idProduct=021c, bcdDevice= 0.40 [ 501.472929][ T9070] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.497408][ T9070] usb 4-1: Product: ࠬ [ 501.508026][ T9070] usb 4-1: Manufacturer: 룈椩ᤥ䟢齟䢷⊗ᅞ螽榄駶ﶱ銝멩醣潫톁栽芚骖塪ﯔΗ [ 501.545791][ T9070] usb 4-1: SerialNumber: ꣮⋽딚䖩謑萶唵쮑᱁܁츇읓ꭀ䷋鷥ኻ᳻鐍帵锎㨶뭅빥坚ꍖ檏㞒䟖瓹뱹啂瞡ۜ嚯ﶭ籂⳾ԏ漈墻 [ 501.609086][T21042] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 501.627208][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.633643][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.783261][ T24] usb 5-1: USB disconnect, device number 102 [ 502.069168][ T9070] usbhid 4-1:1.0: can't add hid device: -71 [ 502.081148][ T9070] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 502.137112][ T9070] usb 4-1: USB disconnect, device number 92 [ 502.660028][T21074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1911'. [ 502.714670][T21074] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1911'. [ 502.860669][T21077] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 503.210853][T21095] loop6: detected capacity change from 0 to 2640 [ 503.232523][T21095] buffer_io_error: 27 callbacks suppressed [ 503.232543][T21095] Buffer I/O error on dev loop6, logical block 0, async page read [ 503.256350][T21095] Buffer I/O error on dev loop6, logical block 0, async page read [ 503.291396][T21095] Buffer I/O error on dev loop6, logical block 0, async page read [ 503.317295][T21095] Buffer I/O error on dev loop6, logical block 0, async page read [ 503.337991][T21095] Buffer I/O error on dev loop6, logical block 0, async page read [ 503.350791][T21095] Buffer I/O error on dev loop6, logical block 0, async page read [ 503.366388][T21101] blk_print_req_error: 188 callbacks suppressed [ 503.366404][T21101] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 503.466518][T21095] Buffer I/O error on dev loop6, logical block 0, async page read [ 503.480474][T21101] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 503.520779][T21095] Buffer I/O error on dev loop6, logical block 0, async page read [ 503.576248][T21095] ldm_validate_partition_table(): Disk read failed. [ 503.594154][T21117] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1918'. [ 503.604197][T21095] Buffer I/O error on dev loop6, logical block 0, async page read [ 503.634208][T21101] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 503.645947][T21095] Buffer I/O error on dev loop6, logical block 0, async page read [ 503.673934][ T9059] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 503.714546][T21095] Dev loop6: unable to read RDB block 0 [ 503.744647][T21095] loop6: unable to read partition table [ 503.760754][T21095] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 503.782119][T21101] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 503.850926][T21101] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 503.855495][ T9059] usb 2-1: Using ep0 maxpacket: 16 [ 503.907738][ T9059] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 503.922734][T21101] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 503.955604][T21101] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 503.973144][ T9059] usb 2-1: New USB device found, idVendor=0582, idProduct=004d, bcdDevice= 0.40 [ 504.009934][ T9059] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.027605][T21101] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 504.033747][ T9059] usb 2-1: Product: syz [ 504.056046][ T9059] usb 2-1: Manufacturer: syz [ 504.061144][T21132] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1919'. [ 504.070483][ T9059] usb 2-1: SerialNumber: syz [ 504.235784][T21151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1920'. [ 504.255941][T21142] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1920'. [ 504.306886][T21157] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1920'. [ 504.354400][ T9059] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 504.565727][T21174] netlink: 'syz.2.1922': attribute type 2 has an invalid length. [ 504.632382][ T9059] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 504.660246][ T9059] usb 2-1: USB disconnect, device number 80 [ 504.712712][T21181] fuse: Invalid gid '00000000000000000000004' [ 