last executing test programs: 6m35.918062234s ago: executing program 2 (id=34): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5504, &(0x7f000000c0c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x183b41, 0x51) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000340)=0xfffffff9) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x9, 0x800800}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) 6m29.48801834s ago: executing program 2 (id=49): socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) 6m26.872350112s ago: executing program 2 (id=56): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000000c0)={{0x1, 0x2, 0x4, 0x3, 0x8000}, 0x1ff, 0x10, 'id0\x00', 'timer1\x00', 0x0, 0x1, 0x5, 0x8000, 0x4}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x250, 0x700001b, 0x148, 0x0, 0x148, 0x350, 0x206, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'macvlan1\x00', {0xff}, {}, 0xff84}, 0x1ea, 0x1e8, 0x250, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x5, 0x1ff, 0x1, 0x1, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0\x00', {0xff}, 'vxcan1\x00', {0xff}, 0x9}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@random="0b65df84f884", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xe, 0x20, 0x65, 0x0, 0x3, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x4e21, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x6, 0x100, @void}}}}}}}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) 6m25.791316319s ago: executing program 2 (id=58): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000380)='./file1\x00', 0x10000, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000006b80)="$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") quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 6m21.189165874s ago: executing program 2 (id=70): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x250, 0x700001b, 0x148, 0x0, 0x148, 0x350, 0x206, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'macvlan1\x00', {0xff}, {}, 0xff84}, 0x1ea, 0x1e8, 0x250, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x5, 0x1ff, 0x1, 0x1, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0\x00', {0xff}, 'vxcan1\x00', {0xff}, 0x9}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x6e20, @broadcast}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r5}, 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000400)={r6, 0x58, &(0x7f00000000c0)}, 0x10) 6m17.737277361s ago: executing program 2 (id=74): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 6m6.431417967s ago: executing program 3 (id=97): socket$unix(0x1, 0x1, 0x0) epoll_create(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m5.322504452s ago: executing program 3 (id=101): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xc, 0x0, &(0x7f0000000140)=[@acquire, @enter_looper], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = syz_io_uring_setup(0x239, &(0x7f0000000540)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x5556, 0x3d26, 0x22, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0x0, 0x0, 0x0}) 6m4.165418744s ago: executing program 3 (id=104): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000001c00), 0x12) connect$inet6(r3, 0x0, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000100)) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 6m2.346719258s ago: executing program 32 (id=74): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 6m2.313398612s ago: executing program 3 (id=108): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$incfs_metadata(&(0x7f0000000300)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x50) 6m0.605352399s ago: executing program 3 (id=110): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1bf}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x62, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 5m56.953560927s ago: executing program 3 (id=118): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000404355450000000000000109022400010000780b0904000001030002000921f97f000122e3010905810320"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m56.351334083s ago: executing program 33 (id=118): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000404355450000000000000109022400010000780b0904000001030002000921f97f000122e3010905810320"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 13.47857569s ago: executing program 6 (id=1223): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="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", 0xfc}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e770752564", 0x77}, {&(0x7f0000000580)="49a6cc7e52cf0644e1fb10e13cb6893bd19afc65f2af20dd1746a881eb4dabcaf163ce54133d2499c296320937b805f1880adf0cb1507df75aaf", 0x3a}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x4, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)}, {0x0}, {&(0x7f0000000d00)="dc6e94ac2db166801ffce85f6f44f2cb071c6b5113bc6bbf2f503d468253693a01102fcb8157c6e8a2b5620efa5d22400147cce896821150f95c0c69fa587a1f99fcb28cfeb09f45cb836f0ff891be10bb209dc04adc202ef866f27b74faa5ad3a2e5d40ebd6785c4e4a97ac13238c746d1109d12af5446c4e84591f121a494251e43bed18f6269bdd2e56f9c211dd7145f664286911b8bb3acf76a1b5ece94183a6c8cc47f2e1dd4e91dc10be8732e92e8620fa060fb15016c2dc9b6da18325e778660d499aec6215b0f9f679fa76d22cdd4ae3776203e2054240594f1c9b77ad77cf3f5631012fa0788c5b17f98cc34720b0", 0xf3}, {&(0x7f0000000fc0)="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", 0xfc}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36bf06a4c1fb17b47b39240a6a8e9b5daa97e63d777e665841a349c52022252eafc1c129e154ab390624dd7fb8ac1e44c203140d6aab524f61cd8642ee0f380ebb21dc9267a8fbefa6eec89ff97e78", 0xb7}, {0x0}], 0x6, &(0x7f00000014c0)}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df5326ed67c09d8b72eceeb87023f6188e15cb258cd8c85be3eddaac311ee4cb17a08ef47157753606ce7996162ea4b18214763730e2b944b468575927829842ee7f6f8a3603a7a522025c55284c9ca0ab899626f86c9336ead2278445733db5e643e10fa93339be48ff1592bc6bcf2b68b4536951c600a0e6d1b5d5b0cdbdf85122560b431", 0xe9}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be", 0x8b}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13.064506511s ago: executing program 6 (id=1225): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000500)="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", 0xa85}], 0x1}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, &(0x7f00000000c0)=[@cr4={0x1, 0x425c}], 0x1) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12.290282561s ago: executing program 5 (id=1228): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000180)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="42733ad6f7b63f622feeab3196b7e21057f4302c3b202872f2529051f374039238336a690ff135fd77946013c62efdf8975fd8518a7d9109ffd688291fc55ff15b43c263fa2e4deb24b0ba827fc3a2589165138354b566d82783d4304c3003eaea7dc13fb5b7dafee2114df8e088dc6087f49cf2fd31f6ff0090d9ac76cf31efa71cfc426ca7259a4bc592ae186a42", 0x8f}], 0x1}}], 0x1, 0x400c404) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f00000004c0)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10003}, 0x1c, 0x0}}, {{&(0x7f0000000800)={0xa, 0x4e21, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000000c40)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000048c0)=ANY=[], 0x80}}], 0x3, 0x48c0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x7ffd, 0x0, 0x9, 0x10, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r2, &(0x7f0000000000)=""/43, 0x2b) getdents64(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x9d3d, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) pread64(r5, 0x0, 0x3, 0x0) close(r5) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00') preadv(r6, &(0x7f0000000540)=[{&(0x7f0000000080)=""/23, 0x1f}], 0x1, 0x2, 0x4) 12.076902694s ago: executing program 6 (id=1229): openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000240)={0x101402, 0x85, 0x20}, 0x18) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0002000001, 0xfa11, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30", 0x2}], 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x60a3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0xd0, 0xfd, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x4, 0x3, 0xf4, 0x20, 0x4}, 0x16, &(0x7f0000000180)={0x5, 0xf, 0x16, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x2, 0x4, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0x0, 0x9}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc0c}}, {0x2, &(0x7f0000000300)=@string={0x2}}, {0x97, &(0x7f0000000380)=@string={0x97, 0x3, "209ef01f22f9094330e7bb9ad5e92cbd98d1f98f06d7d34b0a24a19a3f69197d44b1cb80fdc84fb872b2655aedc84e882570ecf6c1e7fb216401496d1ca1a97746d30c6f6013bc6c1714eecd1953365cdc724643d26accadd2a834e8f897d05e1d3f8567bd605587078e13825cc99218c2776ddb57e33733a11c835681b25ea9cf168b557783f1c18cb59bbaf7042b8d9762a38538"}}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) r3 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r3, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000180)={0x8}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000180)='dctcp', 0x5) getsockopt$inet_tcp_buf(r4, 0x6, 0x1a, 0x0, &(0x7f0000000000)) 9.903071933s ago: executing program 5 (id=1234): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) r1 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x42) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = syz_io_uring_setup(0x2af7, &(0x7f0000000380)={0x0, 0x200525e4, 0x10100, 0x2, 0x202e4}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, 0x0) io_uring_enter(r3, 0x2648, 0x1d5e, 0x2, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000240)=0x3) read$dsp(r2, &(0x7f0000000280)=""/79, 0x4f) ioctl$FE_GET_EVENT(r1, 0x80286f4e, &(0x7f0000000180)={0x0, {0x0, 0x0, @ofdm}}) ioctl$FE_GET_EVENT(r1, 0x80286f4e, &(0x7f0000000300)={0x0, {0x0, 0x0, @qam}}) 8.955185154s ago: executing program 5 (id=1237): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000010ac054402000000000001"], 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {r2, r3+60000000}}, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00', 0x1}) ioctl$UI_DEV_CREATE(r4, 0x5501) 8.291405433s ago: executing program 6 (id=1240): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) r4 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r4, r3, 0x4, r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@getnexthop={0x20, 0x76, 0xb0d, 0x0, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x4000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x4084}, 0x20000000) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000440)={&(0x7f0000800000/0x800000)=nil, &(0x7f000051f000/0x4000)=nil, 0x800000, 0x1, 0xfe}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000740)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\a\x00\x00\x00\x00\x00\x00\x00\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x04\x00\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\xf3\x00\xfc\xd1\xb5\xfd\xec@\xe5\x91\x8e\xd4\x89\xef\x95\x17\x16\xfc\x91\xa0\xbbE\x80)mh\xc7\xf1?\xbb\x13;\xbd\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfKn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\a0{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92$\x14a\xf4\x15_\x19Kt\r\xe3\xd9\xb4\x15mWl\xeb\xb7mLY#)\xc2\xa4\x8a\xc5\xca\xf5;W:-\xb4(\xce\x02y\x04\'\xbcY\xb0%\xea|\xbf\xc9\xda\xaet\xac\xee\xd5\xcb\xe8\xfc\xa8\xe9\xff\x06\x8d\x1f\xdf\xf7\x80+\xcc\x1e\nmt\x1d\xdf\xe0\x17\r\b\xc1)\x8b\x99O\xbc\x18\xf5\xcd\x81\x82\xe98\xdb\xe4\x9d\r\x9e\xd2\x93O\xc0\xbf\xda/\x05\xa8\xa8\xf7\xdf\x101<\x03\xd8\xccu8w\x93\xf5U\xde\x1f8\xe2\xafX+\'\xad\xbd\aH\xc0\xf4\xc6\xfd\x86+X\xbai\x02\nw\x97\x92R\x8d\xcb8\x16O(sz\xf5', 0x7) syz_io_uring_setup(0x2c0e, &(0x7f0000000400)={0x0, 0x6, 0xc002, 0x1000}, 0x0, 0x0) 8.263911852s ago: executing program 1 (id=1241): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000000)={r3, 0x1000, &(0x7f0000002a80)=""/4096}) 7.222185928s ago: executing program 6 (id=1245): syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904000001ff0132"], 0x0) 6.787218994s ago: executing program 1 (id=1248): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40d82, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = landlock_create_ruleset(0x0, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa8282, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r5, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=r1], 0x0) dup(r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1c, 0x20000000000001bf, &(0x7f00000012c0)=ANY=[@ANYRES16=r5, @ANYRESDEC=r4], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0xe, 0x0, &(0x7f0000000080)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000001200)="4c4228369f88e91870041ef4c8baa41449dc6ad5553764e898ddee1dfbb587ef4e6854a6bea12aecd99ac5dd4e39745d195df155a8628b7483b791d4de8609a893ccfbe9dc5c2ed555df193d92968b81da97fe3f0f220dd48b29c98152d9ecb2bb68cbf0bfe454a10e0adf453bd021ba3b502665c757d209f1fa9daa8979aa1fc22684d52bba1cd3c5946a6ea16b40f3bf8cc0134fb55a63817f6bac437682ed4c30147c2d86997f970ba094a19b0de4904bf83ff6fc3f0e46aba38692387ce1", 0x4}, 0xffffffffffffff8f) syz_clone(0x4029000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f00009ef000/0x4000)=nil, 0x4000, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x13) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001a00010028bd7000fedbdf2481808000000000000000000008000f000180000000000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x40048c0}, 0x884) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xfffff000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2e0441, 0x0) 6.207384053s ago: executing program 4 (id=1249): syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) socket(0x80000000000000a, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.00694921s ago: executing program 0 (id=1250): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001a00010c0000", @ANYRES32=0x0, @ANYBLOB="000080061400030005000000ffffffff000000000000000214000100ff"], 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 5.873337743s ago: executing program 0 (id=1251): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x10c00, 0x4) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb}}, 0x1c}}, 0x8010) read$FUSE(r0, &(0x7f00000027c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x3, 0x5, 0x891, 0x2}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x1ff, 0x2, {0x4, @vbi={0x3, 0xec, 0x4, 0xa0363159, [0x1, 0x2], [0x2, 0x3], 0x13a}}, 0x9}) getpgrp(0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000000)=0x5b, 0x0) set_mempolicy(0xc005, 0x0, 0x5) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r7, 0x0, 0x8000) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r3, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r0, &(0x7f0000006c40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r8}, 0x10) syz_fuse_handle_req(r0, &(0x7f000000b040)="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", 0x2000, &(0x7f0000004e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002600)={0x90, 0x0, 0x2, {0x6, 0x0, 0x9, 0x4, 0x0, 0x9, {0x3, 0x2, 0x3, 0x5, 0x80000001, 0xfffffffffffffff8, 0x9, 0x1, 0x1, 0x4000, 0xf78, 0xee00, r4, 0x1890, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000009040)="c9b6cf40d6a9928c6a8c0fdaba1e7bbd4ee597917b02ec4e8ff3bec8d7d8c08f8813039f40175e54e3d66ec19388ed788cf69c0c5b560f0401f1adb4b1f5198fe0bd7627cb9dc384db5b44495ba6094046fb2c8c7d0af7d67dbc3f5ef4aef8ec6bb01c52b6a10d4f9473987d0809b6a84f2ff8aae19a082abcb68b41c291add3ca2204a38c59e28c7c910aaa5a075676e541b6bb91de3854d2f97d3f80dc56c0705e74624a947f2c21ff936c6ba827742a24fd6d9e10b470ceb73a23fc57f5fa27cf073f2d0235e6fa4d1c29f9d0b6509c890ce0e7c3a2a4dd8b6336f02b9d7cc4c8e37f5f5a57f63aeec3228bd15b6d041eab97bccb14ee1ca6fbf7f7ed2e4dd0a32d41cc41c1031424b94621edcea1bddd40f3ad905202dfba3b912efd3468d2ad42b8a01bcb13b288afdc00b7e5857425d7919651160ec15447a26758f20653e69559f0892efc8f0715d8d79f52a44c79aba8ac58dc726ed721eeab3480eaacc2655d4b8831c9aff049c32709ab7adfb24ae767d45468dc0e42bc34b3568ce95e850eaabbf3a1be4d0f9b3e8781a2a9dc06374fe496a755b48abce67fd56de43816d64e883d9db51489ab8a81d1af3a180b6772d2bdac6313d3c183239d4c0bbbe76173f011f144ba71ac8043107f6533b3ef2f44924039b8587485749647315eb7bfe1e412e94f8cdaa937480fdd23769a69e14ea82d741484c99dd1ddd1edfb4faa51431f15531b61e59d68f9d189b27d0bf925970ac66fc35dbe1e430893cc60b28ca6d8e34931bf02154aee6f1fc58d0c0d8e48eaf8079ded67fdd9f19ebfa85d1ab6ec7f54e1963be353b34a6cb7fa35ddb60a9fc6bd1c6f11bf981b5a1bba81513fe447ff7eb2db0d27f1cfd04353e05f37d6c1bd6eb8219ce799338de3518bfec529373e4acfd644212be283856be064bac0f4926c02c0915816615f1f04d1d5136872029afee663f0bf1b6811c594e1465fba59f5727e5a826e3c60576bc2087f21521ffc90dcca39cbec7c0466c8fb7b1bcea7cffb333d2d16daa269d63f4911d10ed24462b37cdceb7c88e819489e1939e5e3cdcc5a858d09803c98d9e5fd617bc92c0880f072c54608f6ea69edba05b4edcd8d3f5e3c926220a191f2aa0d2f0c9158e298bc2e756ee091a0ac48752e4bb56fac67b02eb2c7b3380244ed66648482d8bc2a29bfc26ade0f4a5665282ea408254fd88e2812a184ee9af9c7769fba1ec380043d5cdf6056f89b4d7f12a441c3013b0fe0d8418fc47c13fbf4fc2b4a89496d4ab9d9826d0e586574e8dd15d4eb8b86ed372e37287fc818df5b6993b650fba844d960e3fd62db0bc7b12ab286d6492388a91ae4da6bdece6e101c13100eaba3b9998706fd4defaa3ed2965ce7fe6062b8c58f20c6b44b01121184ee1dda1cb66b3ababecfc0b7a9a12624e0b826c35d0149335149cfb49fbe68d1dbb7eef96d7956dc573d449847ff4bb7ba0ededd00c904130f1252c3dd4bdcdeccf6f8a83e3abfa14d12c753558022efa0704549b0571e31c4bc9f3e485f8d2d88189b4149569ef83e8feb2ad26c263b0f91f8975c86c8fa9c9457da5ef4a8a94844f824873576f722e32b376ba5f3ed0ea9818d86ddc35ba0e7f322594d9a0fea878af5c03d242bc7b0af89091f088245154391e75ab1b6b2730ccd01c28e9ec99428cc22c2d08ae2829537c34ebd1273327d0d18175698f9fe587e968d19f00ff98555fcfe95d00cb3abae32afcd48f3d4cd7c63c45581203a8a3040363d98bf9426493039fce7bb03493ab6e176cb45e2af461e77fc93d1202fe0bc7b77398c52bbc1c1436439f26cb2e17933a0ae309611e46bebd4d84a939d9b040a08cad90c2eda6ddc933edffc8e562aa64658f99a9ec8a47278edb828b5312a95ca34c0af428aac64d3fa1c4045885891fda7666dfb680da4dc2c02becb8303b76987b6d9be01174df88e41a48a42444caeae5e36118564e57209594285bc2915b222f99f016326430c38c9807994cfa1c3c85aa0f6375c716cd7f27be9b2cef6866d07c8ed00bc101a74219182562467ebbd43d2ba78a4b0eae22c67702f318bc55ccd92f5fd11557335f94ff6f38cfe9fbe31d3fac064dcd7d660d02fbeaa26acf8927c1e3bc71d9ed8ef2e93f0a42813526daa1fad36676734103bcc621a114b098295de578bf8d7df9034fb3ba86ea529bf639cde496b5e48145e4a814f894fb3bf3f41b49d0572dad5988348dad7a064b2d76d9092336cb404934790683b2b3576d3b75534df2c36bc78e05ed250b9aaede772a08bf5972444ecf4e447c062d95e556768e264813369465713834f6e239695b6bfca1b6108a09368688e212b7ba556df50c02486bf1b2196da3d4c0553923fe9b1bb4474d0f569bec1f35dce4be0f5e2408efa69aa66dda6bb1ef43295fe005f4a86840bb608796ce14bcc1134013bf741ad1aa70cc6579edbd42478d3054e1f7bdbd5b1131ded725041270e8a46bcc8bbfe89089f87105939deb2a9f10dd60d059679d4514bfbfc94b333c7dde79576426f07f24ab6a57290b0d723bf3bffa2f66fe191d0dee8b292c8c15eb42245b899ddde3c6afbbf0d7c301dd142878dbca579f387931460c8c37e186f60f8d9209dc98f1a27b84ecefd71de077017261ad6cc3072fe57ec589cd9498946fda8a834e3f02e8a91f7ce6e18e76f936f6f39d354b63dccc706e25b1d8b1a4830c46f249b5e5a40042fea920ed57a2415431f83c238113ee7d152c16f0780c502d5c995168e3f91113af11752f10434b8dc5ef0e46a276c683261aa73877ce96ebd0176977e124c5b93bbb02ef97a6f6a13c15c261f23014f4b13c8f18746727206b245bee70d7b94968141f104f0682a3df4242c6a60fa1b70c227306520b1b9fbd6c916b0edf5e2ce5220fc9ef10ab0a10e1bf259e91eb127d5a31b7633f15130fdb44ce2178a20d5dc3f91688090881c061d75b4b59c3b2b7eb7a3dd1564bfa6c883c217cb76c2a7516dec926add0a1886570531c32b6284b1e80fbde88905f67ea5cea41003325327000a7f7249a99986f19f423843e8dc791df8679a2ed2b024d7d8c79112644a4fbd32bef0cd1f9d55025708135ed34cbf52ce3a0af0f8cd985362ef6fceb6c72f241128b16dad7575558badb3847e051f38d7b5ca638a1f454054659d90b2c046e4f9e2ab127f257ccc92f887b3e0c4fb49d159741fc649638180addf3f23e5265015f6dad9b25cb86d8a33b802e55258749ec050d15d0d7d821f9615c7d8c12ce11c63fb1eb118455c4e2167f66e4eaf9dec0dd2f345a7e2bb369a66b0755003a9c89449393f71acd98afdf6347792251d669ff3c64c50d705a67e543cad95655d6a4cce233acdac5ffc96681772be3c04a1b36f5273815af65ef87c7ad0d51462bf337c2389a8eded875f75eeebe5e5efc26933948e623364d0dbad3402f659a93acaaa21bc8f559dca605aa6732d0eced5a21ee8a6403b1f91722fcbada24a3031d6aa221612a36584d5edc6ba0f64096e9b6eae1555a95945b937457c4c74371f474939d3c3f299f691316497951c646f142adbd6ee49182aec388ce2ca560a1f4b7d8a63e5cd25ba91ebc61175a6955895bcddae7bf1