last executing test programs: 1m23.67383335s ago: executing program 1 (id=4121): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000c40)={0x40, 0x17, 0xf, "1ff1e4cf8bbae6ddadd41043107ea3"}, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000300)=0xffffffff) socket$packet(0x11, 0x3, 0x300) openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="e01506"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f0000000700)={0x14, &(0x7f00000005c0)={0x0, 0x10, 0x47, {0x47, 0x10, "5b72f0d3fe274652529ae9437da06a4cdc7057fd5667b9ed3aa6b59f7b8d2b2d3531a8918043c9448c297f8a5ff48a99f5f1b11deed85410a99ed50180358b7f993cf671f4"}}, &(0x7f00000006c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc07}}}, &(0x7f0000000ac0)={0x34, &(0x7f0000000740)={0x0, 0x8, 0x5c, "d46220a4b683b21ea45834ed158bbd7cc4322d176163bd28abd950e79b5219cc7c80430b9334a704e34743e44619004d79ad903ace74bfcacbd3fd7ae792e7feef7312b5425e9ed952d6cf8f460508e4b8cd7c8df342b8deef345e87"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000240)={0x40, 0x5, 0x1, "03"}, 0x0, 0x0, 0x0, 0x0}) 1m20.327804073s ago: executing program 1 (id=4128): syz_open_dev$cec(&(0x7f0000000540), 0x0, 0x600) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1m19.971717031s ago: executing program 1 (id=4131): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc0740", 0x52}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52", 0xc5}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823", 0xcf}], 0x4, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m16.747186302s ago: executing program 1 (id=4135): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r1, 0xe503, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./gadget/ep1in-bulk\x00', 0x8000, 0x103) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000027000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x9ffc) write(r3, 0x0, 0xb00) 1m13.104388621s ago: executing program 1 (id=4142): r0 = socket$packet(0x11, 0x3, 0x300) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) fstat(r0, &(0x7f0000000100)) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x8000) close(0x3) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dir0/tracing_on\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)="30009d", 0x3) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) listen(0xffffffffffffffff, 0xa) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2800000000000000100100000100000001000000000000001000000000000000100100000e"], 0x28}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000300)="12345678000001000000000100000001000000010101000000000001", 0x1c, 0x4008000, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f00000001c0)=0xffffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0b01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'netpci0\x00', @random="7d407175a6d0"}) recvmsg(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40002000) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="028000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000b71300"/28], 0x50) 1m9.762252804s ago: executing program 1 (id=4145): syz_usb_disconnect(0xffffffffffffffff) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) syz_clone(0x0, 0x0, 0x39, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) dup(r1) 1m8.917898185s ago: executing program 32 (id=4145): syz_usb_disconnect(0xffffffffffffffff) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) syz_clone(0x0, 0x0, 0x39, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) dup(r1) 15.128166606s ago: executing program 3 (id=4231): socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f00000000c0)='1', 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x0, 0x405, 0x88}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='1', 0x1) 15.075177187s ago: executing program 2 (id=4232): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x100, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, 0x0, &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) add_key$user(&(0x7f00000001c0), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000240)="b1", 0x1, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@secondary) mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) setns(0xc9, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02", 0x15) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/tipc/key_exchange_enabled\x00', 0x1, 0x0) write(r7, &(0x7f0000000140)='1\n', 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r8) sendmsg$TIPC_NL_NET_SET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1111}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000001}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x40}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x58, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "000102030405060708090a0b0c0d0e0f10111213"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x54, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x1127, @local}}, {0x14, 0x2, @in={0x2, 0x1127, @private=0xa010102}}}}]}]}, 0x54}}, 0x0) 11.628404732s ago: executing program 2 (id=4234): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r5, @ANYRES32, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x17, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r3, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 11.524560605s ago: executing program 3 (id=4235): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000400)=ANY=[@ANYBLOB="12010002000000405a0609000001000000010902190001010080320904000001ff00000007058102"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 10.89601342s ago: executing program 0 (id=4236): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100000000020000000008000000", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYRES8=r1], 0x30}], 0x1}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c24"], 0x0) 9.987464903s ago: executing program 0 (id=4237): socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="f8000000190001002abd7000000000007f000001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00400000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7f040000000000000000000000000000000400000000000000ffffffffffffffff070000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff000000000100"], 0xf8}, 0x1, 0x0, 0x0, 0x4008000}, 0x14) r0 = socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000740)={0x48}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000c80)=@filter={'filter\x00', 0x4, 0x4, 0x450, 0xffffffff, 0x0, 0xe8, 0x290, 0xfeffffff, 0xffffffff, 0x380, 0x380, 0x380, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xff000000, 0xff000000, 0xffffffff], 'wg1\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private1, @empty, [0xff], [0xffffff00, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {0x9e28a1eebd22f92e}, {}, 0x0, 0x0, 0x6}, 0x0, 0x160, 0x1a8, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x3, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xff000000], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff000000], 0x1010, 0x11}}, @common=@ipv6header={{0x28}, {0x88, 0xc1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'pimreg\x00', {0x2}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'veth0_to_batadv\x00', {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) mount(0x0, 0x0, &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x301002, 0x180) openat(r4, &(0x7f00000000c0)='./trace\x00', 0x400000, 0x6c) write(r4, 0x0, 0x300) 7.24683797s ago: executing program 2 (id=4238): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) write$nci(r0, &(0x7f0000000100)=ANY=[], 0x4) 7.150608483s ago: executing program 3 (id=4239): socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8881}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfc) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5b", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}}, 0x90) 7.008726807s ago: executing program 0 (id=4241): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x40000}], 0x1, 0xc0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0xe0, 0x100, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583974f3f28302280b7b4d3c9e13d74dbc7b9e8718956dd5fe4", 0x5e}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c", 0x7b}, {&(0x7f0000000440)}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[], 0x6f4}}, 0x0) 6.815930261s ago: executing program 2 (id=4242): syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110037bfe5108ca0735b8861a0102"], &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0}) 6.569572097s ago: executing program 0 (id=4244): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000c40)={0x40, 0x17, 0xf, "1ff1e4cf8bbae6ddadd41043107ea3"}, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000300)=0xffffffff) socket$packet(0x11, 0x3, 0x300) openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="e01506"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f0000000700)={0x14, &(0x7f00000005c0)={0x0, 0x10, 0x47, {0x47, 0x10, "5b72f0d3fe274652529ae9437da06a4cdc7057fd5667b9ed3aa6b59f7b8d2b2d3531a8918043c9448c297f8a5ff48a99f5f1b11deed85410a99ed50180358b7f993cf671f4"}}, &(0x7f00000006c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc07}}}, &(0x7f0000000ac0)={0x34, &(0x7f0000000740)={0x0, 0x8, 0x5c, "d46220a4b683b21ea45834ed158bbd7cc4322d176163bd28abd950e79b5219cc7c80430b9334a704e34743e44619004d79ad903ace74bfcacbd3fd7ae792e7feef7312b5425e9ed952d6cf8f460508e4b8cd7c8df342b8deef345e87"}, &(0x7f00000007c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.291672574s ago: executing program 3 (id=4246): r0 = dup(0xffffffffffffffff) read$FUSE(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x20, 0x2, 0x6, 0xa}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000640)='/selinux/status\x00', 0x0) socket(0x1e, 0x805, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r5, 0x0, 0x0, 0x140, 0x0) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) r6 = getpgrp(0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=r6) 5.562607572s ago: executing program 0 (id=4247): mkdir(&(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracefs\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000001940), 0x60000, 0x0) pipe2(&(0x7f0000001980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = socket$key(0xf, 0x3, 0x2) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000001a00)={0x0, 0x4, {0x0}, {}, 0x1c}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001a40)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './tracefs\x00'}) lstat(&(0x7f0000000100)='./tracefs/trace_options\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000001b40)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$FUSE(r10, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r11, &(0x7f00000024c0)={0x90, 0xfffffffffffffff5, r12, {0xfffffffffffffffc, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, {0x2, 0xffff, 0x20000000000000, 0x800, 0x20000000000007b, 0x5, 0x0, 0x9, 0x0, 0xa000, 0x0, r13, 0xee00, 0x3, 0x5}}}, 0x90) fchown(0xffffffffffffffff, r13, 0xffffffffffffffff) r14 = getgid() r15 = getpid() sched_setscheduler(r15, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r15, 0x8, &(0x7f0000000240)=0x2) r16 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r16, &(0x7f0000002780)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xbbb) write$FUSE_ATTR(r16, &(0x7f0000000240)={0x78, 0x0, r17, {0x2000000007, 0x0, 0x0, {0x4, 0xffffffffffffffff, 0x55, 0x51d4, 0x0, 0x3, 0x2, 0x0, 0x1000000, 0xa000, 0xa0000000, r18, r19, 0x0, 0x0, 0x1000000}}}, 0x78) r20 = syz_clone3(&(0x7f0000001e00)={0x800, &(0x7f0000001bc0), &(0x7f0000001c00)=0x0, &(0x7f0000001c40), {0x3d}, &(0x7f0000001c80)=""/113, 0x71, 0x0, &(0x7f0000001dc0)=[0x0], 0x1}, 0x58) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002680)={{{@in6, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@ipv4={""/10, ""/2, @empty}}}, &(0x7f0000000400)=0xe8) r23 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r23, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r25) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002140)={&(0x7f0000000140)=@file={0x1, './tracefs\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f00000001c0)="e9ed720a50ea063563fedbd39d1dac8cc410fb9eb5b6a435a1763c951a57c7bee499a57601311afa7889d799c4", 0x2d}], 0x1, &(0x7f00000047c0)=ANY=[@ANYBLOB="34000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESHEX=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r9, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="67cf4cb6e182e4fae02f7c293b5c655064b64fde167f40477dba43da85976880b1260ed868f1989893d3fd562086dd8ecf5572f5f169817906ab9889f06d0285e51975677a7f8c3821f4bef7be05c0833e98daff4edb9b2de4cc7ca8a1445120f5f83c54573492ebf31f7e0e451343a1a4756cd9c7d85d0ee37a81a28e9b723e86a109635ad105f04d0e6e7aae4aa807e3281e2151c3e9df207b951a956d4312b4824ff85b38e75377501c605add28b724e541782d9fe38e9971b8df62fbf9234658c1bc39cbdbe8fc6c8475d5a690cfc8a9a62d99d6ced271eb0a5ae37d7a3d7f28102c98e69316d19253c8874cb7fdd6437ccb7fcf237f703e21bb26d68db6f36f40aa6055bec142e736f92e002de6933bb86982bd852aaffd51c34af31df0749e77ce5ae9e31a9ca1a99b9208e8510f341c50dc08e5a190ce09482cad3cddf6dbecc8121131ee5b57e21f43b66ed4d7750bc147ea3dec4bf1db821e516393022fcb6be30415c9526198751369c16f320dd15f97fdf9004098a00e866ec6d903ac6ac545f3906fe70fd5d94550dd442343a55137551371de2277c0bda0346f3732a86d9d1ed8936dfa32c0b3648eeee79c1846cee277e3d7111d40b246c0c906ae04c43f2bd1c777916e3e4bd8db1eb7b80a02be5e2871cb799b251a5d3c3db8819595d0ed99e96fb9da6749e5857624963c24373797d79f1c2dcdb1dd123a20c90011c116b8554e46c238ce49b8085535cd3cae09b911518dbda3d9eca75bd1333ad0bd01b1b3fb38be3ac45838112607ef30f5ff93c1feafc768b7b5ecd2294d8c88979e3c869ffa81ca1dfb8ac5c1345818a99c193f65a6e1ae09c86fd5a3232ced432ce51d1cc71a17df83a1c749520de1ea234b9284963b1e0c7ce9729641e639502f958cd43eeec19464fc962e75a25c2fc66c971a8099c64647d5c25e98ab20d1c38d34669c1a36c57e2373071232f649394cbd5feaa3d405048483e623f0707a60cd6b0256206353f6e8653e7388cc9d9c3ab541f834fcd9bd1661bfc11b64d3c44f767f3af34a6fc2652066d6a3e658b9cdb96405d370d48df839f9738f985c1e8b0e27bc7d87abda95361f61422eb1a4a452c607252534c86cff6016f206078af2b67ed502924a69bc70057861d3a68bd4239e0693a2b83f96b739373488178915645451774fb46fb3c315a5180b58ba1dadc5c1b6a7a1aab17d3501deb96d685e5c279b9f10af37af02115b8dafaac856941b6d8b650afc741666c12167cbce3ee8332d32ce26f4cdf9a7b391c24136d1265bde871a6fd142f3721b3db46d61b5c8eefda0dd7db51cac386959f30a0eb0d826411f3888291126a2d37e15fa5e029f1ef860b73ec674b791b882886d74610e03a365a7d21acfec11a839cdbf2e0c21c517d17a4db60239a4651353bae7362e98f7fab1eaa4329d520e444105314d3ab497c586d4627bdfd612ba5d7ad402632045fc2fce6ba49be52426825a826b1ce4354570fd0fe623b76b19b16530fbbe2f19fb1df086a774f19a0d31c1407543dc786ddd873db6ba4e755c6bbfae61b581821f292dc6a9d38d16b7da2210106cf388fa84f059b306b2033e8dc32679afe9e43e79fc569281364c2c4ab05b7c52ccd9a84fbe430e9a1d55f117675e903c97fb95ea8313c7f747333b29607ebd7121dca8a415f9970327cb33e75087a01a6ed0abaaa6ec8bbfd065569d1fef2ccca04059febc2af05b78afb5693846f087355a166c3328390bf877f1d3b70301364df164f90cceb0fd62b30468942cc527a25edd18c2237960d24f85e416471b9ccab32dc02f0e173aaf84048d7a51eead25576ccb8b59e66202c78335be483f05b941a95025b7d0e20f6ef0c41e9437ad1518321e2d1371a6e5d2d0ed75b5a77af823646bdf55a70d4b958066eb8efad948afe8426a7f77af2ede0db98a4bbd8971fe09ca04c2fdc935d045687fc763d77318ad2e4c5c58141da40a4617b5ddf885ec7788e3b8c698f99720d2d6857e1a59607b608f54fb48d251de09a17dc2e48d0f4a4a5937d6dc9d5f3f93e47d2b8233d7844a4fc776cd050584a04faee3c7b50ee05ae155ee9c1b5d140166768347392ba663fb3040571c9a178037762e24b468283c610122e0be8a39330a892a5c14d40cd3cb4ec223199f6772c949f5b424423c5acddecfb1c92b428ff2c62042dee9ebb5e94134ba0d2e99ffeb7df00ca5850eaa920011771a854ff1a9205643a81ee87b6af5a4e28b483cb0f32bb6fcc4e6937fd52f4d150bf8258ad4ace34071f3d44e0f12f3f91b8fd6859739c9ae710e36bda5e55f4dc1e83c888d8caedecf6e2dd836a85ee3ed5c529feaebe3470cb889ab3d3280107f3755707612730c128009670f8a2db83207c9e2134bc85b93c73d029e450f4abe2ebc9db702324466ad397711030a64f3543a62a4f4e91e0a2d5b74a303ce29d0439347c7c85eccabf487ddb173d724e947a7c55de2c85020e17b64a70acb5dac0eb17edec8b2c61f4952ac5028f86914fab499b1c7fa4c39bd7922cd6252e9ee4c87b8fa6a646384d0ede246589e9f1720c9627f1e93c08337e8a7dfda9cad69c297d245dc042666bbf242d3cb0b09ee0c5907f4aa57a3350d18f44a1bf3069590b1d0dcb853585ba2ff55a24e901f6591dd3cd1f049aef39fb4045d274ca37e201d51d786e6ef06ded9c1168b486215441dfbd0cd91671f78be5390078b6d52dd2171342298f9603ed7b7bfaed966e25024cb251e8c6c3076ece9bdb698794db36eb5700d25100a7b09a78215f43e28cce746e8758ba34270783d390ecc403439bcb92908cc5d37b85ba8d1fc17eccedb89aafda5c1e4b8227d6b95770cd1bc091a7e4adcfc22b09b420bb9a3529daf8a1752fba1ac40d56994abe3260595c8548e9817dd4a2e23be07c9ea432f57ef72edd667dd311972652ace3835f5b9fc2b222fd80266ccec299be4d82031b8478042cf497400b88e8ff85443f5acc994273f63901f076b7841e0e3430c3e0ca6fc037b19d26d779b97fccd3472005a4ba820cf03f2332797df549e4591e159d1182008cec7928b7515896bc2270262e76435c71b27103a8608f4294834e916b68e8e149cea1e5de0f3beace70cc4e45e08dbf978095efe6005c5fbfbb0b0b409233905ee3abc971f4038ae8de163b627645475d396535a117049afe598f2ba9c86d9a7a50d4fd815c16398da520c9723234b00bc71b2d365c28a8df5c32f3fd885eb2dca12378fe9ee9ee050c9ed10cc6b28cf542ee513ee0ee1a5afee8bf8ea03b6338d01fb545b7f33abccb86d009b82bab59fc5aadd0efa42dc420f59de01a4f07f11a15386ae688e43eea37ddec7f8ff2197fb3b1f02e03b487c3b5ec0c448c1f12b8b6b4129f264ae4695f62c582db5fde57d36f248887a4326d212177a140aa0ee96b2b65f80863479e13f4b1c69ea66e4d3edf94667585c37cd31f06e416b2a7173cb46479efc3f443b3b7fa7675e6bcdef4379ffdf4961fb772c29753b45adeac1b7529d1509222347532ed42675118cd429c375f8024f3ad54379fb4560254265fe73d3d0c3d9b671054498bdf70dc93e06af17ec782247b4b8efe848ef711e49dde24951ab48438e3c7cf2463b5c3bf023420bf39621f6450716dcb3b21144dfd22883664c1ab37b2ebf31a6bddf3b595e330cb62704a8e3a43bdc252cb75a60a962008c65d8534ee016e81c233a5b0ec30322f17348e640412c69de4afbc2443c1189968c1f6f82d1271452e1d9ce75b98fff30bb4ef176ede59f46031cda1697a8577257b2781c8b0f429c44e3a255639fdffb645e54ab9a87cc5f3933dae48c7c893ebc9b51e396c618aea4fc4979df448828813f4c8347e17caae2783d3a67df11fcad7dd3fbd177d2960b489f1de84f31f2b34eb405a12547f52e43d81f5f9ed9fe64c4773c382bdd300c7b4c539f847bc7fa0c0ea087bbd326d194f8e79be6a2d699602f0b9917f8c342677a7c473ee70e4da6f8f44246a02c4c2996f787428344a223035afb2e7b302986a89839e498cd1532b2a636cb450a4d62ed8a3273f4704f0257b57bc85f2725e9280c330e248a195b9b838db99cd449ee4d939eadf2c1d1c311d4500d9892ad9f2aa8572b1f6a3c3b0dfa7bbb2acb856edacaca150e32dc87075f7689685afba2e184f4a6a2994f99c2d2fa8db4331c5685f5dc12076e3e5202d289617fcc80d02f16048f5cc48739d7afa45a0edaa0d088b5ba0836ecd6c7d542b0a00f31a7c7f6732caf688b3fd34fe6134c8cdd37fadf51d348cfb7262c2ff350bd8e315b1317c618a606315a9c92a82da6", @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="1c0000000000000000ffffffeb000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r8, @ANYRESHEX=r24, @ANYRES32=r20, @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r21, @ANYRES32=r22, @ANYRES32=r25, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x1}, 0x4084) r26 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs/trace_options\x00', 0x68e02, 0x191) read(r26, &(0x7f0000000200)=""/150, 0x96) 5.175216112s ago: executing program 0 (id=4248): openat$ublk_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10119, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x50) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40046f41, &(0x7f0000000440)=0x20000) 4.376342762s ago: executing program 4 (id=4249): socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="f8000000190001002abd7000000000007f000001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00400000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7f040000000000000000000000000000000400000000000000ffffffffffffffff070000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff000000000100"], 0xf8}, 0x1, 0x0, 0x0, 0x4008000}, 0x14) r0 = socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000740)={0x48}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000c80)=@filter={'filter\x00', 0x4, 0x4, 0x450, 0xffffffff, 0x0, 0xe8, 0x290, 0xfeffffff, 0xffffffff, 0x380, 0x380, 0x380, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xff000000, 0xff000000, 0xffffffff], 'wg1\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private1, @empty, [0xff], [0xffffff00, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {0x9e28a1eebd22f92e}, {}, 0x0, 0x0, 0x6}, 0x0, 0x160, 0x1a8, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x3, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xff000000], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff000000], 0x1010, 0x11}}, @common=@ipv6header={{0x28}, {0x88, 0xc1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'pimreg\x00', {0x2}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'veth0_to_batadv\x00', {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) mount(0x0, 0x0, &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x301002, 0x180) openat(r4, &(0x7f00000000c0)='./trace\x00', 0x400000, 0x6c) write(r4, 0x0, 0x300) 1.63181431s ago: executing program 2 (id=4250): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r1, 0xe503, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./gadget/ep1in-bulk\x00', 0x8000, 0x103) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000027000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x9ffc) 1.493064223s ago: executing program 4 (id=4251): syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x80101) 1.22456058s ago: executing program 4 (id=4252): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x40000}], 0x1, 0xc0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0xe0, 0x100, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583974f3f28302280b7b4d3c9e13d74dbc7b9e8718956dd5fe4", 0x5e}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c", 0x7b}, {&(0x7f0000000440)}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[], 0x6f4}}, 0x0) 959.699976ms ago: executing program 3 (id=4253): r0 = socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) epoll_create(0x7) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x101}) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f00000000c0)=""/160, 0xa0}, 0x0, 0x0, 0x60, 0x99}}, @rdma_args={0x48, 0x114, 0x1, {{0x100, 0x9}, {0x0}, &(0x7f0000000b80)=[{&(0x7f0000000500)=""/46, 0x2e}], 0x1, 0x48, 0x12}}], 0x90, 0x8004}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) 784.03848ms ago: executing program 4 (id=4254): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) write$nci(r0, &(0x7f0000000100)=ANY=[], 0x4) 686.720053ms ago: executing program 3 (id=4255): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000c40)={0x40, 0x17, 0xf, "1ff1e4cf8bbae6ddadd41043107ea3"}, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000300)=0xffffffff) socket$packet(0x11, 0x3, 0x300) openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="e01506"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f0000000700)={0x14, &(0x7f00000005c0)={0x0, 0x10, 0x47, {0x47, 0x10, "5b72f0d3fe274652529ae9437da06a4cdc7057fd5667b9ed3aa6b59f7b8d2b2d3531a8918043c9448c297f8a5ff48a99f5f1b11deed85410a99ed50180358b7f993cf671f4"}}, &(0x7f00000006c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc07}}}, &(0x7f0000000ac0)={0x34, &(0x7f0000000740)={0x0, 0x8, 0x5c, "d46220a4b683b21ea45834ed158bbd7cc4322d176163bd28abd950e79b5219cc7c80430b9334a704e34743e44619004d79ad903ace74bfcacbd3fd7ae792e7feef7312b5425e9ed952d6cf8f460508e4b8cd7c8df342b8deef345e87"}, &(0x7f00000007c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000240)={0x40, 0x5}, 0x0, 0x0, 0x0, 0x0}) 416.66677ms ago: executing program 4 (id=4256): mkdir(&(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracefs\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000001940), 0x60000, 0x0) pipe2(&(0x7f0000001980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = socket$key(0xf, 0x3, 0x2) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000001a00)={0x0, 0x4, {0x0}, {}, 0x1c}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001a40)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './tracefs\x00'}) lstat(&(0x7f0000000100)='./tracefs/trace_options\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000001b40)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$FUSE(r10, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r11, &(0x7f00000024c0)={0x90, 0xfffffffffffffff5, r12, {0xfffffffffffffffc, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, {0x2, 0xffff, 0x20000000000000, 0x800, 0x20000000000007b, 0x5, 0x0, 0x9, 0x0, 0xa000, 0x0, r13, 0xee00, 0x3, 0x5}}}, 0x90) fchown(0xffffffffffffffff, r13, 0xffffffffffffffff) r14 = getgid() r15 = getpid() sched_setscheduler(r15, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r15, 0x8, &(0x7f0000000240)=0x2) r16 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r16, &(0x7f0000002780)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xbbb) write$FUSE_ATTR(r16, &(0x7f0000000240)={0x78, 0x0, r17, {0x2000000007, 0x0, 0x0, {0x4, 0xffffffffffffffff, 0x55, 0x51d4, 0x0, 0x3, 0x2, 0x0, 0x1000000, 0xa000, 0xa0000000, r18, r19, 0x0, 0x0, 0x1000000}}}, 0x78) r20 = syz_clone3(&(0x7f0000001e00)={0x800, &(0x7f0000001bc0), &(0x7f0000001c00)=0x0, &(0x7f0000001c40), {0x3d}, &(0x7f0000001c80)=""/113, 0x71, 0x0, &(0x7f0000001dc0)=[0x0], 0x1}, 0x58) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002680)={{{@in6, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@ipv4={""/10, ""/2, @empty}}}, &(0x7f0000000400)=0xe8) r23 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r23, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r25) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002140)={&(0x7f0000000140)=@file={0x1, './tracefs\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f00000001c0)="e9ed720a50ea063563fedbd39d1dac8cc410fb9eb5b6a435a1763c951a57c7bee499a57601311afa7889d799c4", 0x2d}], 0x1, &(0x7f00000047c0)=ANY=[@ANYBLOB="34000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESHEX=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r9, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="1c0000000000000000ffffffeb000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r8, @ANYRESHEX=r24, @ANYRES32=r20, @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r21, @ANYRES32=r22, @ANYRES32=r25, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x1}, 0x4084) r26 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs/trace_options\x00', 0x68e02, 0x191) read(r26, &(0x7f0000000200)=""/150, 0x96) 704.58µs ago: executing program 4 (id=4257): syz_open_dev$cec(&(0x7f0000000540), 0x0, 0x600) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 0s ago: executing program 2 (id=4258): syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110037bfe5108ca0735b8861a0102"], &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): value: 3 [ 858.673448][ T5843] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 858.704364][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.734922][ T5843] usb 2-1: Product: syz [ 858.747397][ T5843] usb 2-1: Manufacturer: syz [ 858.777031][ T5843] usb 2-1: SerialNumber: syz [ 858.831843][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 859.037180][ T5843] usb 2-1: 0:2 : does not exist [ 859.057317][ T5843] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 859.121655][ T5843] usb 2-1: USB disconnect, device number 59 [ 859.185596][T13976] udevd[13976]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 861.353667][ T42] bond0 (unregistering): Released all slaves [ 861.742325][T14374] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 861.901921][T14378] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2844'. [ 862.254805][ T5842] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 862.662487][ T5842] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 862.758845][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.849352][ T5842] usb 4-1: Product: syz [ 862.893001][ T5842] usb 4-1: Manufacturer: syz [ 862.938981][ T5842] usb 4-1: SerialNumber: syz [ 863.044881][ T5842] usb 4-1: config 0 descriptor?? [ 863.459899][ T5816] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 863.649964][ T5816] usb 1-1: Using ep0 maxpacket: 16 [ 863.671377][ T5816] usb 1-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config [ 863.690386][ T5816] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 863.714081][ T5816] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 863.740204][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.754420][ T5816] usb 1-1: Product: syz [ 863.759334][ T5816] usb 1-1: Manufacturer: syz [ 863.764581][ T5816] usb 1-1: SerialNumber: syz [ 864.007661][ T5816] usb 1-1: 0:2 : does not exist [ 864.028134][ T5816] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 864.084410][ T5816] usb 1-1: USB disconnect, device number 79 [ 864.166980][T13991] udevd[13991]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 864.253829][ T5842] usb 4-1: unexpected transceiver, part 0xd4 version 0x03 [ 864.551526][ T5842] usb 4-1: Firmware version (0.0) predates our first public release. [ 864.573856][ T5842] usb 4-1: Please update to version 0.2 or newer [ 864.607376][ T5842] usb 4-1: atusb_probe: initialization failed, error = -19 [ 864.672960][ T5842] usb 4-1: USB disconnect, device number 49 [ 864.806410][T14403] tipc: Enabling of bearer rejected, failed to enable media [ 867.779939][ T788] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 867.879983][ T5817] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 867.910038][ T5842] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 867.980536][ T788] usb 1-1: Using ep0 maxpacket: 16 [ 868.008182][ T788] usb 1-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config [ 868.019346][ T788] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 868.041376][ T788] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 868.052518][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.072183][ T788] usb 1-1: Product: syz [ 868.078423][ T5817] usb 3-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 868.081386][ T788] usb 1-1: Manufacturer: syz [ 868.104815][ T788] usb 1-1: SerialNumber: syz [ 868.110757][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.123808][ T5842] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 868.147585][ T5817] usb 3-1: Product: syz [ 868.152221][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.165504][ T5817] usb 3-1: Manufacturer: syz [ 868.177993][ T5842] usb 4-1: Product: syz [ 868.182341][ T5817] usb 3-1: SerialNumber: syz [ 868.188367][ T5842] usb 4-1: Manufacturer: syz [ 868.199518][ T5842] usb 4-1: SerialNumber: syz [ 868.209162][ T5817] usb 3-1: UAS is ignored for this device, using usb-storage instead [ 868.233463][ T5817] usb 3-1: UAS is ignored for this device, using usb-storage instead [ 868.242782][ T5842] usb 4-1: config 0 descriptor?? [ 868.262783][ T5817] usb-storage 3-1:1.0: USB Mass Storage device detected [ 868.276687][ T5817] usb-storage 3-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 868.297374][ T5817] scsi host1: usb-storage 3-1:1.0 [ 868.337250][ T788] usb 1-1: 0:2 : does not exist [ 868.368619][ T788] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 868.446899][ T788] usb 1-1: USB disconnect, device number 80 [ 868.513941][T13976] udevd[13976]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 869.007526][ T5817] usb 3-1: USB disconnect, device number 53 [ 869.275871][ T5842] usb 4-1: unexpected transceiver, part 0xd4 version 0x03 [ 870.141080][ T5842] usb 4-1: Firmware version (0.0) predates our first public release. [ 870.180029][ T5842] usb 4-1: Please update to version 0.2 or newer [ 870.199911][ T5842] usb 4-1: atusb_probe: initialization failed, error = -19 [ 870.256069][ T5842] usb 4-1: USB disconnect, device number 50 [ 870.639003][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.646244][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.599885][T13318] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 873.215065][T13318] usb 1-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 873.248610][T13318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.273179][T13318] usb 1-1: Product: syz [ 873.282010][T13318] usb 1-1: Manufacturer: syz [ 873.286733][T13318] usb 1-1: SerialNumber: syz [ 873.352336][T13318] usb 1-1: UAS is ignored for this device, using usb-storage instead [ 873.401897][T13318] usb 1-1: UAS is ignored for this device, using usb-storage instead [ 873.443463][T13318] usb-storage 1-1:1.0: USB Mass Storage device detected [ 873.484397][T13318] usb-storage 1-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 873.521443][T13318] scsi host1: usb-storage 1-1:1.0 [ 874.139831][ T5816] usb 1-1: USB disconnect, device number 81 [ 874.723129][T14505] binder_alloc: 14504: pid 14504 spamming oneway? 2 buffers allocated for a total size of 5120 [ 877.580384][T14531] program syz.3.2894 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 882.163215][T14566] program syz.3.2904 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 882.941291][ T5784] Bluetooth: hci1: command 0x0406 tx timeout [ 886.978273][T14603] program syz.2.2914 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 891.274386][T14633] program syz.1.2924 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 896.836771][T14674] program syz.3.2934 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 903.476762][T14715] program syz.3.2943 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 903.636462][T13318] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 903.893990][T13318] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 904.049860][T13318] usb 3-1: config 0 interface 0 has no altsetting 0 [ 904.069680][T13318] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 904.104772][T13318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.144507][T13318] usb 3-1: Product: syz [ 904.148831][T13318] usb 3-1: Manufacturer: syz [ 904.165719][T13318] usb 3-1: SerialNumber: syz [ 904.178906][T13318] usb 3-1: config 0 descriptor?? [ 904.202202][T13318] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 904.262333][T13318] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 904.283580][T13318] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 904.323573][T13318] usb 3-1: media controller created [ 904.436784][T13318] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 905.947658][T13318] DVB: Unable to find symbol tda10046_attach() [ 905.996277][T13318] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 906.035607][T13318] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 906.090155][T13318] dvb_usb_m920x: probe of 3-1:0.0 failed with error -71 [ 906.160925][T13318] usb 3-1: USB disconnect, device number 54 [ 908.545106][T14745] program syz.2.2952 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 913.419976][T13318] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 914.139528][T14779] program syz.1.2962 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 915.330532][T13318] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 915.349977][T13318] usb 1-1: config 0 interface 0 has no altsetting 0 [ 915.388025][T13318] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 915.419906][T13318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.429948][T13318] usb 1-1: Product: syz [ 915.434261][T13318] usb 1-1: Manufacturer: syz [ 915.449386][T13318] usb 1-1: SerialNumber: syz [ 915.465708][T13318] usb 1-1: config 0 descriptor?? [ 915.495121][T13318] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 915.520764][T13318] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 915.540849][T13318] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 915.549627][T13318] usb 1-1: media controller created [ 915.632670][T13318] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 915.805384][T13318] DVB: Unable to find symbol tda10046_attach() [ 915.824255][T13318] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 915.848911][T13318] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 916.318884][T13318] dvb_usb_m920x: probe of 1-1:0.0 failed with error -71 [ 916.370057][T13318] usb 1-1: USB disconnect, device number 82 [ 922.410176][T10907] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 922.640736][T10907] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 922.801662][T10907] usb 4-1: config 0 interface 0 has no altsetting 0 [ 923.061873][T10907] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 923.092896][T10907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.121580][T10907] usb 4-1: Product: syz [ 923.136416][T10907] usb 4-1: Manufacturer: syz [ 923.156431][T10907] usb 4-1: SerialNumber: syz [ 923.193022][T10907] usb 4-1: config 0 descriptor?? [ 923.215328][T10907] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 923.267150][T10907] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 923.451572][T10907] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 923.469904][T10907] usb 4-1: media controller created [ 923.503839][T10907] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 923.582324][T10907] DVB: Unable to find symbol tda10046_attach() [ 923.589140][T10907] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 923.624713][T10907] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 924.340559][T10907] dvb_usb_m920x: probe of 4-1:0.0 failed with error -71 [ 924.365188][T10907] usb 4-1: USB disconnect, device number 51 [ 930.795931][T10907] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 930.993982][T10907] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 931.043180][T10907] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 931.088666][T10907] usb 2-1: config 220 has no interface number 2 [ 931.130566][T10907] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 931.222149][T10907] usb 2-1: config 220 interface 0 has no altsetting 0 [ 931.260291][T10907] usb 2-1: config 220 interface 76 has no altsetting 0 [ 931.290287][T10907] usb 2-1: config 220 interface 1 has no altsetting 0 [ 931.312517][T10907] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 931.312553][T10907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.312576][T10907] usb 2-1: Product: syz [ 931.312593][T10907] usb 2-1: Manufacturer: syz [ 931.312630][T10907] usb 2-1: SerialNumber: syz [ 931.545198][T10907] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 931.578415][T10907] usb 2-1: No valid video chain found. [ 931.599105][T10907] usb 2-1: selecting invalid altsetting 0 [ 931.670656][T10907] usb 2-1: selecting invalid altsetting 0 [ 931.685884][T10907] usbtest: probe of 2-1:220.1 failed with error -22 [ 931.719898][T10907] usb 2-1: USB disconnect, device number 60 [ 932.073370][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.083561][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.669996][ T5854] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 939.341990][ T5854] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 939.351661][ T5854] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 939.388346][ T5854] usb 4-1: config 220 has no interface number 2 [ 939.409954][ T5854] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 939.424271][ T5854] usb 4-1: config 220 interface 0 has no altsetting 0 [ 939.431685][ T5854] usb 4-1: config 220 interface 76 has no altsetting 0 [ 939.438853][ T5854] usb 4-1: config 220 interface 1 has no altsetting 0 [ 939.450246][ T5854] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 939.469927][ T5854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.499773][ T5854] usb 4-1: Product: syz [ 939.504176][ T5854] usb 4-1: Manufacturer: syz [ 939.514719][ T5854] usb 4-1: SerialNumber: syz [ 939.970847][ T5854] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 939.970888][ T5854] usb 4-1: No valid video chain found. [ 939.970946][ T5854] usb 4-1: selecting invalid altsetting 0 [ 940.021436][ T5854] usb 4-1: selecting invalid altsetting 0 [ 940.027932][ T5854] usbtest: probe of 4-1:220.1 failed with error -22 [ 940.037987][ T5854] usb 4-1: USB disconnect, device number 52 [ 945.423936][T15017] binder: BINDER_SET_CONTEXT_MGR already set [ 945.449379][T15017] binder: 15016:15017 ioctl 4018620d 200000000100 returned -16 [ 947.142585][ T5817] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 949.438878][ T5817] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 949.448149][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.469881][ T5817] usb 4-1: Product: syz [ 949.474253][ T5817] usb 4-1: Manufacturer: syz [ 949.528023][ T5817] usb 4-1: can't set config #1, error -71 [ 949.541914][ T5817] usb 4-1: USB disconnect, device number 53 [ 955.009951][ T5816] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 955.236180][ T5816] usb 3-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 955.272794][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.296251][ T5816] usb 3-1: Product: syz [ 955.307366][ T5816] usb 3-1: Manufacturer: syz [ 955.319994][ T5816] usb 3-1: SerialNumber: syz [ 955.350318][ T5816] usb 3-1: UAS is ignored for this device, using usb-storage instead [ 955.371964][ T5816] usb 3-1: UAS is ignored for this device, using usb-storage instead [ 955.390285][ T5816] usb-storage 3-1:1.0: USB Mass Storage device detected [ 955.417072][ T5816] usb-storage 3-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 955.447617][ T5816] scsi host1: usb-storage 3-1:1.0 [ 955.584925][T13318] usb 3-1: USB disconnect, device number 55 [ 958.867962][T15096] binder: BINDER_SET_CONTEXT_MGR already set [ 958.878589][T15096] binder: 15095:15096 ioctl 4018620d 200000000100 returned -16 [ 961.440111][T13318] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 962.791887][T13318] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 962.828247][T13318] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 962.863223][T13318] usb 4-1: config 220 has no interface number 2 [ 962.894609][T13318] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 962.926058][T13318] usb 4-1: config 220 interface 0 has no altsetting 0 [ 962.948009][T13318] usb 4-1: config 220 interface 76 has no altsetting 0 [ 962.967857][T13318] usb 4-1: config 220 interface 1 has no altsetting 0 [ 962.992258][T13318] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 963.007759][T13318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.038242][T13318] usb 4-1: Product: syz [ 963.043275][T13318] usb 4-1: Manufacturer: syz [ 963.051437][T13318] usb 4-1: SerialNumber: syz [ 963.297321][T13318] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 963.313371][T13318] usb 4-1: No valid video chain found. [ 963.329039][T13318] usb 4-1: selecting invalid altsetting 0 [ 963.375836][T13318] usb 4-1: selecting invalid altsetting 0 [ 963.390320][T13318] usbtest: probe of 4-1:220.1 failed with error -22 [ 963.422969][T13318] usb 4-1: USB disconnect, device number 54 [ 964.129880][ T5816] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 965.983668][ T5816] usb 2-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 966.011618][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.020382][ T5816] usb 2-1: Product: syz [ 966.024631][ T5816] usb 2-1: Manufacturer: syz [ 966.029277][ T5816] usb 2-1: SerialNumber: syz [ 966.055150][ T5816] usb 2-1: UAS is ignored for this device, using usb-storage instead [ 966.073959][ T5816] usb 2-1: UAS is ignored for this device, using usb-storage instead [ 966.097110][ T5816] usb-storage 2-1:1.0: USB Mass Storage device detected [ 966.125004][ T5816] usb-storage 2-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 966.185671][ T5816] scsi host1: usb-storage 2-1:1.0 [ 966.258289][ T788] usb 2-1: USB disconnect, device number 61 [ 971.508127][T12248] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 971.712657][T12248] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 971.728816][T12248] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 971.763040][T12248] usb 4-1: config 220 has no interface number 2 [ 971.780476][T12248] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 971.815408][T12248] usb 4-1: config 220 interface 0 has no altsetting 0 [ 971.833020][T12248] usb 4-1: config 220 interface 76 has no altsetting 0 [ 971.855454][T12248] usb 4-1: config 220 interface 1 has no altsetting 0 [ 971.878773][T12248] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 971.904287][T12248] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.930948][T12248] usb 4-1: Product: syz [ 971.936318][T12248] usb 4-1: Manufacturer: syz [ 971.950268][T12248] usb 4-1: SerialNumber: syz [ 972.181907][T12248] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 972.199887][T12248] usb 4-1: No valid video chain found. [ 972.205652][T12248] usb 4-1: selecting invalid altsetting 0 [ 972.247820][T12248] usb 4-1: selecting invalid altsetting 0 [ 972.254048][T12248] usbtest: probe of 4-1:220.1 failed with error -22 [ 972.266787][T12248] usb 4-1: USB disconnect, device number 55 [ 976.100928][T15203] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 977.129903][ T788] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 977.559863][ T788] usb 3-1: Using ep0 maxpacket: 16 [ 977.568327][ T788] usb 3-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config [ 977.589786][ T788] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 977.609778][ T788] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 977.618975][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.628220][ T788] usb 3-1: Product: syz [ 977.633418][ T788] usb 3-1: Manufacturer: syz [ 977.638245][ T788] usb 3-1: SerialNumber: syz [ 978.270984][ T788] usb 3-1: 0:2 : does not exist [ 978.329634][ T788] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 978.450135][ T788] usb 3-1: USB disconnect, device number 56 [ 978.545716][T15221] udevd[15221]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 978.685975][T15227] bond1: option resend_igmp: invalid value (43207) [ 978.695935][T15227] bond1: option resend_igmp: allowed values 0 - 255 [ 978.710000][T15227] bond1 (unregistering): Released all slaves [ 980.117614][T15250] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 981.151759][T15256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3106'. [ 981.510169][ T5842] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 981.790608][ T5842] usb 4-1: Using ep0 maxpacket: 16 [ 981.805627][ T5842] usb 4-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config [ 981.821487][ T5842] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 981.838710][ T5842] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 981.871380][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.879479][ T5842] usb 4-1: Product: syz [ 981.893888][ T5842] usb 4-1: Manufacturer: syz [ 981.898768][ T5842] usb 4-1: SerialNumber: syz [ 982.208386][ T5842] usb 4-1: 0:2 : does not exist [ 982.238174][ T5842] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 982.337143][ T5842] usb 4-1: USB disconnect, device number 56 [ 982.487871][T15280] udevd[15280]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 983.444947][ T5842] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 983.579903][T10907] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 983.660790][ T5842] usb 2-1: Using ep0 maxpacket: 32 [ 983.668544][ T5842] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 983.688406][ T5842] usb 2-1: config 0 has no interface number 0 [ 983.705347][ T5842] usb 2-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255 [ 983.727211][ T5842] usb 2-1: config 0 interface 184 has no altsetting 0 [ 983.747988][ T5842] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 983.767601][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.786461][ T5842] usb 2-1: Product: syz [ 983.791263][ T5842] usb 2-1: Manufacturer: syz [ 983.795931][ T5842] usb 2-1: SerialNumber: syz [ 983.804673][T10907] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 983.817935][ T5842] usb 2-1: config 0 descriptor?? [ 983.820784][T10907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.835493][T15288] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 983.848607][T10907] usb 4-1: Product: syz [ 983.852991][T10907] usb 4-1: Manufacturer: syz [ 983.857691][T10907] usb 4-1: SerialNumber: syz [ 983.870695][T10907] usb 4-1: config 0 descriptor?? [ 983.871324][ T5842] smsc75xx v1.0.0 [ 984.076273][T15288] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 984.592146][ T5842] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 984.616622][ T5842] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 984.920075][T10907] usb 4-1: Firmware: major: 212, minor: 98, hardware type: UNKNOWN (32) [ 985.101213][T10907] usb 4-1: Firmware: build  [ 985.196717][T10907] usb 4-1: failed to fetch extended address, random address set [ 985.223961][T10907] usb 4-1: atusb_probe: initialization failed, error = -524 [ 985.240503][T10907] atusb: probe of 4-1:0.0 failed with error -524 [ 985.761077][T10907] usb 4-1: USB disconnect, device number 57 [ 985.872075][ T5842] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 985.915424][ T5842] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 985.935603][ T5842] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 985.955598][ T5842] smsc75xx: probe of 2-1:0.184 failed with error -61 [ 987.629877][T13318] usb 2-1: USB disconnect, device number 62 [ 991.122245][T13318] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 991.329393][T13318] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 991.347779][T13318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.373711][T13318] usb 4-1: Product: syz [ 991.389450][T13318] usb 4-1: Manufacturer: syz [ 991.404930][T13318] usb 4-1: SerialNumber: syz [ 991.424338][T13318] usb 4-1: config 0 descriptor?? [ 993.770253][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.776719][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.957035][T13318] usb 4-1: Firmware: major: 212, minor: 98, hardware type: UNKNOWN (32) [ 994.010408][T13318] usb 4-1: Firmware: build  [ 994.221311][T13318] usb 4-1: failed to fetch extended address, random address set [ 994.231310][T13318] usb 4-1: atusb_probe: initialization failed, error = -524 [ 994.239592][T13318] atusb: probe of 4-1:0.0 failed with error -524 [ 994.273223][T13318] usb 4-1: USB disconnect, device number 58 [ 998.589949][ T788] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 998.943674][ T788] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 999.847196][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.876318][ T788] usb 1-1: config 0 descriptor?? [ 999.907714][T15407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3155'. [ 1000.268052][ T788] usb 1-1: can't set config #0, error -71 [ 1000.310069][ T788] usb 1-1: USB disconnect, device number 83 [ 1000.949952][ T788] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1001.146124][ T788] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1001.169988][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.193225][ T788] usb 4-1: Product: syz [ 1001.197516][ T788] usb 4-1: Manufacturer: syz [ 1001.247051][ T788] usb 4-1: SerialNumber: syz [ 1001.267676][ T788] usb 4-1: config 0 descriptor?? [ 1002.649332][T15439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3165'. [ 1003.049649][ T788] usb 4-1: Firmware: major: 212, minor: 98, hardware type: UNKNOWN (32) [ 1003.256048][ T788] usb 4-1: Firmware: build  [ 1003.455508][ T788] usb 4-1: failed to fetch extended address, random address set [ 1003.479193][ T788] usb 4-1: atusb_probe: initialization failed, error = -524 [ 1003.489049][ T788] atusb: probe of 4-1:0.0 failed with error -524 [ 1003.509484][ T788] usb 4-1: USB disconnect, device number 59 [ 1006.630659][T15459] program syz.0.3174 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1007.947341][T15481] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1008.517252][T12248] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1008.706340][T12248] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1008.726310][T12248] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.748114][T12248] usb 4-1: Product: syz [ 1008.760779][T12248] usb 4-1: Manufacturer: syz [ 1008.774540][T12248] usb 4-1: SerialNumber: syz [ 1008.801220][T12248] usb 4-1: config 0 descriptor?? [ 1009.636537][T12248] usb 4-1: Firmware: major: 212, minor: 98, hardware type: UNKNOWN (32) [ 1009.846214][T12248] usb 4-1: Firmware: build  [ 1010.077819][T12248] usb 4-1: failed to fetch extended address, random address set [ 1010.092907][T12248] usb 4-1: atusb_probe: initialization failed, error = -524 [ 1010.113148][T12248] atusb: probe of 4-1:0.0 failed with error -524 [ 1010.142755][T12248] usb 4-1: USB disconnect, device number 60 [ 1013.229368][T15562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3209'. [ 1013.250281][T12248] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1013.457979][T13318] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1013.536488][T12248] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1013.601939][T12248] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.678861][T12248] usb 1-1: Product: syz [ 1013.726906][T12248] usb 1-1: Manufacturer: syz [ 1013.752378][T12248] usb 1-1: SerialNumber: syz [ 1013.778296][T13318] usb 3-1: config index 0 descriptor too short (expected 45, got 28) [ 1013.856981][T13318] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 1013.880271][T12248] usb 1-1: config 0 descriptor?? [ 1013.944363][T13318] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1014.216537][T13318] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1014.265129][T13318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.284273][T13318] usb 3-1: Product: syz [ 1014.288631][T13318] usb 3-1: Manufacturer: syz [ 1014.329588][T13318] usb 3-1: SerialNumber: syz [ 1014.365812][T13318] rtl8150 3-1:1.0: couldn't find required endpoints [ 1014.374176][T13318] rtl8150: probe of 3-1:1.0 failed with error -5 [ 1014.582388][T13318] usb 3-1: USB disconnect, device number 57 [ 1014.609932][ T788] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1014.809775][ T788] usb 4-1: Using ep0 maxpacket: 8 [ 1014.822319][ T788] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1014.841274][ T788] usb 4-1: config 6 has an invalid interface number: 42 but max is 0 [ 1014.849502][ T788] usb 4-1: config 6 has no interface number 0 [ 1014.861854][T12248] usb 1-1: Firmware: major: 212, minor: 98, hardware type: UNKNOWN (32) [ 1014.866394][ T788] usb 4-1: config 6 interface 42 altsetting 250 has an invalid endpoint with address 0x0, skipping [ 1014.899759][ T788] usb 4-1: config 6 interface 42 altsetting 250 has an invalid endpoint with address 0x80, skipping [ 1014.911344][ T788] usb 4-1: config 6 interface 42 has no altsetting 0 [ 1014.932677][ T788] usb 4-1: New USB device found, idVendor=055f, idProduct=c530, bcdDevice=39.75 [ 1014.942603][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.957255][ T788] usb 4-1: Product: syz [ 1014.969758][ T788] usb 4-1: Manufacturer: syz [ 1014.974561][ T788] usb 4-1: SerialNumber: syz [ 1015.072146][T12248] usb 1-1: Firmware: build  [ 1015.229240][ T788] gspca_main: sunplus-2.14.0 probing 055f:c530 [ 1015.254270][ T788] gspca_sunplus: reg_r err -71 [ 1015.259610][ T788] sunplus: probe of 4-1:6.42 failed with error -71 [ 1015.273826][T12248] usb 1-1: failed to fetch extended address, random address set [ 1015.283021][ T788] usb 4-1: USB disconnect, device number 61 [ 1015.301916][T12248] usb 1-1: atusb_probe: initialization failed, error = -524 [ 1015.331685][T12248] atusb: probe of 1-1:0.0 failed with error -524 [ 1015.395800][T12248] usb 1-1: USB disconnect, device number 84 [ 1015.626815][T15580] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1015.655927][T15580] CPU: 0 PID: 15580 Comm: syz.1.3215 Not tainted syzkaller #0 [ 1015.663586][T15580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1015.673709][T15580] Call Trace: [ 1015.677048][T15580] [ 1015.680031][T15580] dump_stack_lvl+0x18c/0x250 [ 1015.685120][T15580] ? show_regs_print_info+0x20/0x20 [ 1015.690354][T15580] ? load_image+0x420/0x420 [ 1015.694923][T15580] sysfs_create_dir_ns+0x26e/0x2a0 [ 1015.700074][T15580] ? __lock_acquire+0x7d80/0x7d80 [ 1015.705771][T15580] ? sysfs_warn_dup+0xa0/0xa0 [ 1015.710513][T15580] ? rcu_is_watching+0x15/0xb0 [ 1015.715338][T15580] ? do_raw_spin_unlock+0x121/0x230 [ 1015.720586][T15580] kobject_add_internal+0x617/0xc90 [ 1015.725845][T15580] kobject_add+0x164/0x240 [ 1015.730343][T15580] ? kobject_init+0x1d0/0x1d0 [ 1015.735076][T15580] ? get_device_parent+0x366/0x390 [ 1015.740248][T15580] device_add+0x3fa/0xc40 [ 1015.744621][T15580] tty_register_device_attr+0x425/0x950 [ 1015.750227][T15580] ? tty_register_device+0x30/0x30 [ 1015.755417][T15580] ? tty_port_init+0x132/0x1a0 [ 1015.760256][T15580] ? gsm_dlci_alloc+0x32a/0x630 [ 1015.765164][T15580] ? __might_fault+0xaa/0x120 [ 1015.769909][T15580] gsm_activate_mux+0x110/0x2a0 [ 1015.774833][T15580] gsmld_ioctl+0xcec/0x1900 [ 1015.779398][T15580] ? gsmld_write+0x120/0x120 [ 1015.784041][T15580] ? __init_ldsem+0x150/0x150 [ 1015.788797][T15580] ? __fget_files+0x28/0x460 [ 1015.793440][T15580] ? gsmld_write+0x120/0x120 [ 1015.798101][T15580] tty_ioctl+0x9b5/0xdc0 [ 1015.802399][T15580] ? tty_get_icount+0xb0/0xb0 [ 1015.807145][T15580] __se_sys_ioctl+0xfd/0x170 [ 1015.811812][T15580] do_syscall_64+0x55/0xb0 [ 1015.816288][T15580] ? clear_bhb_loop+0x40/0x90 [ 1015.821045][T15580] ? clear_bhb_loop+0x40/0x90 [ 1015.825792][T15580] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1015.831907][T15580] RIP: 0033:0x7f8318d9e019 [ 1015.836414][T15580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1015.856077][T15580] RSP: 002b:00007f8319ce4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1015.864559][T15580] RAX: ffffffffffffffda RBX: 00007f8319026090 RCX: 00007f8318d9e019 [ 1015.872583][T15580] RDX: 00002000000000c0 RSI: 0000000040204706 RDI: 0000000000000003 [ 1015.880652][T15580] RBP: 00007f8318e3500c R08: 0000000000000000 R09: 0000000000000000 [ 1015.888739][T15580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1015.896758][T15580] R13: 00007f8319026128 R14: 00007f8319026090 R15: 