504.742967][T17362] udevd[17362]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 504.993566][T21191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1924'. [ 505.024788][T21191] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1924'. [ 505.273870][ T9059] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 505.313972][ T24] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 505.434015][ T9059] usb 2-1: Using ep0 maxpacket: 32 [ 505.442893][ T9059] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 505.453284][ T9059] usb 2-1: config 0 has no interface number 0 [ 505.463268][ T9059] usb 2-1: config 0 interface 184 has no altsetting 0 [ 505.473943][ T24] usb 4-1: device descriptor read/64, error -71 [ 505.500995][ T9059] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 505.543053][ T9059] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.580398][ T9059] usb 2-1: Product: syz [ 505.599076][ T9059] usb 2-1: Manufacturer: syz [ 505.621754][ T9059] usb 2-1: SerialNumber: syz [ 505.658690][ T9059] usb 2-1: config 0 descriptor?? [ 505.706707][T21213] IPVS: length: 255 != 24 [ 505.754168][ T24] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 505.923917][ T24] usb 4-1: device descriptor read/64, error -71 [ 505.963905][ T9] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 506.035261][ T24] usb usb4-port1: attempt power cycle [ 506.134298][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 506.145695][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 506.184499][ T9] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 506.202317][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.210960][ T9] usb 1-1: Product: syz [ 506.215616][ T9] usb 1-1: Manufacturer: syz [ 506.221123][ T9] usb 1-1: SerialNumber: syz [ 506.262997][ T9] usb 1-1: config 0 descriptor?? [ 506.292817][ T9] cdc_ether 1-1:0.0: missing cdc header descriptor [ 506.311192][ T9] usb 1-1: unsupported MDLM descriptors [ 506.384346][ T24] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 506.445027][ T24] usb 4-1: device descriptor read/8, error -71 [ 506.497261][ T9] usb 1-1: USB disconnect, device number 52 [ 506.560021][T21226] vlan2: entered promiscuous mode [ 506.566567][T21226] syz_tun: entered promiscuous mode [ 506.695256][ T9059] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 506.714322][ T24] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 506.768233][ T24] usb 4-1: device descriptor read/8, error -71 [ 506.884348][ T24] usb usb4-port1: unable to enumerate USB device [ 506.897978][ T9059] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 506.915157][ T9059] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 506.944956][ T9059] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 506.973068][ T9059] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 506.984580][ T9059] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 507.004142][ T9059] usb 2-1: USB disconnect, device number 81 [ 507.259305][T21273] netlink: 'syz.0.1931': attribute type 12 has an invalid length. [ 507.769490][T21296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1937'. [ 507.792285][T21296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1937'. [ 508.113887][ T9059] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 508.278872][ T9059] usb 3-1: Using ep0 maxpacket: 32 [ 508.310811][T21325] kAFS: unable to lookup cell '' [ 508.322676][ T9059] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 508.342713][T21325] kAFS: unable to lookup cell '(,c' [ 508.359404][ T9059] usb 3-1: config 0 has no interface number 0 [ 508.382472][ T9059] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 508.457773][ T9059] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 508.488754][ T9059] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.527219][ T9059] usb 3-1: Product: syz [ 508.536745][ T9059] usb 3-1: Manufacturer: syz [ 508.558068][ T9059] usb 3-1: SerialNumber: syz [ 508.581089][ T9059] usb 3-1: config 0 descriptor?? [ 508.604419][T21301] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 508.737291][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 508.737323][ T29] audit: type=1326 audit(1777401899.578:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21338 comm="syz.1.