cefccac5c93dd669ab65a2f508adbcfd62ec46027efa396b9f69984d6adcb38fdddb616ec38929fedd97677c3d06060309db5a9cb5fc8919f4310f06bb40f1b76bc197798acbf8d3162257071e034174047006796fac6fbc95c28afd881e1197c20fea8b4be5c5de39a292bd1ff3819d4d4f48162ea1a57930d8f324ce54875d3ad09eea95c4c825765842f9bbb1957fa8188578e86081adfc87502e69c8841218b596d71c4ec49afa60408028012d974051559d924f5f8a59ee195fb01994b8710994d8201ae10f6e88e0e418489c47499b7efd2021f56a6c9fba761beaf79acb6087a496afe7524f2260e14a792cf1a1203d4b0cd8a11d2544293b7657fc393014295fa28e409ab8be0a02695223d17d7caf4f44cf5d0f416130067f28f3fc51c88ad7b53e401e658214abcc8f597f22d662144f878573d0370c874287698784b6ba9abf9b22da2eeb0ce8b817f85e429e799a5edd246d72d77228652b80c4949a85cd5131d851d9f9bda9afa0646de5e477e0fa999562cb46758502c7d63dd3e8b6f88c7ea44f41c4212d633f0160e738c6d36128e9e58c154b08460c899a26276dc1257dc5de18495573693674e40faf1dad49db8ac83baecf92f3aa5c23f639cdcf6e6864c14a8d6a3de95906813fd17f83c406ffd1d2d7bc75737b7b00172448b2ff167b9fa43649db32ab4094652cbb2e18c3bdb527f24049878bb44b82135009f9af22d24ffbee4b5289fa61bd0502f019b2f24a08542db818bffb7c1637b4f4cb9043952f88aa69d9431b8df2e3f9ef6e4a5ba58e79acf082bbd871aa0f0feef71ade8f921bb597ea28548f4116a281ab3542b732c4a8e9973409c75a0c6443d83547d0d314cc7bd62128e3b0db9c03c78b9d78ba714627866230414947523a6a239873f932c2b28c09cbdf182e856bf41598998150cbdd6d54f76c227fb1519f5afb0008e31d6a0b87818d0a2ca0dd6e953a5ba1a347dd927acd36f3fa3a68920eb9c36bce6cef857447aa733e4ffb7014e194993eb1399270b64151ddbb15478c2b762a14d1782608fb24199d9d311281c47726f565b3a3b7be584afb03d87cdc5eb8156772694ab422f59cd7b1e359583a7cc0695b9f64e6416c6b52de230afbc160d2e9384501b40645189434d416c0fbb034e9ffc654d0dee7ee7a878f9e559daac7ee5af769aeac7a92e85b1bc7983803d3bb572befe76184a46b76450feccffa753cc6123cba0686440a5ba81236458831031a4ba4c91d7aab3bb2514208a902face1c12b7dfe25318ab5ca2c1ef9769aa06ba0539f6904f95d3c8440617efc7858d3984f566b3390b9b1a0f2ec3c86dd77a0b82958c4b15278ffaf10e47e613545f4cf67ef7e8b31a6bda35022871840ae1536fb65bb11b932936db7a15642359bb6b157893d19e7918b11d3d3072b78c761c1784afa2214c865fc2aed860dcc17b69cfe9189bcd0767a84cb306a59966e5f96514a7d7182e6aa7204bbd1a84092ba645f86b68813debd5a2290acc93388e5eacc17db51d69604733ea9160a0e77ec5317194654313a9a8a0535c0bc49d0837e2821df92e8ee2f154cbea6b87ffc207aab4ea491e8aa75b90f70136d84ea2f5dfd138371dbdf8fe273956cb7411db6df48ebf56105da42b219b9dad387ca7be9ecd90508c62279a53bc9f7e2a845f9da42d8e85d2653854737948ce228b2d76d1b9fe2e0e456fdff24575939b82a3f6e1a4be6ffcf1c493c17dabbfa0859a87d259ae3931fb6da544589b9b6bb7cc93e078813ac94918942bf113aee5742498d86a70fff31d2a69507739317a9aa9e0289f053dad4eec63cd58e833027f0859fb4ab74e8fc742d03b5b6dca1168d3d47fd95b514a567e6518342d52b3c3bb6438b5aeacb95ff9001d2f5480f6a80a0685b5bda2ceba06925ab5ae0986954c3169e92fedaf3f1681247cb114202c0f728296a51396063fc64aad05662bf05a626b90f656b47069ca668bb96208c287e8f793d77d4fb1f1cc14e73406005e11a2c1c46ca7448be534c97738487527d79e284d7a0ae275bd4361ecf4a352e6dc8b8c8c8e132a3edb7d645f4943445f523fb28bbf857218a117f1288afec49f9def9aabc2381b38a315d5c927aeb96fa1ad3eb13b0151dd570f6734f004467171d2cdd609d1d09d115c9b42e1da3472ada98d3e1da90a8f373a98133fa708f5a62c75b5eb1b643c48de72143ffc8761ccffd7f3336b69faa277d364cdf2d4f2bc428bda8b76e4748d5ae02d9850ac6f2ed0ddcb874c25d210163d4da10c0d6cc5218a3558deee5519c94032158bca02fe1c1b8184fdf417e863352b224b7b06267486296ebd4100ad5f1108c78a7056979f5ad6f97794a0460bf371584d9b962034aa7449f4e6b0f925b7a648d4ed7f2442135629b0baee3385882682fde57e5eb9204647a898c566120e4b577ba215ed863f76d5ad9ed19a6b7465952292e7543110eac3dc436a16c85047f3ff10a00c917d5902d296c063c4b173775f2b612e407bce02c8647877abcc07b21b89a60e16ff5c5cdc3708f285d6e411036661e97f628c6c2bef7a6e297f0ea7db2aaceb87d13425e80c28cf095b1dd4e08122e89f58862c6466d79fe7d06e0038a9a1869cba0d1554bffc08b94bf3dc7ec4d108073a4dcb7a6a503b608e777f1ca6b64deec19072052cdab8e7222966170bd35cfa66d3d013c537e723bfa2f634b34edba64ee27ab814bf66c5943e5b7b4d2cbad0550982b2d68ea0633a48f24ef5a59da6e9671717afed4253db66afce693ab08e2b4343d9efd1705802393ba22af5f0e04fc559ddafd78bb1c013b2826cfd77591736cd8a1e079c00f72dc89ee419cf4cc5e867138e35372bb0854df45d2142ce56ea01465d7cf42d3beabbed8602ff568df5d8e53d22bbd897c0aa050165319ba28d6f861a128556e420275562b8a19c0a2112df4490925f52090c6c7ac79b8533936d4020af3ea5d383cc8e4f23cf275194887d42bde7061bc17246a91b735472c4dee6f2d159a4fb2cce10f0727a964658f6d60aa18bd474ce1e88114ce3c2a3acabd74175b82afc6126ed79d8d333ed993e3a0d67afba888c94cb266f906681d9595f2ca21946f32d8f07eb7cfc979cdd56a885e6a5deb1dc54ffbbbac728db4145056cc9b78386f1f17ad16856cc10b04038f0d835a5842584b6a9516a770abd839ade5d379db9889d22d9049dd13010ad612a64128f724f7a643505b8ca50bddc4ec4875beed2f8593b7382645625809bbc3591027d53bde8a16be5bb209cd49e71aaa435c923ef3c4d1aefec7111773b0d58b47efabc7a43b93cb7eab287cefe554a5b59e2a746081d0d875919df356504008374ef184be2f7ef7e644bf5535dedf5b969b30dcedcfbecb83173b0cea015efe45630880c303472daf1dc22b384e65078cb0ae21baa4834fcd4b4f7c995b700117e1448d041a7106277302fabf3a512ad4e802988c43e6cad0b4b74962e195b355b653acfab53d9f38337e46758c0f8c147333d30f8fbb508a889b84d4672e025b0d9adec09fd4e2d62bda0e0c40570d8fcf5487a59380584f7b85a8576985a4423cbdb1503ea4f93d4f3dbb2c384efcac84dd8649e6f09d2ac37e1d8268c3c07db365581c7c3752410909968598b8ea5ea05b68e6013965cc60be6f6b24e493655f5ddd572a84a924803a7df025914f4b57527841928d30c03b09aeee28c8b81860968f53a663f4f56b004e07cc380f5b0b0dad43869faeed5f240ce389a0fb0920073b8d3de611e54d4011f55ba28743a3b51af6293ed1376fcfe3592c877e2d81d14ee882410cf8207476409b5673eb65297155e91cbe089c8c043964063f9b469419bce6e59e0017e0f527d20eab5d9579208df9cc65389ca8fdb3d62618395bb0274b8094799cb4c36632488e79950ac3bd3d982d521614f56df1bd16c1f928481dd4580a796eb7892b3e4a33b748b16f96b1def674c2b70d0315b486a94a979292d635a2ad1fa877927de9355f38a612747fb982bccf12040d9a14a63c34b6f2b3b450a6401d4d0c96a9090ab80d30f7e7af84bade864791455402cbd278427c5a1e84e2e2286c4bf773da614e6705802c130ade8a3a67b309f9db1558372046ec276a34fb50f72c7df40e33f447ab5f0af05eece4e8f654b3c2dad6ea76ef6b694699f4ad8c6fdcbfd8bdc23d0c580631d0c95ac6ae9613dad680939db2ecf9e7a0d4d0f2f2b7f1c1d308cfaccacc2381e97bb278a53b14daf686c0541e56264c33d5176b830ac7d13c28edb2d8e77d7acbced061c4ec315cb1a259966ad997c7c7beae44d4d1b6955842d7fbba0bb0c461bb22db3e15f0fc1cd3fd997dac5e6a4bff6e2eb8310d828f15309b2c8feaa21281963d35ab2d5c099beb806cd384d304449c58d89910105df11225fb893e984734a8e5cba2e553f03ebd5ce4cae24826547df81db3f2bd7d930f785755c8b6311f221da59679ce50479adef1cc5dac984a5d2f9343fe4892b2b5640892892cfd50d0015c1f568792d8919943a578b62585081175237444d9542a2241c967bcfbc3dab4e8961ecad89165eaada2d759e844be5021aed42b971e9ffea8c08a3d6e4073ce4226b4e54b83f3d8ccd207a0cfcf9da7b5e55d1a26a90e03f7c3611c6562b65edb42fe110dc3970b44aa36660d1cdbc882495271f80816350b945aedb0d46ca6d160d5f0096e8263325e257dbb574932e32f1b28ce2b7f5b3ee6ccec64085496bb513ec168b53d79e6ecb72622a70b22e1f9116fa48815709b2080b27b31a6b26dde0701cd74c31b4e33a702f051ae07ad54ce23ae33e6060e5451a4171cc930af2ab70862044c5a0ff9e8aeebd3cc41c62d38e7b79596d3851430dd661b071c319751985d48eeea2afb463d7d9390ed4e68a60f90ad80aeca4b8d283ae0538e590668c857a526a264be238641eeb5f321248d829539efccf03dcefa54c6def8b7d4a8cdf6bc76d71eefaca1a7a33bd4b56e94b8e38f784b742bdd080faca4769e1aa91ff50d9374f3632cb7b66a0042beb802c6cedff0a3634aec072f57d38a6ea61439029ba5d921f57bfbc281d75f5ec322b8f8c90b4d3f65d00ef97dcffe7e07fa01af8e7f8da15532f0c18b73d7a183327aea46680651645782f4f318c00f2355c301fe2e805a22f8586119768b8424735f5495607d170f0818be232cec1d9e40daf79bcd63a26cbead93753b7171bcad462da2af68e9ea9c0b207200f1fcf3793283931603a719e745120273efb541a7af896f6eea7359939d7226896c8023cc963e4e0a7579bc83a37cb8d871324bb3e66b671d8df83d645495740c5b99aaf2edda3018e1895dda6744b1e6623cb62d4b80ac208f69a81caa0277a497e41bf637817518cbe0fcd2028d07be199a126f82641f2fd54e6b20287b912ee8d8dd72db5824ca9e464a94d45beda7f52932d1bb57a28a4e99ac32ea4c3650197613a87e4cec91d82f37069fde871575d3cb2220aaad9277511271a86377da5f2a9f94303e7151acb087ca549fd0cb9b1961954ddb28333a24b510b92cddc057ec5a147ccdd708a2db3c8cb3600756100b38b71f0676f6fc5a7f5912b5e81bf6d2b07e15fb5b1c96459110ceb22ba4f2fb0e531dcaa913a13437cc6276c8b4e1bdbc5365144c7abd2e2a6c93ef102e26b14e576ada244408d9db50aab045f9879bf95425eaa7b11d77e0dc503851c5c278c282aa736103adf5ca2b30724bde27f98e4e7a947f964b7abfe58a3da354e3008a2b86d50223d3077e151ce2e086172002eab7279ac1948361e172073184401d5650181547f1bacc1534f9ab2ad66fd9d200d867de79a92e465dda8d781b15881acc9bfdc53815f3fc3f064c830db3908cdb173e3e1295ea7dca280273ca99073d5663003f14c4f7ac9ef9bc735b2a413daaa7d97101553f90a0d33b043d1f2b0f131d35c9244808bb4b76213ff5c418053a569d760498518d701aae39cfbd7a052b586c53617dfaad1415c1cafbb41640d1650be9297dd42c803d8bfd443916310bb80a74c991cc26331ab70c0c4bc4f2295f069787f6759878e42ffbc76b34493f71d88a109b0813ebfcd24953b2b5f1f5164d9974bab7ed1f4d42f62b8379912dd7e9f35a19951e4d57b0c70fe516cd2059c4ef879d9f9b1191d5bb51b852d3e9462e4528b9c1f7c676e6039d1deb00442a482e297b08a67c79bb818d0316072d8174885de3413ae0505232100f217e424e0106811902d60ecc0e0aaca7c5f00f4f365e1360f10aa645b9215c93668a08be97cacd6b0f9c80ead76478846d12e8f24a53bfab01628afd199b2db332d38d5009d7a1437f0f5b2a0d36b5c98f3a35e5043ffd55bac325d3927888fa5d0e3569d9be002205b501b3e68d661515bb9eac9d4f234e22e4e5bd0b4c4530933aadd99f132794ce48e9a3220d2c17748c012fc5fd93d265cebb3edc3be29a1ba26f2adcf510663c28d29e28774c4ec1190fbfbf614aa8e2745f8605f7d7e94fdd06322454a08833f1a22c77deedb1337e380a8e18f85168e045d1e7cf32fda1a709d3eddf62909a9e580ed8abd605e07dbab79b5bcc2f4533e6fec589b976816471b1f11ac3c89336c52e03b72520995d05275024e9988727f2e1ac9421ccaaa0b736e9f7f296c2d27cbd774d7179f9c6921df68985998034862c15adc452666deb40c0c40cedf16f4d187524a0a5cdff6f7b2531eda54fbe15a7ad1aea46466a51642326c5d7d374fb38475d119027a3714598fe7307de94bece2741b7a742b053682dae9452eed3b820b1386b604fa647e392b35b205019cf1ad317d1441cbee2aea5ca95e56fd5e959689bf96c9f470acb8e4e630b13403e9459242b629fa28e1ba8eacf1ed572b1db735a20ee1a5b8500b6edf66cbe671c5938741ab2b36ccd4e92160f6df9e1d465cdaf3a7746e128e26e0e7a7aa4869b2a482c6e9bf7e58408411016740c547129e4f11d2317af3c5bb55b2468e6d08e75e5039c3bfdc9b6da06e7c27933a8c9d8ad0e4c74a093e6d57c02b1b49e995962c1046b5c8a3df0ea4c20049e300cbe41bd92a0ea5993ef6fd92ea74e28e1cfaf4a8533c224104d6081b64ae08b4e7a23a259b2b03655b987c23687c6e279bab469a3e0881a30620910566982945f8f86229fd614ca2bb2adcbdd49a5c579c0d1bbdefb9e33cd0641bb43f6ca3fab33dc4188e1508e4293e6de932040b895a97bc1f196467ad4a0d4899e6078c014f42521cf39411e2e4f1b5adc26f1f3bb2fcd27b89ac418c8251423de82c4b5980a4e66649b9f3ec48c833c35f8653ca510a0a1b049561e64a6938714c3a1946b3fa5079533698bb8f8f85bea8711ccda5cf01de150b055d3586a890d0654d2b4cfba25c434e2ff492b69798aa197dffbfe2bba77d4b4eea35c42e698221e971a4bca34e59c46084f48f2170b83db6719324ecb55e07a9cf74a84ee0fc3567fa5cd2f3937ad956b4ed2187e2026b7d4166d50fd9c937fb4dd5aa96f2731f1db1dda4eac4e589295ffe9b72a7b9533f6e23c82b57c8361c8cb3b15128235f65c84b99d93383b7398e936884542d0e73bdf37cadfb6c70da47af3c5a3cde0d8e381cdf9ec1a39d2fc963f0d8ee31b76d9668c0171967cb9ef2f15d5bbdbd1058328da7a60bbc7d77efed2de74a2ed5637a8a84e1163325dd22b584b15fe894c9b1ce89d24619a344a8987f6d21b7de7ccf6fad223134e1c389a8e6baa375dd142baf4a8852e984eb6c281cf86e2457a7f85782c7764564af26d331d3ddf4850d24742ef449cd5e32f5957d2ee10e05e7d3312215e4d36ac5c8c4bae3340f074f88a20e18b270b3baf05de1b0363f4c6f2ab9386d6034e8567e4828ad256cd250448c70147c318a621697be402c1e8365d2798084f968a8897242ff6756c2937e4d1300", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0xfffffffffffffff5, 0x45, {0x6, 0x1, 0x0, 0xfa1, 0xffffffff, 0x0, {0x8000, 0x0, 0x0, 0x0, 0x22, 0x2000000000f7fe, 0x1, 0x0, 0xfffffff7, 0x4000, 0x1, r9, 0x0, 0x0, 0xfffff8af}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000810000000000000006"], 0xfeffffff) 5.870856797s ago: executing program 6 (id=1252): socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201010200000020b804020240000102030109021b00010106c040090101e30905010200020703030000000000"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000900), 0x10, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r4 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r4, 0x0) ftruncate(r4, 0x51a9497) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0xfffffffe, @empty, 0x0, 0xfffffffc}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000005b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a3000000000d0000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000002108000540000000148c00098008000140ffffffff0800014000008001080001400001000170000280340001800800014000000101080001408000000108000140000000060800014000000005080001400000d0f10800014000000007240001800800014000000001080001400000000408000140"], 0x5288}}, 0x0) 5.79165253s ago: executing program 5 (id=1253): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000000)) 5.403863146s ago: executing program 1 (id=1254): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x800, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a2010203010902240001000000000904000002923350000905f402ff030000000905ba3e"], 0x0) 5.250937062s ago: executing program 4 (id=1255): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) r4 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r4, r3, 0x4, r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@getnexthop={0x20, 0x76, 0xb0d, 0x0, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x4000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x4084}, 0x20000000) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000440)={&(0x7f0000800000/0x800000)=nil, &(0x7f000051f000/0x4000)=nil, 0x800000, 0x1, 0xfe}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000740)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\a\x00\x00\x00\x00\x00\x00\x00\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x04\x00\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\xf3\x00\xfc\xd1\xb5\xfd\xec@\xe5\x91\x8e\xd4\x89\xef\x95\x17\x16\xfc\x91\xa0\xbbE\x80)mh\xc7\xf1?\xbb\x13;\xbd\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfKn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\a0{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92$\x14a\xf4\x15_\x19Kt\r\xe3\xd9\xb4\x15mWl\xeb\xb7mLY#)\xc2\xa4\x8a\xc5\xca\xf5;W:-\xb4(\xce\x02y\x04\'\xbcY\xb0%\xea|\xbf\xc9\xda\xaet\xac\xee\xd5\xcb\xe8\xfc\xa8\xe9\xff\x06\x8d\x1f\xdf\xf7\x80+\xcc\x1e\nmt\x1d\xdf\xe0\x17\r\b\xc1)\x8b\x99O\xbc\x18\xf5\xcd\x81\x82\xe98\xdb\xe4\x9d\r\x9e\xd2\x93O\xc0\xbf\xda/\x05\xa8\xa8\xf7\xdf\x101<\x03\xd8\xccu8w\x93\xf5U\xde\x1f8\xe2\xafX+\'\xad\xbd\aH\xc0\xf4\xc6\xfd\x86+X\xbai\x02\nw\x97\x92R\x8d\xcb8\x16O(sz\xf5', 0x7) syz_io_uring_setup(0x2c0e, &(0x7f0000000400)={0x0, 0x6, 0xc002, 0x1000}, 0x0, 0x0) 4.863431107s ago: executing program 0 (id=1256): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x19, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000c62d008500000082000000bf91000000000000b7020000000000008500000084"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4.150829164s ago: executing program 4 (id=1257): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) listen(r0, 0x3) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) accept$inet6(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r1, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x45, @loopback, 0x2}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000880)="fa", 0x1}], 0x1}, 0x85) 3.987383443s ago: executing program 0 (id=1258): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000000)={r3, 0x1000, &(0x7f0000002a80)=""/4096}) 3.179079669s ago: executing program 4 (id=1259): ioctl$VHOST_VDPA_SET_GROUP_ASID(0xffffffffffffffff, 0x4008af7c, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x22, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_usb_connect(0x3, 0x3e, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000d684e120080490303fa60102030109022c0002000000000904fa00000e"], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.050825796s ago: executing program 1 (id=1260): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) r1 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x42) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = syz_io_uring_setup(0x2af7, &(0x7f0000000380)={0x0, 0x200525e4, 0x10100, 0x2, 0x202e4}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x31a0}}) io_uring_enter(r3, 0x2648, 0x1d5e, 0x2, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) read$dsp(r2, &(0x7f0000000280)=""/79, 0x4f) ioctl$FE_GET_EVENT(r1, 0x80286f4e, &(0x7f0000000180)={0x0, {0x0, 0x0, @ofdm}}) ioctl$FE_GET_EVENT(r1, 0x80286f4e, &(0x7f0000000300)={0x0, {0x0, 0x0, @qam}}) 2.940040327s ago: executing program 0 (id=1261): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001a00010c00000000fedbdf", @ANYRES32=0x0, @ANYBLOB="000080061400030005000000ffffffff000000000000000214000100ff"], 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 2.849676744s ago: executing program 0 (id=1262): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x9, 0x3, 0x80, "11010000001413ff0300", 0x47425247}) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='oom_score\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r2, &(0x7f00000007c0)={0x2020}, 0x2020) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) fcntl$dupfd(r3, 0x0, r3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@loopback, @in6=@remote}}, {{@in6=@mcast1}}}, &(0x7f0000000200)=0xe4) syz_mount_image$fuse(&(0x7f0000002040), 0x0, 0x2004019, &(0x7f0000000000)=ANY=[@ANYBLOB='f', @ANYRESHEX], 0xfc, 0x0, 0x0) mount$fuseblk(0x0, 0x0, &(0x7f00000001c0), 0x100800, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) 2.343280237s ago: executing program 5 (id=1263): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mount$cgroup2(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@memory_hugetlb_accounting}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2014800, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000100)={@multicast1, @multicast2, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0x81}, 0x3c) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r5, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000380)=ANY=[@ANYBLOB="e90c610fac0800000000c442ef00020800450000240000e00000119078000014000000000000000000001090780001009a47d39f753ccc63b1ea39feed490b835442f3fcc6efd253e99fb02b88ba3e5f524938dd80"], 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x14, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x35b}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x9}]}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xd, 0xffe3}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x20000000, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.084030098s ago: executing program 1 (id=1264): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000640)=0x10) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, 0x0) 1.874359285s ago: executing program 1 (id=1265): syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') socket$nl_route(0x10, 0x3, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0], 0x0) 1.169875206s ago: executing program 4 (id=1266): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r0, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}}], 0xff80, 0x4050) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[], 0x40}}, 0x0) 613.820551ms ago: executing program 5 (id=1267): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x4040) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) epoll_create1(0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x9, 0x2, 0x4, "9e6e2745585f050000004ddcd7798796660eaa95161c79eb72d462050aa20a4f", 0x34565559}) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) cachestat(r2, &(0x7f0000000040)={0x81}, &(0x7f000009de80), 0x0) connect$llc(r1, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x80080) r3 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setlease(r3, 0x400, 0x0) io_uring_setup(0x7a76, &(0x7f0000000180)={0x0, 0xaefa, 0x40, 0x40}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x150, 0x168, 0x9, 0x150, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'ip6gre0\x00', 'sit0\x00', {}, {0xff}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@srh={{0x30}, {0x11, 0xbd, 0xb5, 0x4, 0x0, 0x80, 0x40}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00', {0x4}}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x80}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 0s ago: executing program 4 (id=1268): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x19, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000c62d008500000082000000bf91000000000000b7020000000000008500000084000000b70000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) kernel console output (not intermixed with test programs): threads [ 305.476687][ T1104] vhci_hcd vhci_hcd.5: release socket [ 305.482797][ T993] usb 5-1: config 0 descriptor?? [ 305.526221][ T1104] vhci_hcd vhci_hcd.5: disconnect device [ 305.546036][ T1104] vhci_hcd vhci_hcd.5: stop threads [ 305.560957][ T1104] vhci_hcd vhci_hcd.5: release socket [ 305.572865][ T1104] vhci_hcd vhci_hcd.5: disconnect device [ 305.579079][ T5963] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 305.596292][ T1104] vhci_hcd vhci_hcd.5: stop threads [ 305.608707][ T1104] vhci_hcd vhci_hcd.5: release socket [ 305.631198][ T1104] vhci_hcd vhci_hcd.5: disconnect device [ 305.957562][ T8575] xt_CT: You must specify a L4 protocol and not use inversions on it [ 306.456319][ T993] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 306.591996][ T993] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 306.642982][ T993] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 306.689863][ T993] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 306.864296][ T8531] usblp0: removed [ 307.751856][ T993] usb 5-1: USB disconnect, device number 4 [ 308.585006][ T8603] netlink: 180 bytes leftover after parsing attributes in process `syz.0.612'. [ 308.681259][ T8605] netlink: 12 bytes leftover after parsing attributes in process `syz.5.617'. [ 308.728853][ T8605] openvswitch: netlink: Message has 8 unknown bytes. [ 309.508280][ T8616] xt_CT: You must specify a L4 protocol and not use inversions on it [ 310.230851][ T8620] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12) [ 310.237532][ T8620] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 310.308546][ T8624] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(15) [ 310.315413][ T8624] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 310.345974][ T8620] vhci_hcd vhci_hcd.0: Device attached [ 310.473449][ T8620] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(14) [ 310.473563][ T8624] vhci_hcd vhci_hcd.0: Device attached [ 310.480188][ T8620] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 310.521677][ T8628] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(20) [ 310.528403][ T8628] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 310.592422][ T8620] vhci_hcd vhci_hcd.0: Device attached [ 310.597301][ T5963] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 310.624079][ T8628] vhci_hcd vhci_hcd.0: Device attached [ 310.663640][ T8634] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(23) [ 310.670284][ T8634] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 310.716202][ T8637] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 310.763393][ T8620] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 310.811072][ T8620] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 310.837625][ T5986] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 310.853428][ T8634] vhci_hcd vhci_hcd.0: Device attached [ 310.934507][ T8635] vhci_hcd: connection closed [ 310.940545][ T8631] vhci_hcd: connection closed [ 310.945726][ T8629] vhci_hcd: connection closed [ 310.950880][ T8625] vhci_hcd: connection closed [ 310.955604][ T8621] vhci_hcd: connection reset by peer [ 310.967806][ T1339] vhci_hcd vhci_hcd.6: stop threads [ 311.107125][ T5986] usb 6-1: Using ep0 maxpacket: 16 [ 311.112825][ T1339] vhci_hcd vhci_hcd.6: release socket [ 311.141053][ T1339] vhci_hcd vhci_hcd.6: disconnect device [ 311.146190][ T5986] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 311.830748][ T5986] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 311.912410][ T1339] vhci_hcd vhci_hcd.6: stop threads [ 311.952316][ T1339] vhci_hcd vhci_hcd.6: release socket [ 311.971885][ T5986] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 311.995834][ T1339] vhci_hcd vhci_hcd.6: disconnect device [ 312.025398][ T1339] vhci_hcd vhci_hcd.6: stop threads [ 312.044482][ T5986] usb 6-1: config 1 interface 0 has no altsetting 0 [ 312.057370][ T1339] vhci_hcd vhci_hcd.6: release socket [ 312.095845][ T1339] vhci_hcd vhci_hcd.6: disconnect device [ 312.109798][ T5986] usb 6-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 312.124802][ T1339] vhci_hcd vhci_hcd.6: stop threads [ 312.141917][ T5986] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.150305][ T1339] vhci_hcd vhci_hcd.6: release socket [ 312.172711][ T1339] vhci_hcd vhci_hcd.6: disconnect device [ 312.186506][ T5986] usb 6-1: Product: syz [ 312.203202][ T1339] vhci_hcd vhci_hcd.6: stop threads [ 312.211743][ T5986] usb 6-1: Manufacturer: syz [ 312.221813][ T1339] vhci_hcd vhci_hcd.6: release socket [ 312.227547][ T5986] usb 6-1: SerialNumber: syz [ 312.242401][ T1339] vhci_hcd vhci_hcd.6: disconnect device [ 312.307207][ T5849] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 312.417952][ T993] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 312.483686][ T5849] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.528355][ T5849] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 312.531765][ T5986] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 312.565943][ T5849] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 312.592734][ T5849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 312.609265][ T993] usb 1-1: Using ep0 maxpacket: 32 [ 312.629311][ T5849] usb 5-1: SerialNumber: syz [ 312.631413][ T993] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 312.665452][ T993] usb 1-1: config 0 has no interface number 0 [ 312.684893][ T993] usb 1-1: config 0 interface 184 has no altsetting 0 [ 312.720371][ T993] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 312.738755][ T993] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.751986][ T5986] usb 6-1: USB disconnect, device number 10 [ 312.765768][ T993] usb 1-1: Product: syz [ 312.778794][ T993] usb 1-1: Manufacturer: syz [ 312.795784][ T993] usb 1-1: SerialNumber: syz [ 312.831984][ T993] usb 1-1: config 0 descriptor?? [ 312.920387][ T5849] usb 5-1: 0:2 : does not exist [ 312.936463][ T5849] usb 5-1: unit 5 not found! [ 312.958277][ T29] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 313.054115][ T5849] usb 5-1: USB disconnect, device number 5 [ 313.128667][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 313.139796][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 313.162749][ T29] usb 7-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 313.190324][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.198270][ T6066] udevd[6066]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 313.253111][ T29] usb 7-1: Product: syz [ 313.265132][ T993] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 313.265523][ T29] usb 7-1: Manufacturer: syz [ 313.308449][ T993] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 313.331752][ T993] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 313.354733][ T29] usb 7-1: SerialNumber: syz [ 313.365128][ T993] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 313.384957][ T29] usb 7-1: config 0 descriptor?? [ 313.421335][ T29] hub 7-1:0.0: bad descriptor, ignoring hub [ 313.448248][ T29] hub 7-1:0.0: probe with driver hub failed with error -5 [ 313.497623][ T29] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 314.508666][ T29] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 314.634463][ T6066] udevd[6066]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 314.757941][ T993] usb 7-1: USB disconnect, device number 13 [ 315.111103][ T8623] usblp0: removed [ 315.202766][ T29] usb 1-1: USB disconnect, device number 11 [ 315.574044][ T8682] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(13) [ 315.580680][ T8682] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 315.632505][ T8682] vhci_hcd vhci_hcd.0: Device attached [ 315.660928][ T8687] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(16) [ 315.667553][ T8687] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 315.702830][ T8687] vhci_hcd vhci_hcd.0: Device attached [ 315.742782][ T8682] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(15) [ 315.749424][ T8682] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 315.760843][ T5963] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 315.777117][ T8682] vhci_hcd vhci_hcd.0: Device attached [ 315.798271][ T8687] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(18) [ 315.804929][ T8687] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 315.817342][ T8687] vhci_hcd vhci_hcd.0: Device attached [ 315.865343][ T8682] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(21) [ 315.871994][ T8682] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 315.898468][ T29] usb 43-1: new low-speed USB device number 5 using vhci_hcd [ 315.937240][ T8682] vhci_hcd vhci_hcd.0: Device attached [ 315.959896][ T8687] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 315.963102][ T8682] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 316.012045][ T8682] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 316.126150][ T8695] vhci_hcd: connection closed [ 316.126693][ T6113] vhci_hcd vhci_hcd.5: stop threads [ 316.151067][ T8690] vhci_hcd: connection closed [ 316.151230][ T8692] vhci_hcd: connection closed [ 316.163645][ T8684] vhci_hcd: connection reset by peer [ 316.175818][ T8688] vhci_hcd: connection closed [ 316.212174][ T6113] vhci_hcd vhci_hcd.5: release socket [ 316.230377][ T8699] netlink: 180 bytes leftover after parsing attributes in process `syz.0.634'. [ 316.253722][ T6113] vhci_hcd vhci_hcd.5: disconnect device [ 316.276343][ T6113] vhci_hcd vhci_hcd.5: stop threads [ 316.303757][ T6113] vhci_hcd vhci_hcd.5: release socket [ 316.332874][ T6113] vhci_hcd vhci_hcd.5: disconnect device [ 316.352109][ T6113] vhci_hcd vhci_hcd.5: stop threads [ 316.370381][ T6113] vhci_hcd vhci_hcd.5: release socket [ 316.409848][ T6113] vhci_hcd vhci_hcd.5: disconnect device [ 316.436696][ T6113] vhci_hcd vhci_hcd.5: stop threads [ 316.459632][ T6113] vhci_hcd vhci_hcd.5: release socket [ 316.475612][ T6113] vhci_hcd vhci_hcd.5: disconnect device [ 316.518528][ T6113] vhci_hcd vhci_hcd.5: stop threads [ 316.540697][ T6113] vhci_hcd vhci_hcd.5: release socket [ 316.551328][ T6113] vhci_hcd vhci_hcd.5: disconnect device [ 317.157223][ T8694] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 317.242829][ T5849] IPVS: starting estimator thread 0... [ 317.417165][ T8713] IPVS: using max 28 ests per chain, 67200 per kthread [ 317.614113][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.621030][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.818941][ T993] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 318.047691][ T993] usb 6-1: Using ep0 maxpacket: 16 [ 318.082251][ T993] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 318.110129][ T993] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 318.146107][ T993] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 318.206356][ T993] usb 6-1: config 1 interface 0 has no altsetting 0 [ 318.237503][ T5849] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 318.322763][ T993] usb 6-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 318.337286][ T993] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.345580][ T993] usb 6-1: Product: syz [ 318.351871][ T993] usb 6-1: Manufacturer: syz [ 318.356614][ T993] usb 6-1: SerialNumber: syz [ 318.450153][ T5849] usb 1-1: Using ep0 maxpacket: 32 [ 318.489094][ T5849] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 318.534676][ T5849] usb 1-1: config 0 has no interface number 0 [ 318.573963][ T5849] usb 1-1: config 0 interface 184 has no altsetting 0 [ 318.618806][ T5849] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 318.660281][ T5849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.688864][ T5849] usb 1-1: Product: syz [ 318.727129][ T5849] usb 1-1: Manufacturer: syz [ 318.737652][ T993] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 318.764831][ T5849] usb 1-1: SerialNumber: syz [ 318.804526][ T5849] usb 1-1: config 0 descriptor?? [ 318.965828][ T993] usb 6-1: USB disconnect, device number 11 [ 319.046054][ T8733] ubi: mtd0 is already attached to ubi31 [ 319.090544][ T5162] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 319.961410][ T8736] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(13) [ 319.968058][ T8736] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 320.015074][ T5849] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 320.028465][ T8736] vhci_hcd vhci_hcd.0: Device attached [ 320.040360][ T5849] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 320.053806][ T5849] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 320.065102][ T8739] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(16) [ 320.071758][ T8739] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 320.080840][ T5849] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 320.087190][ T8739] vhci_hcd vhci_hcd.0: Device attached [ 320.120894][ T8736] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(15) [ 320.127631][ T8736] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 320.139793][ T8736] vhci_hcd vhci_hcd.0: Device attached [ 320.181576][ T8736] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(18) [ 320.188399][ T8736] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 320.199867][ T8736] vhci_hcd vhci_hcd.0: Device attached [ 320.239720][ T8736] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(21) [ 320.246441][ T8736] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 320.255030][ T8736] vhci_hcd vhci_hcd.0: Device attached [ 320.265579][ T8739] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 320.277073][ T5910] usb 45-1: new low-speed USB device number 3 using vhci_hcd [ 320.306244][ T8736] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 320.320178][ T8736] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 320.387978][ T8750] vhci_hcd: connection closed [ 320.388300][ T36] vhci_hcd vhci_hcd.6: stop threads [ 320.400603][ T36] vhci_hcd vhci_hcd.6: release socket [ 320.407476][ T36] vhci_hcd vhci_hcd.6: disconnect device [ 320.415797][ T8744] vhci_hcd: connection closed [ 320.415892][ T8740] vhci_hcd: connection closed [ 320.417095][ T8747] vhci_hcd: connection closed [ 320.421462][ T8737] vhci_hcd: connection reset by peer [ 320.444127][ T36] vhci_hcd vhci_hcd.6: stop threads [ 320.451333][ T36] vhci_hcd vhci_hcd.6: release socket [ 320.461221][ T36] vhci_hcd vhci_hcd.6: disconnect device [ 320.471334][ T36] vhci_hcd vhci_hcd.6: stop threads [ 320.477445][ T36] vhci_hcd vhci_hcd.6: release socket [ 320.485076][ T36] vhci_hcd vhci_hcd.6: disconnect device [ 320.494177][ T36] vhci_hcd vhci_hcd.6: stop threads [ 320.500793][ T36] vhci_hcd vhci_hcd.6: release socket [ 320.506923][ T36] vhci_hcd vhci_hcd.6: disconnect device [ 320.513498][ T36] vhci_hcd vhci_hcd.6: stop threads [ 320.524534][ T36] vhci_hcd vhci_hcd.6: release socket [ 320.563891][ T36] vhci_hcd vhci_hcd.6: disconnect device [ 321.027206][ T29] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 321.104562][ T5849] usb 1-1: USB disconnect, device number 12 [ 321.316826][ T5963] IPVS: starting estimator thread 0... [ 321.427590][ T8765] IPVS: using max 26 ests per chain, 62400 per kthread [ 322.000502][ T8778] ubi: mtd0 is already attached to ubi31 [ 322.020093][ T5162] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 322.734042][ T8720] usblp0: removed [ 322.928880][ T8788] netlink: 'syz.4.661': attribute type 3 has an invalid length. [ 323.367646][ T993] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 323.397068][ T5986] IPVS: starting estimator thread 0... [ 323.497603][ T8801] IPVS: using max 49 ests per chain, 117600 per kthread [ 323.527145][ T993] usb 6-1: Using ep0 maxpacket: 32 [ 323.542233][ T993] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 323.559014][ T993] usb 6-1: config 0 has no interface number 0 [ 323.574111][ T993] usb 6-1: config 0 interface 184 has no altsetting 0 [ 323.595099][ T993] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 323.610695][ T993] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.628771][ T993] usb 6-1: Product: syz [ 323.644332][ T993] usb 6-1: Manufacturer: syz [ 323.670109][ T993] usb 6-1: SerialNumber: syz [ 323.694100][ T993] usb 6-1: config 0 descriptor?? [ 324.039293][ T8811] ubi: mtd0 is already attached to ubi31 [ 324.101414][ T5162] Bluetooth: Frame is too long (len 12, expected len 4) [ 324.657368][ T993] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 324.675219][ T993] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 324.685094][ T993] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 324.744821][ T993] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -32 [ 324.797459][ T5990] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 324.949871][ T5990] usb 2-1: device descriptor read/64, error -71 [ 325.197052][ T5990] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 325.358506][ T5990] usb 2-1: device descriptor read/64, error -71 [ 325.427125][ T5910] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 325.489061][ T5990] usb usb2-port1: attempt power cycle [ 325.858661][ T5990] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 325.897835][ T5990] usb 2-1: device descriptor read/8, error -71 [ 326.147230][ T5990] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 326.188112][ T5990] usb 2-1: device descriptor read/8, error -71 [ 326.224692][ T29] usb 6-1: USB disconnect, device number 12 [ 326.317825][ T5990] usb usb2-port1: unable to enumerate USB device [ 326.324771][ T993] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 326.517149][ T993] usb 1-1: Using ep0 maxpacket: 32 [ 326.526168][ T993] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 326.547045][ T993] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 326.560094][ T993] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 326.571370][ T993] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 326.587252][ T993] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 326.597524][ T993] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 326.610827][ T993] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 326.620080][ T993] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.637268][ T993] usb 1-1: config 0 descriptor?? [ 326.668424][ T29] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 326.827067][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 326.845877][ T29] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 326.882390][ T29] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 326.903143][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.919709][ T29] usb 6-1: Product: syz [ 326.925605][ T29] usb 6-1: Manufacturer: syz [ 326.933578][ T29] usb 6-1: SerialNumber: syz [ 326.943531][ T29] usb 6-1: config 0 descriptor?? [ 326.954637][ T29] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 326.963860][ T29] usb 6-1: setting power ON [ 326.991572][ T993] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 326.995771][ T29] dvb-usb: bulk message failed: -22 (2/0) [ 327.097678][ T8854] ubi: mtd0 is already attached to ubi31 [ 327.183864][ T5162] Bluetooth: Frame is too long (len 12, expected len 4) [ 327.741427][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 327.756306][ T29] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 327.766379][ T29] usb 6-1: media controller created [ 327.850409][ T8835] dvb-usb: bulk message failed: -22 (3/0) [ 327.863568][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 327.917650][ T8835] dvb-usb: bulk message failed: -22 (4/0) [ 327.948923][ T8858] dvb-usb: bulk message failed: -22 (3/0) [ 327.981801][ T29] usb 6-1: selecting invalid altsetting 6 [ 328.019065][ T29] usb 6-1: digital interface selection failed (-22) [ 328.045919][ T29] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 328.092331][ T29] usb 6-1: setting power OFF [ 328.135617][ T29] dvb-usb: bulk message failed: -22 (2/0) [ 328.163474][ T29] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 328.180564][ T29] (NULL device *): no alternate interface [ 328.326904][ T29] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 328.358955][ T29] usb 6-1: USB disconnect, device number 13 [ 328.715098][ T8865] netlink: 180 bytes leftover after parsing attributes in process `syz.1.684'. [ 329.037241][ T30] audit: type=1326 audit(1774278694.752:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8866 comm="syz.5.