00007ffe4bb3ef48 [ 1015.904873][T15580] [ 1015.911447][T15580] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1016.240475][T15583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1018.179986][ T788] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1019.807768][ T788] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1019.827324][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.849902][ T788] usb 1-1: Product: syz [ 1019.857306][ T788] usb 1-1: Manufacturer: syz [ 1019.870909][ T788] usb 1-1: SerialNumber: syz [ 1019.887044][ T788] usb 1-1: config 0 descriptor?? [ 1020.829623][ T788] usb 1-1: Firmware: major: 212, minor: 98, hardware type: UNKNOWN (32) [ 1021.001238][T15622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1021.050226][ T788] usb 1-1: Firmware: build  [ 1021.242019][ T788] usb 1-1: failed to fetch extended address, random address set [ 1021.256077][ T788] usb 1-1: atusb_probe: initialization failed, error = -524 [ 1021.265932][ T788] atusb: probe of 1-1:0.0 failed with error -524 [ 1021.276702][ T788] usb 1-1: USB disconnect, device number 85 [ 1022.103932][T15644] loop5: detected capacity change from 0 to 7 [ 1022.133139][T15644] Dev loop5: unable to read RDB block 7 [ 1022.144613][T15644] loop5: unable to read partition table [ 1022.151679][T15644] loop5: partition table beyond EOD, truncated [ 1022.182738][T15644] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1023.311658][T15646] Dev loop5: unable to read RDB block 7 [ 1023.317556][T15646] loop5: unable to read partition table [ 1023.337897][T15646] loop5: partition table beyond EOD, truncated [ 1023.369095][T15646] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1023.879977][ T5842] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1024.090314][ T5842] usb 4-1: Using ep0 maxpacket: 32 [ 1024.103661][ T5842] usb 4-1: config 9 has an invalid interface number: 245 but max is 0 [ 1024.115851][ T5842] usb 4-1: config 9 has an invalid descriptor of length 255, skipping remainder of the config [ 1024.129456][ T5842] usb 4-1: config 9 has no interface number 0 [ 1024.403216][ T788] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1024.599890][ T788] usb 3-1: device descriptor read/64, error -71 [ 1024.977628][ T5842] usb 4-1: New USB device found, idVendor=8086, idProduct=1155, bcdDevice=a0.72 [ 1024.987719][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.995908][ T5842] usb 4-1: Product: syz [ 1025.000187][ T5842] usb 4-1: Manufacturer: syz [ 1025.004879][ T5842] usb 4-1: SerialNumber: syz [ 1025.323988][ T5842] usb 4-1: USB disconnect, device number 62 [ 1025.349915][ T788] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1025.519911][ T788] usb 3-1: device descriptor read/64, error -71 [ 1025.640406][ T788] usb usb3-port1: attempt power cycle [ 1026.004830][T12248] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1026.089832][ T788] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1026.139809][ T788] usb 3-1: device descriptor read/8, error -71 [ 1026.202254][T12248] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1026.218273][T12248] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.229461][T12248] usb 1-1: config 220 has no interface number 2 [ 1026.241558][T12248] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1026.259015][T12248] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1026.283790][T12248] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1026.303476][T12248] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1026.328840][T12248] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1026.350115][T12248] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.358218][T12248] usb 1-1: Product: syz [ 1026.386017][T12248] usb 1-1: Manufacturer: syz [ 1026.402108][T12248] usb 1-1: SerialNumber: syz [ 1026.629875][ T788] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1026.655631][T12248] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 1026.662843][T12248] usb 1-1: No valid video chain found. [ 1026.668633][T12248] usb 1-1: selecting invalid altsetting 0 [ 1026.680830][ T788] usb 3-1: device descriptor read/8, error -71 [ 1026.718812][T12248] usb 1-1: selecting invalid altsetting 0 [ 1026.731947][T12248] usbtest: probe of 1-1:220.1 failed with error -22 [ 1026.749288][T12248] usb 1-1: USB disconnect, device number 86 [ 1026.790471][ T788] usb usb3-port1: unable to enumerate USB device [ 1027.099299][T15704] CacheFiles: Failed to register: -2 [ 1027.910183][ T5816] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1028.160461][ T5816] usb 1-1: Using ep0 maxpacket: 16 [ 1028.262320][ T5816] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.375386][ T5816] usb 1-1: config 0 has no interfaces? [ 1028.401982][ T5816] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1028.439881][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.491783][ T5816] usb 1-1: config 0 descriptor?? [ 1028.852468][T12248] usb 1-1: USB disconnect, device number 87 [ 1028.879244][ T5842] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1029.080042][ T5842] usb 3-1: Using ep0 maxpacket: 8 [ 1029.113121][ T5842] usb 3-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 1029.133154][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 1029.159914][ T5842] usb 3-1: Product: syz [ 1029.159942][ T5842] usb 3-1: Manufacturer: syz [ 1029.159960][ T5842] usb 3-1: SerialNumber: syz [ 1029.163123][ T5842] usb 3-1: config 0 descriptor?? [ 1029.166411][ T5842] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 1029.378180][ T5842] gspca_sn9c2028: read1 error -32 [ 1029.399995][ T5842] gspca_sn9c2028: read1 error -32 [ 1029.613834][ T5842] usb 3-1: USB disconnect, device number 62 [ 1029.662930][T12248] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1029.850015][T12248] usb 2-1: device descriptor read/64, error -71 [ 1030.119902][T12248] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1030.289991][T12248] usb 2-1: device descriptor read/64, error -71 [ 1030.411008][T12248] usb usb2-port1: attempt power cycle [ 1030.840024][T12248] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1030.905619][T12248] usb 2-1: device descriptor read/8, error -71 [ 1031.357858][T12248] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1031.391551][T12248] usb 2-1: device descriptor read/8, error -71 [ 1032.142323][T12248] usb usb2-port1: unable to enumerate USB device [ 1033.405701][T15763] program syz.3.3274 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1036.670031][T10907] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1036.835754][T10907] usb 3-1: device descriptor read/64, error -71 [ 1037.233677][T10907] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1037.420184][T10907] usb 3-1: device descriptor read/64, error -71 [ 1037.577309][T10907] usb usb3-port1: attempt power cycle [ 1038.129822][T10907] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1038.170792][T10907] usb 3-1: device descriptor read/8, error -71 [ 1038.459901][T10907] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1038.515364][T10907] usb 3-1: device descriptor read/8, error -71 [ 1038.652932][T10907] usb usb3-port1: unable to enumerate USB device [ 1041.505137][T15844] tipc: Started in network mode [ 1041.510610][T15844] tipc: Node identity 1000001, cluster identity 4369 [ 1041.517477][T15844] tipc: Node number set to 16777217 [ 1041.524961][T15844] tipc: Cannot configure node identity twice [ 1041.565084][T15844] tipc: Enabling of bearer rejected, failed to enable media [ 1045.859833][ T5816] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1046.059858][ T788] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1046.081901][ T5816] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.123041][ T5816] usb 1-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 1046.156625][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.160585][ T5842] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1046.169885][ T5816] usb 1-1: Product: syz [ 1046.197116][ T5816] usb 1-1: Manufacturer: syz [ 1046.217437][ T5816] usb 1-1: SerialNumber: syz [ 1046.262585][ T788] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1046.279876][ T5816] usb-storage 1-1:1.0: USB Mass Storage device detected [ 1046.308933][ T788] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.321236][ T788] usb 3-1: config 220 has no interface number 2 [ 1046.331033][ T788] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1046.345482][ T5816] usb-storage 1-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 1046.360808][ T788] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1046.367875][ T5816] scsi host1: usb-storage 1-1:1.0 [ 1046.382650][ T5842] usb 4-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 1046.386687][ T788] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1046.424436][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.452375][ T788] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1046.463342][ T788] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1046.487125][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.498657][ T788] usb 3-1: Product: syz [ 1046.503063][ T788] usb 3-1: Manufacturer: syz [ 1046.507717][ T788] usb 3-1: SerialNumber: syz [ 1046.514058][ T5842] usb 4-1: config 0 descriptor?? [ 1046.530631][ T5817] usb 1-1: USB disconnect, device number 88 [ 1046.575257][ T5842] pwc: Creative Labs Webcam 5 detected. [ 1046.735710][ T788] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 1046.749789][ T788] usb 3-1: No valid video chain found. [ 1046.755476][ T788] usb 3-1: selecting invalid altsetting 0 [ 1046.771818][ T5842] pwc: Failed to set LED on/off time (-71) [ 1046.784764][ T5842] pwc: send_video_command error -71 [ 1046.794553][ T5842] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1046.802927][ T5842] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 1046.827010][ T5842] usb 4-1: USB disconnect, device number 63 [ 1046.833680][ T788] usb 3-1: selecting invalid altsetting 0 [ 1046.839546][ T788] usbtest: probe of 3-1:220.1 failed with error -22 [ 1046.869901][ T788] usb 3-1: USB disconnect, device number 67 [ 1051.289975][ T5842] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1051.509317][ T5842] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.533467][ T5842] usb 3-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1051.575252][ T5842] usb 3-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 1051.589946][T13318] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1051.608490][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.636755][ T5842] usb 3-1: Product: syz [ 1051.671761][ T5842] usb 3-1: Manufacturer: syz [ 1051.676514][ T5842] usb 3-1: SerialNumber: syz [ 1051.712905][ T5842] usb-storage 3-1:1.0: USB Mass Storage device detected [ 1051.942393][ T5842] usb-storage 3-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 1051.962439][T13318] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1051.973434][ T5842] scsi host1: usb-storage 3-1:1.0 [ 1051.984497][T13318] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1052.757805][T13318] usb 1-1: config 220 has no interface number 2 [ 1052.764725][ T5842] usb 3-1: USB disconnect, device number 68 [ 1052.770925][T13318] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1052.789888][T13318] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1052.796915][T13318] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1052.809839][T13318] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1052.819829][T13318] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1052.839939][T13318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.857394][T13318] usb 1-1: Product: syz [ 1052.879219][T13318] usb 1-1: Manufacturer: syz [ 1052.907271][T13318] usb 1-1: SerialNumber: syz [ 1053.159080][T13318] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 1053.188486][T13318] usb 1-1: No valid video chain found. [ 1053.205097][T13318] usb 1-1: selecting invalid altsetting 0 [ 1053.255953][T13318] usb 1-1: selecting invalid altsetting 0 [ 1053.278142][T13318] usbtest: probe of 1-1:220.1 failed with error -22 [ 1053.340051][T13318] usb 1-1: USB disconnect, device number 89 [ 1055.010495][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.016924][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.070940][ T5842] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1056.330746][ T5842] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1056.368776][ T5842] usb 2-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1056.413585][ T5842] usb 2-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 1056.426106][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.434633][ T5842] usb 2-1: Product: syz [ 1056.438944][ T5842] usb 2-1: Manufacturer: syz [ 1056.443829][ T5842] usb 2-1: SerialNumber: syz [ 1056.459008][ T5842] usb-storage 2-1:1.0: USB Mass Storage device detected [ 1056.508413][ T5842] usb-storage 2-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 1056.536072][ T5842] scsi host1: usb-storage 2-1:1.0 [ 1056.752609][ T5816] usb 2-1: USB disconnect, device number 67 [ 1057.559910][T16011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1063.285312][T16049] tipc: Started in network mode [ 1063.291348][T16049] tipc: Node identity 1000001, cluster identity 4369 [ 1063.298149][T16049] tipc: Node number set to 16777217 [ 1063.310728][T16049] tipc: Cannot configure node identity twice [ 1063.328809][T16049] tipc: New replicast peer: 10.1.1.2 [ 1063.336624][T16049] tipc: Enabled bearer , priority 10 [ 1063.477515][T16050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1063.549895][T16053] tipc: Enabling of bearer rejected, already enabled [ 1064.209897][T10907] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1064.459960][T10907] usb 2-1: Using ep0 maxpacket: 16 [ 1064.473111][T10907] usb 2-1: config 1 has an invalid descriptor of length 207, skipping remainder of the config [ 1064.496731][T10907] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1064.522673][T10907] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1064.534242][T10907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.550089][T10907] usb 2-1: Product: syz [ 1064.554629][T10907] usb 2-1: Manufacturer: syz [ 1064.559499][T10907] usb 2-1: SerialNumber: syz [ 1064.782466][T10907] usb 2-1: 0:2 : does not exist [ 1064.827946][T10907] usb 2-1: USB disconnect, device number 68 [ 1064.892483][T16062] udevd[16062]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1065.393238][T13318] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 1067.099438][T13318] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1067.153630][T13318] usb 1-1: not running at top speed; connect to a high speed hub [ 1067.182238][T13318] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 4328, setting to 64 [ 1067.207093][T13318] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1067.225530][T13318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.248261][T13318] usb 1-1: Product: syz [ 1067.258438][T13318] usb 1-1: Manufacturer: syz [ 1067.279861][T13318] usb 1-1: SerialNumber: syz [ 1067.323602][T16072] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1067.666668][T13318] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1067.677407][T13318] usb 1-1: MIDIStreaming interface descriptor not found [ 1067.830370][T13318] usb 1-1: USB disconnect, device number 90 [ 1068.287420][T16091] udevd[16091]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1075.166871][T16123] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1075.174058][T16123] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1075.183211][T16123] vhci_hcd vhci_hcd.0: Device attached [ 1075.660171][T16130] vhci_hcd: connection closed [ 1075.735199][ T59] vhci_hcd: stop threads [ 1075.885742][ T59] vhci_hcd: release socket [ 1075.939941][ T59] vhci_hcd: disconnect device [ 1079.790042][T16167] tipc: Started in network mode [ 1079.800104][T16167] tipc: Node identity 1000001, cluster identity 4369 [ 1079.827433][T16167] tipc: Node number set to 16777217 [ 1079.834599][T16167] tipc: Cannot configure node identity twice [ 1079.909282][T16167] tipc: New replicast peer: 10.1.1.2 [ 1081.580260][T16167] tipc: Enabled bearer , priority 10 [ 1086.418912][T16214] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1086.612260][ T5816] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1086.806587][ T5816] usb 3-1: Using ep0 maxpacket: 16 [ 1086.859307][ T5816] usb 3-1: config 1 has an invalid descriptor of length 147, skipping remainder of the config [ 1087.449776][ T5816] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1087.566261][ T5816] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1087.609957][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.639869][ T5816] usb 3-1: Product: syz [ 1087.645007][ T5816] usb 3-1: Manufacturer: syz [ 1087.657527][ T5816] usb 3-1: SerialNumber: syz [ 1087.928003][ T5816] usb 3-1: 0:2 : does not exist [ 1087.970195][ T5816] usb 3-1: USB disconnect, device number 69 [ 1088.090209][T16210] udevd[16210]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1091.839770][ T5816] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1092.091909][ T5816] usb 1-1: Dual-Role OTG device on HNP port [ 1092.120339][ T5816] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06 [ 1092.159738][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.211189][ T5816] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1092.270482][ T5816] gspca_spca501: reg write: error -32 [ 1092.276021][ T5816] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 1092.299861][ T5816] spca501: probe of 1-1:1.0 failed with error -22 [ 1092.307645][ T5816] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1092.402565][T16252] raw_sendmsg: syz.2.3418 forgot to set AF_INET. Fix it! [ 1092.560068][T10907] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1092.773820][T10907] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1092.792750][T10907] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1092.828808][T10907] usb 2-1: config 220 has no interface number 2 [ 1092.850990][T10907] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1092.894468][T10907] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1092.917637][T10907] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1092.942533][T10907] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1092.986632][T10907] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1092.995970][T10907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.004297][T10907] usb 2-1: Product: syz [ 1093.008537][T10907] usb 2-1: Manufacturer: syz [ 1093.013248][T10907] usb 2-1: SerialNumber: syz [ 1093.312234][T10907] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 1093.319284][T10907] usb 2-1: No valid video chain found. [ 1093.326226][T10907] usb 2-1: selecting invalid altsetting 0 [ 1093.452080][T10907] usb 2-1: selecting invalid altsetting 0 [ 1093.458020][T10907] usbtest: probe of 2-1:220.1 failed with error -22 [ 1093.512650][T10907] usb 2-1: USB disconnect, device number 69 [ 1093.664388][T16268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1093.697306][T16268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1093.783240][T16270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.912433][T16276] loop5: detected capacity change from 