last executing test programs: 17.351378615s ago: executing program 2 (id=1039): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x28801, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x27) add_key(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) openat$sndseq(0xffffffffffffff9c, 0x0, 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800000018000100", @ANYBLOB, @ANYRES64=r4], 0x38}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYRES64=r1], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_usb_control_io$hid(r6, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0}, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r7, 0x4b4c, &(0x7f0000000080)) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) sendto$packet(r9, &(0x7f00000002c0)="48357e0287af48ffa745b497a54e0eec1bf2c69011f35b48339d15afaef1bd7efe075ff441b16e244b8b05fe09e29583ad142567826dfa5cbc6f979b050015bde8c4441cd0fa6be03213181bfe84743015ec12ced8b1aa8f44e5c30afac6f9fd2ab1303be0d1b2c02533bcc97cce7da9b507b053b11821323590d379e9e350a3291fbedb6382de878b7a56e4e38c7f746d04", 0x92, 0x0, 0x0, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) 13.796646052s ago: executing program 3 (id=1045): syz_usb_connect(0x2, 0x56, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC], 0x0) 13.396187442s ago: executing program 2 (id=1047): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000180), &(0x7f0000000200)=0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$unix(0x1, 0x2, 0x0) preadv(r5, 0x0, 0x2b, 0x72, 0x0) r6 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r6, &(0x7f0000000600)={&(0x7f0000000140)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c00"/43], 0x40}, 0x4000000) r7 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, 0x0, 0x0) write(r7, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) pipe2$watch_queue(0x0, 0x80) syz_open_dev$sg(0x0, 0x2000000000000000, 0x40) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$RTC_AIE_ON(r8, 0x7001) socket$netlink(0x10, 0x3, 0x9) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_int(r9, 0x29, 0x50, 0x0, &(0x7f0000000240)=0x1c) sched_setscheduler(0x0, 0x2, 0x0) socket$kcm(0x2, 0xa, 0x2) 11.888110435s ago: executing program 0 (id=1051): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {}, 0x25, [0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe186, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2004, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0xffff, 0x8000000, 0x1, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7fe, 0x8, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffff, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x3b6, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], [0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf5, 0xffffffff, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x1e9, 0x0, 0x0, 0x0, 0x7, 0x54, 0x1, 0x0, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xba1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x2]}, 0x45c) (async) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {}, 0x25, [0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe186, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2004, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0xffff, 0x8000000, 0x1, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7fe, 0x8, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffff, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x3b6, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], [0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf5, 0xffffffff, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x1e9, 0x0, 0x0, 0x0, 0x7, 0x54, 0x1, 0x0, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xba1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000300)={0x4, 0x4, 0x2}) (async) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000300)={0x4, 0x4, 0x2}) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = io_uring_setup(0x157e, &(0x7f0000000380)={0x0, 0x9566, 0x400, 0x0, 0x3bd, 0x0, r2}) close_range(r3, 0xffffffffffffffff, 0x0) listen(r2, 0x0) accept$unix(r2, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x7, 0x2040) (async) syz_open_dev$sg(&(0x7f0000000080), 0x7, 0x2040) socket$inet6(0xa, 0x2, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB="67e9ff0000000000"], 0x8) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB="67e9ff0000000000"], 0x8) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x4) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r5 = syz_open_dev$loop(&(0x7f0000000100), 0xdf6, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) io_submit(0x0, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r5, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x2}]) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r7, 0x0, 0xfffffffffffffffb}, 0x18) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) (async) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 11.497733364s ago: executing program 0 (id=1052): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x10, r0, &(0x7f0000000280)="3503f769aa739202a0437d3a8d3f6189612582a8c3eb0ae2fabf526903cd1fa3c9", 0x21, 0xfffffffffffeffff, 0x0, 0x2}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) r3 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) write$char_usb(r3, &(0x7f0000000340)="93743c63e02bf2bbdd02dc4939bee426d94993bd91f49a42636efb85d6c857426e244ad2fae2b7825b49e7eb", 0x2c) 11.307361096s ago: executing program 0 (id=1053): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x1, r2}) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4c, &(0x7f0000000000)=0xfffffffe, 0x4) ioctl(r4, 0x8916, &(0x7f0000000000)) ioctl(r4, 0x8936, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x3c, 0x107, 0x0, 0x25dfdbff, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}, @typed={0x8, 0x5, 0x0, 0x0, @u32=0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f0000000000)) read$dsp(r8, &(0x7f0000000300)=""/79, 0x4f) 10.649912662s ago: executing program 3 (id=1055): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r2}) 10.475680754s ago: executing program 4 (id=1056): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x30bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x10043}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c855}, 0x20000084) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x30bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x10043}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c855}, 0x20000084) (async) 10.364363707s ago: executing program 4 (id=1057): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x28801, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x27) add_key(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) openat$sndseq(0xffffffffffffff9c, 0x0, 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800000018000100", @ANYBLOB, @ANYRES64=r4], 0x38}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYRES64=r1], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_usb_control_io$hid(r6, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0}, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r7, 0x4b4c, &(0x7f0000000080)) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) sendto$packet(r9, &(0x7f00000002c0)="48357e0287af48ffa745b497a54e0eec1bf2c69011f35b48339d15afaef1bd7efe075ff441b16e244b8b05fe09e29583ad142567826dfa5cbc6f979b050015bde8c4441cd0fa6be03213181bfe84743015ec12ced8b1aa8f44e5c30afac6f9fd2ab1303be0d1b2c02533bcc97cce7da9b507b053b11821323590d379e9e350a3291fbedb6382de878b7a56e4e38c7f746d04", 0x92, 0x0, 0x0, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) 10.058723418s ago: executing program 1 (id=1059): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x200, r0, 0xc1a, 0x70bd2d, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x43}}]}, 0x200}, 0x1, 0x0, 0x0, 0x20000085}, 0x4040004) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x3, &(0x7f0000000300)=[{0x10, 0x1, 0x3, 0xbb}, {0x9, 0x40, 0x7, 0x5}, {0xb74, 0x5, 0x81, 0x2bb6}]}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x11, r1, 0xe2147000) r2 = fcntl$getown(r1, 0x9) ptrace(0x11, r2) (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000380)={0x80000000}) (async) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x1000009, 0x10010, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x118, &(0x7f00000003c0)=0x3, 0x0, 0x4) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$6lowpan_enable(r5, &(0x7f0000000440)='1', 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r7, 0x200, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r6) (async) ioctl$USBDEVFS_RESETEP(r6, 0x80045503, &(0x7f0000000600)={0x4, 0x1}) (async) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r8, 0x43403d05, &(0x7f0000000680)={0x16}) sendmsg$SEG6_CMD_GET_TUNSRC(r6, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x68, r7, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x57}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r6, &(0x7f0000000dc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000b40)={0x230, r0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xd939}, {0x6, 0x11, 0xc}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x7ff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xfffb}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x10001}, {0x6, 0x11, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8001}, {0x6, 0x11, 0xfff7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xfff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x10}}]}, 0x230}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sched_setscheduler(r2, 0x2, &(0x7f0000000e00)=0x1) (async) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000e80), r1) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x28, r9, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r1, 0x360d4000) (async) sendmsg$DEVLINK_CMD_PORT_SET(r6, &(0x7f0000001100)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000fc0)={0xcc, r0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000800}, 0x40010) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000001140), 0x600600, 0x0) ioctl$FS_IOC_FIEMAP(r10, 0xc020660b, &(0x7f0000001180)={0x2, 0x3, 0x3, 0xfffffffa, 0x4, 0x0, [{0x10100000, 0x9, 0x7, '\x00', 0x500}, {0x2, 0x7, 0x0, '\x00', 0x110a}, {0xc000000000000000, 0x5, 0x40, '\x00', 0x1000}, {0x7, 0x5, 0x2, '\x00', 0xd00}]}) (async) r11 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280), 0x220400, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r11, 0x4004510d, &(0x7f00000012c0)=0xbb0e) 9.800555872s ago: executing program 1 (id=1060): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = socket(0x1e, 0x2, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = openat$dsp(0xffffffffffffff9c, 0x0, 0x8800, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r5, 0x80045017, &(0x7f00000005c0)) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000600), 0x0, 0x0) ioctl$CEC_TRANSMIT(r6, 0xc0386105, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000080)={{}, "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"}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) r7 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r7, 0x80045530, &(0x7f00000000c0)=""/111) r8 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r1, 0x0, 0x4001) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_SIZE={0x8}]}]}, 0x5c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}}, 0x0) syz_usb_connect(0x2, 0x3f, &(0x7f0000000880)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ffffff00000009050f47"], 0x0) 9.320510794s ago: executing program 2 (id=1061): r0 = fsopen(&(0x7f0000000000)='jfs\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000240)='resize', 0x0, r0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000dd0800010073797a300000000008000240000000032c0000fcffffff030100e6ff0000000002000000090001"], 0x7c}}, 0x40010) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a00000ce022b42b636623a2813f1a60010003b0e2a0400eb2636037f00000000", @ANYRES32=r4, @ANYRES64=r2], 0xa0}}, 0x80c0) ioctl$EVIOCRMFF(r1, 0x40085507, &(0x7f0000000080)=0x80001) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x204402, 0x0) readlinkat(r5, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=""/134, 0x86) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r5, 0x9a974000) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r6, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r8, r9, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000010700c03f000000000000109022400010000000039deac71010300020009210000000122050009058103ff03000003"], 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, &(0x7f0000000300)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r11, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r12, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r11, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r13, r12, 0x0, 0x0, 0x0, 0x0, 0x0}) memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06\xfd\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee]\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLY\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="8a657720647a2032303030343000"/27], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$IOMMU_IOAS_MAP$PAGES(r11, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r12, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8}) 9.107581004s ago: executing program 0 (id=1062): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = dup(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780d206050086dd6018232500182c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa620202"], 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6}) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r6, &(0x7f0000000780)=ANY=[@ANYBLOB="c20200007d00000005fa0000006a0000004000000000000000000000000000000010000000020000000000000000000000001f00046e6f6465767b6376666f7825ffffff8102000000000000000000000000003800704a86cec602007dfa673effeb09b5351f5bde054000000000187b8200b500003b595fcb14034354b9fd9ef196a51cd5157adc8106b494e11200fbe161e900000000000000000000f313f6005e00f8f67efb716dcf315ecaf385409ac65b9408679d2c3b9e1d52c3d6da9bf1995688dace6cde7ba4a400b4b0b4dbe64f64b1d63f26796dcbec498623d6a838c69a69dfce9cdd5906f174a666a8529a45773407dbdab2885baf050000000000b3016f6465762d6eb17b2300f9daa1ee23266ecf85fea65eb2d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9a74f51685f506ae89480687bd7f3d7f298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d7238501000000aed3b42ee7cac07de09d1d68a60333a882467d2b31aacdf9cf3ee3884002a91c54528b807a89ca184d16645f06188549b1125d6c4c9b18c2fb56c57d7dc626e4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664df244e4c90570a70049f299f061f75b7797ce1e411ea918ebd888c1e156b8456931d2ea726ba9609d51a41dd3de304bd7c7ed0a456f0ae12516105c9478f7ded2dc47ec13c0f6af88ba6e5c6397c7d5021d7989528fd1739e1c2d87fff000000000000007461b0ccaaa1933a0e8a826b14d4fcb2989ffaaa1acffa8054e9559dfae4697aa00b03b3d80e5524f8495fee7e8d88cb5a040302acb0d1260f2584db48e8d9064e8ce178ce396e85b97e4886444049810f25f1ceca975deb491a125bf0d72f87cc10b0154e08936daadd8b1e9798d4ec856993d53b9038ab44fdb0223d5a11c9", @ANYRES32=0x0, @ANYRES64=r5, @ANYRES32=0x0], 0x2c2) write$UHID_INPUT(r2, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) r7 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000100)=@unlock_all, 0xb) sendmsg$can_bcm(r7, &(0x7f00000000c0)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8, 