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b9d9cdd9 code=0x7ffc0000 [ 508.854333][T21301] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 508.912024][ T29] audit: type=1326 audit(1777401899.578:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21338 comm="syz.1.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b9d9cdd9 code=0x7ffc0000 [ 509.100536][ T29] audit: type=1326 audit(1777401899.618:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21338 comm="syz.1.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f99b9d9cdd9 code=0x7ffc0000 [ 509.205323][ T29] audit: type=1326 audit(1777401899.618:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21338 comm="syz.1.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b9d9cdd9 code=0x7ffc0000 [ 509.551476][T21301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.560750][ T29] audit: type=1326 audit(1777401899.618:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21338 comm="syz.1.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b9d9cdd9 code=0x7ffc0000 [ 509.621156][T21301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.682326][ T29] audit: type=1326 audit(1777401899.618:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21338 comm="syz.1.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f99b9d9cdd9 code=0x7ffc0000 [ 509.810909][ T29] audit: type=1326 audit(1777401899.618:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21338 comm="syz.1.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b9d9cdd9 code=0x7ffc0000 [ 509.841374][T21356] input: syz1 as /devices/virtual/input/input59 [ 509.851857][ T9059] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 509.926460][ T9059] asix 3-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 509.969231][ T29] audit: type=1326 audit(1777401899.618:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21338 comm="syz.1.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b9d9cdd9 code=0x7ffc0000 [ 509.996480][ T9059] asix 3-1:0.188: probe with driver asix failed with error -61 [ 510.078167][ T29] audit: type=1326 audit(1777401899.618:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21338 comm="syz.1.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f99b9d9cdd9 code=0x7ffc0000 [ 510.123257][ T29] audit: type=1326 audit(1777401899.618:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21338 comm="syz.1.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b9d9cdd9 code=0x7ffc0000 [ 510.422220][T21369] syzkaller0: entered promiscuous mode [ 510.455979][T21369] syzkaller0: entered allmulticast mode [ 510.465900][T21375] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 510.514076][T21370] tipc: Enabled bearer , priority 0 [ 510.533532][T21377] tipc: Enabling of bearer rejected, already enabled [ 510.569078][T21370] tipc: Resetting bearer [ 510.654694][T21370] tipc: Disabling bearer [ 511.079321][T21389] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1954'. [ 511.136689][T21389] fuse: Bad value for 'group_id' [ 511.153983][T21389] fuse: Bad value for 'group_id' [ 511.213581][T21389] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 511.546303][ T9059] usb 3-1: USB disconnect, device number 86 [ 512.608246][T21450] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1966'. [ 512.667194][T21450] fuse: Bad value for 'group_id' [ 512.691158][T21450] fuse: Bad value for 'group_id' [ 512.715328][T21452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1965'. [ 512.726743][T21450] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 512.762687][T21452] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1965'. [ 513.244016][ T24] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 513.424013][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 513.440300][ T24] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 513.450615][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.474899][ T24] usb 2-1: config 0 descriptor?? [ 513.501107][ T24] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 514.024112][ T24] gspca_vc032x: reg_r err -110 [ 