0 to 7 [ 1093.922553][T16276] Dev loop5: unable to read RDB block 7 [ 1093.928232][T16276] loop5: AHDI p1 [ 1093.932413][T16276] loop5: partition table partially beyond EOD, truncated [ 1094.249969][T16285] tipc: Enabling of bearer rejected, failed to enable media [ 1095.813676][T16303] loop5: detected capacity change from 0 to 7 [ 1095.837318][T16303] Dev loop5: unable to read RDB block 7 [ 1095.855331][T16303] loop5: AHDI p1 [ 1095.867860][T16303] loop5: partition table partially beyond EOD, truncated [ 1096.141769][T16310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1096.158771][T16310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1096.166869][T10907] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1096.198775][T16311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1096.372461][T10907] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1096.382140][T10907] usb 2-1: config 220 has an invalid descriptor of length 255, skipping remainder of the config [ 1096.394571][T10907] usb 2-1: config 220 has no interface number 2 [ 1096.401983][T10907] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1096.415641][T10907] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1096.422901][T10907] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1096.432414][T10907] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1096.442563][T10907] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1096.452706][T10907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.465540][T10907] usb 2-1: Product: syz [ 1096.471476][T10907] usb 2-1: Manufacturer: syz [ 1096.476171][T10907] usb 2-1: SerialNumber: syz [ 1096.728160][T10907] usb 2-1: selecting invalid altsetting 0 [ 1096.771510][T10907] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 1096.777968][T10907] usb 2-1: No valid video chain found. [ 1096.798188][T10907] usb 2-1: selecting invalid altsetting 0 [ 1096.815386][T10907] usbtest: probe of 2-1:220.1 failed with error -22 [ 1096.838102][T10907] usb 2-1: USB disconnect, device number 70 [ 1097.911917][T16323] xt_hashlimit: max too large, truncated to 1048576 [ 1099.042710][ T5784] Bluetooth: hci3: hardware error 0x00 [ 1099.053349][T12196] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 1099.066321][T12196] Bluetooth: hci3: unexpected event for opcode 0x1002 [ 1099.560000][T10907] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1099.759857][T10907] usb 4-1: Using ep0 maxpacket: 16 [ 1099.778314][T10907] usb 4-1: config 1 has an invalid descriptor of length 136, skipping remainder of the config [ 1099.806224][T10907] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1099.839038][T10907] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1099.859851][T10907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.867988][T10907] usb 4-1: Product: syz [ 1099.879731][T10907] usb 4-1: Manufacturer: syz [ 1099.884471][T10907] usb 4-1: SerialNumber: syz [ 1100.121602][T10907] usb 4-1: 0:2 : does not exist [ 1100.126630][T10907] usb 4-1: unit 14 not found! [ 1100.177562][T10907] usb 4-1: USB disconnect, device number 64 [ 1100.222607][T16243] udevd[16243]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1100.652880][T16354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1100.665179][T16354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1101.099912][ T5784] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1103.771337][T16381] tipc: Enabling of bearer rejected, failed to enable media [ 1105.030025][ T5854] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1105.235346][ T5854] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1105.254356][ T5854] usb 2-1: config 220 has an invalid descriptor of length 255, skipping remainder of the config [ 1105.279709][ T5854] usb 2-1: config 220 has no interface number 2 [ 1105.296309][ T5854] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1105.323719][ T5854] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1105.344073][ T5854] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1105.363333][ T5854] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1105.382279][ T5854] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1105.399711][ T5854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.424993][ T5854] usb 2-1: Product: syz [ 1105.439633][ T5854] usb 2-1: Manufacturer: syz [ 1105.444689][ T5854] usb 2-1: SerialNumber: syz [ 1105.692673][ T5854] usb 2-1: selecting invalid altsetting 0 [ 1105.711136][ T5854] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 1105.730034][ T5854] usb 2-1: No valid video chain found. [ 1105.754734][ T5854] usb 2-1: selecting invalid altsetting 0 [ 1105.770049][ T5854] usbtest: probe of 2-1:220.1 failed with error -22 [ 1105.789838][ T5854] usb 2-1: USB disconnect, device number 71 [ 1108.718022][T16428] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1112.054369][T16459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3486'. [ 1113.051168][T16477] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1114.103666][T16491] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 1116.440235][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.472876][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.331037][T16519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1118.381657][T16519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1120.832640][T16536] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1120.839304][T16536] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1120.849418][T16536] vhci_hcd vhci_hcd.0: Device attached [ 1121.921248][ T5854] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 1122.175012][T16539] vhci_hcd: connection reset by peer [ 1122.212332][ T1140] vhci_hcd: stop threads [ 1122.228973][ T1140] vhci_hcd: release socket [ 1122.269780][ T1140] vhci_hcd: disconnect device [ 1122.519525][T16551] input: syz1 as /devices/virtual/input/input26 [ 1124.299916][ T5843] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1124.522247][ T5843] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1124.562303][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.600354][ T5843] usb 3-1: Product: syz [ 1124.604737][ T5843] usb 3-1: Manufacturer: syz [ 1124.611140][ T5843] usb 3-1: SerialNumber: syz [ 1124.630473][ T5843] usb 3-1: config 0 descriptor?? [ 1127.315061][ T5843] usb 3-1: Firmware version (0.0) predates our first public release. [ 1127.334306][ T5843] usb 3-1: Please update to version 0.2 or newer [ 1127.409905][ T5854] vhci_hcd: vhci_device speed not set [ 1127.531664][T12248] usb 3-1: USB disconnect, device number 70 [ 1127.749918][T16576] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1129.586291][T16584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1129.621170][T16584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1132.269938][T16602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1132.340567][T16602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1135.254509][T16615] xt_hashlimit: max too large, truncated to 1048576 [ 1136.181351][T16616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1136.799855][T13318] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1137.058500][T13318] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1137.157662][T13318] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1137.237634][T13318] usb 3-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 1137.334300][T13318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.491388][T13318] usb 3-1: config 0 descriptor?? [ 1137.770805][T12248] usb 3-1: USB disconnect, device number 71 [ 1138.074640][T16639] Console: switching to colour VGA+ 80x25 [ 1139.721312][T16649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1139.950127][T16653] tipc: Enabling of bearer rejected, failed to enable media [ 1141.698427][T16666] loop5: detected capacity change from 0 to 7 [ 1141.725870][T16666] Dev loop5: unable to read RDB block 7 [ 1141.740380][T16666] loop5: unable to read partition table [ 1141.761386][T16666] loop5: partition table beyond EOD, truncated [ 1141.785110][T16666] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1144.906473][ T5842] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1145.142285][ T5842] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1145.170056][ T5842] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1145.179344][ T5842] usb 2-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 1145.214329][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.240308][ T5842] usb 2-1: config 0 descriptor?? [ 1145.888262][ T5842] usb 2-1: USB disconnect, device number 72 [ 1145.970439][T16681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1148.869070][T16700] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1149.851763][T16705] tipc: Enabling of bearer rejected, failed to enable media [ 1152.863972][T16721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1153.805506][ T5842] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1154.043300][ T5842] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1154.084501][ T5842] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1154.149793][ T5842] usb 3-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 1154.161058][T16736] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1154.215950][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.271361][ T5842] usb 3-1: config 0 descriptor?? [ 1154.634979][ T5843] usb 3-1: USB disconnect, device number 72 [ 1155.146809][T16747] tipc: Enabling of bearer rejected, failed to enable media [ 1158.931463][T16766] xt_hashlimit: max too large, truncated to 1048576 [ 1162.577300][T13318] smpboot: CPU 1 is now offline [ 1165.363072][T16796] tipc: Enabling of bearer rejected, already enabled [ 1168.042480][T16802] xt_hashlimit: max too large, truncated to 1048576 [ 1170.007004][T16809] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1170.624389][T16811] loop5: detected capacity change from 0 to 7 [ 1170.676191][T16811] Dev loop5: unable to read RDB block 7 [ 1170.717047][T16811] loop5: unable to read partition table [ 1170.748501][T16811] loop5: partition table beyond EOD, truncated [ 1170.781146][T16811] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1175.029083][T16820] tipc: Enabling of bearer rejected, failed to enable media [ 1177.824214][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.830923][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.260653][T16836] xt_hashlimit: max too large, truncated to 1048576 [ 1179.810145][T16845] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1183.140947][T16853] loop5: detected capacity change from 0 to 7 [ 1183.228442][T16854] tipc: Enabling of bearer rejected, failed to enable media [ 1183.257664][T16853] Dev loop5: unable to read RDB block 7 [ 1183.304673][T16853] loop5: unable to read partition table [ 1183.340415][T16853] loop5: partition table beyond EOD, truncated [ 1183.375131][T16853] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1187.024720][T16881] tipc: Enabling of bearer rejected, failed to enable media [ 1189.838105][T16887] xt_hashlimit: max too large, truncated to 1048576 [ 1189.931204][T16891] loop5: detected capacity change from 0 to 7 [ 1189.984343][T16891] Dev loop5: unable to read RDB block 7 [ 1190.010908][T16891] loop5: unable to read partition table [ 1190.042907][T16891] loop5: partition table beyond EOD, truncated [ 1190.107523][T16891] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1190.326461][T16896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1191.557263][T16911] syz_tun: entered allmulticast mode [ 1194.317795][T16914] tipc: Enabling of bearer rejected, failed to enable media [ 1197.992563][T16928] xt_hashlimit: max too large, truncated to 1048576 [ 1198.210389][T16933] loop5: detected capacity change from 0 to 7 [ 1198.245422][T16933] Dev loop5: unable to read RDB block 7 [ 1198.274984][T16933] loop5: unable to read partition table [ 1198.305745][T16933] loop5: partition table beyond EOD, truncated [ 1198.330873][T16935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1198.352623][T16933] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1200.436444][T16939] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1205.512165][T16969] xt_hashlimit: max too large, truncated to 1048576 [ 1205.910704][T16971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1208.761307][T16974] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1208.850754][T16978] Cannot find add_set index 0 as target [ 1212.240125][T17005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1216.185387][T17038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1222.400729][T17075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1227.950318][T17119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1232.016738][T12248] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1232.225335][T12248] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1232.262483][T12248] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1232.305534][T12248] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1232.355836][T12248] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1232.391390][T12248] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.429469][T12248] usb 3-1: config 0 descriptor?? [ 1232.913170][T12248] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 1233.022534][T12248] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1234.947449][ T5842] usb 3-1: reset high-speed USB device number 73 using dummy_hcd [ 1236.900071][T17164] overlayfs: missing 'lowerdir' [ 1237.464219][T13318] usb 3-1: USB disconnect, device number 73 [ 1237.510457][T17168] syz_tun: entered allmulticast mode [ 1239.505086][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.794490][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.066054][T17171] tipc: Enabling of bearer rejected, failed to enable media [ 1243.293264][T17193] syz_tun: entered allmulticast mode [ 1247.441585][T17202] tipc: Enabling of bearer rejected, failed to enable media [ 1248.361378][T17219] PKCS7: Unknown OID: [4] 0.0 [ 1248.366527][T17219] PKCS7: Only support pkcs7_signedData type [ 1251.169315][T17222] xt_hashlimit: max too large, truncated to 1048576 [ 1253.682346][T17233] tipc: Enabling of bearer rejected, failed to enable media [ 1258.122471][T17254] xt_hashlimit: max too large, truncated to 1048576 [ 1260.923501][T17266] tipc: Enabling of bearer rejected, failed to enable media [ 1261.599101][T17281] syzkaller1: entered promiscuous mode [ 1261.634888][T17281] syzkaller1: entered allmulticast mode [ 1264.222591][T17286] xt_hashlimit: max too large, truncated to 1048576 [ 1265.939783][ T172] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1266.157647][ T172] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1266.187246][ T172] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.221310][ T172] usb 4-1: Product: syz [ 1266.225560][ T172] usb 4-1: Manufacturer: syz [ 1266.264368][ T172] usb 4-1: SerialNumber: syz [ 1266.296334][ T172] usb 4-1: config 0 descriptor?? [ 1267.630118][T17311] overlayfs: missing 'lowerdir' [ 1268.341012][ T172] usb 4-1: Firmware version (0.0) predates our first public release. [ 1268.349157][ T172] usb 4-1: Please update to version 0.2 or newer [ 1268.552920][ T172] usb 4-1: USB disconnect, device number 65 [ 1270.890638][T17319] xt_hashlimit: max too large, truncated to 1048576 [ 1273.217670][T17338] loop5: detected capacity change from 0 to 7 [ 1273.254753][T17338] Dev loop5: unable to read RDB block 7 [ 1273.272176][T17338] loop5: unable to read partition table [ 1273.311131][T17338] loop5: partition table beyond EOD, truncated [ 1273.345130][T17338] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1273.869867][ T8] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1274.082420][ T8] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1274.094016][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.129482][ T8] usb 2-1: Product: syz [ 1274.158979][ T8] usb 2-1: Manufacturer: syz [ 1274.176492][ T8] usb 2-1: SerialNumber: syz [ 1274.201820][ T8] usb 2-1: config 0 descriptor?? [ 1275.359395][ T8] usb 2-1: unexpected transceiver, part 0xd4 version 0x03 [ 1277.020254][ T8] usb 2-1: Firmware version (0.0) predates our first public release. [ 1277.071021][T17350] tipc: Enabling of bearer rejected, failed to enable media [ 1277.087764][ T8] usb 2-1: Please update to version 0.2 or newer [ 1277.115035][ T8] usb 2-1: atusb_probe: initialization failed, error = -19 [ 1277.189855][ T8] usb 2-1: USB disconnect, device number 73 [ 1279.711000][T17354] xt_hashlimit: max too large, truncated to 1048576 [ 1282.169790][ T8] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1282.451379][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 1282.507755][ T8] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1282.534477][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.578857][ T8] usb 2-1: Product: syz [ 1282.599743][ T8] usb 2-1: Manufacturer: syz [ 1282.626889][ T8] usb 2-1: SerialNumber: syz [ 1282.655665][ T8] usb 2-1: config 0 descriptor?? [ 1282.907557][ T8] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1283.362526][ T8] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 1285.345136][ T8] usb 2-1: USB disconnect, device number 74 [ 1285.361749][T17377] tipc: Started in network mode [ 1285.366771][T17377] tipc: Node identity 1000001, cluster identity 4369 [ 1285.373712][T17377] tipc: Node number set to 16777217 [ 1285.380733][T17377] tipc: Cannot configure node identity twice [ 1285.391909][T17377] tipc: New replicast peer: 10.1.1.2 [ 1285.397691][T17377] tipc: Enabled bearer , priority 10 [ 1287.759993][T17391] overlayfs: missing 'lowerdir' [ 1292.359099][T17411] xt_hashlimit: max too large, truncated to 1048576 [ 1292.523029][T17415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1292.595090][T17415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1292.682215][T17415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1292.724851][T17415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1292.780923][T16341] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1295.234454][T17420] tipc: Started in network mode [ 1295.239504][T17420] tipc: Node identity 1000001, cluster identity 4369 [ 1295.246393][T17420] tipc: Node number set to 16777217 [ 1295.252071][T17420] tipc: Cannot configure node identity twice [ 1295.270767][T17420] tipc: New replicast peer: 10.1.1.2 [ 1295.276678][T17420] tipc: Enabled bearer , priority 10 [ 1299.365171][T17454] tipc: Enabling of bearer rejected, already enabled [ 1301.569894][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1301.576259][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1304.461645][T17481] tipc: Enabling of bearer rejected, failed to enable media [ 1304.603518][T17488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3816'. [ 1312.766093][T17544] Unsupported ieee802154 address type: 0 [ 1313.205969][T17552] usb_phy_generic pcspkr: dummy supplies not allowed for exclusive requests [ 1316.565743][T17566] xt_hashlimit: max too large, truncated to 1048576 [ 1319.075540][T17572] tipc: Enabling of bearer rejected, failed to enable media [ 1320.663655][T17583] Debayer B: ================= START STATUS ================= [ 1320.741270][T17583] Debayer B: Debayer Mean Window Size: 3 [ 1320.773284][T17583] Debayer