0x0, 0x0, 0x44080}, 0x20044084) write$P9_RXATTRCREATE(r2, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x2c, 0x3e, 0x107, 0x0, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x18, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x2c}}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='statm\x00') readahead(r9, 0x8, 0x9) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x36}, './file0\x00'}) 9.00817729s ago: executing program 3 (id=1063): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000e39000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x100) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2d67865d75705f61643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x403, {0x1, 0x5, 0x0, '\x00', {0x1, 0xad4, 0x8, 0x8, r5, r6, 0xc000, '\x00', 0x5, 0x8, 0x100000000, 0x6, {0x6, 0x6}, {0x20000000000004}, {0x100000000, 0x2}, {0x8, 0xa04}, 0x4, 0x80000b, 0x5, 0x3}}}}) write$FUSE_INIT(r2, &(0x7f0000001200)={0x50, 0x0, r4}, 0x50) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000040), 0x208e24b) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x0) 7.040470351s ago: executing program 3 (id=1064): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x800) bind$alg(r1, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000900)=""/257, 0x101}, {&(0x7f0000001d80)=""/164, 0xa4}, {&(0x7f00000002c0)=""/243, 0xfffffe24}], 0x3, 0x0, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x2, &(0x7f0000fff000/0x1000)=nil) 6.453710276s ago: executing program 0 (id=1065): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) r2 = syz_io_uring_setup(0x4172, &(0x7f00000002c0)={0x0, 0x2, 0x10100, 0x0, 0x4}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r1, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/19, 0x13}], 0x1, 0x0, 0x1}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) r7 = syz_io_uring_setup(0x2, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0x0, 0x304}, &(0x7f0000000240), &(0x7f0000001880)) r8 = openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000000008d82, 0x0) r9 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r8, 0x1, &(0x7f0000000140)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r9, 0x847ba, 0x0, 0xe, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x21, &(0x7f0000000440)=r6, 0x1) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r6, 0x5386, &(0x7f0000000080)) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000006c0)="f3440fc7b729000000f20f5f0d00000080460f5ba4b07a000000470f38c9403736460fc7b10f240000660f3881078fa9189021da820001c0fef3440f0966b881000f00d8", 0x44}], 0x1, 0x51, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) r13 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r13, 0x0, 0x0) syz_usb_control_io$hid(r13, 0x0, 0x0) syz_usb_control_io(r13, 0x0, 0x0) syz_usb_control_io$lan78xx(r13, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000380)={0x40, 0x10, 0x2, "9775"}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r12, 0xae80, 0x0) 6.356656203s ago: executing program 4 (id=1066): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x5, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x1, 0x1}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @vbi={0x0, 0xfffffffe, 0x0, 0x36314d59}}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "25ace3f62b00ee00", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3ffd9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ac", 0x1}], 0x1) shutdown(r0, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write(r4, &(0x7f0000000040)="cb", 0xfffffdef) bind$alg(r2, &(0x7f0000000d00)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512\x00'}, 0x58) r5 = syz_open_dev$vcsa(&(0x7f0000000200), 0x100000001, 0x222841) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000000400)={0x7, 0x10, '\x00', 0x1, &(0x7f0000000280)=[0x0, 0x0]}) io_uring_register$IORING_UNREGISTER_RING_FDS(r5, 0x15, &(0x7f0000000240)=[{0x1, 0x1, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/184, 0xb8}], &(0x7f0000000180)=[0x7f, 0x4, 0x10001, 0x0]}], 0x1) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)=',', 0x1) r6 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$unix(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000680)='`', 0x1}], 0x1, 0x0, 0x0, 0x4000}, 0x1) 6.024443899s ago: executing program 3 (id=1067): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x2) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000740), 0x2, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') ppoll(&(0x7f0000000040)=[{r4, 0x830}], 0x1, 0x0, 0x0, 0x0) userfaultfd(0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, 0x0, 0x0) connect$unix(r6, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000040)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) 5.95577403s ago: executing program 4 (id=1068): syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x20080) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000000)={0x5, {{0x2, 0x4e24, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000001140)=ANY=[@ANYBLOB="030000000000000002004e23e0"], 0x90) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000002c0)=[{0x4, 0x80, 0x9c, 0x6, @time={0x38, 0x7}, {0xe, 0xe}, {0x2, 0x9}, @connect={{0x6, 0x2}, {0x9, 0x9}}}, {0x0, 0x7, 0x7, 0x8, @time={0x85, 0x2}, {0x1, 0x4}, {0x6, 0xe}, @connect={{0x1, 0x4}, {0xe, 0x8}}}, {0xa, 0xb, 0x7, 0x7c, @time={0x5, 0x6}, {0x6, 0x9b}, {0x4, 0xe9}, @addr={0xfa, 0x7f}}, {0xb, 0x7, 0x9, 0x7, @time={0x81, 0x5}, {0xb, 0x10}, {0x0, 0xc}, @ext={0x0, 0x0}}, {0x9, 0x84, 0x2, 0x3, @time={0x5, 0x3ff}, {0x60, 0x1}, {0x9, 0x1}, @queue={0x1, {0x6, 0x1}}}], 0x8c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r4, 0x5761, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}]}]}, 0x74}}, 0x0) dup(r2) r6 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, 0x0, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) socket$nl_route(0x10, 0x3, 0x0) 5.402682625s ago: executing program 1 (id=1069): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setlease(r2, 0x400, 0x1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bic', 0x3) sendmmsg$inet(r3, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc7901f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb600"/135, 0x87}, {&(0x7f0000000780)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e430bcb03", 0x3e}], 0x2}}], 0x1, 0xc0) sendto$inet(r3, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)=0x10000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x25dfdbfe, {0x7a, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_TOS={0x5, 0x9, 0x40}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x44}}, 0x0) semget$private(0x0, 0x1, 0x5db) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x54, r6, 0x1, 0x70bd2d, 0xfffffffc, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) 4.276510353s ago: executing program 2 (id=1070): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) socket$nl_netfilter(0x10, 0x3, 0xc) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffd) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) flistxattr(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x5520, 0x1, 0x3}, 0x18, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x100000, 0x0, 0x0, 0x83}, &(0x7f0000000300)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x20040000}) io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5402"], 0x69) r7 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r7, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0xbc}}, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0xa0000) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000010, r0, 0x0) 3.61072322s ago: executing program 4 (id=1071): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) semget$private(0x0, 0x5, 0x1a4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) r3 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x119200, 0x0) sendmsg$unix(r1, &(0x7f0000000780)={&(0x7f0000000a00)=@abs={0xdc5d84db4e0d8ff2, 0x0, 0x4e21}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000200)="b6dfbabef5c6236520e67a7599a821ebbae8a3c3cc256499", 0x18}, {&(0x7f0000000380)="d72936bfdd3c2b964fc4e7d631da86b2f70a29acf2223ab4ba32f96511adbc5f7ca847be135b8261dae90dccfbfa9b3fa7671fe2db2e7f54e65d70f93ca64df9977123d66ac25b33f05e85ad33f9c43183fc908251a591ed4b00"/104, 0x68}, {&(0x7f0000000340)="d45f98474e05618400abc4b5", 0xc}, {0x0}, {&(0x7f00000004c0)="0a1f6058f2940e57bf7d17373739558a984daa8b3fa06dcc42caf7693577dc5312ace9369989c3373f4c22b29d72e348841083ca9377fbc80cb3fc0b551fbc55f42abb5375fdc6157609289356f03129fb959dcc29ed980e5579083d31ab4f466576b2fd92949db9faaa5097c13001630c027c2a8fbc95a0867a7f1495089b13448649203f090c73be68e733f313dcc9d3e9c84a3da8d50a7f56c399a6315b0f52908d1ace5d6d97b0d284bf933fba07b5ab41adb420625cedf190238937", 0xbe}, {&(0x7f0000000580)}, {&(0x7f0000000640)="84b69967ec6906b97ea51b7210ea1c96d6a8ee3883ede75d7bc6494c520c042b650674606426de486e6ba909678213ef79e2bb7a04604babd6b262025ec316940f8d38a999e39d0a0b6feb78ece3ee328233efebe358401f095b0bb94fcb78cb9f175c99f0a2613c4b6980cb32b8689449b581f0a578b44ccb9712f37d466260e8b5b4537cc173ed42aa413a2c8d94d306c21e6b4ef0c4b1e67ebc5bc36529652b9a01752352b0cefd974455", 0xac}], 0x7, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r3, @ANYRES16=r0, @ANYRESDEC=r3, @ANYRESHEX=r4], 0x30}, 0x1) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0x2b, 0xebec93e830fd2194}) io_uring_enter(r3, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="44010000100001000000000800000000fc0100000000000000000000000000000a0101000000000000000000000000000000000020000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000100000000000000000000000000000000004000000000000000d000000000000000a0000000000000000000000000000000000000000000000000000000a0001070000000000000000480003006465666c61746500000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000b000000000000000000000000000c001c"], 0x144}}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f", 0x7, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r7, r6}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x18) r10 = dup(r9) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 3.410539565s ago: executing program 1 (id=1072): pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x3}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r5}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000380)=[r5], &(0x7f00000003c0)=[0x7], &(0x7f0000000300)=[r6], &(0x7f0000000180)=[0x31], 0x0, 0xff}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f0000000080)={@hyper}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000440)={0x73622a85, 0xf, 0x2000000000}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r9 = dup3(r8, r7, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x100}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000004a40)={0x8, 0x0, &(0x7f00000002c0)=[@increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r11 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r11, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r11, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.152438371s ago: executing program 3 (id=1073): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x600, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xd) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000000c0)={0x5, 0x8001, 0xd8, 0x1ea, 0xd, "b2496c840d1406b48f0b150b19bb0792137fc7"}) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f00000000c0)={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f00000000c0)={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000400)={0x40, 0x13, 0x3, "6d955e"}, 0x0, 0x0}) 3.076428764s ago: executing program 1 (id=1074): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') creat(&(0x7f00000021c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x0, 0x1, 0xf4, 0x7f, 0x28, @empty, @remote, 0x7, 0x7800, 0x5581, 0x9}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)={0x0, @multicast2, @multicast1}, &(0x7f0000000480)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000004c0)={'wg2\x00', 0x0}) r8 = syz_io_uring_setup(0x110, &(0x7f00000008c0)={0x0, 0xfad8, 0x800, 0x1, 0xffffffff}, &(0x7f00000000c0)=0x0, &(0x7f0000000940)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r8, 0x133d, 0x0, 0x8, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r8, 0x18, &(0x7f0000000000)={0xfe, 0xffffffffffffffff, 0x1, {0x6, 0x6d4}, 0xf0}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00'}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x1, 0x700, 0x7, 0x3ff, {{0x1a, 0x4, 0x0, 0x25, 0x68, 0x66, 0x0, 0xe, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x7, 0x3, 'D'}, @ssrr={0x89, 0xb, 0xd9, [@private=0xa010100, @multicast2]}, @cipso={0x86, 0x12, 0xffffffffffffffff, [{0x1, 0xc, "cbba17955638be5cccdb"}]}, @timestamp_addr={0x44, 0x1c, 0xb2, 0x1, 0x9, [{@local, 0xfffffffe}, {@rand_addr=0x64010100, 0xd479}, {@local, 0x6}]}, @cipso={0x86, 0x18, 0x3, [{0x6, 0x8, "5c24c4cf1fae"}, {0x2, 0xa, "02e4aedbbfc0be24"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x700, 0x8057, 0x8, 0x5, {{0x11, 0x4, 0x2, 0x9, 0x44, 0x64, 0x0, 0x4, 0x0, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x1c, 0xb9, 0x3, 0xf, [{@broadcast, 0x2800}, {@remote}, {@multicast1, 0x10000}]}, @ssrr={0x89, 0x13, 0xb6, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @empty]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xdd003b6ae8b04991}, 0xc, &(0x7f0000000200)={&(0x7f0000002040)=ANY=[@ANYBLOB="5c020000", @ANYRES16=0x0, @ANYBLOB="000227bd7000ffdbdf250c00000084000180080003000200000014000200776c616e31000000000000000000000008000100", @ANYRES8=r4, @ANYBLOB="080003000200000008000300020000000800030003000000140002006970365f76746930000000000000000014000200697036746e6c300000000000000000000800030006000000140002006e657464657673696d300000000000000c00018008000100", @ANYRES64, @ANYRES32=r0, @ANYRES32=r6, @ANYRESDEC=r1, @ANYRES32=r7, @ANYBLOB="140002006e657c64657673696d30000000000000540001800800030003000000080003000100000008000100", @ANYBLOB="2b30058be62cb0338bdaa458eb8f893fc35e4fcef887764442d18539ff04909b76e5acd54bf39fa814835515f83d9d880ddbbadfe604a1b18f238dae2af7d2bd95cf241a944428668c", @ANYRES16, @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES16=r5, @ANYBLOB="140002006970365f7674693000000000000000001400020067656e65766531000000000000000000"], 0x25c}, 0x1, 0x0, 0x0, 0x40}, 0x800) r12 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60) sendmsg$nl_generic(r3, &(0x7f0000000780)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000700)=ANY=[], 0x230}}, 0x24002080) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000002c0)='./file2\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2.20057543s ago: executing program 0 (id=1075): openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac141400"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x6c}}, 0x0) readv(r1, &(0x7f0000000240)=[{0x0}], 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYRESOCT=r4], 0x0) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000080)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x8f) connect$inet(r6, &(0x7f0000000040)={0x2, 0x1, @loopback}, 0xb) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_misc(r9, &(0x7f0000000040), 0xe09) r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109301) ioctl$USBDEVFS_DROP_PRIVILEGES(r10, 