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcd79c799 code=0x7ffc0000 [ 329.095146][ T30] audit: type=1326 audit(1774278694.752:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8866 comm="syz.5.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcd79c799 code=0x7ffc0000 [ 329.176414][ T5910] usb 1-1: USB disconnect, device number 13 [ 329.184372][ T30] audit: type=1326 audit(1774278694.752:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8866 comm="syz.5.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fddcd79c799 code=0x7ffc0000 [ 329.235180][ T30] audit: type=1326 audit(1774278694.762:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8866 comm="syz.5.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcd79c799 code=0x7ffc0000 [ 329.273675][ T5910] usblp0: removed [ 329.315837][ T30] audit: type=1326 audit(1774278694.762:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8866 comm="syz.5.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcd79c799 code=0x7ffc0000 [ 329.392956][ T30] audit: type=1326 audit(1774278694.782:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8866 comm="syz.5.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fddcd79c799 code=0x7ffc0000 [ 329.582030][ T30] audit: type=1326 audit(1774278694.782:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8866 comm="syz.5.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcd79c799 code=0x7ffc0000 [ 330.276399][ T30] audit: type=1326 audit(1774278694.782:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8866 comm="syz.5.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcd79c799 code=0x7ffc0000 [ 330.320867][ T30] audit: type=1326 audit(1774278694.782:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8866 comm="syz.5.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fddcd79c799 code=0x7ffc0000 [ 330.432680][ T30] audit: type=1326 audit(1774278694.782:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8866 comm="syz.5.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcd79c799 code=0x7ffc0000 [ 330.947153][ T29] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 331.119826][ T29] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 331.138599][ T29] usb 7-1: config 0 has no interface number 0 [ 331.155500][ T29] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 331.174035][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.198958][ T29] usb 7-1: Product: syz [ 331.213899][ T29] usb 7-1: Manufacturer: syz [ 331.226628][ T29] usb 7-1: SerialNumber: syz [ 331.246031][ T29] usb 7-1: config 0 descriptor?? [ 331.434487][ T8905] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 331.472645][ T29] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 331.501485][ T29] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 331.535992][ T29] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 331.566269][ T29] usb 7-1: media controller created [ 331.669858][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 331.794359][ T8911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.833779][ T8911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.907122][ T5990] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 332.087117][ T5990] usb 5-1: Using ep0 maxpacket: 16 [ 332.100331][ T5990] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 332.126145][ T5990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.158719][ T5990] usb 5-1: config 0 descriptor?? [ 332.186710][ T5990] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 332.766108][ T8917] xt_CT: You must specify a L4 protocol and not use inversions on it [ 332.879087][ T29] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 333.375824][ T5990] gspca_sonixj: reg_w1 err -110 [ 333.384467][ T5990] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 333.555198][ T29] usb 7-1: USB disconnect, device number 14 [ 334.705566][ T5990] usb 5-1: USB disconnect, device number 6 [ 335.539058][ T993] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 335.737189][ T993] usb 7-1: Using ep0 maxpacket: 32 [ 335.768064][ T993] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 335.823594][ T993] usb 7-1: config 0 has no interface number 0 [ 335.839258][ T993] usb 7-1: config 0 interface 184 has no altsetting 0 [ 335.884208][ T993] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 335.926199][ T993] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.956030][ T993] usb 7-1: Product: syz [ 335.966538][ T993] usb 7-1: Manufacturer: syz [ 335.985986][ T993] usb 7-1: SerialNumber: syz [ 336.039810][ T993] usb 7-1: config 0 descriptor?? [ 336.469566][ T993] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 336.508860][ T993] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 336.540997][ T993] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 336.591380][ T993] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -61 [ 338.148315][ T29] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 339.257690][ T29] usb 1-1: Using ep0 maxpacket: 16 [ 339.266048][ T29] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 339.277107][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.297605][ T5849] usb 7-1: USB disconnect, device number 15 [ 339.668822][ T29] usb 1-1: config 0 descriptor?? [ 339.699272][ T29] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 339.997409][ T5849] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 340.163330][ T5849] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 340.176650][ T5849] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.189972][ T5849] usb 7-1: Product: syz [ 340.196903][ T5849] usb 7-1: Manufacturer: syz [ 340.205822][ T5849] usb 7-1: SerialNumber: syz [ 340.217307][ T5849] usb 7-1: config 0 descriptor?? [ 340.567365][ T993] usb 7-1: USB disconnect, device number 16 [ 341.067285][ T5849] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 341.237090][ T5849] usb 6-1: Using ep0 maxpacket: 16 [ 341.248059][ T5849] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.258862][ T5849] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 341.269939][ T5849] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.293987][ T5849] usb 6-1: config 0 descriptor?? [ 341.332574][ T5849] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input12 [ 341.511880][ T5196] bcm5974 6-1:0.0: could not read from device [ 341.540554][ T5196] bcm5974 6-1:0.0: could not read from device [ 341.553594][ T5196] bcm5974 6-1:0.0: could not read from device [ 341.566383][ T5849] usb 6-1: USB disconnect, device number 14 [ 341.977655][ T993] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 342.159956][ T993] usb 7-1: Using ep0 maxpacket: 16 [ 342.206689][ T993] usb 7-1: config 0 has no interfaces? [ 342.256288][ T993] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 342.306844][ T993] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 342.335595][ T29] gspca_sonixj: reg_w1 err -71 [ 342.340928][ T29] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 342.355965][ T993] usb 7-1: Manufacturer: syz [ 342.382019][ T993] usb 7-1: config 0 descriptor?? [ 342.393907][ T29] usb 1-1: USB disconnect, device number 14 [ 342.539112][ T5910] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 342.717114][ T5910] usb 6-1: Using ep0 maxpacket: 32 [ 342.730832][ T5910] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 342.750496][ T5910] usb 6-1: config 0 has no interface number 0 [ 342.762961][ T5910] usb 6-1: config 0 interface 184 has no altsetting 0 [ 342.775171][ T5910] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 342.785926][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.800770][ T5910] usb 6-1: Product: syz [ 342.808951][ T5910] usb 6-1: Manufacturer: syz [ 342.822879][ T5910] usb 6-1: SerialNumber: syz [ 342.847689][ T5910] usb 6-1: config 0 descriptor?? [ 343.305825][ T5910] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 343.353154][ T5910] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 343.381816][ T5910] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 343.410698][ T5910] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -61 [ 343.546845][ T9045] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.554481][ T9045] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.768808][ T9045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.795939][ T9045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.384969][ T59] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.413735][ T59] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.651093][ T9065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.743'. [ 344.671542][ T59] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.692309][ T9065] netlink: 48 bytes leftover after parsing attributes in process `syz.4.743'. [ 344.706757][ T59] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.841916][ T9065] vlan2: entered allmulticast mode [ 344.850490][ T9065] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 345.260933][ T5910] usb 6-1: USB disconnect, device number 15 [ 345.502931][ T9070] netlink: 24 bytes leftover after parsing attributes in process `syz.5.745'. [ 345.974123][ T5910] usb 7-1: USB disconnect, device number 17 [ 346.083681][ T9084] ip6gre1: entered promiscuous mode [ 347.017108][ T5910] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 347.216026][ T5910] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 347.249087][ T5910] usb 6-1: config 0 has no interface number 0 [ 347.285602][ T5910] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 347.306138][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.342793][ T5910] usb 6-1: Product: syz [ 347.351964][ T5910] usb 6-1: Manufacturer: syz [ 347.374449][ T5910] usb 6-1: SerialNumber: syz [ 347.534164][ T5910] usb 6-1: config 0 descriptor?? [ 347.611374][ T9113] xt_CT: You must specify a L4 protocol and not use inversions on it [ 348.220397][ T5910] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 348.325569][ T5910] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 348.358660][ T5910] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 348.379465][ T5910] usb 6-1: media controller created [ 348.499600][ T5910] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 348.564533][ T5162] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 348.577282][ T9119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.733927][ T9119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.759071][ T5910] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 349.930471][ T5910] usb 6-1: USB disconnect, device number 16 [ 350.513874][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 350.513898][ T30] audit: type=1326 audit(1774278716.232:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9131 comm="syz.6.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa441b9c799 code=0x7ffc0000 [ 350.594261][ T30] audit: type=1326 audit(1774278716.272:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9131 comm="syz.6.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa441b5cfce code=0x7ffc0000 [ 350.651292][ T30] audit: type=1326 audit(1774278716.272:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9131 comm="syz.6.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa441b9c799 code=0x7ffc0000 [ 350.756133][ T30] audit: type=1326 audit(1774278716.282:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9131 comm="syz.6.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fa441b9c799 code=0x7ffc0000 [ 350.817549][ T30] audit: type=1326 audit(1774278716.472:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9131 comm="syz.6.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa441b9c799 code=0x7ffc0000 [ 350.888436][ T30] audit: type=1326 audit(1774278716.472:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9131 comm="syz.6.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa441b9c799 code=0x7ffc0000 [ 351.209297][ T9148] kvm_intel: kvm [9147]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x9 [ 352.713194][ T30] audit: type=1326 audit(1774278718.432:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9169 comm="syz.4.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0899b9c799 code=0x7ffc0000 [ 352.790079][ T30] audit: type=1326 audit(1774278718.432:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9169 comm="syz.4.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0899b9c799 code=0x7ffc0000 [ 352.857707][ T30] audit: type=1326 audit(1774278718.472:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9169 comm="syz.4.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0899b9c799 code=0x7ffc0000 [ 352.927085][ T30] audit: type=1326 audit(1774278718.472:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9169 comm="syz.4.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0899b9c799 code=0x7ffc0000 [ 353.147095][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 353.309101][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 353.337093][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023 [ 353.370651][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 353.408605][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 353.436422][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 353.473901][ T10] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 353.484629][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.512178][ T10] usb 5-1: Product: syz [ 353.528540][ T10] usb 5-1: Manufacturer: syz [ 353.544011][ T10] usb 5-1: SerialNumber: syz [ 353.593103][ T10] usb 5-1: config 0 descriptor?? [ 353.610649][ T9173] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 353.634573][ T10] usb 5-1: ucan: probing device on interface #0 [ 353.652008][ T10] usb 5-1: ucan: invalid endpoint configuration [ 353.672868][ T10] usb 5-1: ucan: probe failed; try to update the device firmware [ 353.889859][ T10] usb 5-1: USB disconnect, device number 7 [ 354.617723][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 354.791395][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 354.818293][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 354.853966][ T10] usb 6-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 354.879858][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.097355][ T10] usb 6-1: Product: syz [ 355.101661][ T10] usb 6-1: Manufacturer: syz [ 355.106925][ T10] usb 6-1: SerialNumber: syz [ 355.115130][ T10] usb 6-1: config 0 descriptor?? [ 355.129463][ T10] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 355.240700][ T9194] ubi: mtd0 is already attached to ubi31 [ 355.293508][ T5162] Bluetooth: Frame is too long (len 12, expected len 4) [ 355.807087][ T29] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 355.967744][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 355.986182][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.198951][ T29] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 356.208912][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.222903][ T29] usb 5-1: config 0 descriptor?? [ 356.261762][ T29] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input14 [ 356.926411][ T10] gspca_sonixj: reg_w1 err -110 [ 356.937568][ T10] sonixj 6-1:0.0: probe with driver sonixj failed with error -110 [ 357.053098][ T5196] bcm5974 5-1:0.0: could not read from device [ 357.083067][ T29] usb 5-1: USB disconnect, device number 8 [ 358.348076][ T29] usb 6-1: USB disconnect, device number 17 [ 358.932176][ T9231] ip6gre1: entered promiscuous mode [ 359.018029][ T9235] ubi: mtd0 is already attached to ubi31 [ 359.037974][ T5162] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 360.955888][ T9250] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 360.962561][ T9250] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 361.012842][ T9250] vhci_hcd vhci_hcd.0: Device attached [ 361.023814][ T9256] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(16) [ 361.030491][ T9256] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 361.074569][ T9256] vhci_hcd vhci_hcd.0: Device attached [ 361.080390][ T9250] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(15) [ 361.087210][ T9250] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 361.118906][ T9250] vhci_hcd vhci_hcd.0: Device attached [ 361.149946][ T9256] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(18) [ 361.156798][ T9256] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 361.182327][ T9256] vhci_hcd vhci_hcd.0: Device attached [ 361.182373][ T9250] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(20) [ 361.194624][ T9250] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 361.213919][ T9250] vhci_hcd vhci_hcd.0: Device attached [ 361.231942][ T9256] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 361.268265][ T29] usb 41-1: new low-speed USB device number 5 using vhci_hcd [ 361.287374][ T5910] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 361.311229][ T9250] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 361.341005][ T9250] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 361.374166][ T9270] vhci_hcd: connection closed [ 361.374604][ T58] vhci_hcd vhci_hcd.4: stop threads [ 361.390674][ T9265] vhci_hcd: connection closed [ 361.390989][ T9251] vhci_hcd: connection reset by peer [ 361.393640][ T9258] vhci_hcd: connection closed [ 361.398625][ T9262] vhci_hcd: connection closed [ 361.403101][ T58] vhci_hcd vhci_hcd.4: release socket [ 361.418216][ T58] vhci_hcd vhci_hcd.4: disconnect device [ 361.424146][ T58] vhci_hcd vhci_hcd.4: stop threads [ 361.431070][ T58] vhci_hcd vhci_hcd.4: release socket [ 361.436896][ T58] vhci_hcd vhci_hcd.4: disconnect device [ 361.450466][ T5910] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 361.461842][ T58] vhci_hcd vhci_hcd.4: stop threads [ 361.470833][ T5910] usb 6-1: config 0 has no interface number 0 [ 361.483740][ T58] vhci_hcd vhci_hcd.4: release socket [ 361.494662][ T5910] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 361.506243][ T58] vhci_hcd vhci_hcd.4: disconnect device [ 361.518950][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.531105][ T58] vhci_hcd vhci_hcd.4: stop threads [ 361.536463][ T58] vhci_hcd vhci_hcd.4: release socket [ 361.542755][ T5910] usb 6-1: Product: syz [ 361.548158][ T5910] usb 6-1: Manufacturer: syz [ 361.553122][ T58] vhci_hcd vhci_hcd.4: disconnect device [ 361.559712][ T5910] usb 6-1: SerialNumber: syz [ 361.564921][ T58] vhci_hcd vhci_hcd.4: stop threads [ 361.579146][ T5910] usb 6-1: config 0 descriptor?? [ 361.579243][ T58] vhci_hcd vhci_hcd.4: release socket [ 361.603205][ T58] vhci_hcd vhci_hcd.4: disconnect device [ 361.621098][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 361.621120][ T30] audit: type=1326 audit(1774278727.342:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9280 comm="syz.6.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa441b9c799 code=0x7ffc0000 [ 361.652955][ T30] audit: type=1326 audit(1774278727.342:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9280 comm="syz.6.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa441b9c799 code=0x7ffc0000 [ 361.678475][ T30] audit: type=1326 audit(1774278727.372:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9280 comm="syz.6.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa441b9c799 code=0x7ffc0000 [ 361.701906][ T30] audit: type=1326 audit(1774278727.372:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9280 comm="syz.6.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa441b9c799 code=0x7ffc0000 [ 361.726778][ T30] audit: type=1326 audit(1774278727.372:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9280 comm="syz.6.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa441b9c799 code=0x7ffc0000 [ 361.751497][ T30] audit: type=1326 audit(1774278727.402:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9280 comm="syz.6.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa441b9c799 code=0x7ffc0000 [ 361.776396][ T30] audit: type=1326 audit(1774278727.422:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9280 comm="syz.6.