B: ================== END STATUS ================== [ 1331.469290][T17638] tipc: Enabling of bearer rejected, already enabled [ 1342.613192][T17674] tipc: Enabling of bearer rejected, already enabled [ 1345.276440][T17683] tipc: Enabling of bearer rejected, already enabled [ 1353.422909][T17728] tipc: Enabling of bearer rejected, failed to enable media [ 1354.082807][T17741] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3899'. [ 1356.947792][T17764] tipc: Enabled bearer , priority 10 [ 1357.397714][T17772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1357.439951][T17772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1357.503844][T17772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1357.554839][T17772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1357.613611][T16341] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1359.079636][ T5842] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1359.295973][ T5842] usb 2-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.00 [ 1359.326795][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.350385][ T5842] usb 2-1: Product: syz [ 1359.365374][ T5842] usb 2-1: Manufacturer: syz [ 1359.384520][ T5842] usb 2-1: SerialNumber: syz [ 1359.409754][ T8] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1359.422740][ T5842] ums-jumpshot 2-1:1.0: USB Mass Storage device detected [ 1359.463811][ T5842] ums-jumpshot 2-1:1.0: Quirks match for vid 05dc pid 0001: 2 [ 1359.493223][ T5842] scsi host1: usb-storage 2-1:1.0 [ 1359.599817][ T8] usb 4-1: device descriptor read/64, error -71 [ 1359.695246][ T5842] usb 2-1: USB disconnect, device number 75 [ 1359.919690][ T8] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1362.144085][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.155337][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.188376][T17802] xt_hashlimit: max too large, truncated to 1048576 [ 1362.250127][ T8] usb 4-1: device descriptor read/64, error -71 [ 1362.372998][ T8] usb usb4-port1: attempt power cycle [ 1365.906533][T17804] tipc: Enabling of bearer rejected, already enabled [ 1366.163346][T17809] xt_hashlimit: max too large, truncated to 1048576 [ 1367.345681][T17816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1367.386430][T17816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1369.705166][T17831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1369.753352][T17831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1372.440701][T17835] xt_hashlimit: max too large, truncated to 1048576 [ 1375.119125][T17841] tipc: Enabling of bearer rejected, already enabled [ 1377.390018][ T8] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1377.801074][ T8] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1377.838046][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.901325][ T8] usb 3-1: Product: syz [ 1377.905587][ T8] usb 3-1: Manufacturer: syz [ 1377.965929][ T8] usb 3-1: SerialNumber: syz [ 1378.002910][ T8] usb 3-1: config 0 descriptor?? [ 1379.500447][ T8] usb 3-1: Firmware version (0.0) predates our first public release. [ 1379.508758][ T8] usb 3-1: Please update to version 0.2 or newer [ 1380.871139][T17870] xt_hashlimit: max too large, truncated to 1048576 [ 1381.197440][ T8] usb 3-1: USB disconnect, device number 74 [ 1383.833419][T17886] tipc: Enabling of bearer rejected, failed to enable media [ 1385.786446][T17898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1385.839391][T17898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1386.008991][T17905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3946'. [ 1386.140958][ T8] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1386.329742][ T8] usb 4-1: device descriptor read/64, error -71 [ 1388.568033][ T8] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1389.050642][T13318] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1389.265040][T13318] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1391.420991][T13318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.454507][T17918] tipc: Enabling of bearer rejected, failed to enable media [ 1391.473719][T13318] usb 2-1: Product: syz [ 1391.500524][T13318] usb 2-1: Manufacturer: syz [ 1391.521204][T13318] usb 2-1: SerialNumber: syz [ 1391.550214][T13318] usb 2-1: config 0 descriptor?? [ 1391.945968][T13318] usb 2-1: Firmware version (0.0) predates our first public release. [ 1392.002988][T13318] usb 2-1: Please update to version 0.2 or newer [ 1392.264868][T13318] usb 2-1: USB disconnect, device number 76 [ 1393.772392][T17925] warn_alloc: 1 callbacks suppressed [ 1393.772406][T17925] syz.0.3954: vmalloc error: size 2764800, failed to allocated page array size 5400, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1394.013089][T17925] CPU: 0 PID: 17925 Comm: syz.0.3954 Not tainted syzkaller #0 [ 1394.020646][T17925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1394.030722][T17925] Call Trace: [ 1394.034018][T17925] [ 1394.036964][T17925] dump_stack_lvl+0x18c/0x250 [ 1394.041675][T17925] ? show_regs_print_info+0x20/0x20 [ 1394.046896][T17925] ? load_image+0x420/0x420 [ 1394.051450][T17925] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1394.057889][T17925] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1394.064415][T17925] warn_alloc+0x246/0x340 [ 1394.068767][T17925] ? zone_watermark_ok_safe+0x230/0x230 [ 1394.074341][T17925] ? _raw_spin_unlock+0x28/0x40 [ 1394.079224][T17925] ? __vb2_queue_alloc+0x78f/0x1410 [ 1394.084563][T17925] __vmalloc_node_range+0x661/0x1320 [ 1394.089923][T17925] ? free_vm_area+0x50/0x50 [ 1394.094465][T17925] vmalloc_user+0x74/0x80 [ 1394.098824][T17925] ? vb2_vmalloc_alloc+0xef/0x330 [ 1394.103889][T17925] vb2_vmalloc_alloc+0xef/0x330 [ 1394.108778][T17925] ? __copy_timestamp+0x1f0/0x1f0 [ 1394.113842][T17925] __vb2_queue_alloc+0x78f/0x1410 [ 1394.118915][T17925] vb2_core_reqbufs+0x9e8/0x10d0 [ 1394.123894][T17925] ? vb2_verify_memory_type+0x570/0x570 [ 1394.129464][T17925] ? do_vfs_ioctl+0x156c/0x1cc0 [ 1394.134440][T17925] v4l2_m2m_ioctl_reqbufs+0x16c/0x230 [ 1394.139991][T17925] __video_do_ioctl+0xa34/0xde0 [ 1394.144914][T17925] ? video_ioctl2+0x30/0x30 [ 1394.149443][T17925] ? __might_fault+0xc6/0x120 [ 1394.154143][T17925] ? __might_fault+0xaa/0x120 [ 1394.158847][T17925] video_usercopy+0x889/0x1360 [ 1394.163655][T17925] ? video_ioctl2+0x30/0x30 [ 1394.168179][T17925] ? v4l_printk_ioctl+0x160/0x160 [ 1394.173273][T17925] v4l2_ioctl+0x18a/0x1e0 [ 1394.177623][T17925] ? v4l2_poll+0x2b0/0x2b0 [ 1394.182235][T17925] __se_sys_ioctl+0xfd/0x170 [ 1394.186856][T17925] do_syscall_64+0x55/0xb0 [ 1394.191673][T17925] ? clear_bhb_loop+0x40/0x90 [ 1394.196374][T17925] ? clear_bhb_loop+0x40/0x90 [ 1394.201078][T17925] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1394.207001][T17925] RIP: 0033:0x7effe2b9e019 [ 1394.211458][T17925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1394.231112][T17925] RSP: 002b:00007effe39c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1394.240090][T17925] RAX: ffffffffffffffda RBX: 00007effe2e25fa0 RCX: 00007effe2b9e019 [ 1394.248112][T17925] RDX: 00002000000001c0 RSI: 00000000c0145608 RDI: 0000000000000003 [ 1394.256130][T17925] RBP: 00007effe2c3500c R08: 0000000000000000 R09: 0000000000000000 [ 1394.264145][T17925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1394.272191][T17925] R13: 00007effe2e26038 R14: 00007effe2e25fa0 R15: 00007fffa6c772f8 [ 1394.280228][T17925] [ 1394.482590][T17925] Mem-Info: [ 1394.485835][T17925] active_anon:22393 inactive_anon:0 isolated_anon:0 [ 1394.485835][T17925] active_file:19969 inactive_file:3871 isolated_file:0 [ 1394.485835][T17925] unevictable:768 dirty:75 writeback:0 [ 1394.485835][T17925] slab_reclaimable:10764 slab_unreclaimable:109842 [ 1394.485835][T17925] mapped:25503 shmem:18333 pagetables:584 [ 1394.485835][T17925] sec_pagetables:0 bounce:0 [ 1394.485835][T17925] kernel_misc_reclaimable:0 [ 1394.485835][T17925] free:1341917 free_pcp:9581 free_cma:0 [ 1394.587385][T17925] Node 0 active_anon:89676kB inactive_anon:0kB active_file:79876kB inactive_file:15348kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102012kB dirty:300kB writeback:0kB shmem:71796kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10352kB pagetables:2336kB sec_pagetables:0kB all_unreclaimable? no [ 1394.700873][T17925] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1394.899682][ T172] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1396.959375][ T172] usb 3-1: device descriptor read/64, error -71 [ 1397.180947][T17925] Node 0 DMA free:15328kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB [ 1397.250517][T17947] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1397.347858][T17925] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1397.380527][T17925] Node 0 DMA32 free:1447468kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:89580kB inactive_anon:0kB active_file:80160kB inactive_file:14660kB unevictable:1536kB writepending:300kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:29088kB local_pcp:29088kB free_cma:0kB [ 1397.429707][ T172] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1397.499200][T17925] lowmem_reserve[]: 0 0 0 0 0 [ 1397.515063][T17925] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:96kB inactive_anon:0kB active_file:80kB inactive_file:688kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1397.592201][T17925] lowmem_reserve[]: 0 0 0 0 0 [ 1397.612136][T17925] Node 1 Normal free:3904864kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:8204kB local_pcp:8204kB free_cma:0kB [ 1397.646005][ T172] usb 3-1: device descriptor read/64, error -71 [ 1397.748453][T17925] lowmem_reserve[]: 0 0 0 0 0 [ 1397.771139][T17925] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 1397.785903][ T172] usb usb3-port1: attempt power cycle [ 1397.819341][T17957] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3962'. [ 1397.846538][T17925] Node 0 DMA32: 507*4kB (UE) 1170*8kB (UME) 485*16kB (UME) 507*32kB (UME) 262*64kB (UME) 681*128kB (UME) 354*256kB (UME) 304*512kB (UME) 239*1024kB (UME) 17*2048kB (UME) 191*4096kB (UM) = 1447468kB [ 1397.942942][T17925] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1397.994864][T17925] Node 1 Normal: 234*4kB (UE) 47*8kB (UE) 32*16kB (UE) 220*32kB (UE) 71*64kB (UME) 18*128kB (UME) 2*256kB (U) 3*512kB (UME) 0*1024kB 2*2048kB (UE) 948*4096kB (M) = 3904864kB [ 1398.214048][T17925] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1398.249265][T17925] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1399.569643][ T172] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 1399.769968][T17925] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1399.831852][ T172] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1399.842888][T17925] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1399.875165][ T172] usb 3-1: config 0 has no interfaces? [ 1400.052528][T17925] 45180 total pagecache pages [ 1400.059399][ T172] usb 3-1: New USB device found, idVendor=04b8, idProduct=02f9, bcdDevice= 0.40 [ 1400.081532][T17925] 36 pages in swap cache [ 1400.088079][T17925] Free swap = 124452kB [ 1400.093205][ T172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.368507][T17925] Total swap = 124996kB [ 1400.383966][T17925] 2097051 pages RAM [ 1400.387993][ T172] usb 3-1: Product: syz [ 1400.397743][T17925] 0 pages HighMem/MovableOnly [ 1400.405556][ T172] usb 3-1: Manufacturer: syz [ 1400.416800][T17925] 416955 pages reserved [ 1400.422911][ T172] usb 3-1: SerialNumber: syz [ 1400.435104][T17925] 0 pages cma reserved [ 1400.446268][ T172] usb 3-1: config 0 descriptor?? [ 1401.145390][ T172] usb 3-1: USB disconnect, device number 77 [ 1401.781336][ T172] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1402.077559][ T172] usb 2-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 1402.128448][ T172] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1402.186126][ T172] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1402.206011][T17996] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3975'. [ 1402.231346][ T172] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1402.258424][T17996] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3975'. [ 1402.268082][ T172] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.302039][ T172] usb 2-1: Product: syz [ 1402.306276][ T172] usb 2-1: Manufacturer: syz [ 1402.342050][ T172] usb 2-1: SerialNumber: syz [ 1402.699168][ T172] usb 2-1: Found UVC 0.00 device syz (8086:0b07) [ 1402.989119][ T172] usb 2-1: No valid video chain found. [ 1403.022276][ T172] usb 2-1: USB disconnect, device number 77 [ 1403.529662][ T5817] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1405.991299][ T5817] usb 3-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46 [ 1406.034698][ T5817] usb 3-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0 [ 1406.044036][T18012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3981'. [ 1406.053382][T18012] bridge_slave_1: left allmulticast mode [ 1406.059420][T18012] bridge_slave_1: left promiscuous mode [ 1406.065625][T18012] bridge0: port 2(bridge_slave_1) entered disabled state [ 1406.081902][T18012] bridge_slave_0: left allmulticast mode [ 1406.087780][T18012] bridge_slave_0: left promiscuous mode [ 1406.093932][T18012] bridge0: port 1(bridge_slave_0) entered disabled state [ 1406.159150][ T5817] usb 3-1: Product: syz [ 1406.187138][ T5817] usb 3-1: Manufacturer: syz [ 1406.247985][ T5817] usb 3-1: config 0 descriptor?? [ 1406.463878][ T5817] usb 3-1: can't set config #0, error -71 [ 1406.542018][ T5817] usb 3-1: USB disconnect, device number 78 [ 1406.654286][T18012] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3981'. [ 1406.682659][T18012] syz.0.3981: attempt to access beyond end of device [ 1406.682659][T18012] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1406.696198][T18012] efs: cannot read volume header [ 1410.661579][T18046] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1411.269751][ T5817] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 1411.439738][ T5817] usb 3-1: device descriptor read/64, error -71 [ 1411.660126][ T8] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 1412.026423][ T5817] usb 3-1: new full-speed USB device number 80 using dummy_hcd [ 1414.044786][T18073] tipc: Enabling of bearer rejected, failed to enable media [ 1414.082799][ T8] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1414.128024][ T8] usb 4-1: config 0 has no interface number 0 [ 1414.161527][ T8] usb 4-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x9F, skipping [ 1414.242940][ T8] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1414.284241][ T8] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1414.333191][ T8] usb 4-1: Product: syz [ 1414.519703][ T8] usb 4-1: SerialNumber: syz [ 1414.535299][ T8] usb 4-1: config 0 descriptor?? [ 1414.838267][ T8] usb 4-1: can't set config #0, error -71 [ 1414.874909][ T8] usb 4-1: USB disconnect, device number 71 [ 1415.097393][T18083] overlayfs: missing 'lowerdir' [ 1417.881506][T18087] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1418.106138][T18093] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 1418.112732][T18093] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1418.199751][T18093] vhci_hcd vhci_hcd.0: Device attached [ 1418.238217][T18096] vhci_hcd: connection closed [ 1418.238888][ T12] vhci_hcd: stop threads [ 1418.279919][ T12] vhci_hcd: release socket [ 1418.293292][ T12] vhci_hcd: disconnect device [ 1420.870246][T18104] tipc: Enabling of bearer rejected, failed to enable media [ 1422.762579][T18111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4010'. [ 1423.369727][T18111] bridge1: port 1(dummy0) entered blocking state [ 1423.376330][T18111] bridge1: port 1(dummy0) entered disabled state [ 1423.382928][T18111] dummy0: entered allmulticast mode [ 1423.389275][T18111] dummy0: entered promiscuous mode [ 1424.429925][T18122] overlayfs: missing 'lowerdir' [ 1424.559267][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1424.569252][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.272217][T18111] syz.2.4010 (18111) used greatest stack depth: 20824 bytes left [ 1425.376129][T18130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1425.427213][T18130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1425.479023][T18130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1425.518684][T18130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1425.571145][T16341] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1426.029639][ T172] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 1428.311395][T18140] tipc: Enabling of bearer rejected, failed to enable media [ 1428.574969][ T172] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1430.399345][ T172] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1430.474245][ T172] usb 2-1: can't read configurations, error -71 [ 1431.549939][T18159] overlayfs: missing 'lowerdir' [ 1433.080191][ T172] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 1434.586111][T18179] wg1: entered promiscuous mode [ 1435.101289][ T172] usb 3-1: device descriptor read/64, error -71 [ 1435.353179][T18179] wg1: entered allmulticast mode [ 1435.509857][ T172] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 1435.700619][ T172] usb 3-1: device descriptor read/64, error -71 [ 1435.967511][ T172] usb usb3-port1: attempt power cycle [ 1436.830353][T18188] overlayfs: missing 'lowerdir' [ 1437.530419][T18190] 9pnet_fd: Insufficient options for proto=fd [ 1440.549933][T18201] tipc: Enabling of bearer rejected, failed to enable media [ 1444.481340][T18229] overlayfs: missing 'lowerdir' [ 1444.624591][T18232] 9pnet_fd: Insufficient options for proto=fd [ 1445.247972][T18240] xt_hashlimit: max too large, truncated to 1048576 [ 1448.904784][T18242] tipc: Enabling of bearer rejected, failed to enable media [ 1451.726576][T18248] xt_hashlimit: max too large, truncated to 1048576 [ 1453.548863][T18262] 9pnet_fd: Insufficient options for proto=fd [ 1454.017599][T18272] overlayfs: missing 'lowerdir' [ 1454.109631][T12248] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1455.239870][ T5820] kworker/dying (5820) used greatest stack depth: 20552 bytes left [ 1456.515872][T18271] tipc: Enabling of bearer rejected, failed to enable media [ 1458.080787][T12248] usb 4-1: device descriptor read/all, error -71 [ 1459.143776][T18277] tipc: Enabling of bearer rejected, already enabled [ 1459.278074][T18282] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1459.517446][T18292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1459.564960][T18292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1465.697883][T18307] tipc: Enabling of bearer rejected, failed to enable media [ 1468.242471][T18318] 9pnet_fd: Insufficient options for proto=fd [ 1468.385950][T18319] tipc: Enabling of bearer rejected, failed to enable media [ 1468.721621][T18324] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1471.349602][T13318] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1473.770804][T13318] usb 4-1: Using ep0 maxpacket: 32 [ 1473.820969][T13318] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1473.889284][T13318] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1473.963601][T13318] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1474.012668][T13318] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1474.062306][T13318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.116981][T13318] usb 