514.040294][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.052870][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.068097][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.079994][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.100749][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.118393][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.141519][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.165475][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.207976][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.245588][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.267269][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.288863][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.312452][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.339338][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.369638][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.398908][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.419033][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.439875][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.458592][ T24] gspca_vc032x: Unknown sensor... [ 514.474978][ T24] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 514.489907][ T24] usb 2-1: USB disconnect, device number 82 [ 515.144607][ T24] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 515.337943][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 515.381042][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 515.397408][T21521] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1977'. [ 515.408196][ T24] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 515.425371][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 515.443662][ T24] usb 1-1: SerialNumber: syz [ 515.681151][T21526] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1978'. [ 515.693358][ T24] usb 1-1: 0:2 : does not exist [ 515.751457][T21526] fuse: Bad value for 'group_id' [ 515.773825][T21526] fuse: Bad value for 'group_id' [ 515.825217][T21526] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 515.840140][ T24] usb 1-1: USB disconnect, device number 53 [ 515.917196][T17362] udevd[17362]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 516.037601][T21548] fuse: Unknown parameter 'rootmo' [ 516.171381][T21558] xt_hashlimit: size too large, truncated to 1048576 [ 516.324105][ T9070] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 516.355504][T21563] fuse: Bad value for 'fd' [ 516.505772][ T9070] usb 2-1: Using ep0 maxpacket: 16 [ 516.535687][ T9070] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 516.583344][ T9070] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 516.607226][ T9070] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 516.617887][ T9070] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.627098][ T9070] usb 2-1: Product: syz [ 516.631542][ T9070] usb 2-1: Manufacturer: syz [ 516.637198][ T9070] usb 2-1: SerialNumber: syz [ 516.658444][ T9070] usb 2-1: config 0 descriptor?? [ 516.676715][ T9070] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 516.693072][ T9070] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 516.971632][ T9070] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 517.009198][ T9070] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 517.052572][ T9070] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 517.096202][ T9070] em28xx 2-1:0.0: No AC97 audio processor [ 517.139849][ T9070] usb 2-1: USB disconnect, device number 83 [ 517.173164][ T9070] em28xx 2-1:0.0: Disconnecting em28xx [ 517.252241][ T9070] em28xx 2-1:0.0: Freeing device [ 517.268923][T21591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.336964][ T24] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 517.405740][T21603] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1989'. [ 517.420759][T21603] fuse: Bad value for 'group_id' [ 517.427157][T21603] fuse: Bad value for 'group_id' [ 517.447843][T21603] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 517.513996][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 517.538435][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 517.591399][ T24] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 517.629991][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 