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa441b9c799 code=0x7ffc0000 [ 361.801645][ T5910] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 361.812374][ T30] audit: type=1326 audit(1774278727.432:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9280 comm="syz.6.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fa441b9c799 code=0x7ffc0000 [ 361.835695][ T5910] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 361.847343][ T5910] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 361.862828][ T30] audit: type=1326 audit(1774278727.432:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9280 comm="syz.6.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa441b9c799 code=0x7ffc0000 [ 361.888618][ T5910] usb 6-1: media controller created [ 361.902682][ T30] audit: type=1326 audit(1774278727.432:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9280 comm="syz.6.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa441b9c799 code=0x7ffc0000 [ 361.909102][ T5910] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 362.388789][ T9294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.427767][ T9294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.039001][ T5910] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 363.189836][ T5910] usb 6-1: USB disconnect, device number 18 [ 364.221385][ T9319] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.228949][ T9319] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.674595][ T9319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.736018][ T9319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.864801][ T9334] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 364.871436][ T9334] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 364.894357][ T9334] vhci_hcd vhci_hcd.0: Device attached [ 364.929645][ T9334] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(15) [ 364.936301][ T9334] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 365.009637][ T9334] vhci_hcd vhci_hcd.0: Device attached [ 365.062954][ T9339] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(18) [ 365.069800][ T9339] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 365.158878][ T9339] vhci_hcd vhci_hcd.0: Device attached [ 365.188179][ T9342] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(21) [ 365.194822][ T9342] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 365.257580][ T1339] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.400041][ T1339] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.409289][ T1339] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.418450][ T1339] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.445894][ T9342] vhci_hcd vhci_hcd.0: Device attached [ 365.745922][ T9339] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 366.403866][ T9334] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(17) [ 366.410519][ T9334] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 366.420456][ T9334] vhci_hcd vhci_hcd.0: Device attached [ 366.517376][ T9334] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 366.964293][ T9339] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 367.038838][ T9337] vhci_hcd: connection closed [ 367.039534][ T9343] vhci_hcd: connection closed [ 367.039615][ T6113] vhci_hcd vhci_hcd.4: stop threads [ 367.045465][ T9350] vhci_hcd: connection closed [ 367.057304][ T9340] vhci_hcd: connection closed [ 367.068598][ T9335] vhci_hcd: connection reset by peer [ 367.543884][ T6113] vhci_hcd vhci_hcd.4: release socket [ 367.563568][ T6113] vhci_hcd vhci_hcd.4: disconnect device [ 367.584674][ T6113] vhci_hcd vhci_hcd.4: stop threads [ 367.606462][ T6113] vhci_hcd vhci_hcd.4: release socket [ 367.627260][ T5910] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 367.641989][ T6113] vhci_hcd vhci_hcd.4: disconnect device [ 367.660009][ T6113] vhci_hcd vhci_hcd.4: stop threads [ 367.672205][ T6113] vhci_hcd vhci_hcd.4: release socket [ 367.686913][ T6113] vhci_hcd vhci_hcd.4: disconnect device [ 367.700677][ T6113] vhci_hcd vhci_hcd.4: stop threads [ 367.714588][ T6113] vhci_hcd vhci_hcd.4: release socket [ 367.734525][ T6113] vhci_hcd vhci_hcd.4: disconnect device [ 367.776797][ T6113] vhci_hcd vhci_hcd.4: stop threads [ 367.797647][ T5910] usb 6-1: Using ep0 maxpacket: 16 [ 367.804846][ T6113] vhci_hcd vhci_hcd.4: release socket [ 367.816987][ T5910] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.831939][ T6113] vhci_hcd vhci_hcd.4: disconnect device [ 367.847244][ T5910] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 367.887100][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.907147][ T29] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 367.929915][ T5910] usb 6-1: config 0 descriptor?? [ 367.970045][ T5910] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input15 [ 368.187189][ T5849] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 368.196386][ T9355] input: syz0 as /devices/virtual/input/input16 [ 368.309977][ T5910] usb 6-1: USB disconnect, device number 19 [ 368.316413][ T5196] bcm5974 6-1:0.0: could not read from device [ 368.349517][ T5196] bcm5974 6-1:0.0: could not read from device [ 368.370778][ T5849] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 368.384365][ T6023] bcm5974 6-1:0.0: could not read from device [ 368.403904][ T5849] usb 7-1: config 0 has no interface number 0 [ 368.427693][ T5196] bcm5974 6-1:0.0: could not read from device [ 368.443238][ T5849] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 368.504358][ T5849] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.563983][ T5849] usb 7-1: Product: syz [ 368.585454][ T5849] usb 7-1: Manufacturer: syz [ 368.600053][ T5849] usb 7-1: SerialNumber: syz [ 368.623859][ T5849] usb 7-1: config 0 descriptor?? [ 368.733481][ T9377] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 368.863835][ T5849] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 368.872822][ T5902] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 368.894438][ T5849] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 368.937419][ T5849] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 368.961424][ T5849] usb 7-1: media controller created [ 369.019215][ T5849] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 369.045312][ T5902] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 369.206391][ T9387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.247763][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.267296][ T5902] usb 5-1: Product: syz [ 369.271940][ T5902] usb 5-1: Manufacturer: syz [ 369.277731][ T5902] usb 5-1: SerialNumber: syz [ 369.289307][ T5902] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 369.959907][ T9387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.096977][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 370.156984][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 370.319572][ T5849] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 370.430813][ T5963] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 371.083964][ T5849] usb 7-1: USB disconnect, device number 18 [ 371.154177][ T9400] netlink: 32 bytes leftover after parsing attributes in process `syz.4.830'. [ 371.296984][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 371.307011][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 371.336963][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 371.425657][ T9408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.830'. [ 371.850591][ T5963] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 371.889249][ T5963] ath9k_htc: Failed to initialize the device [ 372.183424][ T5963] usb 5-1: ath9k_htc: USB layer deinitialized [ 372.397746][ T993] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 372.577096][ T993] usb 1-1: Using ep0 maxpacket: 16 [ 372.619642][ T993] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.208388][ T993] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 373.217616][ T993] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.252557][ T993] usb 1-1: config 0 descriptor?? [ 373.284381][ T993] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input17 [ 373.529937][ T9427] input: syz0 as /devices/virtual/input/input18 [ 375.174056][ T5986] usb 5-1: USB disconnect, device number 9 [ 375.254454][ T5196] bcm5974 1-1:0.0: could not read from device [ 375.298919][ T5196] bcm5974 1-1:0.0: could not read from device [ 375.426778][ T5196] bcm5974 1-1:0.0: could not read from device [ 375.447502][ T993] usb 1-1: USB disconnect, device number 15 [ 375.473458][ T5196] bcm5974 1-1:0.0: could not read from device [ 375.647400][ T5963] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 375.837832][ T5963] usb 2-1: Using ep0 maxpacket: 16 [ 375.859749][ T5963] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 375.885212][ T5963] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.908443][ T5963] usb 2-1: Product: syz [ 375.921787][ T5963] usb 2-1: Manufacturer: syz [ 375.935418][ T5963] usb 2-1: SerialNumber: syz [ 375.961592][ T5963] usb 2-1: config 0 descriptor?? [ 375.995180][ T5963] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 376.518455][ T5963] ssu100 2-1:0.0: probe with driver ssu100 failed with error -110 [ 377.412997][ T5963] usb 2-1: USB disconnect, device number 21 [ 379.079451][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.085915][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.471032][ T9514] ip6gre1: entered promiscuous mode [ 382.013002][ T9532] xt_CT: You must specify a L4 protocol and not use inversions on it [ 382.969604][ T993] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 383.097142][ T5963] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 383.141408][ T993] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 383.157793][ T993] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.165840][ T993] usb 2-1: Product: syz [ 383.171150][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 383.180282][ T993] usb 2-1: Manufacturer: syz [ 383.189048][ T993] usb 2-1: SerialNumber: syz [ 383.201070][ T993] usb 2-1: config 0 descriptor?? [ 383.257106][ T5963] usb 7-1: Using ep0 maxpacket: 16 [ 383.265607][ T5963] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 383.285904][ T5963] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.334954][ T5963] usb 7-1: config 0 descriptor?? [ 383.347643][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.358692][ T5963] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 383.389326][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.407478][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 383.421089][ T5902] usb 2-1: USB disconnect, device number 22 [ 383.432989][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 383.457248][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.480722][ T10] usb 5-1: config 0 descriptor?? [ 383.904687][ T10] plantronics 0003:047F:FFFF.0008: reserved main item tag 0xd [ 383.917411][ T10] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 383.942027][ T10] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 384.127124][ T993] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 384.168113][ T5849] usb 5-1: USB disconnect, device number 10 [ 384.277140][ T993] usb 6-1: Using ep0 maxpacket: 16 [ 384.284328][ T993] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.294930][ T993] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 384.297145][ T5902] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 384.305114][ T993] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.327387][ T993] usb 6-1: config 0 descriptor?? [ 384.345850][ T993] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input19 [ 384.467191][ T5902] usb 1-1: Using ep0 maxpacket: 16 [ 384.474963][ T5902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 384.488549][ T5902] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 384.498182][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.506525][ T5902] usb 1-1: Product: syz [ 384.511240][ T5902] usb 1-1: Manufacturer: syz [ 384.515962][ T5902] usb 1-1: SerialNumber: syz [ 384.524605][ T5902] usb 1-1: config 0 descriptor?? [ 384.533577][ T5902] hub 1-1:0.0: bad descriptor, ignoring hub [ 384.540524][ T5902] hub 1-1:0.0: probe with driver hub failed with error -5 [ 384.551466][ T9552] input: syz0 as /devices/virtual/input/input20 [ 384.555024][ T5902] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 384.620042][ T5902] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 384.678537][ T6066] udevd[6066]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 384.947574][ T10] usb 1-1: USB disconnect, device number 16 [ 386.114595][ T5963] gspca_sonixj: reg_w1 err -71 [ 386.139013][ T5963] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 386.181095][ T5963] usb 7-1: USB disconnect, device number 19 [ 386.922493][ T5196] bcm5974 6-1:0.0: could not read from device [ 386.949517][ T5196] bcm5974 6-1:0.0: could not read from device [ 386.972722][ T5196] bcm5974 6-1:0.0: could not read from device [ 387.008449][ T993] usb 6-1: USB disconnect, device number 20 [ 387.264826][ T9596] netlink: 180 bytes leftover after parsing attributes in process `syz.5.897'. [ 387.297500][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 387.467196][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 387.481370][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 387.509234][ T10] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 387.536478][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.559618][ T10] usb 1-1: Product: syz [ 387.564442][ T10] usb 1-1: Manufacturer: syz [ 387.569880][ T10] usb 1-1: SerialNumber: syz [ 387.578274][ T10] usb 1-1: config 0 descriptor?? [ 388.318156][ T10] hub 1-1:0.0: bad descriptor, ignoring hub [ 388.344656][ T10] hub 1-1:0.0: probe with driver hub failed with error -5 [ 388.374320][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 388.510910][ T10] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 388.564843][ T10] usb 1-1: USB disconnect, device number 17 [ 388.670391][ T6066] udevd[6066]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 389.206853][ T5963] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 389.372188][ T5963] usb 7-1: Using ep0 maxpacket: 16 [ 389.392091][ T5963] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 389.420461][ T5963] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.455898][ T5963] usb 7-1: config 0 descriptor?? [ 389.496906][ T5963] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 390.492551][ T9643] netlink: 180 bytes leftover after parsing attributes in process `syz.1.913'. [ 391.827254][ T5902] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 392.052829][ T5902] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 392.091779][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.123411][ T5902] usb 2-1: Product: syz [ 392.147462][ T5902] usb 2-1: Manufacturer: syz [ 392.152352][ T5902] usb 2-1: SerialNumber: syz [ 392.164190][ T5902] usb 2-1: config 0 descriptor?? [ 392.268656][ T5963] gspca_sonixj: reg_w1 err -71 [ 392.285278][ T5963] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 392.320383][ T5963] usb 7-1: USB disconnect, device number 20 [ 392.392525][ T5902] usb 2-1: USB disconnect, device number 23 [ 392.717108][ T5849] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 392.900910][ T5849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.932710][ T5849] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 392.962165][ T5849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.999854][ T5849] usb 1-1: config 0 descriptor?? [ 393.481725][ T9664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.498661][ T9664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.493840][ T5849] usbhid 1-1:0.0: can't add hid device: -71 [ 394.500057][ T5849] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 394.513077][ T5849] usb 1-1: USB disconnect, device number 18 [ 396.159278][ T5849] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 396.217048][ T10] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 396.297345][ T5902] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 396.325095][ T5849] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 396.347098][ T5849] usb 1-1: config 0 interface 0 has no altsetting 0 [ 396.353991][ T5849] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 396.363947][ T5849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.397088][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 396.416466][ T5849] usb 1-1: config 0 descriptor?? [ 396.438783][ T10] usb 7-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 396.460416][ T10] usb 7-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 396.487116][ T10] usb 7-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 396.487258][ T5902] usb 5-1: Using ep0 maxpacket: 8 [ 396.528857][ T10] usb 7-1: config 1 interface 0 has no altsetting 0 [ 396.568167][ T5902] usb 5-1: config 0 interface 0 has no altsetting 0 [ 396.568197][ T10] usb 7-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 396.606661][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.618218][ T5902] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 396.636817][ T10] usb 7-1: Product: syz [ 396.652636][ T10] usb 7-1: Manufacturer: syz [ 396.662093][ T9664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.663265][ T10] usb 7-1: SerialNumber: syz [ 396.682224][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.698962][ T9664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.718475][ T5902] usb 5-1: Product: syz [ 396.752352][ T5849] usbhid 1-1:0.0: can't add hid device: -71 [ 396.761308][ T5902] usb 5-1: Manufacturer: syz [ 396.789101][ T5849] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 396.798744][ T5902] usb 5-1: SerialNumber: syz [ 396.809996][ T5902] usb 5-1: config 0 descriptor?? [ 396.821865][ T5849] usb 1-1: USB disconnect, device number 19 [ 396.836263][ T5902] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 397.134631][ T10] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 397.174692][ T10] usb 7-1: USB disconnect, device number 21 [ 397.246624][ T9707] ubi: mtd0 is already attached to ubi31 [ 397.274944][ T5162] Bluetooth: Frame is too long (len 12, expected len 4) [ 397.729836][ T5902] gspca_sonixj: reg_r err -110 [ 397.748449][ T5902] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 397.870302][ T10] usblp0: removed [ 398.627212][ T5902] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 398.840738][ T5902] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 398.870261][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.900920][ T5902] usb 1-1: Product: syz [ 398.917358][ T5902] usb 1-1: Manufacturer: syz [ 398.931797][ T5902] usb 1-1: SerialNumber: syz [ 398.953153][ T5902] usb 1-1: config 0 descriptor?? [ 399.011669][ T5963] usb 5-1: USB disconnect, device number 11 [ 399.270697][ T5902] usb 1-1: USB disconnect, device number 20 [ 399.915239][ T9736] netlink: 180 bytes leftover after parsing attributes in process `syz.1.942'. [ 400.324043][ T5162] Bluetooth: Frame is too long (len 12, expected len 4) [ 401.447523][ T5902] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 401.617248][ T5963] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 401.627114][ T5902] usb 2-1: Using ep0 maxpacket: 32 [ 401.638829][ T5902] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 401.656049][ T5902] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 401.671250][ T5902] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 401.682442][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 401.699743][ T5902] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 401.705351][ T9763] netlink: 'syz.6.951': attribute type 5 has an invalid length. [ 401.728123][ T5902] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 401.747425][ T5902] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 401.756633][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.770637][ T9763] ip6erspan0: entered promiscuous mode [ 401.770909][ T5902] usb 2-1: config 0 descriptor?? [ 401.817172][ T5963] usb 5-1: Using ep0 maxpacket: 8 [ 401.825610][ T5963] usb 5-1: config 0 interface 0 has no altsetting 0 [ 401.845882][ T5963] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 401.858994][ T5963] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.874540][ T5963] usb 5-1: Product: syz [ 401.899918][ T5963] usb 5-1: Manufacturer: syz [ 401.924282][ T5963] usb 5-1: SerialNumber: syz [ 401.959033][ T5963] usb 5-1: config 0 descriptor?? [ 401.991219][ T5963] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 402.192077][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 402.192114][ T30] audit: type=1326 audit(1774278767.902:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9767 comm="syz.6.