0x4004551e, &(0x7f0000000000)) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x5, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd0007008019000200000000000000022122af0e4ccfb7b3cada00", [0x0, 0x2000000000001]}}) close_range(r0, 0xffffffffffffffff, 0x0) r11 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040f30454070000000000010902240001000040b109040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r11, &(0x7f0000000340)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="000609"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.153117565s ago: executing program 1 (id=1076): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x28801, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x27) add_key(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) openat$sndseq(0xffffffffffffff9c, 0x0, 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800000018000100", @ANYBLOB, @ANYRES64=r4], 0x38}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYRES64=r1], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_usb_control_io$hid(r6, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0}, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r7, 0x4b4c, &(0x7f0000000080)) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) sendto$packet(r9, &(0x7f00000002c0)="48357e0287af48ffa745b497a54e0eec1bf2c69011f35b48339d15afaef1bd7efe075ff441b16e244b8b05fe09e29583ad142567826dfa5cbc6f979b050015bde8c4441cd0fa6be03213181bfe84743015ec12ced8b1aa8f44e5c30afac6f9fd2ab1303be0d1b2c02533bcc97cce7da9b507b053b11821323590d379e9e350a3291fbedb6382de878b7a56e4e38c7f746d04", 0x92, 0x0, 0x0, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) 1.020375334s ago: executing program 4 (id=1077): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000240), 0x3) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001500e999000000"], 0xb8}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x98, 0xa, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x126}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @numgen={{0xb}, @void}}, @NFTA_SET_EXPR={0x60, 0x11, 0x0, 0x1, @synproxy={{0xd}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x10}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x5}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x2}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x8}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x5}, @NFTA_SYNPROXY_WSCALE={0x5}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x5}]}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x80) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r5, 0x0, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x6, 0x3b, &(0x7f0000000100)=ANY=[], 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x480140) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="5800000002060300000034e400000000000000080c000780080006400000000612000300686173683a6e65742c706f72740000000900020073797a3100000000050005000200000005000400000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x8042) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, 0x0) futex(&(0x7f000000cffc), 0x5, 0x401, 0x0, &(0x7f0000048000), 0x21000000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000340), r0) 147.467519ms ago: executing program 2 (id=1078): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0xd, 0x0, 0x3432564e, 0x2, 0x2, 0xfffffffc, 0x7}}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents(r1, 0xffffffffffffffff, 0x5a) 0s ago: executing program 2 (id=1079): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000dc0)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)=ANY=[@ANYBLOB="12010002ffd26f10cb060600eb9a010203010902240001000000000904df0102"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): ver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input52 [ 278.898809][ T9078] syzkaller0: entered allmulticast mode [ 278.911974][ T5946] dvb-usb: schedule remote query interval to 400 msecs. [ 278.923866][ T5946] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 278.952568][ T5946] usb 1-1: USB disconnect, device number 55 [ 279.027637][ T5946] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 279.347342][ T5946] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 279.493668][ T5946] usb 1-1: device descriptor read/64, error -71 [ 279.580108][ T9093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.750'. [ 279.658776][ T9093] input: syz0 as /devices/virtual/input/input53 [ 279.832011][ T9096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.751'. [ 279.847650][ T5946] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 280.203213][ T5946] usb 1-1: device descriptor read/64, error -71 [ 280.370219][ T5946] usb usb1-port1: attempt power cycle [ 280.473589][ T44] usb 2-1: new low-speed USB device number 70 using dummy_hcd [ 280.574543][ T9102] binfmt_misc: register: failed to install interpreter file ./file0 [ 280.635636][ T44] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 280.688940][ T44] usb 2-1: config 0 has no interface number 0 [ 280.713548][ T44] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 280.743584][ T5946] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 280.756951][ T44] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 280.795982][ T44] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 280.814412][ T5946] usb 1-1: device descriptor read/8, error -71 [ 280.825271][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.870304][ T44] usb 2-1: config 0 descriptor?? [ 280.897518][ T9099] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 280.934190][ T44] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 280.983154][ T9114] pimreg: entered allmulticast mode [ 281.123743][ T5946] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 281.144484][ T5946] usb 1-1: device descriptor read/8, error -71 [ 281.170567][ T9119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.192616][ T9119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.237492][ T24] usb 2-1: USB disconnect, device number 70 [ 281.263953][ T44] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 281.326516][ T5946] usb usb1-port1: unable to enumerate USB device [ 281.505728][ T44] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 23 [ 281.517085][ T44] usb 5-1: can't read configurations, error -22 [ 281.683664][ T44] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 281.867222][ T44] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 23 [ 281.887526][ T44] usb 5-1: can't read configurations, error -22 [ 281.907403][ T44] usb usb5-port1: attempt power cycle [ 282.185468][ T9133] sctp: [Deprecated]: syz.2.760 (pid 9133) Use of int in max_burst socket option. [ 282.185468][ T9133] Use struct sctp_assoc_value instead [ 282.339964][ T44] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 282.371401][ T44] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 23 [ 282.380753][ T44] usb 5-1: can't read configurations, error -22 [ 282.553790][ T44] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 282.589686][ T44] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 23 [ 282.600514][ T44] usb 5-1: can't read configurations, error -22 [ 282.619515][ T44] usb usb5-port1: unable to enumerate USB device [ 284.418644][ T9166] input: syz1 as /devices/virtual/input/input54 [ 284.547765][ T9166] netlink: 'syz.3.769': attribute type 1 has an invalid length. [ 284.600368][ T9170] netlink: 76 bytes leftover after parsing attributes in process `syz.2.770'. [ 284.796776][ T9169] gretap1: entered allmulticast mode [ 284.809370][ T9169] bond2: (slave gretap1): making interface the new active one [ 284.818338][ T9169] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 285.163662][ T24] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 285.311136][ T9183] input: syz0 as /devices/virtual/input/input55 [ 285.334517][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 285.340940][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.417023][ T24] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 285.542890][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.602356][ T24] usb 5-1: config 0 descriptor?? [ 286.115248][ T24] mcp2221 0003:04D8:00DD.0012: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 286.521828][ T24] usb 5-1: USB disconnect, device number 68 [ 286.677979][ T9206] netlink: 8928 bytes leftover after parsing attributes in process `syz.3.780'. [ 286.793677][ T44] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 286.967890][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 286.975271][ T44] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 287.044163][ T44] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 287.069069][ T44] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 287.077700][ T44] usb 3-1: Product: syz [ 287.081877][ T44] usb 3-1: Manufacturer: syz [ 287.092376][ T44] usb 3-1: SerialNumber: syz [ 287.103300][ T44] usb 3-1: config 0 descriptor?? [ 287.126639][ T5954] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 287.158023][ T9204] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 287.179765][ T44] hub 3-1:0.0: bad descriptor, ignoring hub [ 287.210438][ T44] hub 3-1:0.0: probe with driver hub failed with error -5 [ 287.417363][ T5954] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 287.475414][ T5954] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 287.561893][ T5954] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 287.648212][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.805383][ T5946] usb 3-1: USB disconnect, device number 69 [ 287.817989][ T9210] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 287.899261][ T5954] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 287.966106][ T9220] netlink: 32 bytes leftover after parsing attributes in process `syz.0.783'. [ 288.129107][ T9210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.139482][ T9210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.219426][ T9224] fuse: Bad value for 'fd' [ 288.293539][ T5864] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 288.383866][ T9210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.393686][ T9210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.401824][ T30] kauditd_printk_skb: 74 callbacks suppressed [ 288.401847][ T30] audit: type=1326 audit(1758710813.916:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9207 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818278eec9 code=0x7ffc0000 [ 288.465369][ T5864] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 288.493628][ T5864] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 288.516541][ T5864] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 288.695915][ T30] audit: type=1326 audit(1758710813.916:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9207 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f818278d710 code=0x7ffc0000 [ 288.748868][ T5864] usb 1-1: config 1 interface 0 altsetting 127 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 288.768665][ T5864] usb 1-1: config 1 interface 0 has no altsetting 0 [ 288.776165][ T30] audit: type=1326 audit(1758710813.916:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9207 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f818278eacb code=0x7ffc0000 [ 288.814072][ T30] audit: type=1326 audit(1758710813.916:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9207 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f818278eacb code=0x7ffc0000 [ 288.840635][ T5864] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 288.871512][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.885326][ T5864] usb 1-1: Product: syz [ 288.889943][ T5864] usb 1-1: Manufacturer: syz [ 288.901751][ T5864] usb 1-1: SerialNumber: syz [ 288.952162][ T30] audit: type=1326 audit(1758710813.966:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9207 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818278eec9 code=0x7ffc0000 [ 288.978747][ T30] audit: type=1326 audit(1758710813.976:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9207 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818278eec9 code=0x7ffc0000 [ 289.003700][ T9220] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 289.015702][ T9220] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 289.040565][ T30] audit: type=1326 audit(1758710813.976:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9207 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f818278eec9 code=0x7ffc0000 [ 289.068256][ T30] audit: type=1326 audit(1758710813.976:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9207 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818278eec9 code=0x7ffc0000 [ 289.112063][ T30] audit: type=1326 audit(1758710813.976:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9207 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f818278eec9 code=0x7ffc0000 [ 289.143020][ T30] audit: type=1326 audit(1758710813.976:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9207 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818278eec9 code=0x7ffc0000 [ 289.231265][ T9220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.247373][ T9220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.972009][ T6004] usb 4-1: USB disconnect, device number 56 [ 290.952745][ T5864] rtl8150 1-1:1.0: couldn't find required endpoints [ 290.983955][ T5864] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 291.019142][ T9257] mac80211_hwsim hwsim9 : renamed from wlan1 [ 291.041200][ T5864] usb 1-1: USB disconnect, device number 60 [ 291.123589][ T6004] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 291.309467][ T6004] usb 3-1: Using ep0 maxpacket: 32 [ 291.421748][ T9267] IPv6: addrconf: prefix option has invalid lifetime [ 291.470777][ T6004] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.533791][ T6004] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.575258][ T6004] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 291.588732][ T6004] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.849018][ T6004] usb 3-1: config 0 descriptor?? [ 292.410745][ T6004] usbhid 3-1:0.0: can't add hid device: -71 [ 292.450404][ T6004] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 292.544184][ T6004] usb 3-1: USB disconnect, device number 70 [ 292.663910][ T5946] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 292.813746][ T5946] usb 5-1: Using ep0 maxpacket: 16 [ 292.823543][ T5946] usb 5-1: unable to get BOS descriptor or descriptor too short [ 292.835751][ T5946] usb 5-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.937408][ T5946] usb 5-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 293.001471][ T5946] usb 5-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 293.063228][ T5946] usb 5-1: config 1 interface 0 has no altsetting 0 [ 293.114241][ T5946] usb 5-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 293.135456][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.188542][ T5946] usb 5-1: Product: syz [ 293.199600][ T5946] usb 5-1: Manufacturer: syz [ 293.224216][ T5946] usb 5-1: SerialNumber: syz [ 293.260919][ T9281] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 293.293614][ T980] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 293.474055][ T980] usb 3-1: Using ep0 maxpacket: 8 [ 293.487424][ T980] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 293.502198][ T5946] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input56 [ 293.520135][ T980] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 293.529151][ T980] usb 3-1: Product: syz [ 293.543732][ T980] usb 3-1: Manufacturer: syz [ 293.548356][ T980] usb 3-1: SerialNumber: syz [ 293.608401][ T980] usb 3-1: config 0 descriptor?? [ 293.633350][ T980] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 293.634451][ T9296] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 293.647345][ T9296] IPv6: NLM_F_CREATE should be set when creating new route [ 293.654602][ T9296] IPv6: NLM_F_CREATE should be set when creating new route [ 293.885884][ T9305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.804'. [ 294.249788][ T5946] usb 5-1: USB disconnect, device number 69 [ 294.249847][ C1] bcm5974 5-1:1.0: trackpad urb failed: -19 [ 294.391366][ T980] gspca_zc3xx: reg_r err -110 [ 294.398528][ T980] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 294.415445][ T5946] bcm5974 5-1:1.0: could not read from device [ 296.279379][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 296.279397][ T30] audit: type=1326 audit(1758710821.746:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.4.