517.671091][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 517.760272][ T24] usb 3-1: SerialNumber: syz [ 518.148990][ T9] usb 3-1: USB disconnect, device number 87 [ 518.169751][T21625] syz.1.1991 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 518.226288][T21625] xt_l2tp: v2 tid > 0xffff: 134217728 [ 518.464201][T21638] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 518.491224][T21638] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 518.552201][T21635] sg_write: data in/out 393189/56 bytes for SCSI command 0x0-- guessing data in; [ 518.552201][T21635] program syz.4.1992 not setting count and/or reply_len properly [ 518.783913][ T24] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 518.988944][ T24] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 519.018281][ T24] usb 2-1: config 0 has no interface number 0 [ 519.034544][ T24] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 519.058169][T21657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1997'. [ 519.070835][ T24] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 519.103331][ T24] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 519.141856][ T24] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 519.168229][ T24] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 519.203640][ T24] usb 2-1: Product: syz [ 519.203664][ T24] usb 2-1: SerialNumber: syz [ 519.221224][ T24] usb 2-1: config 0 descriptor?? [ 519.244511][ T24] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 519.248714][ T24] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input61 [ 519.250660][T21660] netlink: 372 bytes leftover after parsing attributes in process `syz.0.1998'. [ 519.253061][ T24] ------------[ cut here ]------------ [ 519.253165][ T24] URB ffff88803615e000 submitted while active [ 519.253190][ T24] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x7b/0x18b0, CPU#1: kworker/1:0/24 [ 519.253243][ T24] Modules linked in: [ 519.254379][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 519.254414][ T24] Tainted: [L]=SOFTLOCKUP [ 519.254425][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 519.254451][ T24] Workqueue: usb_hub_wq hub_event [ 519.254483][ T24] RIP: 0010:usb_submit_urb+0x7e/0x18b0 [ 519.254520][ T24] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 27 ad f4 fa 49 83 3e 00 74 40 e8 2c 72 89 fa 48 8d 3d 45 be 01 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 11 72 89 fa eb 05 e8 0a 72 [ 519.254543][ T24] RSP: 0018:ffffc900001e6b30 EFLAGS: 00010287 [ 519.254566][ T24] RAX: ffffffff873c3a04 RBX: ffff88803615e000 RCX: 0000000000100000 [ 519.254584][ T24] RDX: ffffc90019a4d000 RSI: ffff88803615e000 RDI: ffffffff903df850 [ 519.254604][ T24] RBP: 000000000000000f R08: ffffffff903098f7 R09: 1ffffffff206131e [ 519.254622][ T24] R10: dffffc0000000000 R11: fffffbfff206131f R12: 0000000000000cc0 [ 519.254639][ T24] R13: ffff888055106048 R14: ffff88803615e008 R15: dffffc0000000000 [ 519.254659][ T24] FS: 0000000000000000(0000) GS:ffff888125393000(0000) knlGS:0000000000000000 [ 519.254679][ T24] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 519.254697][ T24] CR2: 00002000000002c0 CR3: 00000000451c0000 CR4: 00000000003526f0 [ 519.254718][ T24] DR0: 0000000000000008 DR1: 0000000000000002 DR2: 0000000000000404 [ 519.254734][ T24] DR3: ffffffffefffff14 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 519.254751][ T24] Call Trace: [ 519.254762][ T24] [ 519.254778][ T24] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 519.254810][ T24] ? __pm_runtime_resume+0x129/0x180 [ 519.254848][ T24] cm109_input_open+0x1fb/0x480 [ 519.254891][ T24] input_open_device+0x1f8/0x3b0 [ 519.254925][ T24] kbd_connect+0xf6/0x150 [ 519.254962][ T24] input_register_device+0xce0/0x1140 [ 519.255002][ T24] cm109_usb_probe+0x1190/0x1690 [ 519.255059][ T24] usb_probe_interface+0x659/0xc70 [ 519.255101][ T24] ? __pfx_usb_probe_interface+0x10/0x10 [ 519.255131][ T24] really_probe+0x267/0xaf0 [ 519.255170][ T24] __driver_probe_device+0x1ef/0x380 [ 519.255204][ T24] driver_probe_device+0x4f/0x240 [ 519.255239][ T24] __device_attach_driver+0x279/0x430 [ 519.255275][ T24] bus_for_each_drv+0x258/0x2f0 [ 