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa441b9c799 code=0x7ffc0000 [ 402.305338][ T30] audit: type=1326 audit(1774278767.902:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9767 comm="syz.6.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fa441b9c799 code=0x7ffc0000 [ 402.364672][ T30] audit: type=1326 audit(1774278767.912:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9767 comm="syz.6.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa441b9c799 code=0x7ffc0000 [ 402.441861][ T30] audit: type=1326 audit(1774278767.952:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9767 comm="syz.6.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa441b9c799 code=0x7ffc0000 [ 402.486317][ T30] audit: type=1326 audit(1774278767.952:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9767 comm="syz.6.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa441b9c799 code=0x7ffc0000 [ 402.518388][ T30] audit: type=1326 audit(1774278767.952:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9767 comm="syz.6.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa441b5cfce code=0x7ffc0000 [ 402.544198][ T30] audit: type=1326 audit(1774278767.972:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9767 comm="syz.6.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa441b9c799 code=0x7ffc0000 [ 402.569358][ T30] audit: type=1326 audit(1774278767.992:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9767 comm="syz.6.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fa441b9c799 code=0x7ffc0000 [ 402.600056][ T30] audit: type=1326 audit(1774278767.992:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9767 comm="syz.6.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa441b9c799 code=0x7ffc0000 [ 402.640815][ T30] audit: type=1326 audit(1774278767.992:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9767 comm="syz.6.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa441b9c799 code=0x7ffc0000 [ 402.783471][ T5902] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 402.843889][ T5902] usb 2-1: USB disconnect, device number 24 [ 402.915987][ T5902] usblp0: removed [ 403.223965][ T5963] input: sonixj as /devices/platform/dummy_hcd.4/usb5/5-1/input/input21 [ 403.808231][ T9782] netlink: 180 bytes leftover after parsing attributes in process `syz.0.956'. [ 403.966425][ T10] usb 5-1: USB disconnect, device number 12 [ 403.983645][ T9784] macvlan2: entered promiscuous mode [ 404.718792][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 404.796273][ T9799] pim6reg: entered allmulticast mode [ 404.891586][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 404.927904][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 404.952258][ T993] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 404.964228][ T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 404.984281][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 405.000601][ T10] usb 5-1: SerialNumber: syz [ 405.127094][ T993] usb 1-1: Using ep0 maxpacket: 32 [ 405.140625][ T993] usb 1-1: config 0 has an invalid interface number: 250 but max is 1 [ 405.164790][ T993] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.185554][ T993] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 405.213248][ T993] usb 1-1: config 0 has no interface number 0 [ 405.232911][ T10] usb 5-1: 0:2 : does not exist [ 405.243692][ T993] usb 1-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=a6.3f [ 405.267561][ T993] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.290975][ T993] usb 1-1: Product: syz [ 405.301774][ T993] usb 1-1: Manufacturer: syz [ 405.313412][ T993] usb 1-1: SerialNumber: syz [ 405.334439][ T993] usb 1-1: config 0 descriptor?? [ 405.345895][ T10] usb 5-1: USB disconnect, device number 13 [ 405.608874][ T993] usb 1-1: USB disconnect, device number 21 [ 408.937192][ T5902] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 409.087222][ T5902] usb 5-1: device descriptor read/64, error -71 [ 409.157044][ T993] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 409.310533][ T993] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 409.337347][ T5902] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 409.348468][ T993] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 409.377980][ T993] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 409.400928][ T993] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 409.429324][ T993] usb 6-1: SerialNumber: syz [ 409.487473][ T5902] usb 5-1: device descriptor read/64, error -71 [ 409.608712][ T5902] usb usb5-port1: attempt power cycle [ 409.683439][ T993] usb 6-1: 0:2 : does not exist [ 409.811379][ T993] usb 6-1: USB disconnect, device number 21 [ 409.948196][ T6066] udevd[6066]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 409.987862][ T5902] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 410.038977][ T5902] usb 5-1: device descriptor read/8, error -71 [ 410.290911][ T5902] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 410.322436][ T5902] usb 5-1: device descriptor read/8, error -71 [ 410.357101][ T993] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 410.447866][ T5902] usb usb5-port1: unable to enumerate USB device [ 410.507109][ T993] usb 7-1: device descriptor read/64, error -71 [ 411.717640][ T993] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 411.858412][ T993] usb 7-1: device descriptor read/64, error -71 [ 411.957087][ T5902] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 411.977319][ T993] usb usb7-port1: attempt power cycle [ 412.127050][ T5902] usb 2-1: Using ep0 maxpacket: 8 [ 412.134255][ T5902] usb 2-1: config 2 has an invalid interface number: 241 but max is 0 [ 412.143389][ T5902] usb 2-1: config 2 has no interface number 0 [ 412.150711][ T5902] usb 2-1: config 2 interface 241 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 412.164794][ T5902] usb 2-1: config 2 interface 241 has no altsetting 0 [ 412.176617][ T5902] usb 2-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=b3.a3 [ 412.186422][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.195267][ T5902] usb 2-1: Product: syz [ 412.197025][ T5986] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 412.199732][ T5902] usb 2-1: Manufacturer: syz [ 412.212894][ T5902] usb 2-1: SerialNumber: syz [ 412.225515][ T5902] ti_usb_3410_5052 2-1:2.241: TI USB 3410 1 port adapter converter detected [ 412.239633][ T5902] usb 2-1: Direct firmware load for moxa/moxa-1130.fw failed with error -2 [ 412.248390][ T5902] usb 2-1: Falling back to sysfs fallback for: moxa/moxa-1130.fw [ 412.267102][ T10] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 412.317119][ T993] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 412.348050][ T993] usb 7-1: device descriptor read/8, error -71 [ 412.359015][ T5986] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 412.367790][ T5986] usb 5-1: config 0 has no interface number 0 [ 412.376875][ T5986] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 412.386388][ T5986] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.394772][ T5986] usb 5-1: Product: syz [ 412.399398][ T5986] usb 5-1: Manufacturer: syz [ 412.404195][ T5986] usb 5-1: SerialNumber: syz [ 412.428914][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.442938][ T5986] usb 5-1: config 0 descriptor?? [ 412.460758][ T10] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 412.476781][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.496831][ T10] usb 6-1: config 0 descriptor?? [ 412.597108][ T993] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 412.627719][ T993] usb 7-1: device descriptor read/8, error -71 [ 412.658212][ T5986] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 412.675311][ T5986] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 412.691433][ T5986] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 412.700404][ T5986] usb 5-1: media controller created [ 412.726820][ T9917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.741520][ T993] usb usb7-port1: unable to enumerate USB device [ 412.742252][ T9917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.766868][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 412.775559][ T5986] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 412.787509][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 412.814819][ T10] usb 6-1: USB disconnect, device number 22 [ 413.103971][ T9929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.163446][ T9929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.297136][ T10] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 413.467521][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 413.486642][ T10] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.511140][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 413.529412][ T10] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 413.551604][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.576993][ T10] usb 6-1: config 0 descriptor?? [ 413.918317][ T5986] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 414.862601][ T9917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.871711][ T5986] usb 5-1: USB disconnect, device number 18 [ 414.922151][ T9917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.002847][ T9917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.059979][ T9917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.132523][ T9948] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 415.297422][ T5963] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 415.318377][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 415.347839][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 415.399365][ T10] usb 6-1: USB disconnect, device number 23 [ 415.527238][ T5963] usb 1-1: Using ep0 maxpacket: 16 [ 415.542152][ T5963] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.570476][ T5963] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 415.593897][ T5963] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 415.606326][ T5963] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.641255][ T5963] usb 1-1: config 0 descriptor?? [ 415.687037][ T5990] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 415.802697][ T9956] capability: warning: `syz.4.1010' uses deprecated v2 capabilities in a way that may be insecure [ 415.851985][ T5990] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 415.878720][ T5990] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.912251][ T5990] usb 7-1: Product: syz [ 415.934321][ T5990] usb 7-1: Manufacturer: syz [ 415.951147][ T5990] usb 7-1: SerialNumber: syz [ 415.976711][ T5990] usb 7-1: config 0 descriptor?? [ 416.207946][ T5990] usb 7-1: USB disconnect, device number 26 [ 416.311795][ T9970] syzkaller0: entered promiscuous mode [ 416.640403][ T5162] Bluetooth: Frame is too long (len 12, expected len 4) [ 418.027178][ T5963] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 418.208517][ T5963] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 418.218460][ T5963] usb 7-1: config 0 has no interface number 0 [ 418.251512][ T5963] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 418.270495][ T5963] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.291911][ T5849] usb 1-1: USB disconnect, device number 22 [ 418.303252][ T5963] usb 7-1: Product: syz [ 418.312235][ T5963] usb 7-1: Manufacturer: syz [ 418.323552][ T5963] usb 7-1: SerialNumber: syz [ 418.391659][ T5963] usb 7-1: config 0 descriptor?? [ 418.612218][ T5963] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 418.631474][ T5963] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 418.642408][ T5963] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 418.651011][ T5963] usb 7-1: media controller created [ 418.675098][ T5963] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 418.825402][T10001] syzkaller0: entered promiscuous mode [ 419.019812][T10004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.294511][T10004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.780440][ T5963] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 419.926270][ T5963] usb 7-1: USB disconnect, device number 27 [ 421.737028][ T5990] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 421.917279][ T5990] usb 7-1: Using ep0 maxpacket: 16 [ 421.927632][ T5990] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.938697][ T5990] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 421.968232][ T5990] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 421.994016][ T5990] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.020931][ T5990] usb 7-1: config 0 descriptor?? [ 422.547915][T10045] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1034'. [ 422.664262][T10047] trusted_key: encrypted_key: keyword 'n»w' not recognized [ 422.782429][T10052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1036'. [ 424.315832][ T5963] usb 7-1: USB disconnect, device number 28 [ 425.357606][ T5849] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 426.147087][ T5849] usb 1-1: device descriptor read/64, error -71 [ 426.410579][ T5849] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 426.547123][ T5849] usb 1-1: device descriptor read/64, error -71 [ 426.668416][ T5849] usb usb1-port1: attempt power cycle [ 426.813217][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1048'. [ 426.856878][T10091] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 427.027057][ T5849] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 427.058540][ T5849] usb 1-1: device descriptor read/8, error -71 [ 427.337033][ T5849] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 427.367889][ T5849] usb 1-1: device descriptor read/8, error -71 [ 427.491411][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 427.491792][ T5849] usb usb1-port1: unable to enumerate USB device [ 427.997255][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 428.013088][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.040218][ T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 428.066400][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 428.088923][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.117575][ T10] usb 5-1: config 0 descriptor?? [ 428.952403][T10115] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 429.116454][T10120] macvlan2: entered promiscuous mode [ 429.567185][T10133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1059'. [ 430.227056][ T5849] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 430.283177][T10146] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1057'. [ 430.294393][ T10] usb 5-1: USB disconnect, device number 19 [ 430.367112][ T5849] usb 6-1: device descriptor read/64, error -71 [ 431.047288][ T5849] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 431.187147][ T5849] usb 6-1: device descriptor read/64, error -71 [ 431.526129][ T5849] usb usb6-port1: attempt power cycle [ 431.907074][ T5849] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 431.938370][ T5849] usb 6-1: device descriptor read/8, error -71 [ 432.337649][ T5849] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 432.376867][ T5849] usb 6-1: device descriptor read/8, error -71 [ 432.447603][T10167] macvlan2: entered promiscuous mode [ 432.487347][ T5849] usb usb6-port1: unable to enumerate USB device [ 433.607078][ T5849] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 433.867071][ T5849] usb 5-1: Using ep0 maxpacket: 32 [ 433.878218][ T5849] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 433.897365][ T5849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 433.909089][ T5849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 433.919725][ T5849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 433.973820][ T5849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 434.008026][ T5849] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 434.038080][ T5849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.052890][ T5849] usb 5-1: Product: syz [ 434.059454][ T5849] usb 5-1: Manufacturer: syz [ 434.065322][ T5849] usb 5-1: SerialNumber: syz [ 434.146360][ T5849] usb 5-1: config 0 descriptor?? [ 434.574179][ T5849] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 434.612984][ T5849] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 434.672051][T10201] netlink: 'syz.5.1080': attribute type 12 has an invalid length. [ 435.047862][ T5849] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 435.080793][ T5849] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 435.119231][ T5849] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 435.144246][ T5849] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 435.172092][ T5849] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 435.187446][ T5849] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 435.199250][ T5849] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 435.217729][ T5849] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 435.228448][ T5849] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 435.432824][ T5849] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 435.441483][ T5849] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 435.448074][ T5849] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 435.515756][ T5849] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 435.522584][ T5849] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 435.529540][ T5849] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 435.536165][ T5849] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 435.542247][ T5849] input input22: Timeout waiting for response from device. [ 435.560408][ T5849] usb 5-1: USB disconnect, device number 20 [ 435.997344][ T29] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 436.097347][ T5849] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 436.138092][ T29] usb 1-1: device descriptor read/64, error -71 [ 436.289244][ T5849] usb 5-1: Using ep0 maxpacket: 16 [ 436.301191][ T5849] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.312285][ T5849] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 436.336617][ T5849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.363932][ T5849] usb 5-1: config 0 descriptor?? [ 436.386230][ T5849] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input23 [ 436.398326][ T29] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 436.537016][ T29] usb 1-1: device descriptor read/64, error -71 [ 436.598119][T10214] input: syz0 as /devices/virtual/input/input24 [ 436.657579][ T29] usb usb1-port1: attempt power cycle [ 436.690352][T10225] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1085'. [ 437.017393][ T29] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 437.058874][ T29] usb 1-1: device descriptor read/8, error -71 [ 437.314497][ T29] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 437.359446][ T29] usb 1-1: device descriptor read/8, error -71 [ 437.487551][ T29] usb usb1-port1: unable to enumerate USB device [ 437.940024][ T10] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 438.104253][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 438.121154][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 438.136322][ T10] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 438.147893][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 438.163051][ T10] usb 7-1: SerialNumber: syz [ 438.392350][ T10] usb 7-1: 0:2 : does not exist [ 438.473899][ T10] usb 7-1: USB disconnect, device number 29 [ 438.539269][ T5894] udevd[5894]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 439.253619][ T5196] bcm5974 5-1:0.0: could not read from device [ 439.320663][ T5196] bcm5974 5-1:0.0: could not read from device [ 439.350149][ T5849] usb 5-1: USB disconnect, device number 21 [ 439.717104][ T5990] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 439.897105][ T5990] usb 7-1: Using ep0 maxpacket: 8 [ 439.915132][ T5990] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 439.937967][ T5990] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 439.975923][ T5990] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 440.020512][ T5990] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.200311][ T5990] usbtmc 7-1:16.0: bulk endpoints not found [ 440.483199][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.489710][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.605565][T10296] input: syz0 as /devices/virtual/input/input25 [ 442.627524][ T5849] usb 7-1: USB disconnect, device number 30 [ 443.437646][ T5849] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 443.462840][T10340] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 443.607234][ T5849] usb 7-1: Using ep0 maxpacket: 16 [ 443.621275][ T5849] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 443.643691][ T5849] usb 7-1: config 0 has no interface number 0 [ 443.657118][ T5849] usb 7-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 443.695518][ T5849] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 443.720898][ T5849] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 443.729440][ T5849] usb 7-1: Product: syz [ 443.733687][ T5849] usb 7-1: SerialNumber: syz [ 443.744265][ T5849] usb 7-1: config 0 descriptor?? [ 443.766082][ T5849] usbhid 7-1:0.8: couldn't find an input interrupt endpoint [ 443.969689][T10328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.988144][T10328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.014959][ T5849] usb 7-1: USB disconnect, device number 31 [ 444.617110][ T29] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 444.787152][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 444.801943][ T29] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 444.833215][ T29] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 444.886206][ T29] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 444.915331][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.952353][ T29] usbtmc 5-1:16.0: bulk endpoints not found [ 447.187988][ T5990] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 447.220934][ T10] usb 5-1: USB disconnect, device number 22 [ 447.381520][ T5990] usb 6-1: Using ep0 maxpacket: 16 [ 447.439386][ T5990] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 447.746417][ T5990] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 447.811321][ T5990] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 447.863138][ T5990] usb 6-1: config 1 interface 0 has no altsetting 0 [ 447.907110][ T5990] usb 6-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 447.916805][ T5990] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.931674][ T5990] usb 6-1: Product: syz [ 447.938890][ T5990] usb 6-1: Manufacturer: syz [ 447.948598][ T5990] usb 6-1: SerialNumber: syz [ 448.204595][ T10] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 448.951879][ T5990] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 449.007198][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 449.019641][ T5990] usb 6-1: USB disconnect, device number 28 [ 449.027109][ T10] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 449.058089][ T5990] usblp0: removed [ 449.063037][ T10] usb 7-1: config 0 has no interface number 0 [ 449.081890][ T10] usb 7-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 449.128255][ T10] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 449.162776][ T10] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 449.183983][ T10] usb 7-1: Product: syz [ 449.195628][ T10] usb 7-1: SerialNumber: syz [ 449.255158][ T10] usb 7-1: config 0 descriptor?? [ 449.272590][ T10] usbhid 7-1:0.8: couldn't find an input interrupt endpoint [ 449.498481][T10411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.524843][T10411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.559621][ T10] usb 7-1: USB disconnect, device number 32 [ 450.658043][T10435] can0: slcan on ttyS3. [ 451.470314][T10432] can0 (unregistered): slcan off ttyS3. [ 451.857196][ T29] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 452.027044][ T29] usb 1-1: Using ep0 maxpacket: 32 [ 452.060236][ T29] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 452.167083][ T29] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 452.192851][ T29] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 452.207009][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 452.251691][ T29] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 452.290830][ T29] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 452.381652][ T29] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 452.455665][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.681672][ T29] usb 1-1: config 0 descriptor?? [ 452.898468][ T29] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 31 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 453.559717][T10464] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1150'. [ 454.654568][ T5849] usb 1-1: USB disconnect, device number 31 [ 454.695926][T10471] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1153'. [ 454.723738][ T5849] usblp0: removed [ 454.825795][T10478] netlink: 'syz.0.1156': attribute type 1 has an invalid length. [ 454.833877][ T29] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 455.017145][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 455.019540][ T29] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 455.019573][ T29] usb 7-1: config 0 has no interface number 0 [ 455.019620][ T29] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 455.022196][ T29] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 455.022228][ T29] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 455.022251][ T29] usb 7-1: Product: syz [ 455.022267][ T29] usb 7-1: SerialNumber: syz [ 455.026062][ T29] usb 7-1: config 0 descriptor?? [ 455.045235][ T29] usbhid 7-1:0.8: couldn't find an input interrupt endpoint [ 455.210584][T10479] bond1 (unregistering): Released all slaves [ 456.161663][T10487] slcan: can't register candev [ 456.187652][T10473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.189080][T10473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.203092][ T10] usb 7-1: USB disconnect, device number 33 [ 456.487966][T10476] bond1: (slave gretap1): making interface the new active one [ 456.492183][T10476] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 458.288230][ T5990] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 458.577740][ T5990] usb 7-1: Using ep0 maxpacket: 8 [ 458.622363][ T5990] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 458.760875][ T5990] usb 7-1: config 0 has no interfaces? [ 458.815065][ T5990] usb 7-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 459.517754][ T5990] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.525886][ T5990] usb 7-1: Product: syz [ 459.545763][ T5990] usb 7-1: Manufacturer: syz [ 459.554006][ T5990] usb 7-1: SerialNumber: syz [ 459.765412][ T5990] usb 7-1: config 0 descriptor?? [ 460.763977][T10529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1165'. [ 460.950211][T10510] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 461.188469][T10532] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 462.299852][T10538] slcan: can't register candev [ 463.120735][ T29] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 463.287066][ T29] usb 1-1: Using ep0 maxpacket: 16 [ 463.294342][ T29] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 463.305970][ T29] usb 1-1: config 0 has no interface number 0 [ 463.313641][ T29] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 463.341689][ T29] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 463.385329][ T29] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 463.892203][ T29] usb 1-1: Product: syz [ 463.902372][ T29] usb 1-1: SerialNumber: syz [ 463.929633][ T29] usb 1-1: config 0 descriptor?? [ 463.950713][ T29] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 464.113237][ T29] usb 7-1: USB disconnect, device number 34 [ 464.159166][T10546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.198162][T10546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.268526][ T5990] usb 1-1: USB disconnect, device number 32 [ 465.215486][ T5963] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 465.310722][T10571] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1173'. [ 465.500744][ T5963] usb 5-1: unable to get BOS descriptor or descriptor too short [ 465.521146][ T5963] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 465.531883][ T5963] usb 5-1: can't read configurations, error -71 [ 466.510697][ T29] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 466.567712][T10579] pim6reg: entered allmulticast mode [ 467.418670][T10590] slcan: can't register candev [ 467.507779][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 467.547149][ T5849] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 467.710974][ T5849] usb 1-1: device descriptor read/64, error -71 [ 467.855663][T10594] macvlan2: entered promiscuous mode [ 467.967041][ T5849] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 468.137033][ T5849] usb 1-1: device descriptor read/64, error -71 [ 468.279191][ T5849] usb usb1-port1: attempt power cycle [ 468.667059][ T5849] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 468.710103][ T29] usb 6-1: device descriptor read/all, error -71 [ 468.764391][ T5849] usb 1-1: device descriptor read/8, error -71 [ 468.774008][T10599] lo: entered allmulticast mode [ 469.018597][ T5849] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 469.070261][ T5849] usb 1-1: device descriptor read/8, error -71 [ 469.214515][ T5849] usb usb1-port1: unable to enumerate USB device [ 470.127077][ T5990] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 470.175032][ T29] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 470.441823][ T5990] usb 7-1: Using ep0 maxpacket: 16 [ 470.452633][ T5990] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 470.463207][ T5990] usb 7-1: config 0 has no interface number 0 [ 470.470109][ T5990] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 470.483743][ T5990] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 470.493192][ T5990] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 470.503597][ T5990] usb 7-1: Product: syz [ 470.508503][ T5990] usb 7-1: SerialNumber: syz [ 471.332092][ T29] usb 6-1: unable to get BOS descriptor or descriptor too short [ 471.332652][ T5990] usb 7-1: config 0 descriptor?? [ 471.370138][ T5990] usbhid 7-1:0.8: couldn't find an input interrupt endpoint [ 471.392840][ T29] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 471.423857][ T29] usb 6-1: can't read configurations, error -71 [ 471.443732][ T29] usb usb6-port1: attempt power cycle [ 471.584442][T10613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.602138][T10613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.614565][ T5849] usb 7-1: USB disconnect, device number 35 [ 472.866060][T10641] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1197'. [ 472.884858][T10641] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1197'. [ 472.979202][T10641] netlink: 'syz.5.1197': attribute type 4 has an invalid length. [ 473.177749][ T5990] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 473.287361][ T29] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 473.367223][ T5990] usb 5-1: Using ep0 maxpacket: 16 [ 473.385728][ T5990] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 473.410179][ T5990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.435845][ T5990] usb 5-1: Product: syz [ 473.444924][ T5990] usb 5-1: Manufacturer: syz [ 473.449915][ T5990] usb 5-1: SerialNumber: syz [ 473.459588][T10652] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1198'. [ 473.462706][ T5990] usb 5-1: config 0 descriptor?? [ 473.489518][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 473.491724][ T5990] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 473.528042][ T29] usb 7-1: config 162 has an invalid interface number: 84 but max is 2 [ 473.561646][ T29] usb 7-1: config 162 has an invalid interface number: 3 but max is 2 [ 473.618939][ T29] usb 7-1: config 162 has no interface number 0 [ 473.652991][ T29] usb 7-1: config 162 has no interface number 1 [ 473.687495][ T29] usb 7-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 473.743842][ T29] usb 7-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 473.788268][ T29] usb 7-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 473.818838][ T29] usb 7-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 473.862813][ T29] usb 7-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 473.891522][ T29] usb 7-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 473.922309][ T5990] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71 [ 473.930490][ T29] usb 7-1: config 162 interface 84 has no altsetting 0 [ 473.947036][ T29] usb 7-1: config 162 interface 2 has no altsetting 0 [ 473.956694][ T29] usb 7-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 473.968593][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.977300][ T29] usb 7-1: Product: syz [ 473.981699][ T29] usb 7-1: Manufacturer: syz [ 474.003647][ T29] usb 7-1: SerialNumber: syz [ 474.035895][ T5990] usb 5-1: USB disconnect, device number 25 [ 474.042287][ T993] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 474.210547][ T993] usb 6-1: device descriptor read/64, error -71 [ 474.478568][ T993] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 474.658808][ T993] usb 6-1: device descriptor read/64, error -71 [ 474.940128][ T993] usb usb6-port1: attempt power cycle [ 476.729559][ T993] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 476.734038][ T5902] usb 2-1: ti_download_firmware - firmware not found [ 476.744345][ T5902] ti_usb_3410_5052 2-1:2.241: probe with driver ti_usb_3410_5052 failed with error -2 [ 476.790562][ T5902] usb 2-1: USB disconnect, device number 25 [ 476.892519][ T993] usb 6-1: device descriptor read/8, error -71 [ 477.988501][ T5162] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 478.020682][ T29] usb 7-1: USB disconnect, device number 36 [ 478.460857][ T29] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 478.617275][ T29] usb 7-1: device descriptor read/64, error -71 [ 478.895081][ T29] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 479.057062][ T29] usb 7-1: device descriptor read/64, error -71 [ 479.071932][ T5990] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 479.177325][ T29] usb usb7-port1: attempt power cycle [ 479.947011][ T5990] usb 6-1: Using ep0 maxpacket: 8 [ 480.058394][ T5990] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 480.098112][ T5990] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 480.108674][ T5990] usb 6-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 480.120589][ T5990] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 480.134465][ T5990] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 480.144623][ T5990] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.287219][ T29] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 480.300441][ T5990] usbtmc 6-1:16.0: bulk endpoints not found [ 481.012033][ T29] usb 7-1: device descriptor read/8, error -71 [ 481.407279][ T5990] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 481.600758][ T5990] usb 2-1: Using ep0 maxpacket: 16 [ 481.615799][ T5990] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 481.635770][ T5990] usb 2-1: can't read configurations, error -61 [ 481.798629][ T5990] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 481.841747][T10725] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1216'. [ 481.997069][ T5990] usb 2-1: Using ep0 maxpacket: 16 [ 482.009044][ T5990] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 482.024378][ T5990] usb 2-1: can't read configurations, error -61 [ 482.036479][ T5990] usb usb2-port1: attempt power cycle [ 482.398396][ T5990] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 482.438782][ T5990] usb 2-1: Using ep0 maxpacket: 16 [ 482.449067][ T29] usb 6-1: USB disconnect, device number 36 [ 482.461661][ T5990] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 482.483380][ T5990] usb 2-1: can't read configurations, error -61 [ 482.677272][ T5990] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 482.719853][ T5990] usb 2-1: Using ep0 maxpacket: 16 [ 482.735950][ T5990] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 482.754775][ T5990] usb 2-1: can't read configurations, error -61 [ 482.771367][ T5990] usb usb2-port1: unable to enumerate USB device [ 484.797234][ T30] audit: type=1326 audit(1774278850.512:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10757 comm="syz.5.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcd79c799 code=0x7ffc0000 [ 485.534215][ T30] audit: type=1326 audit(1774278850.522:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10757 comm="syz.5.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fddcd75cfce code=0x7ffc0000 [ 485.614937][ T30] audit: type=1326 audit(1774278850.522:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10757 comm="syz.5.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcd79c799 code=0x7ffc0000 [ 485.655307][T10772] delete_channel: no stack [ 485.741405][ T30] audit: type=1326 audit(1774278850.522:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10757 comm="syz.5.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fddcd79c799 code=0x7ffc0000 [ 485.856989][ T30] audit: type=1326 audit(1774278850.522:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10757 comm="syz.5.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcd79c799 code=0x7ffc0000 [ 485.891513][ T30] audit: type=1326 audit(1774278850.522:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10757 comm="syz.5.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fddcd79c799 code=0x7ffc0000 [ 485.992409][ T30] audit: type=1326 audit(1774278850.522:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10757 comm="syz.5.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcd79c799 code=0x7ffc0000 [ 486.079676][ T29] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 486.094582][ T30] audit: type=1326 audit(1774278850.522:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10757 comm="syz.5.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fddcd75cfce code=0x7ffc0000 [ 486.153198][ T30] audit: type=1326 audit(1774278850.522:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10757 comm="syz.5.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcd79c799 code=0x7ffc0000 [ 486.204520][ T30] audit: type=1326 audit(1774278850.522:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10757 comm="syz.5.