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589978eec9 code=0x7ffc0000 [ 296.583929][ T30] audit: type=1326 audit(1758710821.746:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.4.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589978eec9 code=0x7ffc0000 [ 296.658260][ T30] audit: type=1326 audit(1758710821.746:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.4.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f589978eec9 code=0x7ffc0000 [ 296.699317][ T5946] usb 3-1: USB disconnect, device number 71 [ 296.786999][ T30] audit: type=1326 audit(1758710821.746:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.4.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589978eec9 code=0x7ffc0000 [ 296.885415][ T9323] vivid-002: ================= START STATUS ================= [ 296.904046][ T9323] vivid-002: Radio HW Seek Mode: Bounded [ 296.957092][ T9323] vivid-002: Radio Programmable HW Seek: false [ 296.970487][ T30] audit: type=1326 audit(1758710821.746:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.4.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f589978eec9 code=0x7ffc0000 [ 297.006165][ T9323] vivid-002: RDS Rx I/O Mode: Block I/O [ 297.022983][ T9323] vivid-002: Generate RBDS Instead of RDS: false [ 297.030538][ T30] audit: type=1326 audit(1758710821.746:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.4.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589978eec9 code=0x7ffc0000 [ 297.072925][ T9323] vivid-002: RDS Reception: true [ 297.081755][ T30] audit: type=1326 audit(1758710821.746:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.4.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f589978eec9 code=0x7ffc0000 [ 297.132595][ T9323] vivid-002: RDS Program Type: 0 inactive [ 297.200622][ T9323] vivid-002: RDS PS Name: inactive [ 297.213952][ T30] audit: type=1326 audit(1758710821.746:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.4.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589978eec9 code=0x7ffc0000 [ 297.243525][ T9323] vivid-002: RDS Radio Text: inactive [ 297.249058][ T9323] vivid-002: RDS Traffic Announcement: false inactive [ 297.291719][ T30] audit: type=1326 audit(1758710821.746:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.4.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f589978eec9 code=0x7ffc0000 [ 297.314068][ C1] vkms_vblank_simulate: vblank timer overrun [ 297.315345][ T9323] vivid-002: RDS Traffic Program: false inactive [ 297.370818][ T9323] vivid-002: RDS Music: false inactive [ 297.395302][ T9323] vivid-002: ================== END STATUS ================== [ 297.419880][ T30] audit: type=1326 audit(1758710821.746:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.4.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589978eec9 code=0x7ffc0000 [ 297.578594][ T6004] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 297.620327][ T9334] netlink: 4 bytes leftover after parsing attributes in process `syz.4.813'. [ 297.763342][ T6004] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 297.837845][ T6004] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 297.897195][ T5954] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 298.051982][ T6004] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 298.207931][ T5954] usb 5-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 298.244383][ T6004] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.334150][ T5954] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 298.583894][ T9327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.600296][ T9327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.640969][ T5954] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 298.656593][ T6004] usb 4-1: usb_control_msg returned -32 [ 298.662231][ T6004] usbtmc 4-1:16.0: can't read capabilities [ 298.698213][ T5954] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 298.825768][ T5954] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 25304, setting to 64 [ 298.861061][ T5954] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 298.910672][ T5954] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 298.923068][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.943419][ T5954] usb 5-1: Product: syz [ 298.964212][ T5954] usb 5-1: Manufacturer: syz [ 298.979324][ T5954] usb 5-1: SerialNumber: syz [ 299.072165][ T5954] usb 5-1: config 0 descriptor?? [ 299.122070][ T9334] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 299.148577][ T9334] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 300.123999][ T5939] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 300.255313][ T9373] netlink: 'syz.1.826': attribute type 39 has an invalid length. [ 300.273638][ T5946] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 300.298274][ T6004] usb 4-1: USB disconnect, device number 57 [ 300.313595][ T5939] usb 3-1: Using ep0 maxpacket: 16 [ 300.337652][ T9359] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 300.475534][ T5946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.541101][ T5939] usb 3-1: unable to get BOS descriptor or descriptor too short [ 300.554895][ T5946] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 300.574917][ T5939] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 300.582521][ T5939] usb 3-1: can't read configurations, error -71 [ 300.600194][ T5946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.631616][ T5946] usb 1-1: config 0 descriptor?? [ 300.713716][ T6004] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 300.895615][ T6004] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 300.915252][ T6004] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 300.929672][ T6004] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 300.940472][ T6004] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.977718][ T6004] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 300.995864][ T6004] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 301.013709][ T6004] usb 4-1: Product: syz [ 301.021093][ T6004] usb 4-1: Manufacturer: syz [ 301.047969][ T6004] cdc_wdm 4-1:1.0: skipping garbage [ 301.059267][ T9364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.060050][ T6004] cdc_wdm 4-1:1.0: skipping garbage [ 301.068286][ T9364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.090175][ T5946] usbhid 1-1:0.0: can't add hid device: -71 [ 301.098666][ T6004] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 301.101189][ T5946] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 301.119137][ T6004] cdc_wdm 4-1:1.0: Unknown control protocol [ 301.135918][ T5946] usb 1-1: USB disconnect, device number 61 [ 301.273590][ T6004] usb 4-1: USB disconnect, device number 58 [ 301.355060][ T5954] rc_core: IR keymap rc-snapstream-firefly not found [ 301.362050][ T5954] Registered IR keymap rc-empty [ 301.372244][ T5954] rc rc0: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 301.389465][ T5954] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input57 [ 301.407143][ T5954] input: syz syz mouse as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input58 [ 301.455500][ T5954] usb 5-1: USB disconnect, device number 70 [ 301.461520][ C1] ati_remote 5-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 301.794542][ T6004] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 302.235633][ T5864] usb 1-1: new low-speed USB device number 62 using dummy_hcd [ 302.259334][ T6004] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 302.273769][ T6004] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.294682][ T6004] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 302.313734][ T6004] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.334603][ T6004] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 302.350175][ T6004] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 302.359802][ T6004] usb 4-1: Product: syz [ 302.369101][ T6004] usb 4-1: Manufacturer: syz [ 302.382345][ T6004] cdc_wdm 4-1:1.0: skipping garbage [ 302.399731][ T6004] cdc_wdm 4-1:1.0: skipping garbage [ 302.414152][ T6004] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 302.422910][ T6004] cdc_wdm 4-1:1.0: Unknown control protocol [ 302.434887][ T5864] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 302.480972][ T5864] usb 1-1: config 0 has no interface number 0 [ 302.551352][ T5864] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 302.604344][ T5864] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 302.618131][ T5864] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 302.629389][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.650940][ T5864] usb 1-1: config 0 descriptor?? [ 302.664263][ T9402] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 302.678581][ T5864] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 302.847096][ T6004] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 302.893809][ T5864] usb 1-1: USB disconnect, device number 62 [ 303.112378][ T6004] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.141932][ T6004] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 303.142389][ T9411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.827'. [ 303.184865][ T6004] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 303.192299][ T9411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.208077][ T6004] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 303.233230][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 303.233627][ T5946] usb 4-1: USB disconnect, device number 59 [ 303.239949][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 303.251903][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 303.271482][ T6004] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 303.281627][ T6004] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 303.297017][ T6004] usb 3-1: Manufacturer: syz [ 303.323248][ T6004] usb 3-1: config 0 descriptor?? [ 303.349622][ T5864] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 303.372518][ T9411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.514992][ T5864] usb 1-1: device descriptor read/64, error -71 [ 303.564914][ T5954] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 303.693517][ T6004] rc_core: IR keymap rc-hauppauge not found [ 303.699547][ T6004] Registered IR keymap rc-empty [ 303.706766][ T6004] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 303.727832][ T5954] usb 2-1: unable to get BOS descriptor or descriptor too short [ 303.748045][ T5954] usb 2-1: config 250 has an invalid interface number: 150 but max is 0 [ 303.773657][ T5864] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 303.781336][ T5954] usb 2-1: config 250 has no interface number 0 [ 303.791529][ T6004] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 303.801598][ T5954] usb 2-1: config 250 interface 150 has no altsetting 0 [ 303.834691][ T6004] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 303.877360][ T5954] usb 2-1: New USB device found, idVendor=1b71, idProduct=3002, bcdDevice=e2.bf [ 303.917250][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.923653][ T5864] usb 1-1: device descriptor read/64, error -71 [ 303.925670][ T6004] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input59 [ 303.944261][ T5954] usb 2-1: Product: syz [ 303.948451][ T5954] usb 2-1: Manufacturer: syz [ 303.953778][ T5954] usb 2-1: SerialNumber: syz [ 303.965405][ T6004] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 304.046923][ T6004] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 304.074065][ T5864] usb usb1-port1: attempt power cycle [ 304.138925][ T6004] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 304.186623][ T6004] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 304.253651][ T6004] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 304.271214][ T5954] usb 2-1: USB disconnect, device number 71 [ 304.323607][ T6004] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 304.534174][ T5864] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 304.543966][ T6004] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 304.593946][ T6004] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 305.023603][ T6004] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 305.043632][ T6004] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 305.090447][ T5864] usb 1-1: device descriptor read/8, error -71 [ 305.100471][ T6004] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 305.174527][ T6004] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 305.298672][ T9437] input: syz1 as /devices/virtual/input/input60 [ 305.503565][ T5939] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 305.599696][ T9435] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 305.764312][ T5939] usb 2-1: Using ep0 maxpacket: 16 [ 305.773895][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.923656][ T5946] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 305.986695][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.017342][ T5939] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 306.150933][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.167046][ T5946] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 306.215773][ T5946] usb 5-1: config 0 has no interface number 0 [ 306.231685][ T5954] usb 3-1: USB disconnect, device number 74 [ 306.264212][ T5939] usb 2-1: config 0 descriptor?? [ 306.433636][ T5946] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 306.495482][ T9455] sctp: [Deprecated]: syz.3.842 (pid 9455) Use of int in maxseg socket option. [ 306.495482][ T9455] Use struct sctp_assoc_value instead [ 306.576356][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.656364][ T5946] usb 5-1: Product: syz [ 306.682390][ T5946] usb 5-1: Manufacturer: syz [ 306.694670][ T5946] usb 5-1: SerialNumber: syz [ 306.757640][ T5946] usb 5-1: config 0 descriptor?? [ 306.870677][ T9464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.879461][ T9464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.916977][ T5946] hub 5-1:0.132: bad descriptor, ignoring hub [ 306.938659][ T5946] hub 5-1:0.132: probe with driver hub failed with error -5 [ 306.955372][ T5946] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input61 [ 307.045087][ T5939] usbhid 2-1:0.0: can't add hid device: -71 [ 307.051126][ T5939] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 307.087323][ T5939] usb 2-1: USB disconnect, device number 72 [ 307.107426][ T5954] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 307.525267][ T5954] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 307.551915][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.582178][ T5954] usb 3-1: Product: syz [ 307.602506][ T5954] usb 3-1: Manufacturer: syz [ 307.627454][ T5954] usb 3-1: SerialNumber: syz [ 307.655985][ T5954] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 307.679784][ T6004] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 308.312221][ T10] usb 3-1: USB disconnect, device number 75 [ 308.482757][ T9485] netlink: 132 bytes leftover after parsing attributes in process `syz.1.850'. [ 308.528772][ T5939] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 308.571861][ T5939] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 308.913753][ T6004] usb 3-1: Service connection timeout for: 256 [ 308.961630][ T6004] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 308.986724][ T5939] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 308.998335][ T6004] ath9k_htc: Failed to initialize the device [ 309.027716][ T9498] loop6: detected capacity change from 0 to 2560 [ 309.080808][ T10] usb 3-1: ath9k_htc: USB layer deinitialized [ 309.094125][ T5954] usb 5-1: USB disconnect, device number 71 [ 309.142729][ T9500] netlink: 20 bytes leftover after parsing attributes in process `syz.2.855'. [ 309.176499][ T5939] usb 4-1: too many configurations: 98, using maximum allowed: 8 [ 309.221288][ T5939] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 309.245944][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.265990][ T5939] usb 4-1: Product: syz [ 309.270189][ T5939] usb 4-1: Manufacturer: syz [ 309.332656][ T5939] usb 4-1: SerialNumber: syz [ 309.380609][ T5939] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 309.409423][ T10] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 309.833519][ T5954] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 310.138953][ T5954] usb 5-1: unable to get BOS descriptor or descriptor too short [ 310.179020][ T5954] usb 5-1: not running at top speed; connect to a high speed hub [ 310.217072][ T5954] usb 5-1: config 1 has an invalid interface number: 138 but max is 0 [ 310.241551][ T5954] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 310.326144][ T5954] usb 5-1: config 1 has no interface number 0 [ 310.335189][ T5954] usb 5-1: config 1 interface 138 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 310.351980][ T5954] usb 5-1: config 1 interface 138 has no altsetting 0 [ 310.368052][ T5954] usb 5-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 310.387147][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.402336][ T5954] usb 5-1: Product: syz [ 310.420279][ T5954] usb 5-1: Manufacturer: syz [ 310.451288][ T5954] usb 5-1: SerialNumber: syz [ 310.523327][ T10] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 310.562374][ T10] ath9k_htc: Failed to initialize the device [ 310.607717][ T10] usb 4-1: ath9k_htc: USB layer deinitialized [ 310.916197][ T5954] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 310.971857][ T9521] fuse: Bad value for 'fd' [ 310.992943][ T9521] netlink: 24 bytes leftover after parsing attributes in process `syz.1.861'. [ 311.037602][ T5954] usb 5-1: USB disconnect, device number 72 [ 311.152407][ T6013] udevd[6013]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.138/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 311.354608][ T5939] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 311.526044][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 311.543761][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 311.560044][ T5939] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 311.579381][ T5939] usb 3-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 311.588521][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.616431][ T5939] usb 3-1: config 0 descriptor?? [ 311.633561][ T5954] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 311.635570][ T9525] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 311.737856][ T24] usb 4-1: USB disconnect, device number 60 [ 311.836227][ T5954] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 311.844426][ T9536] usb usb8: usbfs: process 9536 (syz.1.867) did not claim interface 0 before use [ 311.861062][ T5954] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 311.881684][ T5954] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 311.893600][ T5954] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 311.916119][ T5954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.944864][ T9532] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 312.068802][ T5939] usbhid 3-1:0.0: can't add hid device: -71 [ 312.075290][ T5939] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 312.092752][ T5875] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 312.094383][ T5939] usb 3-1: USB disconnect, device number 76 [ 312.333638][ T24] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 312.493664][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 312.510799][ T24] usb 1-1: config 7 has an invalid interface number: 146 but max is 3 [ 312.522780][ T24] usb 1-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 312.532076][ T24] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 312.551441][ T24] usb 1-1: config 7 has 1 interface, different from the descriptor's value: 4 [ 312.561295][ T24] usb 1-1: config 7 has no interface number 0 [ 312.613705][ T24] usb 1-1: config 7 interface 146 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 312.629143][ T24] usb 1-1: config 7 interface 146 has no altsetting 0 [ 312.641738][ T24] usb 1-1: Dual-Role OTG device on HNP port [ 312.813514][ T24] usb 1-1: New USB device found, idVendor=0742, idProduct=2008, bcdDevice=88.31 [ 312.833073][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.846758][ T24] usb 1-1: Product: 鿳ૂ搈זᶉ韖쑡ࠤ芛待펚㥜틒䒑⽍╇┩漏維呧斟纕ࢮ굸㷖捩ഥѐ㎠劂까ꓞぺ鱻㢜꛱텋᫱軜̗蹾쐀漋ꯉ쀹巭釹䮻癶呖儤钏瓢莕䫋螆召ᚏ䟛东艢噟潚竌磪﫰컘ꢡ獭앣鼠༷૸郛ᆖ제ජ邑いⳐ顝쵨⻶퓺 [ 313.133567][ T24] usb 1-1: Manufacturer: 쿜걞銓⣁鶁쑿ቇֽ涜⑺渫넒疍쑪셊㍜ [ 313.148227][ T24] usb 1-1: SerialNumber: syz [ 313.404784][ T9554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 313.639612][ T9543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.649727][ T9543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.802850][ T9543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.831592][ T9543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.944357][ T24] HFC-S_USB 1-1:7.146: probe with driver HFC-S_USB failed with error -5 [ 314.094221][ T24] usb 1-1: USB disconnect, device number 67 [ 314.211579][ T5954] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 314.242098][ T5954] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input62 [ 314.344782][ T5954] usb 5-1: USB disconnect, device number 73 [ 314.344825][ C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 314.404232][ T6004] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 314.586049][ T6004] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 314.624168][ T6004] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.662906][ T6004] usb 4-1: config 0 descriptor?? [ 314.680038][ T6004] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 314.995417][ T9587] input: syz1 as /devices/virtual/input/input63 [ 315.079545][ T6004] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 315.216590][ T9590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.225497][ T9590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.374764][ T5946] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 315.495456][ T9563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.872'. [ 315.504714][ T6004] gspca_cpia1: usb_control_msg 02, error -32 [ 315.513666][ T9563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.872'. [ 315.679395][ T9590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.688459][ T9590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.768701][ T6004] gspca_cpia1: usb_control_msg 02, error -71 [ 315.792785][ T6004] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 315.822140][ T6004] usb 4-1: USB disconnect, device number 61 [ 317.124339][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.130795][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.177553][ T6004] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 318.030920][ T6004] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 318.056704][ T6004] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 318.086684][ T6004] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 318.101265][ T6004] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 318.149748][ T6004] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.204567][ T9595] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 318.635706][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 318.635722][ T30] audit: type=1326 audit(1758710844.106:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9603 comm="syz.0.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a0178eec9 code=0x7fc00000 [ 318.698526][ T30] audit: type=1326 audit(1758710844.106:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9603 comm="syz.0.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a0178eec9 code=0x7fc00000 [ 319.371159][ T6004] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 319.390319][ T6004] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input64 [ 319.419457][ T30] audit: type=1326 audit(1758710844.946:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9603 comm="syz.0.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6a0172af79 code=0x7fc00000 [ 319.511402][ T9614] netlink: 132 bytes leftover after parsing attributes in process `syz.1.884'. [ 319.613703][ T30] audit: type=1326 audit(1758710844.946:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9603 comm="syz.0.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f6a0172b03f code=0x7fc00000 [ 319.737913][ T30] audit: type=1326 audit(1758710844.946:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9603 comm="syz.0.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6a0178eec9 code=0x7fc00000 [ 320.358578][ T5946] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 320.543586][ T5946] usb 3-1: Using ep0 maxpacket: 16 [ 320.625650][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.641951][ T5946] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 320.688930][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.715978][ T5946] usb 3-1: config 0 descriptor?? [ 320.749865][ T5939] usb 4-1: USB disconnect, device number 62 [ 320.749865][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 321.272640][ T5946] usbhid 3-1:0.0: can't add hid device: -71 [ 321.281809][ T5946] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 321.320998][ T5946] usb 3-1: USB disconnect, device number 78 [ 321.334313][ T9634] hsr0: entered promiscuous mode [ 321.340023][ T9634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.890'. [ 321.387091][ T9634] hsr_slave_0: left promiscuous mode [ 321.522658][ T9634] hsr_slave_1: left promiscuous mode [ 321.553655][ T5878] Bluetooth: hci4: command 0x0406 tx timeout [ 321.669268][ T9634] hsr0 (unregistering): left promiscuous mode [ 323.135618][ T9667] program syz.4.899 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 323.193679][ T6004] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 323.324593][ T6004] usb 1-1: device descriptor read/64, error -71 [ 323.363675][ T5946] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 323.529409][ T5946] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.558422][ T5946] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 323.577858][ T6004] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 323.585550][ T5946] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 323.611653][ T5946] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 323.656797][ T5946] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 323.669682][ T5946] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 323.691450][ T5946] usb 2-1: Manufacturer: syz [ 323.709291][ T5946] usb 2-1: config 0 descriptor?? [ 323.794127][ T6004] usb 1-1: device descriptor read/64, error -71 [ 323.907840][ T6004] usb usb1-port1: attempt power cycle [ 324.034052][ T5946] rc_core: IR keymap rc-hauppauge not found [ 324.054865][ T5946] Registered IR keymap rc-empty [ 324.068270][ T5946] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 324.083678][ T5954] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 324.123936][ T5946] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 324.144461][ T5946] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 324.186055][ T5946] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input65 [ 324.295367][ T6004] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 324.346888][ T5946] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 324.350321][ T6004] usb 1-1: device descriptor read/8, error -71 [ 324.360570][ T5954] usb 3-1: Using ep0 maxpacket: 32 [ 324.373695][ T5946] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 324.395045][ T5954] usb 3-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=cb.d7 [ 324.455740][ T5946] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 324.477224][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 324.496359][ T5954] usb 3-1: Product: syz [ 324.505792][ T5954] usb 3-1: Manufacturer: syz [ 324.517552][ T5954] usb 3-1: SerialNumber: syz [ 324.531494][ T5954] usb 3-1: config 0 descriptor?? [ 324.622433][ T5954] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 324.651811][ T5954] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 324.674253][ T5946] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 324.674351][ T6004] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 324.713670][ T5946] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 324.736160][ T5946] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 324.773583][ T5946] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 324.803630][ T5946] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 324.866121][ T6004] usb 1-1: device descriptor read/8, error -71 [ 324.872494][ T5946] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 324.956046][ T5946] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 325.027270][ T5946] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 325.055600][ T5946] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 325.094053][ T6004] usb usb1-port1: unable to enumerate USB device [ 325.254258][ T5954] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 325.423509][ T5954] usb 4-1: Using ep0 maxpacket: 32 [ 325.438998][ T5954] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 325.455534][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.474979][ T5954] usb 4-1: config 0 descriptor?? [ 325.486771][ T5954] gspca_main: sq930x-2.14.0 probing 041e:403c [ 326.434219][ T5939] usb 2-1: USB disconnect, device number 73 [ 326.483716][ T5946] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 326.667331][ T5946] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.718182][ T5946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 326.788927][ T5946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 326.809384][ T6004] usb 3-1: USB