519.255313][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 519.255344][ T24] ? __pfx_bus_for_each_drv+0x10/0x10 [ 519.255382][ T24] ? lockdep_hardirqs_on+0x7a/0x110 [ 519.255410][ T24] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 519.255452][ T24] __device_attach+0x2c5/0x450 [ 519.255485][ T24] ? __pfx___device_attach+0x10/0x10 [ 519.255520][ T24] ? _raw_spin_unlock+0x28/0x50 [ 519.255548][ T24] device_initial_probe+0xa1/0xd0 [ 519.255580][ T24] bus_probe_device+0x12a/0x220 [ 519.255620][ T24] device_add+0x7e9/0xbb0 [ 519.255652][ T24] usb_set_configuration+0x1a87/0x2110 [ 519.255722][ T24] usb_generic_driver_probe+0x8d/0x150 [ 519.255754][ T24] usb_probe_device+0x1c4/0x3b0 [ 519.255786][ T24] ? __pfx_usb_probe_device+0x10/0x10 [ 519.255812][ T24] really_probe+0x267/0xaf0 [ 519.255848][ T24] __driver_probe_device+0x1ef/0x380 [ 519.255879][ T24] driver_probe_device+0x4f/0x240 [ 519.255912][ T24] __device_attach_driver+0x279/0x430 [ 519.255946][ T24] bus_for_each_drv+0x258/0x2f0 [ 519.255980][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 519.256010][ T24] ? __pfx_bus_for_each_drv+0x10/0x10 [ 519.256045][ T24] ? lockdep_hardirqs_on+0x7a/0x110 [ 519.256072][ T24] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 519.256100][ T24] __device_attach+0x2c5/0x450 [ 519.256131][ T24] ? __pfx___device_attach+0x10/0x10 [ 519.256162][ T24] ? _raw_spin_unlock+0x28/0x50 [ 519.256187][ T24] device_initial_probe+0xa1/0xd0 [ 519.256216][ T24] bus_probe_device+0x12a/0x220 [ 519.256254][ T24] device_add+0x7e9/0xbb0 [ 519.256283][ T24] usb_new_device+0xa08/0x16f0 [ 519.256332][ T24] ? __pfx_usb_new_device+0x10/0x10 [ 519.256368][ T24] ? _raw_spin_unlock_irq+0x23/0x50 [ 519.256396][ T24] hub_event+0x2a1c/0x4f30 [ 519.256422][ T24] ? do_raw_spin_unlock+0xf5/0x210 [ 519.256594][ T24] ? __pfx_hub_event+0x10/0x10 [ 519.717555][ T24] ? process_scheduled_works+0xa70/0x1860 [ 519.717603][ T24] ? process_scheduled_works+0xa70/0x1860 [ 519.717631][ T24] ? process_scheduled_works+0xa70/0x1860 [ 519.717661][ T24] process_scheduled_works+0xb5d/0x1860 [ 519.717724][ T24] ? __pfx_process_scheduled_works+0x10/0x10 [ 519.717758][ T24] ? assign_work+0x3d5/0x5e0 [ 519.717791][ T24] worker_thread+0xa53/0xfc0 [ 519.717851][ T24] kthread+0x388/0x470 [ 519.717884][ T24] ? __pfx_worker_thread+0x10/0x10 [ 519.717909][ T24] ? __pfx_kthread+0x10/0x10 [ 519.717944][ T24] ret_from_fork+0x514/0xb70 [ 519.717976][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 519.718005][ T24] ? __switch_to+0xc79/0x1410 [ 519.718044][ T24] ? __pfx_kthread+0x10/0x10 [ 519.718078][ T24] ret_from_fork_asm+0x1a/0x30 [ 519.718128][ T24] [ 519.718156][ T24] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 519.718192][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 519.718235][ T24] Tainted: [L]=SOFTLOCKUP [ 519.718244][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 519.718259][ T24] Workqueue: usb_hub_wq hub_event [ 519.718305][ T24] Call Trace: [ 519.718316][ T24] [ 519.718327][ T24] vpanic+0x56c/0xa60 [ 519.718356][ T24] ? __pfx__printk+0x10/0x10 [ 519.718388][ T24] ? __pfx_vpanic+0x10/0x10 [ 519.718413][ T24] ? is_bpf_text_address+0x292/0x2b0 [ 519.718439][ T24] ? is_bpf_text_address+0x26/0x2b0 [ 519.718473][ T24] panic+0xc5/0xd0 [ 519.718502][ T24] ? __pfx_panic+0x10/0x10 [ 519.718537][ T24] ? ret_from_fork_asm+0x1a/0x30 [ 519.718582][ T24] __warn+0x315/0x4c0 [ 519.718606][ T24] ? usb_submit_urb+0x7b/0x18b0 [ 519.718642][ T24] ? usb_submit_urb+0x7b/0x18b0 [ 519.718678][ T24] __report_bug+0x29a/0x540 [ 519.718704][ T24] ? trace_irq_disable+0x3b/0x140 [ 519.718745][ T24] ? usb_submit_urb+0x7b/0x18b0 [ 519.718779][ T24] ? __pfx___report_bug+0x10/0x10 [ 519.718803][ T24] ? __mutex_trylock_common+0x158/0x260 [ 519.718845][ T24] ? rcu_is_watching+0x15/0xb0 [ 519.718875][ T24] ? trace_contention_end+0x3d/0x140 [ 519.718912][ T24] report_bug_entry+0x19a/0x290 [ 519.718939][ T24] ? usb_submit_urb+0x7e/0x18b0 [ 519.718972][ T24] ? usb_submit_urb+0x83/0x18b0 [ 519.719005][ T24] handle_bug+0xce/0x200 [ 519.719036][ T24] exc_invalid_op+0x1a/0x50 [ 519.719067][ T24] asm_exc_invalid_op+0x1a/0x20 [ 519.719091][ T24] RIP: 0010:usb_submit_urb+0x7e/0x18b0 [ 519.719125][ T24] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 27 ad f4 fa 49 83 3e 00 74 40 e8 2c 72 89 fa 48 8d 3d 45 be 01 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 11 72 89 fa eb 05 e8 0a 72 [ 519.719145][ T24] RSP: 0018:ffffc900001e6b30 EFLAGS: 00010287 [ 519.719167][ T24] RAX: ffffffff873c3a04 RBX: ffff88803615e000 RCX: 0000000000100000 [ 519.719194][ T24] RDX: ffffc90019a4d000 RSI: ffff88803615e000 RDI: ffffffff903df850 [ 519.719213][ T24] RBP: 000000000000000f R08: ffffffff903098f7 R09: 1ffffffff206131e [ 519.719247][ T24] R10: dffffc0000000000 R11: fffffbfff206131f R12: 0000000000000cc0 [ 519.719264][ T24] R13: ffff888055106048 R14: ffff88803615e008 R15: dffffc0000000000 [ 519.719291][ T24] ? usb_submit_urb+0x74/0x18b0 [ 519.719334][ T24] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 519.719360][ T24] ? __pm_runtime_resume+0x129/0x180 [ 519.719397][ T24] cm109_input_open+0x1fb/0x480 [ 519.719437][ T24] input_open_device+0x1f8/0x3b0 [ 519.719473][ T24] kbd_connect+0xf6/0x150 [ 519.719513][ T24] input_register_device+0xce0/0x1140 [ 519.719556][ T24] cm109_usb_probe+0x1190/0x1690 [ 519.719613][ T24] usb_probe_interface+0x659/0xc70 [ 519.719660][ T24] ? __pfx_usb_probe_interface+0x10/0x10 [ 519.719726][ T24] really_probe+0x267/0xaf0 [ 519.719876][ T24] __driver_probe_device+0x1ef/0x380 [ 519.719995][ T24] driver_probe_device+0x4f/0x240 [ 519.720082][ T24] __device_attach_driver+0x279/0x430 [ 519.720169][ T24] bus_for_each_drv+0x258/0x2f0 [ 519.720292][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 519.720374][ T24] ? __pfx_bus_for_each_drv+0x10/0x10 [ 519.720458][ T24] ? lockdep_hardirqs_on+0x7a/0x110 [ 519.720533][ T24] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 519.720628][ T24] __device_attach+0x2c5/0x450 [ 519.720713][ T24] ? __pfx___device_attach+0x10/0x10 [ 519.720783][ T24] ? _raw_spin_unlock+0x28/0x50 [ 519.720856][ T24] device_initial_probe+0xa1/0xd0 [ 519.720948][ T24] bus_probe_device+0x12a/0x220 [ 519.721071][ T24] device_add+0x7e9/0xbb0 [ 519.721151][ T24] usb_set_configuration+0x1a87/0x2110 [ 519.721336][ T24] usb_generic_driver_probe+0x8d/0x150 [ 519.721416][ T24] usb_probe_device+0x1c4/0x3b0 [ 519.721486][ T24] ? __pfx_usb_probe_device+0x10/0x10 [ 519.721555][ T24] really_probe+0x267/0xaf0 [ 519.721640][ T24] __driver_probe_device+0x1ef/0x380 [ 519.721721][ T24] driver_probe_device+0x4f/0x240 [ 519.721804][ T24] __device_attach_driver+0x279/0x430 [ 519.721894][ T24] bus_for_each_drv+0x258/0x2f0 [ 519.721984][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 519.722058][ T24] ? __pfx_bus_for_each_drv+0x10/0x10 [ 519.722191][ T24] ? lockdep_hardirqs_on+0x7a/0x110 [ 519.722267][ T24] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 519.722354][ T24] __device_attach+0x2c5/0x450 [ 519.722435][ T24] ? __pfx___device_attach+0x10/0x10 [ 519.722524][ T24] ? _raw_spin_unlock+0x28/0x50 [ 519.722624][ T24] device_initial_probe+0xa1/0xd0 [ 519.722723][ T24] bus_probe_device+0x12a/0x220 [ 519.722835][ T24] device_add+0x7e9/0xbb0 [ 519.722920][ T24] usb_new_device+0xa08/0x16f0 [ 519.723053][ T24] ? __pfx_usb_new_device+0x10/0x10 [ 519.723162][ T24] ? _raw_spin_unlock_irq+0x23/0x50 [ 519.723249][ T24] hub_event+0x2a1c/0x4f30 [ 519.723326][ T24] ? do_raw_spin_unlock+0xf5/0x210 [ 519.723548][ T24] ? __pfx_hub_event+0x10/0x10 [ 519.723612][ T24] ? process_scheduled_works+0xa70/0x1860 [ 519.723698][ T24] ? process_scheduled_works+0xa70/0x1860 [ 519.723757][ T24] ? process_scheduled_works+0xa70/0x1860 [ 519.723829][ T24] process_scheduled_works+0xb5d/0x1860 [ 519.724017][ T24] ? __pfx_process_scheduled_works+0x10/0x10 [ 519.724123][ T24] ? assign_work+0x3d5/0x5e0 [ 519.724211][ T24] worker_thread+0xa53/0xfc0 [ 519.724338][ T24] kthread+0x388/0x470 [ 519.724424][ T24] ? __pfx_worker_thread+0x10/0x10 [ 519.724477][ T24] ? __pfx_kthread+0x10/0x10 [ 519.724566][ T24] ret_from_fork+0x514/0xb70 [ 519.724644][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 519.724711][ T24] ? __switch_to+0xc79/0x1410 [ 519.724809][ T24] ? __pfx_kthread+0x10/0x10 [ 519.724894][ T24] ret_from_fork_asm+0x1a/0x30 [ 519.725023][ T24] [ 519.726234][ T24] Kernel Offset: disabled