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fddcd79c799 code=0x7ffc0000 [ 486.269214][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 486.295405][ T29] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 486.307075][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 486.337724][ T29] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 486.384625][ T29] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 486.435631][ T29] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 486.467462][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.528836][ T29] usbtmc 5-1:16.0: bulk endpoints not found [ 487.079852][T10787] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1233'. [ 488.087311][ T5990] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 488.244479][T10803] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1238'. [ 488.267267][ T5990] usb 6-1: Using ep0 maxpacket: 16 [ 488.280057][ T5990] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 488.297858][ T5990] usb 6-1: can't read configurations, error -61 [ 488.435561][T10805] macvlan2: entered promiscuous mode [ 488.442118][ T5990] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 488.777053][ T5990] usb 6-1: Using ep0 maxpacket: 16 [ 488.796682][ T5990] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 488.862057][ T5990] usb 6-1: can't read configurations, error -61 [ 488.941545][ T5990] usb usb6-port1: attempt power cycle [ 489.486057][ T993] usb 5-1: USB disconnect, device number 26 [ 489.495422][ T5990] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 489.580353][ T5990] usb 6-1: Using ep0 maxpacket: 16 [ 489.608090][ T5990] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 489.649997][ T5990] usb 6-1: can't read configurations, error -61 [ 489.797057][ T5990] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 489.838133][ T5990] usb 6-1: Using ep0 maxpacket: 16 [ 489.849395][ T5990] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 489.867132][ T5990] usb 6-1: can't read configurations, error -61 [ 489.881063][ T5990] usb usb6-port1: unable to enumerate USB device [ 489.907459][ T10] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 490.067121][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 490.074067][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.084874][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 490.101579][ T10] usb 7-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 490.111219][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.119787][ T10] usb 7-1: Product: syz [ 490.124274][ T10] usb 7-1: Manufacturer: syz [ 490.130017][ T10] usb 7-1: SerialNumber: syz [ 490.140790][ T10] usb 7-1: config 0 descriptor?? [ 490.159053][ T10] hub 7-1:0.0: bad descriptor, ignoring hub [ 490.166033][ T10] hub 7-1:0.0: probe with driver hub failed with error -5 [ 490.175590][ T10] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 490.228841][ T10] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 490.282095][ T6066] udevd[6066]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 490.401754][T10837] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1248'. [ 490.458706][ T10] usb 7-1: USB disconnect, device number 41 [ 490.614234][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 490.614253][ T30] audit: type=1326 audit(1774278856.332:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10840 comm="syz.4.1249" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0899b9c799 code=0x0 [ 490.784213][T10844] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1250'. [ 491.227130][ T10] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 491.347162][ T29] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 491.377036][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 491.384465][ T10] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 491.402167][ T10] usb 7-1: config 0 has no interface number 0 [ 491.404318][ T30] audit: type=1326 audit(1774278857.122:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10854 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6239c799 code=0x7ffc0000 [ 491.444247][ T30] audit: type=1326 audit(1774278857.122:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10854 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6239c799 code=0x7ffc0000 [ 491.468955][ T30] audit: type=1326 audit(1774278857.152:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10854 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feb6239c799 code=0x7ffc0000 [ 491.524858][ T10] usb 7-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 491.534956][ T30] audit: type=1326 audit(1774278857.162:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10854 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6239c799 code=0x7ffc0000 [ 491.535013][ T30] audit: type=1326 audit(1774278857.162:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10854 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feb6235cfce code=0x7ffc0000 [ 491.535057][ T30] audit: type=1326 audit(1774278857.162:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10854 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feb6239c42b code=0x7ffc0000 [ 491.535103][ T30] audit: type=1326 audit(1774278857.162:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10854 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feb6239c42b code=0x7ffc0000 [ 491.535148][ T30] audit: type=1326 audit(1774278857.162:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10854 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feb6239c42b code=0x7ffc0000 [ 491.535193][ T30] audit: type=1326 audit(1774278857.162:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10854 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feb6239c42b code=0x7ffc0000 [ 491.536991][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 491.655925][ T10] usb 7-1: config 0 interface 89 has no altsetting 0 [ 491.795154][ T10] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 491.807083][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.815308][ T10] usb 7-1: Product: syz [ 491.838273][ T29] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 491.853745][ T10] usb 7-1: Manufacturer: syz [ 491.853838][ T29] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 492.523717][ T29] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 492.533961][ T10] usb 7-1: SerialNumber: syz [ 492.605283][ T5902] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 492.655908][ T29] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 492.676789][ T10] usb 7-1: config 0 descriptor?? [ 492.682029][ T29] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 492.682157][ T29] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 492.682210][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.712588][ T29] usbtmc 6-1:16.0: probe with driver usbtmc failed with error -22 [ 492.739935][ T10] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 492.752352][ T10] em28xx 7-1:0.89: Video interface 89 found: [ 492.802873][ T5902] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 492.815277][ T5902] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023 [ 492.825912][ T5902] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 492.838315][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 492.849153][ T5902] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 492.864766][ T5902] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 492.875593][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.892843][ T5902] usb 2-1: Product: syz [ 492.897728][ T5902] usb 2-1: Manufacturer: syz [ 492.902473][ T5902] usb 2-1: SerialNumber: syz [ 492.919643][ T5902] usb 2-1: config 0 descriptor?? [ 492.937505][T10855] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 492.953429][ T5902] usb 2-1: ucan: probing device on interface #0 [ 492.961776][ T5902] usb 2-1: ucan: invalid endpoint configuration [ 492.968665][ T5902] usb 2-1: ucan: probe failed; try to update the device firmware [ 493.141778][T10851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.152664][T10851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.164031][ T5902] usb 2-1: USB disconnect, device number 30 [ 493.368819][ T10] em28xx 7-1:0.89: unknown em28xx chip ID (0) [ 493.977289][ T5990] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 494.143447][ T5990] usb 5-1: Using ep0 maxpacket: 32 [ 494.184705][ T5990] usb 5-1: config 0 has an invalid interface number: 250 but max is 1 [ 494.200506][ T5990] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.223968][ T5990] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 494.244959][ T5990] usb 5-1: config 0 has no interface number 0 [ 494.261430][ T5990] usb 5-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=a6.3f [ 494.288660][ T5990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.315149][ T5990] usb 5-1: Product: syz [ 494.327269][ T10] em28xx 7-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64) [ 494.338512][ T5990] usb 5-1: Manufacturer: syz [ 494.351261][ T5902] usb 6-1: USB disconnect, device number 41 [ 494.357246][ T10] em28xx 7-1:0.89: board has no eeprom [ 494.362942][ T5990] usb 5-1: SerialNumber: syz [ 494.432442][ T5990] usb 5-1: config 0 descriptor?? [ 494.557776][T10873] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1252'. [ 494.598705][T10873] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1252'. [ 494.682116][ T5902] usb 5-1: USB disconnect, device number 27 [ 495.257106][ T5990] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 495.577013][ T10] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67) [ 495.588158][ T10] em28xx 7-1:0.89: analog set to bulk mode. [ 495.596455][ T993] em28xx 7-1:0.89: Registering V4L2 extension [ 495.608322][ T5990] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 495.632790][ T5990] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 495.671031][ T5990] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 495.702973][ T5990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 495.765599][ T5990] usb 2-1: SerialNumber: syz [ 495.800954][ T993] em28xx 7-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 495.826284][ T993] em28xx 7-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 495.838770][ T993] em28xx 7-1:0.89: reading from i2c device at 0x42 failed (error=-5) [ 495.848114][ T993] em28xx 7-1:0.89: reading from i2c device at 0x40 failed (error=-5) [ 495.860684][ T993] em28xx 7-1:0.89: Config register raw data: 0xfffffffb [ 495.960270][ T993] em28xx 7-1:0.89: AC97 chip type couldn't be determined [ 495.968154][ T993] em28xx 7-1:0.89: No AC97 audio processor [ 496.185407][ T5990] usb 2-1: invalid UAC_HEADER (v1) [ 496.354396][ T993] usb 7-1: Decoder not found [ 496.371282][ T993] em28xx 7-1:0.89: failed to create media graph [ 496.396839][ T993] em28xx 7-1:0.89: V4L2 device video103 deregistered [ 496.406747][ T5990] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 496.448017][ T5990] usb 2-1: USB disconnect, device number 31 [ 496.529014][T10904] Cannot find add_set index 128 as target [ 496.793624][T10901] ================================================================== [ 496.801850][T10901] BUG: KASAN: slab-use-after-free in v4l2_open+0x395/0x3a0 [ 496.809077][T10901] Read of size 4 at addr ffff88802eed4858 by task v4l_id/10901 [ 496.816615][T10901] [ 496.818992][T10901] CPU: 0 UID: 0 PID: 10901 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 496.819011][T10901] Tainted: [L]=SOFTLOCKUP [ 496.819016][T10901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 496.819024][T10901] Call Trace: [ 496.819031][T10901] [ 496.819038][T10901] dump_stack_lvl+0xe8/0x150 [ 496.819065][T10901] print_address_description+0x55/0x1e0 [ 496.819084][T10901] ? v4l2_open+0x395/0x3a0 [ 496.819096][T10901] print_report+0x58/0x70 [ 496.819111][T10901] kasan_report+0x117/0x150 [ 496.819125][T10901] ? v4l2_open+0x395/0x3a0 [ 496.819138][T10901] v4l2_open+0x395/0x3a0 [ 496.819151][T10901] chrdev_open+0x4cd/0x5e0 [ 496.819166][T10901] ? __pfx_chrdev_open+0x10/0x10 [ 496.819180][T10901] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 496.819195][T10901] ? __pfx_chrdev_open+0x10/0x10 [ 496.819208][T10901] do_dentry_open+0x785/0x14e0 [ 496.819227][T10901] vfs_open+0x3b/0x340 [ 496.819243][T10901] ? path_openat+0x2df0/0x3860 [ 496.819255][T10901] path_openat+0x2e08/0x3860 [ 496.819271][T10901] ? __pfx_stack_trace_save+0x10/0x10 [ 496.819288][T10901] ? stack_depot_save_flags+0x33/0x810 [ 496.819304][T10901] ? __pfx_path_openat+0x10/0x10 [ 496.819315][T10901] ? __x64_sys_openat+0x138/0x170 [ 496.819333][T10901] ? __lock_acquire+0x6b5/0x2cf0 [ 496.819353][T10901] do_file_open+0x23e/0x4a0 [ 496.819366][T10901] ? __pfx_do_file_open+0x10/0x10 [ 496.819382][T10901] ? _raw_spin_unlock+0x28/0x50 [ 496.819397][T10901] ? alloc_fd+0x64b/0x6c0 [ 496.819416][T10901] do_sys_openat2+0x113/0x200 [ 496.819433][T10901] ? __pfx_do_sys_openat2+0x10/0x10 [ 496.819449][T10901] ? exc_page_fault+0x6a/0xc0 [ 496.819466][T10901] ? do_user_addr_fault+0xc6f/0x1340 [ 496.819486][T10901] __x64_sys_openat+0x138/0x170 [ 496.819504][T10901] do_syscall_64+0x14d/0xf80 [ 496.819520][T10901] ? trace_irq_disable+0x3b/0x140 [ 496.819535][T10901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.819548][T10901] ? clear_bhb_loop+0x40/0x90 [ 496.819561][T10901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.819573][T10901] RIP: 0033:0x7fa9726a7407 [ 496.819594][T10901] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 496.819605][T10901] RSP: 002b:00007ffe2880fb60 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 496.819620][T10901] RAX: ffffffffffffffda RBX: 00007fa972e8c880 RCX: 00007fa9726a7407 [ 496.819629][T10901] RDX: 0000000000000000 RSI: 00007ffe28811f1c RDI: ffffffffffffff9c [ 496.819637][T10901] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 496.819644][T10901] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 496.819651][T10901] R13: 00007ffe2880fdb0 R14: 00007fa972ff3000 R15: 000055d0d98034d8 [ 496.819664][T10901] [ 496.819668][T10901] [ 497.097119][T10901] Allocated by task 993: [ 497.101353][T10901] kasan_save_track+0x3e/0x80 [ 497.106607][T10901] __kasan_kmalloc+0x93/0xb0 [ 497.111189][T10901] __kmalloc_cache_noprof+0x31c/0x660 [ 497.116551][T10901] em28xx_v4l2_init+0x10b/0x2e70 [ 497.121481][T10901] em28xx_init_extension+0x120/0x1c0 [ 497.126754][T10901] process_one_work+0x9a3/0x1710 [ 497.131707][T10901] worker_thread+0xba8/0x11e0 [ 497.136369][T10901] kthread+0x388/0x470 [ 497.140423][T10901] ret_from_fork+0x51e/0xb90 [ 497.145097][T10901] ret_from_fork_asm+0x1a/0x30 [ 497.149936][T10901] [ 497.152252][T10901] Freed by task 993: [ 497.156206][T10901] kasan_save_track+0x3e/0x80 [ 497.160945][T10901] kasan_save_free_info+0x46/0x50 [ 497.165987][T10901] __kasan_slab_free+0x5c/0x80 [ 497.170748][T10901] kfree+0x1c5/0x640 [ 497.174646][T10901] em28xx_v4l2_init+0x1683/0x2e70 [ 497.179679][T10901] em28xx_init_extension+0x120/0x1c0 [ 497.185127][T10901] process_one_work+0x9a3/0x1710 [ 497.190060][T10901] worker_thread+0xba8/0x11e0 [ 497.194721][T10901] kthread+0x388/0x470 [ 497.198797][T10901] ret_from_fork+0x51e/0xb90 [ 497.203386][T10901] ret_from_fork_asm+0x1a/0x30 [ 497.208138][T10901] [ 497.210456][T10901] The buggy address belongs to the object at ffff88802eed4000 [ 497.210456][T10901] which belongs to the cache kmalloc-8k of size 8192 [ 497.224510][T10901] The buggy address is located 2136 bytes inside of [ 497.224510][T10901] freed 8192-byte region [ffff88802eed4000, ffff88802eed6000) [ 497.238574][T10901] [ 497.240896][T10901] The buggy address belongs to the physical page: [ 497.247381][T10901] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2eed0 [ 497.256253][T10901] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 497.264945][T10901] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 497.272504][T10901] page_type: f5(slab) [ 497.276605][T10901] raw: 00fff00000000040 ffff88801b042280 dead000000000122 0000000000000000 [ 497.285195][T10901] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 497.293781][T10901] head: 00fff00000000040 ffff88801b042280 dead000000000122 0000000000000000 [ 497.302764][T10901] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 497.311440][T10901] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 497.320105][T10901] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 497.328760][T10901] page dumped because: kasan: bad access detected [ 497.335194][T10901] page_owner tracks the page as allocated [ 497.340893][T10901] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10855, tgid 10854 (syz.1.1254), ts 493151442243, free_ts 487841219695 [ 497.362507][T10901] post_alloc_hook+0x231/0x280 [ 497.367276][T10901] get_page_from_freelist+0x2418/0x24b0 [ 497.372908][T10901] __alloc_frozen_pages_noprof+0x233/0x3d0 [ 497.378716][T10901] allocate_slab+0x77/0x660 [ 497.383230][T10901] refill_objects+0x339/0x3d0 [ 497.387898][T10901] __pcs_replace_empty_main+0x321/0x720 [ 497.393435][T10901] __kmalloc_cache_noprof+0x392/0x660 [ 497.398797][T10901] audit_log_d_path+0xb8/0x1a0 [ 497.403564][T10901] audit_log_d_path_exe+0x42/0x70 [ 497.409040][T10901] audit_log_task+0x2c3/0x3d0 [ 497.413735][T10901] audit_seccomp+0x85/0x190 [ 497.418249][T10901] __seccomp_filter+0xd48/0x1ef0 [ 497.423191][T10901] do_syscall_64+0xf4/0xf80 [ 497.427699][T10901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.433582][T10901] page last free pid 5211 tgid 5211 stack trace: [ 497.439914][T10901] __free_frozen_pages+0xbc7/0xd30 [ 497.445121][T10901] __slab_free+0x274/0x2c0 [ 497.449528][T10901] qlist_free_all+0x99/0x100 [ 497.454136][T10901] kasan_quarantine_reduce+0x148/0x160 [ 497.459593][T10901] __kasan_slab_alloc+0x22/0x80 [ 497.464430][T10901] kmem_cache_alloc_noprof+0x2bc/0x650 [ 497.469884][T10901] do_getname+0x2e/0x250 [ 497.474122][T10901] do_sys_openat2+0xca/0x200 [ 497.478787][T10901] __x64_sys_openat+0x138/0x170 [ 497.483630][T10901] do_syscall_64+0x14d/0xf80 [ 497.488212][T10901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.494095][T10901] [ 497.496418][T10901] Memory state around the buggy address: [ 497.502125][T10901] ffff88802eed4700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 497.510349][T10901] ffff88802eed4780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 497.518399][T10901] >ffff88802eed4800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 497.526628][T10901] ^ [ 497.533637][T10901] ffff88802eed4880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 497.541685][T10901] ffff88802eed4900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 497.549733][T10901] ================================================================== [ 497.567915][ T993] em28xx 7-1:0.89: Registering snapshot button... [ 497.592332][ T993] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input26 [ 497.610091][T10901] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 497.617349][T10901] CPU: 0 UID: 0 PID: 10901 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 497.627950][T10901] Tainted: [L]=SOFTLOCKUP [ 497.632271][T10901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 497.642327][T10901] Call Trace: [ 497.645610][T10901] [ 497.648805][T10901] vpanic+0x56c/0xa60 [ 497.652803][T10901] ? __pfx_vpanic+0x10/0x10 [ 497.657323][T10901] ? __pfx___schedule+0x10/0x10 [ 497.662190][T10901] panic+0xc5/0xd0 [ 497.665916][T10901] ? __pfx_panic+0x10/0x10 [ 497.670420][T10901] ? preempt_schedule_thunk+0x16/0x30 [ 497.675932][T10901] ? v4l2_open+0x395/0x3a0 [ 497.680354][T10901] check_panic_on_warn+0x89/0xb0 [ 497.685587][T10901] ? v4l2_open+0x395/0x3a0 [ 497.690005][T10901] end_report+0x73/0x170 [ 497.694249][T10901] ? v4l2_open+0x395/0x3a0 [ 497.698671][T10901] kasan_report+0x128/0x150 [ 497.703276][T10901] ? v4l2_open+0x395/0x3a0 [ 497.707791][T10901] v4l2_open+0x395/0x3a0 [ 497.712132][T10901] chrdev_open+0x4cd/0x5e0 [ 497.716553][T10901] ? __pfx_chrdev_open+0x10/0x10 [ 497.721580][T10901] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 497.727923][T10901] ? __pfx_chrdev_open+0x10/0x10 [ 497.732866][T10901] do_dentry_open+0x785/0x14e0 [ 497.737639][T10901] vfs_open+0x3b/0x340 [ 497.741726][T10901] ? path_openat+0x2df0/0x3860 [ 497.746490][T10901] path_openat+0x2e08/0x3860 [ 497.751086][T10901] ? __pfx_stack_trace_save+0x10/0x10 [ 497.756468][T10901] ? stack_depot_save_flags+0x33/0x810 [ 497.762034][T10901] ? __pfx_path_openat+0x10/0x10 [ 497.766985][T10901] ? __x64_sys_openat+0x138/0x170 [ 497.772028][T10901] ? __lock_acquire+0x6b5/0x2cf0 [ 497.776981][T10901] do_file_open+0x23e/0x4a0 [ 497.781494][T10901] ? __pfx_do_file_open+0x10/0x10 [ 497.786536][T10901] ? _raw_spin_unlock+0x28/0x50 [ 497.791392][T10901] ? alloc_fd+0x64b/0x6c0 [ 497.795917][T10901] do_sys_openat2+0x113/0x200 [ 497.800713][T10901] ? __pfx_do_sys_openat2+0x10/0x10 [ 497.805917][T10901] ? exc_page_fault+0x6a/0xc0 [ 497.810713][T10901] ? do_user_addr_fault+0xc6f/0x1340 [ 497.816511][T10901] __x64_sys_openat+0x138/0x170 [ 497.821407][T10901] do_syscall_64+0x14d/0xf80 [ 497.826018][T10901] ? trace_irq_disable+0x3b/0x140 [ 497.831184][T10901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.837261][T10901] ? clear_bhb_loop+0x40/0x90 [ 497.841951][T10901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.847855][T10901] RIP: 0033:0x7fa9726a7407 [ 497.852362][T10901] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 497.872232][T10901] RSP: 002b:00007ffe2880fb60 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 497.880840][T10901] RAX: ffffffffffffffda RBX: 00007fa972e8c880 RCX: 00007fa9726a7407 [ 497.888905][T10901] RDX: 0000000000000000 RSI: 00007ffe28811f1c RDI: ffffffffffffff9c [ 497.896881][T10901] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 497.904867][T10901] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 497.912840][T10901] R13: 00007ffe2880fdb0 R14: 00007fa972ff3000 R15: 000055d0d98034d8 [ 497.920833][T10901] [ 497.924285][T10901] Kernel Offset: disabled [ 497.928604][T10901] Rebooting in 86400 seconds..