disconnect, device number 79 [ 326.831410][ T5946] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 326.877309][ T5946] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 326.913636][ T5954] gspca_sq930x: reg_w 0105 bf00 failed -110 [ 326.973833][ T5954] sq930x 4-1:0.0: probe with driver sq930x failed with error -110 [ 327.040126][ T5946] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 327.086083][ T5946] usb 5-1: Manufacturer: syz [ 327.495235][ T5946] usb 5-1: config 0 descriptor?? [ 327.554316][ T9707] netlink: 'syz.1.909': attribute type 29 has an invalid length. [ 327.630338][ T6004] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 327.805475][ T6004] usb 3-1: unable to get BOS descriptor or descriptor too short [ 327.843704][ T6004] usb 3-1: config 13 has an invalid interface number: 50 but max is 3 [ 327.861996][ T6004] usb 3-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 327.874014][ T10] usb 4-1: USB disconnect, device number 63 [ 327.943704][ T6004] usb 3-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 328.113528][ T6004] usb 3-1: config 13 has no interface number 0 [ 328.140623][ T6004] usb 3-1: config 13 interface 50 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 328.691842][ T6004] usb 3-1: config 13 interface 50 has no altsetting 0 [ 328.723664][ T5939] usb 1-1: new full-speed USB device number 72 using dummy_hcd [ 328.780173][ T6004] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 328.968782][ T6004] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.977426][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 328.989228][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 329.000428][ T5939] usb 1-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 329.013074][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.130320][ T6004] usb 3-1: Product: syz [ 329.130641][ T5939] usb 1-1: config 0 descriptor?? [ 329.140414][ T6004] usb 3-1: Manufacturer: syz [ 329.153266][ T6004] usb 3-1: SerialNumber: syz [ 329.600829][ T9715] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 329.956001][ T9715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.995203][ T9715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.004495][ T5939] creative-sb0540 0003:041E:3100.0014: item fetching failed at offset 1/5 [ 330.084373][ T5939] creative-sb0540 0003:041E:3100.0014: parse failed [ 330.110669][ T5939] creative-sb0540 0003:041E:3100.0014: probe with driver creative-sb0540 failed with error -22 [ 330.178389][ T5954] usb 1-1: USB disconnect, device number 72 [ 330.321618][ T5946] rc_core: IR keymap rc-hauppauge not found [ 330.340940][ T5946] Registered IR keymap rc-empty [ 330.380174][ T5946] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 330.473692][ T5946] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 330.630757][ T6004] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 330.633406][ T8574] usb 3-1: Failed to submit usb control message: -71 [ 330.639543][ T5946] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 330.655853][ T6004] usb 3-1: USB disconnect, device number 80 [ 330.665230][ T8574] usb 3-1: unable to send the bmi data to the device: -71 [ 330.690473][ T8574] usb 3-1: unable to get target info from device [ 330.728850][ T8574] usb 3-1: could not get target info (-71) [ 330.768725][ T9733] loop7: detected capacity change from 0 to 7 [ 330.780049][ T5946] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input66 [ 330.793765][ T8574] usb 3-1: could not probe fw (-71) [ 330.844560][ T5946] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 330.883892][ T5946] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 330.903724][ T5946] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 330.923644][ T5946] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 330.943639][ T5946] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 330.963840][ T5946] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 330.994024][ T5954] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 330.994181][ T5946] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 331.033985][ T5946] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 331.063647][ T5946] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 331.090718][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 331.100517][ C0] buffer_io_error: 208 callbacks suppressed [ 331.100528][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 331.116267][ T5946] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 331.145755][ T5946] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 331.156428][ T5946] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 331.165840][ T5954] usb 1-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 331.183703][ T5954] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 331.193003][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.215368][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.227748][ T5946] usb 5-1: USB disconnect, device number 74 [ 331.236768][ T5954] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 331.267324][ T5954] usb 1-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 331.306856][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.352867][ T5954] usb 1-1: config 0 descriptor?? [ 331.573522][ T5946] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 331.603723][ T10] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 331.788331][ T5946] usb 5-1: Using ep0 maxpacket: 8 [ 331.810369][ T5946] usb 5-1: unable to get BOS descriptor or descriptor too short [ 331.825504][ T5946] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 331.840435][ T5946] usb 5-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 331.840663][ T5954] input: HID 28bd:0909 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:0909.0015/input/input67 [ 331.859808][ T5946] usb 5-1: config 4 has no interface number 0 [ 331.875610][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 331.914206][ T5954] uclogic 0003:28BD:0909.0015: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.0-1/input0 [ 331.946485][ T5946] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 331.964042][ T6004] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 331.972939][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 332.023570][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.055087][ T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 332.074941][ T5946] usb 5-1: Product: syz [ 332.079841][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 332.088388][ T5946] usb 5-1: Manufacturer: syz [ 332.104100][ T5946] usb 5-1: SerialNumber: syz [ 332.109890][ T10] usb 4-1: SerialNumber: syz [ 332.130306][ T5939] usb 1-1: USB disconnect, device number 73 [ 332.143495][ T6004] usb 3-1: Using ep0 maxpacket: 32 [ 332.216888][ T6004] usb 3-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=cb.d7 [ 332.226221][ T6004] usb 3-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 332.242153][ T9745] fido_id[9745]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 332.257520][ T6004] usb 3-1: Product: syz [ 332.261704][ T6004] usb 3-1: Manufacturer: syz [ 332.269681][ T6004] usb 3-1: SerialNumber: syz [ 332.292989][ T6004] usb 3-1: config 0 descriptor?? [ 332.351835][ T9749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.920'. [ 332.370316][ T5946] usb 5-1: Found UVC 0.02 device syz (04f2:b746) [ 332.378874][ T5946] usb 5-1: No valid video chain found. [ 332.387016][ T9749] netlink: 16 bytes leftover after parsing attributes in process `syz.1.920'. [ 332.398782][ T9749] netlink: 'syz.1.920': attribute type 32 has an invalid length. [ 332.413324][ T9740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.432575][ T5946] usb 5-1: USB disconnect, device number 75 [ 332.458320][ T6004] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 332.468283][ T9740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.506349][ T6004] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 332.539711][ T9750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.566762][ T9740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.589014][ T9750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.612481][ T9740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.678814][ T10] usb 4-1: 0:2 : does not exist [ 332.692989][ T10] usb 4-1: unit 5 not found! [ 332.738142][ T10] usb 4-1: USB disconnect, device number 64 [ 332.784268][ T9758] netlink: 20 bytes leftover after parsing attributes in process `syz.0.922'. [ 332.876218][ T6587] udevd[6587]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 332.969016][ T9763] atomic_op ffff8880574d6198 conn xmit_atomic 0000000000000000 [ 332.995888][ T9762] syzkaller1: entered promiscuous mode [ 333.003062][ T9762] syzkaller1: entered allmulticast mode [ 333.167889][ T9768] netlink: 'syz.1.926': attribute type 10 has an invalid length. [ 333.242435][ T9768] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.264263][ T9768] team0: entered promiscuous mode [ 333.274105][ T5932] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 333.286808][ T9768] team_slave_0: entered promiscuous mode [ 333.300585][ T9768] team_slave_1: entered promiscuous mode [ 333.311100][ T9768] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 333.331866][ T9768] bond0: (slave team0): Enslaving as an active interface with an up link [ 333.454092][ T5932] usb 1-1: Using ep0 maxpacket: 8 [ 333.482097][ T5932] usb 1-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 333.523927][ T10] usb 4-1: new low-speed USB device number 65 using dummy_hcd [ 333.535252][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.620822][ T5932] usb 1-1: config 0 descriptor?? [ 333.873754][ T9787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.874245][ T9787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.875580][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 333.875605][ T10] usb 4-1: config 0 has no interface number 0 [ 333.875645][ T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 333.875670][ T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 333.875708][ T10] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 333.875728][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.878349][ T10] usb 4-1: config 0 descriptor?? [ 333.895275][ T9772] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 333.913955][ T10] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 333.934647][ T5932] usbhid 1-1:0.0: can't add hid device: -71 [ 333.994182][ T5939] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 334.112593][ T10] usb 4-1: USB disconnect, device number 65 [ 334.118615][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 334.134826][ T6004] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 334.206403][ T9791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.933'. [ 334.277356][ T5932] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 334.321830][ T6004] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 334.338612][ T6004] usb 2-1: config 0 has no interface number 0 [ 334.340171][ T5939] usb 5-1: Using ep0 maxpacket: 32 [ 334.344840][ T6004] usb 2-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 334.367124][ T5939] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 334.370509][ T5932] usb 1-1: USB disconnect, device number 74 [ 334.389437][ T5939] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 334.393560][ T6004] usb 2-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 334.401873][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.426440][ T5939] usb 5-1: Product: syz [ 334.430877][ T5939] usb 5-1: Manufacturer: syz [ 334.436604][ T5939] usb 5-1: SerialNumber: syz [ 334.436658][ T6004] usb 2-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79 [ 334.456383][ T5939] usb 5-1: config 0 descriptor?? [ 334.457397][ T6004] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.462442][ T9783] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 334.479055][ T6004] usb 2-1: Product: syz [ 334.497251][ T6004] usb 2-1: Manufacturer: syz [ 334.497486][ T5939] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input68 [ 334.520405][ T6004] usb 2-1: SerialNumber: syz [ 334.549205][ T6004] usb 2-1: config 0 descriptor?? [ 334.583657][ T5946] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 334.661651][ T6004] vmk80xx 2-1:0.255: driver 'vmk80xx' failed to auto-configure device. [ 334.677218][ T6004] vmk80xx 2-1:0.255: probe with driver vmk80xx failed with error -22 [ 334.703555][ T44] usb 5-1: USB disconnect, device number 76 [ 334.703706][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 334.711208][ T5932] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 334.761043][ T5946] usb 4-1: Using ep0 maxpacket: 8 [ 334.773982][ T5946] usb 4-1: config 1 has an invalid interface number: 5 but max is 2 [ 334.784385][ T5946] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 334.810462][ T5946] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 334.821581][ T5946] usb 4-1: config 1 has no interface number 1 [ 334.828598][ T5946] usb 4-1: too many endpoints for config 1 interface 5 altsetting 3: 196, using maximum allowed: 30 [ 334.900997][ T5946] usb 4-1: config 1 interface 5 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 196 [ 334.915570][ T5946] usb 4-1: config 1 interface 5 has no altsetting 0 [ 334.928924][ T5946] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 334.939450][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.947651][ T5946] usb 4-1: Product: syz [ 334.952065][ T5946] usb 4-1: Manufacturer:  [ 334.958404][ T5932] usb 1-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 334.970105][ T5932] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 334.981886][ T5946] usb 4-1: SerialNumber: syz [ 334.986441][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 334.999182][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 335.020615][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 25304, setting to 64 [ 335.032592][ T5932] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 335.053098][ T5932] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 335.062701][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.092644][ T5932] usb 1-1: Product: syz [ 335.099885][ T5932] usb 1-1: Manufacturer: syz [ 335.107398][ T5932] usb 1-1: SerialNumber: syz [ 335.116808][ T5932] usb 1-1: config 0 descriptor?? [ 335.123402][ T9791] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 335.133754][ T9791] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 335.231527][ T5946] usb 4-1: 0:2 : does not exist [ 335.260059][ T5946] usb 4-1: USB disconnect, device number 66 [ 335.329553][ T6587] udevd[6587]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 335.416521][ T6004] usb 3-1: USB disconnect, device number 81 [ 336.164947][ T5946] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 336.196516][ T9804] netlink: 'syz.2.937': attribute type 4 has an invalid length. [ 336.204566][ T9804] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.937'. [ 336.258374][ T9809] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.524648][ T5946] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x85 has an invalid bInterval 83, changing to 10 [ 336.571806][ T5946] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x85 has invalid maxpacket 42451, setting to 1024 [ 336.599073][ T9815] netlink: 56 bytes