4-1: Product: syz [ 1474.163301][T13318] usb 4-1: Manufacturer: syz [ 1474.168106][T13318] usb 4-1: SerialNumber: syz [ 1474.244002][T13318] usb 4-1: config 0 descriptor?? [ 1474.299014][T13318] usb 4-1: can't set config #0, error -71 [ 1474.355814][T13318] usb 4-1: USB disconnect, device number 74 [ 1474.919664][T13318] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1477.308300][T18354] tipc: Enabling of bearer rejected, failed to enable media [ 1480.043792][T18379] overlayfs: missing 'lowerdir' [ 1480.738053][T18387] netlink: 'syz.0.4096': attribute type 2 has an invalid length. [ 1483.434076][T18398] tipc: Enabling of bearer rejected, already enabled [ 1484.200475][T18408] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1486.061739][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1486.068243][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.753859][T18422] 9pnet_fd: Insufficient options for proto=fd [ 1487.419735][ T5817] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1489.798645][ T5817] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1489.811046][T18429] tipc: Enabling of bearer rejected, failed to enable media [ 1489.839132][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1489.874107][ T5817] usb 4-1: Product: syz [ 1489.905744][ T5817] usb 4-1: Manufacturer: syz [ 1489.940178][ T5817] usb 4-1: SerialNumber: syz [ 1489.980912][ T5817] usb 4-1: config 0 descriptor?? [ 1490.108434][T18436] tipc: Enabling of bearer rejected, failed to enable media [ 1490.226871][ T5817] usb 4-1: Firmware version (0.0) predates our first public release. [ 1490.288048][ T5817] usb 4-1: Please update to version 0.2 or newer [ 1490.454833][ T5817] usb 4-1: USB disconnect, device number 75 [ 1490.622991][T18449] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1490.972719][T18452] 9pnet_fd: Insufficient options for proto=fd [ 1494.003735][T18462] tipc: Enabling of bearer rejected, failed to enable media [ 1494.519730][ T5817] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1494.735580][ T5817] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1494.780059][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.829573][ T5817] usb 2-1: Product: syz [ 1494.845173][ T5817] usb 2-1: Manufacturer: syz [ 1494.876109][ T5817] usb 2-1: SerialNumber: syz [ 1494.903398][ T5817] usb 2-1: config 0 descriptor?? [ 1495.178799][T18477] tipc: Enabling of bearer rejected, failed to enable media [ 1497.276109][ T5817] usb 2-1: Firmware version (0.0) predates our first public release. [ 1497.344706][ T5817] usb 2-1: Please update to version 0.2 or newer [ 1497.583277][ T5817] usb 2-1: USB disconnect, device number 81 [ 1497.682269][T18490] 9pnet_fd: Insufficient options for proto=fd [ 1500.349178][T18495] tipc: Enabling of bearer rejected, already enabled [ 1501.228458][T18511] gadgetfs: bound to dummy_udc driver [ 1501.516316][ T172] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1501.569630][ T8] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 1501.619789][ C0] gadgetfs: connected [ 1501.635175][ T8] gadgetfs: disconnected [ 1501.790264][ T172] usb 3-1: Using ep0 maxpacket: 32 [ 1501.809727][T18515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1501.849903][ C0] gadgetfs: connected [ 1501.869770][ T8] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1501.895758][T18515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1501.915739][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1501.939638][ T172] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1501.978624][ T172] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1502.000499][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1502.046064][ T172] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1502.060690][ C0] gadgetfs: configuration #1 [ 1502.138876][ T172] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1502.213664][ T172] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1502.266944][ T172] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1503.573902][ T172] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1503.962575][ T172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1504.064384][ T172] usb 3-1: config 0 descriptor?? [ 1504.428910][ T172] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 84 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1504.441474][T18520] 9pnet_fd: Insufficient options for proto=fd [ 1504.561703][ T172] usb 3-1: USB disconnect, device number 84 [ 1504.639264][ T172] usblp0: removed [ 1504.718632][T13318] gadgetfs: suspended from state 3 [ 1504.783407][T13318] gadgetfs: disconnected [ 1504.839859][ T5842] usb 2-1: USB disconnect, device number 82 [ 1507.307168][T18526] tipc: Enabling of bearer rejected, already enabled [ 1507.952344][T13309] syz_tun (unregistering): left allmulticast mode [ 1508.347510][ T1092] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1508.684309][ T1092] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1508.993824][T18540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1509.024132][ T1092] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1509.065045][T18540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1509.163730][T18543] 9pnet_fd: Insufficient options for proto=fd [ 1510.885141][ T1092] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1513.906059][ T1092] tipc: Disabling bearer [ 1513.952471][T18549] tipc: Enabling of bearer rejected, already enabled [ 1513.966858][ T1092] tipc: Left network mode [ 1514.288070][T18561] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1514.303664][T18561] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1514.313902][T18562] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1514.322342][T18562] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1514.331461][T18562] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1514.338846][T18562] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1515.569874][T18571] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1516.464604][ T5784] Bluetooth: hci0: command tx timeout [ 1518.566833][T18562] Bluetooth: hci0: command tx timeout [ 1519.829671][ T5842] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1520.167633][ T5842] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1520.177153][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1520.232530][ T5842] usb 4-1: Product: syz [ 1520.236789][ T5842] usb 4-1: Manufacturer: syz [ 1520.279656][ T5842] usb 4-1: SerialNumber: syz [ 1520.320571][ T5842] usb 4-1: config 0 descriptor?? [ 1520.628670][T18562] Bluetooth: hci0: command tx timeout [ 1520.802705][T18598] tipc: Enabling of bearer rejected, failed to enable media [ 1521.529202][ T5842] usb 4-1: unexpected transceiver, part 0xd4 version 0x03 [ 1521.736222][T18609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4164'. [ 1521.826877][ T5842] usb 4-1: Firmware version (0.0) predates our first public release. [ 1521.842246][T18609] dummy0: left allmulticast mode [ 1521.847285][T18609] dummy0: left promiscuous mode [ 1521.852483][T18609] bridge1: port 1(dummy0) entered disabled state [ 1521.863655][T18609] bridge2: port 1(dummy0) entered blocking state [ 1521.870369][T18609] bridge2: port 1(dummy0) entered disabled state [ 1521.876877][T18609] dummy0: entered allmulticast mode [ 1521.883380][T18609] dummy0: entered promiscuous mode [ 1521.958555][ T5842] usb 4-1: Please update to version 0.2 or newer [ 1521.985190][ T1092] hsr_slave_0: left promiscuous mode [ 1522.024248][ T5842] usb 4-1: atusb_probe: initialization failed, error = -19 [ 1522.073365][ T1092] hsr_slave_1: left promiscuous mode [ 1522.126400][ T5842] usb 4-1: USB disconnect, device number 76 [ 1522.237987][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1522.274798][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1522.353750][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1522.408395][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1522.446707][ T1092] bridge_slave_1: left allmulticast mode [ 1522.481300][ T1092] bridge_slave_1: left promiscuous mode [ 1522.513140][ T1092] bridge0: port 2(bridge_slave_1) entered disabled state [ 1522.626703][ T1092] bridge_slave_0: left allmulticast mode [ 1522.649747][ T1092] bridge_slave_0: left promiscuous mode [ 1522.655756][ T1092] bridge0: port 1(bridge_slave_0) entered disabled state [ 1522.706500][T18562] Bluetooth: hci0: command tx timeout [ 1522.737870][T18621] netlink: 276 bytes leftover after parsing attributes in process `syz.0.4166'. [ 1523.026404][ T1092] veth1_macvtap: left promiscuous mode [ 1523.064826][ T1092] veth0_macvtap: left promiscuous mode [ 1524.604636][ T1092] veth1_vlan: left promiscuous mode [ 1524.634561][ T1092] veth0_vlan: left promiscuous mode [ 1526.704795][ T1092] team0 (unregistering): Port device team_slave_1 removed [ 1527.002098][ T1092] team0 (unregistering): Port device team_slave_0 removed [ 1527.115243][ T1092] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1527.132883][T18646] overlayfs: missing 'lowerdir' [ 1527.328618][ T1092] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1528.613288][ T1092] bond0 (unregistering): Released all slaves [ 1528.924468][T18640] tipc: Enabling of bearer rejected, failed to enable media [ 1530.449171][T18556] chnl_net:caif_netlink_parms(): no params data found [ 1532.618225][ T1092] IPVS: stop unused estimator thread 0... [ 1532.625873][T18556] bridge0: port 1(bridge_slave_0) entered blocking state [ 1532.683205][T18556] bridge0: port 1(bridge_slave_0) entered disabled state [ 1532.739756][T18556] bridge_slave_0: entered allmulticast mode [ 1532.746942][T18556] bridge_slave_0: entered promiscuous mode [ 1533.000859][T18556] bridge0: port 2(bridge_slave_1) entered blocking state [ 1533.039853][T18556] bridge0: port 2(bridge_slave_1) entered disabled state [ 1533.047140][T18556] bridge_slave_1: entered allmulticast mode [ 1533.122144][T18684] overlayfs: missing 'lowerdir' [ 1533.142992][T18556] bridge_slave_1: entered promiscuous mode [ 1533.345541][T18556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1533.424325][T18688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4181'. [ 1533.468434][T18556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1533.542930][T18688] bridge1: port 1(dummy0) entered blocking state [ 1533.549953][T18688] bridge1: port 1(dummy0) entered disabled state [ 1533.556486][T18688] dummy0: entered allmulticast mode [ 1533.562925][T18688] dummy0: entered promiscuous mode [ 1533.734743][T18556] team0: Port device team_slave_0 added [ 1533.781991][T18556] team0: Port device team_slave_1 added [ 1533.946444][T18556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1533.978586][T18556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1534.153614][T18556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1534.239809][T18556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1534.246857][T18556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1534.443493][T18556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1535.998855][T18556] hsr_slave_0: entered promiscuous mode [ 1536.030108][T18556] hsr_slave_1: entered promiscuous mode [ 1536.058073][T18556] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1537.652576][T18556] Cannot create hsr debugfs directory [ 1538.843926][T18556] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1538.918212][T18556] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1539.022554][T18556] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1539.141685][T18556] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1539.362248][T18734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4189'. [ 1539.437334][T18734] dummy0: left allmulticast mode [ 1539.442739][T18734] dummy0: left promiscuous mode [ 1539.448187][T18734] bridge2: port 1(dummy0) entered disabled state [ 1539.480531][T18734] bridge3: port 1(dummy0) entered blocking state [ 1539.487144][T18734] bridge3: port 1(dummy0) entered disabled state [ 1539.493934][T18734] dummy0: entered allmulticast mode [ 1539.500966][T18734] dummy0: entered promiscuous mode [ 1539.706882][T18556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1541.176975][T18556] 8021q: adding VLAN 0 to HW filter on device team0 [ 1541.258179][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1541.265472][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1542.978512][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 1542.985936][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1543.110112][ T5842] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 1543.331873][ T5842] usb 4-1: config 0 has no interfaces? [ 1543.388326][ T5842] usb 4-1: New USB device found, idVendor=04b8, idProduct=02f9, bcdDevice= 0.40 [ 1543.431394][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.483193][ T5842] usb 4-1: Product: syz [ 1543.504563][ T5842] usb 4-1: Manufacturer: syz [ 1543.509265][ T5842] usb 4-1: SerialNumber: syz [ 1543.577691][ T5842] usb 4-1: config 0 descriptor?? [ 1543.825513][T18750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1543.908914][T18750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1543.981715][ T5842] usb 4-1: USB disconnect, device number 77 [ 1544.025814][T18769] overlayfs: missing 'lowerdir' [ 1544.205859][T18556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1545.533130][T18556] veth0_vlan: entered promiscuous mode [ 1545.623493][T18556] veth1_vlan: entered promiscuous mode [ 1545.767972][T18556] veth0_macvtap: entered promiscuous mode [ 1545.838206][T18799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4199'. [ 1545.883175][T18556] veth1_macvtap: entered promiscuous mode [ 1545.915076][T18799] dummy0: left allmulticast mode [ 1545.920428][T18799] dummy0: left promiscuous mode [ 1545.925499][T18799] bridge1: port 1(dummy0) entered disabled state [ 1545.937200][T18799] bridge2: port 1(dummy0) entered blocking state [ 1545.944399][T18799] bridge2: port 1(dummy0) entered disabled state [ 1545.951122][T18799] dummy0: entered allmulticast mode [ 1545.957467][T18799] dummy0: entered promiscuous mode [ 1546.046284][T18556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1546.118900][T18556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.180958][T18556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1546.252995][T18556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.312699][T18556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1546.369739][T18556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.459310][T18556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1546.478295][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.485497][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.857224][T18556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1547.931785][T18556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1547.970278][T18556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1549.528592][T18556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1549.554160][T18556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1549.595216][T18556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1549.675078][T18556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1549.777490][T18556] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1549.823883][T18556] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1549.857290][T18556] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1549.899789][T18556] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1550.360588][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1550.368486][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1550.498687][ T8158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1550.538038][ T8158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1550.729794][ T5842] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1551.083204][T18838] overlayfs: missing 'lowerdir' [ 1551.125881][ T5842] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1551.179776][ T5842] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1551.244030][ T5842] usb 4-1: config 220 has no interface number 2 [ 1551.301219][ T5842] usb 4-1: too many endpoints for config 220 interface 1 altsetting 5: 255, using maximum allowed: 30 [ 1552.536886][ T5842] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1552.652599][ T5842] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1552.686711][ T5842] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1554.213142][ T5842] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1554.342852][ T5842] usb 4-1: string descriptor 0 read error: -71 [ 1554.349262][ T5842] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1554.479661][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.569848][ T5842] usb 4-1: can't set config #220, error -71 [ 1554.640747][ T5842] usb 4-1: USB disconnect, device number 78 [ 1555.851346][T18873] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4217'. [ 1558.084973][T18887] tipc: Enabling of bearer rejected, already enabled [ 1558.389682][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1558.591574][ T8] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1558.600329][ T5842] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1558.628887][ T8] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1558.672898][ T8] usb 5-1: config 220 has no interface number 2 [ 1558.695946][ T8] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1558.749093][ T8] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1558.777468][ T8] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1558.814477][ T8] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1558.834322][ T5842] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1558.861571][ T8] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1558.876455][ T5842] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1558.899981][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.937062][ T8] usb 5-1: Product: syz [ 1558.942448][ T5842] usb 3-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 1558.970289][ T8] usb 5-1: Manufacturer: syz [ 1558.985359][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1559.018755][ T8] usb 5-1: SerialNumber: syz [ 1559.034177][ T5842] usb 3-1: Product: syz [ 1559.038396][ T5842] usb 3-1: Manufacturer: syz [ 1559.095881][ T5842] usb 3-1: SerialNumber: syz [ 1559.130863][ T5842] symbolserial 3-1:1.0: symbol converter detected [ 1559.192510][ T5842] usb 3-1: symbol converter now attached to ttyUSB0 [ 1559.292594][ T8] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 1559.344732][ T8] usb 5-1: No valid video chain found. [ 1559.454709][ T8] usb 5-1: USB disconnect, device number 2 [ 1559.524424][T18900] symbol ttyUSB0: symbol_open - failed resubmitting read urb, error -90 [ 1560.588451][T18917] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1562.041402][ T172] usb 3-1: USB disconnect, device number 85 [ 1562.170926][ T172] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 1562.228336][ T172] symbolserial 3-1:1.0: device disconnected [ 1565.740832][T18942] overlayfs: missing 'lowerdir' [ 1565.774681][T18940] tipc: Enabling of bearer rejected, failed to enable media [ 