leftover after parsing attributes in process `syz.3.940'. [ 336.608063][ T5946] usb 5-1: config 0 interface 0 has no altsetting 0 [ 336.636042][ T5946] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 336.678141][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.718319][ T5946] usb 5-1: Product: syz [ 336.722585][ T5946] usb 5-1: Manufacturer: syz [ 336.727470][ T5946] usb 5-1: SerialNumber: syz [ 336.740380][ T5946] usb 5-1: config 0 descriptor?? [ 336.755369][ T9802] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 336.760743][ T44] usb 2-1: USB disconnect, device number 75 [ 336.777322][ T5946] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected [ 336.788615][ T5946] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87 [ 336.797635][ T5946] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 336.816125][ T5946] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 336.909493][ T5946] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 336.919071][ T5946] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 336.952095][ T5946] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 337.017830][ T5946] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 337.048335][ T5946] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 337.183630][ T5946] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 337.216211][ T5946] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 337.272317][ T5946] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86 [ 337.301738][ T5946] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 337.342740][ T5946] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 337.583611][ T5932] rc_core: IR keymap rc-snapstream-firefly not found [ 337.593533][ T5932] Registered IR keymap rc-empty [ 337.616099][ T5932] rc rc0: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 337.629966][ T5932] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input69 [ 337.668192][ T5932] input: syz syz mouse as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input70 [ 337.770668][ T5932] usb 1-1: USB disconnect, device number 75 [ 337.776736][ C1] ati_remote 1-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 338.627854][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 7 prio class 2 [ 338.637749][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 338.646184][ C0] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 338.654699][ C0] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 338.663069][ C0] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 338.671500][ C0] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 338.679904][ C0] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 338.688777][ C0] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 339.132531][ T10] usb 5-1: USB disconnect, device number 77 [ 339.224140][ T10] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 339.245447][ T5946] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 339.323792][ T5932] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 339.373187][ T10] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 339.531755][ T10] keyspan 5-1:0.0: device disconnected [ 339.537393][ T5946] usb 4-1: Using ep0 maxpacket: 32 [ 339.563651][ T5932] usb 1-1: Using ep0 maxpacket: 8 [ 339.576436][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 339.590553][ T5946] usb 4-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=cb.d7 [ 339.601477][ T5932] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 339.731605][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 339.757475][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 339.854489][ T5946] usb 4-1: Product: syz [ 339.858793][ T5946] usb 4-1: Manufacturer: syz [ 339.863951][ T5946] usb 4-1: SerialNumber: syz [ 339.877095][ T5932] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 339.882902][ T5946] usb 4-1: config 0 descriptor?? [ 339.893734][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.901649][ T5946] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 340.002290][ T30] audit: type=1804 audit(1758710865.496:411): pid=9862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.949" name="file0" dev="ramfs" ino=35900 res=1 errno=0 [ 340.042634][ T5946] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 340.056508][ T5932] usb 1-1: Product: syz [ 340.056529][ T5932] usb 1-1: Manufacturer: syz [ 340.056543][ T5932] usb 1-1: SerialNumber: syz [ 340.072880][ T5932] usb 1-1: config 0 descriptor?? [ 340.082703][ T5932] radioshark 1-1:0.0: Invalid radioSHARK device [ 340.130777][ T5932] radioshark 1-1:0.0: probe with driver radioshark failed with error -22 [ 340.206268][ T5932] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 340.292096][ T5932] usb 1-1: USB disconnect, device number 76 [ 341.551854][ T9868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.950'. [ 341.803507][ T5932] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 342.020000][ T5932] usb 1-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 342.065216][ T5932] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 342.113531][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 342.147061][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 342.177352][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 25304, setting to 64 [ 342.235913][ T5932] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 342.312216][ T5932] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 342.330380][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.345855][ T5946] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 342.370368][ T5932] usb 1-1: Product: syz [ 342.383698][ T5932] usb 1-1: Manufacturer: syz [ 342.399381][ T5932] usb 1-1: SerialNumber: syz [ 342.422139][ T5932] usb 1-1: config 0 descriptor?? [ 342.432013][ T9868] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 342.448404][ T9868] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 342.456990][ T24] usb 4-1: USB disconnect, device number 67 [ 342.526579][ T5946] usb 5-1: Using ep0 maxpacket: 16 [ 342.565341][ T5946] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.629573][ T5946] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.663304][ T5946] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 342.700417][ T5946] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 342.720594][ T5946] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 342.730658][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 342.744116][ T5946] usb 5-1: SerialNumber: syz [ 342.776876][ T5946] hub 5-1:1.0: bad descriptor, ignoring hub [ 342.783605][ T5946] hub 5-1:1.0: probe with driver hub failed with error -5 [ 342.806274][ T5946] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 342.841951][ T30] audit: type=1326 audit(1758710868.376:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9894 comm="syz.2.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b80b8eec9 code=0x7ffc0000 [ 342.864442][ C0] vkms_vblank_simulate: vblank timer overrun [ 342.872672][ T30] audit: type=1326 audit(1758710868.376:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9894 comm="syz.2.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b80b8eec9 code=0x7ffc0000 [ 342.873722][ T24] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 342.904010][ T30] audit: type=1326 audit(1758710868.406:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9894 comm="syz.2.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f2b80b8eec9 code=0x7ffc0000 [ 342.946162][ T30] audit: type=1326 audit(1758710868.406:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9894 comm="syz.2.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b80b8eec9 code=0x7ffc0000 [ 343.000992][ T30] audit: type=1326 audit(1758710868.436:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9894 comm="syz.2.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b80b8eec9 code=0x7ffc0000 [ 343.026210][ T30] audit: type=1326 audit(1758710868.436:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9894 comm="syz.2.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f2b80b8eec9 code=0x7ffc0000 [ 343.048493][ T30] audit: type=1326 audit(1758710868.436:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9894 comm="syz.2.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b80b8eec9 code=0x7ffc0000 [ 343.071768][ T30] audit: type=1326 audit(1758710868.436:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9894 comm="syz.2.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2b80b8eec9 code=0x7ffc0000 [ 343.095669][ T30] audit: type=1326 audit(1758710868.436:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9894 comm="syz.2.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b80b8eec9 code=0x7ffc0000 [ 343.146036][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 343.154704][ T24] usb 4-1: not running at top speed; connect to a high speed hub [ 343.163573][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 343.175119][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 343.188382][ T24] usb 4-1: string descriptor 0 read error: -22 [ 343.194869][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 343.205185][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.223527][ T5939] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 343.226626][ T24] usb 4-1: 0:2 : does not exist [ 343.331726][ T9899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.340894][ T9899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.353633][ T9899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.362838][ T9899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.373698][ T5939] usb 3-1: Using ep0 maxpacket: 8 [ 343.377816][ T9899] netlink: 28 bytes leftover after parsing attributes in process `syz.4.955'. [ 343.388393][ T9899] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 343.390824][ T5939] usb 3-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5 [ 343.414693][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.422720][ T5939] usb 3-1: Product: syz [ 343.427839][ T5939] usb 3-1: Manufacturer: syz [ 343.432501][ T5939] usb 3-1: SerialNumber: syz [ 343.440183][ T5939] usb 3-1: config 0 descriptor?? [ 343.451334][ T5939] pwc: Philips PCVC720K/40 (ToUCam XS) USB webcam detected. [ 344.051511][ T24] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 344.068618][ T24] usb 4-1: Warning! Unlikely big volume range (=7680), cval->res is probably wrong. [ 344.100586][ T24] usb 4-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/7680/1 [ 344.124701][ T24] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 344.140685][ T24] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 344.159204][ T5939] pwc: send_video_command error -71 [ 344.174222][ T5939] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 344.216005][ T5939] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 344.238948][ T5939] usb 3-1: USB disconnect, device number 82 [ 344.277907][ T24] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 344.310549][ T24] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 344.349586][ T24] usb 4-1: USB disconnect, device number 68 [ 344.352700][ T9909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.964'. [ 344.503549][ T5946] usb 2-1: new low-speed USB device number 76 using dummy_hcd [ 344.654738][ T5946] usb 2-1: Invalid ep0 maxpacket: 64 [ 344.674756][ T5932] rc_core: IR keymap rc-snapstream-firefly not found [ 344.681488][ T5932] Registered IR keymap rc-empty [ 344.691363][ T5932] rc rc0: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 344.702047][ T5932] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input71 [ 344.719613][ T5932] input: syz syz mouse as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input72 [ 344.754051][ T5932] usb 1-1: USB disconnect, device number 77 [ 344.760039][ C1] ati_remote 1-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 344.783663][ T5946] usb 2-1: new low-speed USB device number 77 using dummy_hcd [ 344.946644][ T5946] usb 2-1: Invalid ep0 maxpacket: 64 [ 344.958360][ T5946] usb usb2-port1: attempt power cycle [ 345.013970][ T24] usb 5-1: USB disconnect, device number 78 [ 345.147541][ T5932] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 345.315284][ T5946] usb 2-1: new low-speed USB device number 78 using dummy_hcd [ 345.343647][ T5939] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 345.368892][ T9931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.969'. [ 345.389961][ T5932] usb 1-1: config index 0 descriptor too short (expected 16536, got 36) [ 345.393653][ T5946] usb 2-1: Invalid ep0 maxpacket: 64 [ 345.400127][ T5932] usb 1-1: config 204 has 1 interface, different from the descriptor's value: 10 [ 345.416909][ T5932] usb 1-1: config 204 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 345.432400][ T9932] netlink: 28 bytes leftover after parsing attributes in process `syz.2.969'. [ 345.508107][ T5932] usb 1-1: config 204 interface 0 has no altsetting 0 [ 345.633695][ T5939] usb 5-1: Using ep0 maxpacket: 16 [ 345.640455][ T5939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.676876][ T5939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.692649][ T5932] usb 1-1: New USB device found, idVendor=0eef, idProduct=a001, bcdDevice= 0.40 [ 345.703548][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.711625][ T5932] usb 1-1: Product: syz [ 345.711768][ T5946] usb 2-1: new low-speed USB device number 79 using dummy_hcd [ 345.729225][ T5932] usb 1-1: Manufacturer: ⱈ㇚跠㻜늂缾펹髝ࣳ钗莦炑겧掝⥉蔤߰촨먨᪄穸㙕坯㝆⌢댰⑸ଡ଼ [ 345.729230][ T5939] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 345.729274][ T5939] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 345.766259][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.783923][ T5946] usb 2-1: Invalid ep0 maxpacket: 64 [ 345.789684][ T5946] usb usb2-port1: unable to enumerate USB device [ 345.938555][ T5932] usb 1-1: SerialNumber: syz [ 345.946910][ T5939] usb 5-1: config 0 descriptor?? [ 346.197835][ T5932] usbhid 1-1:204.0: can't add hid device: -71 [ 346.204807][ T5932] usbhid 1-1:204.0: probe with driver usbhid failed with error -71 [ 346.238815][ T5932] usb 1-1: USB disconnect, device number 78 [ 346.713644][ T980] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 346.733612][ T5946] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 346.925933][ T5946] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.941297][ T980] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 346.951293][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.963471][ T5946] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 346.975244][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.989789][ T980] usb 3-1: config 0 descriptor?? [ 347.000619][ T5946] usb 4-1: Product: syz [ 347.019957][ T5946] usb 4-1: Manufacturer: syz [ 347.032224][ T5946] usb 4-1: SerialNumber: syz [ 347.049289][ T5946] usb 4-1: config 0 descriptor?? [ 347.211493][ T9942] binder: 9941:9942 ioctl c00c620f 200000000340 returned -22 [ 347.305617][ T9940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.338592][ T9940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.359033][ T980] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 347.378031][ T10] usb 4-1: USB disconnect, device number 69 [ 347.560845][ T980] [drm:udl_init] *ERROR* Selecting channel failed [ 347.649774][ T980] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 