1565.970609][T18944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1566.019192][T18932] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1566.101420][T18944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1566.850442][ T172] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1567.046378][T18958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1567.087256][ T172] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1567.119371][T18958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1567.143794][ T172] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1567.204571][ T172] usb 4-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 1567.266021][ T172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1567.317818][ T172] opticon 4-1:1.0: opticon converter detected [ 1567.377188][ T172] usb 4-1: opticon converter now attached to ttyUSB0 [ 1567.679751][T18953] opticon ttyUSB0: usb_serial_generic_submit_read_urb - usb_submit_urb failed: -90 [ 1569.753948][T18967] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1570.611342][T13318] usb 4-1: USB disconnect, device number 79 [ 1570.693346][T13318] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 1570.773515][T13318] opticon 4-1:1.0: device disconnected [ 1571.359750][ T172] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1571.396401][T18989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1571.443154][T18989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1571.737113][ T172] usb 3-1: Using ep0 maxpacket: 8 [ 1571.761398][ T172] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1571.789874][ T172] usb 3-1: no configurations [ 1571.795863][ T172] usb 3-1: can't read configurations, error -22 [ 1571.900114][ T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1571.981244][ T172] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1572.122942][ T8] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1572.158427][ T8] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1572.188283][ T172] usb 3-1: Using ep0 maxpacket: 8 [ 1572.222535][ T172] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1572.238498][ T8] usb 5-1: config 220 has no interface number 2 [ 1572.259951][ T172] usb 3-1: no configurations [ 1572.270879][ T8] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1572.296276][ T172] usb 3-1: can't read configurations, error -22 [ 1572.338796][ T172] usb usb3-port1: attempt power cycle [ 1572.355857][ T8] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1572.386029][ T8] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1572.411838][ T8] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1572.437677][ T8] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1572.471543][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.511489][ T8] usb 5-1: Product: syz [ 1572.515743][ T8] usb 5-1: Manufacturer: syz [ 1572.544242][ T8] usb 5-1: SerialNumber: syz [ 1572.789593][ T172] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1572.824631][ T8] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 1572.863281][ T8] usb 5-1: No valid video chain found. [ 1572.887896][ T172] usb 3-1: Using ep0 maxpacket: 8 [ 1572.908187][ T172] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1572.943427][ T172] usb 3-1: no configurations [ 1572.958698][ T8] usb 5-1: USB disconnect, device number 3 [ 1572.978737][ T172] usb 3-1: can't read configurations, error -22 [ 1573.189594][ T172] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1573.241773][ T172] usb 3-1: Using ep0 maxpacket: 8 [ 1573.270907][ T172] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1573.291418][ T172] usb 3-1: no configurations [ 1573.296168][ T172] usb 3-1: can't read configurations, error -22 [ 1573.335854][ T172] usb usb3-port1: unable to enumerate USB device [ 1573.556419][T19012] overlayfs: missing 'lowerdir' [ 1575.482966][T19013] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1576.355265][T19019] gadgetfs: bound to dummy_udc driver [ 1576.671830][ T172] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 1576.711862][ C0] gadgetfs: connected [ 1576.739773][ T172] gadgetfs: disconnected [ 1576.929804][ C0] gadgetfs: connected [ 1576.951499][ T172] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1577.032397][ T172] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1577.131808][ T172] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1577.201452][ C0] gadgetfs: configuration #1 [ 1577.549862][T13318] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1577.749843][ T172] gadgetfs: suspended from state 3 [ 1577.809430][T13318] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1577.827166][ T172] gadgetfs: disconnected [ 1577.879011][T13318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.898432][T18376] usb 2-1: USB disconnect, device number 83 [ 1577.909772][T12192] ================================================================== [ 1577.917898][T12192] BUG: KASAN: slab-use-after-free in __mutex_lock+0xfc/0xc80 [ 1577.925427][T12192] Read of size 8 at addr ffff88805bbe6460 by task syz-executor/12192 [ 1577.933661][T12192] [ 1577.936046][T12192] CPU: 0 PID: 12192 Comm: syz-executor Not tainted syzkaller #0 [ 1577.943696][T12192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1577.953779][T12192] Call Trace: [ 1577.957083][T12192] [ 1577.960171][T12192] dump_stack_lvl+0x18c/0x250 [ 1577.964900][T12192] ? __lock_acquire+0x7d80/0x7d80 [ 1577.969967][T12192] ? show_regs_print_info+0x20/0x20 [ 1577.975209][T12192] ? load_image+0x420/0x420 [ 1577.979806][T12192] ? __virt_addr_valid+0x10c/0x380 [ 1577.984956][T12192] ? __virt_addr_valid+0x10c/0x380 [ 1577.990322][T12192] ? __virt_addr_valid+0x10c/0x380 [ 1577.995465][T12192] print_report+0xa8/0x210 [ 1577.999912][T12192] ? __mutex_lock+0xfc/0xc80 [ 1578.004609][T12192] kasan_report+0x117/0x150 [ 1578.009139][T12192] ? tomoyo_check_open_permission+0x384/0x460 [ 1578.015238][T12192] ? __mutex_lock+0xfc/0xc80 [ 1578.019895][T12192] __mutex_lock+0xfc/0xc80 [ 1578.024369][T12192] ? end_current_label_crit_section+0x170/0x170 [ 1578.030691][T12192] ? ep_open+0x4e/0x270 [ 1578.034962][T12192] ? mutex_lock_nested+0x20/0x20 [ 1578.039938][T12192] ? apparmor_file_open+0x5ab/0x760 [ 1578.045181][T12192] ? apparmor_inode_getattr+0x2c0/0x2c0 [ 1578.050789][T12192] ? errseq_sample+0xe/0x60 [ 1578.055334][T12192] ep_open+0x4e/0x270 [ 1578.059355][T12192] ? do_dentry_open+0x86f/0x14b0 [ 1578.064355][T12192] do_dentry_open+0x880/0x14b0 [ 1578.069203][T12192] ? ep_ioctl+0x1c0/0x1c0 [ 1578.073573][T12192] path_openat+0x284f/0x3270 [ 1578.078216][T12192] ? do_sys_openat2+0xda/0x1d0 [ 1578.083024][T12192] ? __x64_sys_openat+0x139/0x160 [ 1578.088156][T12192] ? verify_lock_unused+0x140/0x140 [ 1578.093397][T12192] ? do_filp_open+0x430/0x430 [ 1578.098241][T12192] do_filp_open+0x1f2/0x430 [ 1578.102800][T12192] ? vfs_tmpfile+0x620/0x620 [ 1578.107431][T12192] ? _raw_spin_unlock+0x28/0x40 [ 1578.112380][T12192] ? alloc_fd+0x590/0x640 [ 1578.116771][T12192] do_sys_openat2+0x134/0x1d0 [ 1578.121498][T12192] ? do_sys_open+0xe0/0xe0 [ 1578.125974][T12192] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1578.132011][T12192] ? fsnotify_link_count+0xf0/0xf0 [ 1578.137168][T12192] ? lock_chain_count+0x20/0x20 [ 1578.142072][T12192] __x64_sys_openat+0x139/0x160 [ 1578.146984][T12192] do_syscall_64+0x55/0xb0 [ 1578.151555][T12192] ? clear_bhb_loop+0x40/0x90 [ 1578.156276][T12192] ? clear_bhb_loop+0x40/0x90 [ 1578.161120][T12192] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1578.167142][T12192] RIP: 0033:0x7efd1c95e84e [ 1578.171585][T12192] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1578.191258][T12192] RSP: 002b:00007ffe18bf0098 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1578.199747][T12192] RAX: ffffffffffffffda RBX: 000055556b058500 RCX: 00007efd1c95e84e [ 1578.207842][T12192] RDX: 0000000000000000 RSI: 00007ffe18bf0200 RDI: ffffffffffffff9c [ 1578.216078][T12192] RBP: 00007ffe18bf0200 R08: 0000000000000000 R09: 0000000000000000 [ 1578.224158][T12192] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe18bf12f0 [ 1578.232164][T12192] R13: 00007efd1ca3445c R14: 000055556b0584e8 R15: 0000000000000006 [ 1578.240165][T12192] [ 1578.243221][T12192] [ 1578.245578][T12192] Allocated by task 19019: [ 1578.250035][T12192] kasan_set_track+0x4e/0x70 [ 1578.254742][T12192] __kasan_kmalloc+0x8f/0xa0 [ 1578.259500][T12192] gadgetfs_bind+0x25f/0x830 [ 1578.264374][T12192] gadget_bind_driver+0x2b3/0x770 [ 1578.269462][T12192] really_probe+0x247/0xae0 [ 1578.274028][T12192] __driver_probe_device+0x1f5/0x390 [ 1578.279541][T12192] driver_probe_device+0x4f/0x420 [ 1578.284600][T12192] __driver_attach+0x444/0x6d0 [ 1578.289390][T12192] bus_for_each_dev+0x235/0x2b0 [ 1578.294280][T12192] bus_add_driver+0x340/0x630 [ 1578.298993][T12192] driver_register+0x23a/0x310 [ 1578.303883][T12192] usb_gadget_register_driver_owner+0xf9/0x270 [ 1578.310174][T12192] dev_config+0xe49/0x1260 [ 1578.314635][T12192] vfs_write+0x299/0x9a0 [ 1578.318963][T12192] ksys_write+0x151/0x260 [ 1578.323341][T12192] do_syscall_64+0x55/0xb0 [ 1578.327787][T12192] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1578.333898][T12192] [ 1578.336233][T12192] Freed by task 172: [ 1578.340157][T12192] kasan_set_track+0x4e/0x70 [ 1578.344766][T12192] kasan_save_free_info+0x28/0x40 [ 1578.350069][T12192] ____kasan_slab_free+0x126/0x1f0 [ 1578.355522][T12192] slab_free_freelist_hook+0x130/0x1a0 [ 1578.361023][T12192] __kmem_cache_free+0xba/0x1f0 [ 1578.365918][T12192] destroy_ep_files+0x280/0x340 [ 1578.370817][T12192] gadgetfs_unbind+0x109/0x2b0 [ 1578.375603][T12192] gadget_unbind_driver+0x1bf/0x3e0 [ 1578.380935][T12192] device_release_driver_internal+0x408/0x6f0 [ 1578.387030][T12192] driver_detach+0x1f3/0x2d0 [ 1578.391643][T12192] bus_remove_driver+0x221/0x2f0 [ 1578.396599][T12192] usb_gadget_unregister_driver+0x4e/0x70 [ 1578.402354][T12192] dev_release+0x86/0x200 [ 1578.406728][T12192] __fput+0x221/0x940 [ 1578.410738][T12192] delayed_fput+0x58/0x80 [ 1578.415088][T12192] process_scheduled_works+0xa60/0x1600 [ 1578.420672][T12192] worker_thread+0xa5e/0xfe0 [ 1578.425298][T12192] kthread+0x2fa/0x390 [ 1578.429405][T12192] ret_from_fork+0x48/0x80 [ 1578.434013][T12192] ret_from_fork_asm+0x11/0x20 [ 1578.438850][T12192] [ 1578.441305][T12192] Last potentially related work creation: [ 1578.447069][T12192] kasan_save_stack+0x3e/0x60 [ 1578.451772][T12192] __kasan_record_aux_stack+0xaf/0xc0 [ 1578.457225][T12192] call_rcu+0x153/0x900 [ 1578.461532][T12192] __ip6_del_rt+0x111/0x170 [ 1578.466150][T12192] ip6_del_rt+0xc2/0x110 [ 1578.470506][T12192] __ipv6_ifa_notify+0x5ed/0xb40 [ 1578.475463][T12192] addrconf_ifdown+0xe5d/0x18a0 [ 1578.480339][T12192] addrconf_notify+0x6c6/0x1010 [ 1578.485400][T12192] notifier_call_chain+0x18f/0x380 [ 1578.490556][T12192] dev_close_many+0x2a6/0x410 [ 1578.495352][T12192] unregister_netdevice_many_notify+0x4bf/0x1910 [ 1578.501752][T12192] vti6_exit_batch_net+0x3d6/0x420 [ 1578.507005][T12192] cleanup_net+0x792/0xbb0 [ 1578.511468][T12192] process_scheduled_works+0xa60/0x1600 [ 1578.517177][T12192] worker_thread+0xa5e/0xfe0 [ 1578.521790][T12192] kthread+0x2fa/0x390 [ 1578.525888][T12192] ret_from_fork+0x48/0x80 [ 1578.530340][T12192] ret_from_fork_asm+0x11/0x20 [ 1578.535164][T12192] [ 1578.537532][T12192] Second to last potentially related work creation: [ 1578.544229][T12192] kasan_save_stack+0x3e/0x60 [ 1578.548941][T12192] __kasan_record_aux_stack+0xaf/0xc0 [ 1578.554368][T12192] insert_work+0x3d/0x310 [ 1578.558880][T12192] __queue_work+0xcf4/0xfd0 [ 1578.563445][T12192] call_timer_fn+0x189/0x540 [ 1578.568070][T12192] __run_timers+0x59c/0x810 [ 1578.572614][T12192] run_timer_softirq+0x67/0xf0 [ 1578.577588][T12192] handle_softirqs+0x27d/0x820 [ 1578.582400][T12192] __irq_exit_rcu+0xd3/0x190 [ 1578.587168][T12192] irq_exit_rcu+0x9/0x20 [ 1578.591438][T12192] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1578.597543][T12192] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1578.603638][T12192] [ 1578.606077][T12192] The buggy address belongs to the object at ffff88805bbe6400 [ 1578.606077][T12192] which belongs to the cache kmalloc-512 of size 512 [ 1578.620854][T12192] The buggy address is located 96 bytes inside of [ 1578.620854][T12192] freed 512-byte region [ffff88805bbe6400, ffff88805bbe6600) [ 1578.634600][T12192] [ 1578.636996][T12192] The buggy address belongs to the physical page: [ 1578.643557][T12192] page:ffffea00016ef900 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5bbe4 [ 1578.653834][T12192] head:ffffea00016ef900 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1578.662996][T12192] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1578.671460][T12192] page_type: 0xffffffff() [ 1578.675804][T12192] raw: 00fff00000000840 ffff888017c41c80 0000000000000000 dead000000000001 [ 1578.684537][T12192] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 1578.693143][T12192] page dumped because: kasan: bad access detected [ 1578.699598][T12192] page_owner tracks the page as allocated [ 1578.705452][T12192] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5782, tgid 5782 (syz-executor), ts 98823623927, free_ts 98819373503 [ 1578.724779][T12192] post_alloc_hook+0x1c1/0x200 [ 1578.729589][T12192] get_page_from_freelist+0x2181/0x22a0 [ 1578.735170][T12192] __alloc_pages+0x1f0/0x460 [ 1578.739805][T12192] alloc_slab_page+0x5d/0x180 [ 1578.744528][T12192] new_slab+0x87/0x2d0 [ 1578.748619][T12192] ___slab_alloc+0xc5c/0x12f0 [ 1578.753313][T12192] __kmem_cache_alloc_node+0x11f/0x250 [ 1578.758939][T12192] __kmalloc+0xa7/0x240 [ 1578.763161][T12192] fib6_info_alloc+0x30/0xf0 [ 1578.767934][T12192] ip6_route_info_create+0x455/0x1260 [ 1578.773345][T12192] addrconf_f6i_alloc+0x1fa/0x440 [ 1578.778481][T12192] addrconf_permanent_addr+0x294/0xa50 [ 1578.784065][T12192] addrconf_notify+0x996/0x1010 [ 1578.789124][T12192] notifier_call_chain+0x18f/0x380 [ 1578.794344][T12192] __dev_notify_flags+0x1ab/0x310 [ 1578.799403][T12192] dev_change_flags+0xde/0x1a0 [ 1578.804306][T12192] page last free stack trace: [ 1578.809090][T12192] free_unref_page_prepare+0x7d7/0x8f0 [ 1578.814855][T12192] free_unref_page+0x32/0x2e0 [ 1578.820019][T12192] __stack_depot_save+0x587/0x660 [ 1578.825101][T12192] kasan_set_track+0x5f/0x70 [ 1578.829830][T12192] __kasan_slab_alloc+0x6c/0x80 [ 1578.834712][T12192] slab_post_alloc_hook+0x6a/0x4d0 [ 1578.839881][T12192] kmem_cache_alloc_lru+0x175/0x2b0 [ 1578.845236][T12192] new_inode_pseudo+0x82/0x1d0 [ 1578.850143][T12192] new_inode+0x22/0x1d0 [ 1578.854343][T12192] __debugfs_create_file+0x147/0x500 [ 1578.859671][T12192] cfg80211_debugfs_rdev_add+0xb7/0xe0 [ 1578.865283][T12192] wiphy_register+0x1efe/0x2ac0 [ 1578.870190][T12192] ieee80211_register_hw+0x2dd8/0x3b30 [ 1578.875696][T12192] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 1578.881461][T12192] hwsim_new_radio_nl+0xdad/0x1a70 [ 1578.886611][T12192] genl_family_rcv_msg_doit+0x21a/0x310 [ 1578.892276][T12192] [ 1578.894609][T12192] Memory state around the buggy address: [ 1578.900365][T12192] ffff88805bbe6300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1578.908457][T12192] ffff88805bbe6380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1578.916758][T12192] >ffff88805bbe6400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1578.924844][T12192] ^ [ 1578.932067][T12192] ffff88805bbe6480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1578.940162][T12192] ffff88805bbe6500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1578.948251][T12192] ================================================================== [ 1579.010995][T13318] usb 4-1: Product: syz [ 1579.015235][T13318] usb 4-1: Manufacturer: syz [ 1579.040717][T19041] 9pnet_fd: Insufficient options for proto=fd [ 1579.047055][T13318] usb 4-1: SerialNumber: syz SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1579.291478][T13318] usb 4-1: config 0 descriptor?? [ 1580.366259][T15677] syz_tun (unregistering): left allmulticast mode [ 1580.596528][T19033] syz_tun (unregistering): left allmulticast mode [ 1580.615014][T12192] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1580.622619][T12192] CPU: 0 PID: 12192 Comm: syz-executor Not tainted syzkaller #0 [ 1580.630457][T12192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1580.640626][T12192] Call Trace: [ 1580.643939][T12192] [ 1580.646894][T12192] dump_stack_lvl+0x18c/0x250 [ 1580.651702][T12192] ? show_regs_print_info+0x20/0x20 [ 1580.656945][T12192] ? load_image+0x420/0x420 [ 1580.661505][T12192] panic+0x2ca/0x720 [ 1580.665436][T12192] ? bpf_jit_dump+0xd0/0xd0 [ 1580.669973][T12192] ? __mutex_lock+0xfc/0xc80 [ 1580.674605][T12192] ? check_panic_on_warn+0x70/0xa0 [ 1580.679743][T12192] ? __mutex_lock+0xfc/0xc80 [ 1580.684351][T12192] check_panic_on_warn+0x84/0xa0 [ 1580.689329][T12192] ? __mutex_lock+0xfc/0xc80 [ 1580.694055][T12192] end_report+0x6f/0x130 [ 1580.698338][T12192] kasan_report+0x128/0x150 [ 1580.702861][T12192] ? tomoyo_check_open_permission+0x384/0x460 [ 1580.708947][T12192] ? __mutex_lock+0xfc/0xc80 [ 1580.713564][T12192] __mutex_lock+0xfc/0xc80 [ 1580.718004][T12192] ? end_current_label_crit_section+0x170/0x170 [ 1580.724266][T12192] ? ep_open+0x4e/0x270 [ 1580.728434][T12192] ? mutex_lock_nested+0x20/0x20 [ 1580.733585][T12192] ? apparmor_file_open+0x5ab/0x760 [ 1580.738807][T12192] ? apparmor_inode_getattr+0x2c0/0x2c0 [ 1580.744372][T12192] ? errseq_sample+0xe/0x60 [ 1580.748985][T12192] ep_open+0x4e/0x270 [ 1580.752980][T12192] ? do_dentry_open+0x86f/0x14b0 [ 1580.757990][T12192] do_dentry_open+0x880/0x14b0 [ 1580.762831][T12192] ? ep_ioctl+0x1c0/0x1c0 [ 1580.767268][T12192] path_openat+0x284f/0x3270 [ 1580.771882][T12192] ? do_sys_openat2+0xda/0x1d0 [ 1580.776659][T12192] ? __x64_sys_openat+0x139/0x160 [ 1580.781772][T12192] ? verify_lock_unused+0x140/0x140 [ 1580.786998][T12192] ? do_filp_open+0x430/0x430 [ 1580.791793][T12192] do_filp_open+0x1f2/0x430 [ 1580.796410][T12192] ? vfs_tmpfile+0x620/0x620 [ 1580.801028][T12192] ? _raw_spin_unlock+0x28/0x40 [ 1580.805938][T12192] ? alloc_fd+0x590/0x640 [ 1580.810324][T12192] do_sys_openat2+0x134/0x1d0 [ 1580.815408][T12192] ? do_sys_open+0xe0/0xe0 [ 1580.820056][T12192] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1580.826080][T12192] ? fsnotify_link_count+0xf0/0xf0 [ 1580.831232][T12192] ? lock_chain_count+0x20/0x20 [ 1580.836204][T12192] __x64_sys_openat+0x139/0x160 [ 1580.841260][T12192] do_syscall_64+0x55/0xb0 [ 1580.845701][T12192] ? clear_bhb_loop+0x40/0x90 [ 1580.850388][T12192] ? clear_bhb_loop+0x40/0x90 [ 1580.855116][T12192] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1580.861032][T12192] RIP: 0033:0x7efd1c95e84e [ 1580.865462][T12192] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1580.885102][T12192] RSP: 002b:00007ffe18bf0098 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1580.893698][T12192] RAX: ffffffffffffffda RBX: 000055556b058500 RCX: 00007efd1c95e84e [ 1580.901948][T12192] RDX: 0000000000000000 RSI: 00007ffe18bf0200 RDI: ffffffffffffff9c [ 1580.909956][T12192] RBP: 00007ffe18bf0200 R08: 0000000000000000 R09: 0000000000000000 [ 1580.917961][T12192] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe18bf12f0 [ 1580.925972][T12192] R13: 00007efd1ca3445c R14: 000055556b0584e8 R15: 0000000000000006 [ 1580.933999][T12192] [ 1580.937103][T12192] Kernel Offset: disabled [ 1580.941441][T12192] Rebooting in 86400 seconds..