347.659231][ T980] [drm] Initialized udl on minor 2 [ 347.679414][ T980] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 347.709264][ T980] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 347.730210][ T10] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 347.769910][ T980] usb 3-1: USB disconnect, device number 83 [ 347.783831][ T5946] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 347.848697][ T10] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 348.113669][ T5864] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 348.290396][ T5864] usb 1-1: Using ep0 maxpacket: 32 [ 348.323739][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.376026][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.442861][ T5939] usbhid 5-1:0.0: can't add hid device: -71 [ 348.453598][ T5864] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 348.475350][ T5939] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 348.488898][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.515983][ T5939] usb 5-1: USB disconnect, device number 79 [ 348.551278][ T5864] usb 1-1: config 0 descriptor?? [ 348.676033][ T9966] netlink: 24 bytes leftover after parsing attributes in process `syz.3.979'. [ 348.973737][ T980] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 348.991019][ T5864] savu 0003:1E7D:2D5A.0016: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 349.016342][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 349.016359][ T30] audit: type=1326 audit(1758710874.556:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9950 comm="syz.0.975" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6a0178eec9 code=0x0 [ 349.033649][ T5939] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 349.099299][ T5932] usb 1-1: USB disconnect, device number 79 [ 349.162291][ T980] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 349.186443][ T980] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 349.221564][ T9973] fido_id[9973]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 349.228400][ T980] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 349.245550][ T980] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 349.258314][ T980] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 349.269680][ T5939] usb 5-1: Using ep0 maxpacket: 8 [ 349.292671][ T5939] usb 5-1: config 0 has an invalid interface number: 111 but max is 0 [ 349.327231][ T5939] usb 5-1: config 0 has an invalid interface number: 142 but max is 0 [ 349.347368][ T980] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 349.367762][ T5939] usb 5-1: config 0 has an invalid descriptor of length 180, skipping remainder of the config [ 349.383362][ T980] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 349.402262][ T5939] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 349.418887][ T980] usb 4-1: Product: syz [ 349.430640][ T980] usb 4-1: Manufacturer: syz [ 349.443549][ T5939] usb 5-1: config 0 has no interface number 0 [ 349.459935][ T980] cdc_wdm 4-1:1.0: skipping garbage [ 349.471253][ T5939] usb 5-1: config 0 has no interface number 1 [ 349.479626][ T980] cdc_wdm 4-1:1.0: skipping garbage [ 349.489847][ T5939] usb 5-1: config 0 interface 111 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 349.506694][ T980] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 349.513350][ T980] cdc_wdm 4-1:1.0: Unknown control protocol [ 349.519747][ T5939] usb 5-1: config 0 interface 111 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 349.537501][ T5939] usb 5-1: too many endpoints for config 0 interface 142 altsetting 252: 39, using maximum allowed: 30 [ 349.549499][ T5939] usb 5-1: config 0 interface 142 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 39 [ 349.585211][ T5939] usb 5-1: config 0 interface 142 has no altsetting 0 [ 349.604100][ T5939] usb 5-1: New USB device found, idVendor=2357, idProduct=0201, bcdDevice=d8.6c [ 349.618002][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.633284][ T5939] usb 5-1: Product: syz [ 349.638167][ T5939] usb 5-1: Manufacturer: syz [ 349.643140][ T5939] usb 5-1: SerialNumber: syz [ 349.652657][ T5939] usb 5-1: config 0 descriptor?? [ 349.687312][ T5939] option 5-1:0.111: GSM modem (1-port) converter detected [ 349.936910][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 349.943525][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 349.949768][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 349.956353][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 349.962778][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 349.969384][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 349.975727][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 349.982336][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 349.989253][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 349.995866][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 350.002153][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 350.008752][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 350.015398][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 350.021998][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 350.029441][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 350.036049][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 350.043506][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 350.050118][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 350.056469][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 350.063078][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 350.074204][ T9] usb 4-1: USB disconnect, device number 70 [ 350.080164][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 350.444053][ T5864] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 350.656246][ T5864] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 350.671459][ T5864] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 350.693863][ T5864] usb 1-1: config 0 has no interface number 0 [ 350.702619][ T5864] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 350.716727][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.726628][ T5864] usb 1-1: Product: syz [ 350.731089][ T5864] usb 1-1: Manufacturer: syz [ 350.737472][ T5864] usb 1-1: SerialNumber: syz [ 350.752530][ T5864] usb 1-1: config 0 descriptor?? [ 350.797790][ T5864] usb 1-1: Found UVC 0.00 device syz (046d:0823) [ 350.806216][ T5864] usb 1-1: No valid video chain found. [ 351.003821][ T5864] usb 1-1: USB disconnect, device number 80 [ 351.639206][ T5939] option 5-1:0.142: GSM modem (1-port) converter detected [ 351.680427][ T5939] usb 5-1: USB disconnect, device number 80 [ 351.714627][ T5939] option 5-1:0.111: device disconnected [ 351.774773][ T5939] option 5-1:0.142: device disconnected [ 352.037547][T10010] netlink: 32 bytes leftover after parsing attributes in process `syz.4.988'. [ 352.367349][T10013] netlink: 132 bytes leftover after parsing attributes in process `syz.1.989'. [ 353.143649][ T5946] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 353.323517][ T5946] usb 1-1: device descriptor read/64, error -71 [ 353.644318][ T5946] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 353.785900][T10037] netlink: 56 bytes leftover after parsing attributes in process `syz.1.996'. [ 353.796969][ T5946] usb 1-1: device descriptor read/64, error -71 [ 353.892656][ T30] audit: type=1800 audit(1758710879.426:489): pid=10029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.993" name="bus" dev="ramfs" ino=37172 res=0 errno=0 [ 353.950468][ T5946] usb usb1-port1: attempt power cycle [ 354.033741][ T24] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 354.193597][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 354.230722][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 354.293466][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 354.350520][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 354.373608][ T5946] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 354.379851][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.424336][ T5946] usb 1-1: device descriptor read/8, error -71 [ 354.430965][ T24] usb 2-1: Product: syz [ 354.542451][ T24] usb 2-1: Manufacturer: syz [ 354.566567][ T24] usb 2-1: SerialNumber: syz [ 354.664103][ T5946] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 354.710485][ T5946] usb 1-1: device descriptor read/8, error -71 [ 354.898857][ T5946] usb usb1-port1: unable to enumerate USB device [ 354.944569][ T24] usb 2-1: 0:2 : does not exist [ 355.053719][ T24] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 355.111395][ T24] usb 2-1: USB disconnect, device number 81 [ 355.325642][ T5946] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 355.555036][ T5946] usb 3-1: Using ep0 maxpacket: 16 [ 355.570397][ T5946] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBB, changing to 0x8B [ 355.582073][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 355.593817][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 355.607282][ T5946] usb 3-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 355.619558][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.638822][ T5946] usb 3-1: Product: syz [ 355.653759][ T5946] usb 3-1: Manufacturer: syz [ 355.658382][ T5946] usb 3-1: SerialNumber: syz [ 355.773617][ T24] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 355.774561][ T5946] usb 3-1: config 0 descriptor?? [ 355.934494][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 355.956007][ T24] usb 4-1: config 0 has an invalid interface number: 8 but max is -1 [ 355.977651][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 356.006078][ T24] usb 4-1: config 0 has no interface number 0 [ 356.012268][ T24] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 356.030376][ T24] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 356.051928][ T24] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=ce.8f [ 356.067966][ T24] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 356.077029][T10072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1006'. [ 356.086539][ T24] usb 4-1: Product: syz [ 356.090722][ T24] usb 4-1: SerialNumber: syz [ 356.092789][T10053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.107827][ T24] usb 4-1: config 0 descriptor?? [ 356.132714][ T24] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 356.165374][T10053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.198741][ T5946] usb 3-1: USB disconnect, device number 84 [ 356.336196][ T24] usb 4-1: USB disconnect, device number 71 [ 356.423703][ T5864] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 356.586025][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 356.628577][ T5864] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 356.676026][ T5864] usb 5-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00 [ 356.688025][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.699260][ T5864] usb 5-1: config 0 descriptor?? [ 356.718385][T10075] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 356.994998][T10075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1007'. [ 357.256203][ T5954] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 357.429805][ T5954] usb 3-1: Using ep0 maxpacket: 16 [ 357.441618][ T5954] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 357.452112][ T5954] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 357.475728][ T5954] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 357.486902][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.500828][ T5954] usb 3-1: Product: syz [ 357.510084][ T5954] usb 3-1: Manufacturer: syz [ 357.532907][ T5954] usb 3-1: SerialNumber: syz [ 357.968723][ T5954] usb 3-1: 0:2 : does not exist [ 358.466186][ T5954] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 358.567903][ T5954] usb 3-1: USB disconnect, device number 85 [ 358.745680][ T6587] udevd[6587]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 359.129701][ T5864] usbhid 5-1:0.0: can't add hid device: -71 [ 359.160860][ T5864] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 359.208123][ T5864] usb 5-1: USB disconnect, device number 81 [ 359.813532][ T5954] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 359.813551][ T5864] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 359.985778][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.993498][ T5954] usb 3-1: Using ep0 maxpacket: 16 [ 360.009817][T10119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.025709][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.045257][T10121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.055297][ T5864] usb 5-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 360.060105][ T5954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.075823][T10119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.114606][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.135457][T10121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.155852][ T5864] usb 5-1: config 0 descriptor?? [ 360.223625][ T5954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.233590][ T5939] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 360.348163][ T5954] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 360.476858][ T5954] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 360.606110][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.623843][ T5864] usbhid 5-1:0.0: can't add hid device: -71 [ 360.660478][ T5864] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 360.679281][ T5954] usb 3-1: config 0 descriptor?? [ 360.745843][ T5864] usb 5-1: USB disconnect, device number 82 [ 360.983908][ T5946] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 361.153828][ T24] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 361.182395][ T5946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.272774][ T5946] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 361.336824][T10134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.354855][T10134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.429203][ T5946] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 361.512899][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.606226][ T5946] usb 4-1: config 0 descriptor?? [ 362.045535][ T5946] kovaplus 0003:1E7D:2D50.0017: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 362.105424][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 362.129641][ T24] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 362.162188][ T24] usb 1-1: can't read configurations, error -71 [ 362.237138][ T30] audit: type=1326 audit(1758710887.776:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.4.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589978eec9 code=0x7ffc0000 [ 362.300512][T10152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.337781][ T5954] usbhid 3-1:0.0: can't add hid device: -71 [ 362.347756][ T5954] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 362.365535][T10152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.374399][ T30] audit: type=1326 audit(1758710887.776:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.4.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589978eec9 code=0x7ffc0000 [ 362.451131][ T5954] usb 3-1: USB disconnect, device number 86 [ 362.452429][T10152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.473394][T10152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.518776][ T30] audit: type=1326 audit(1758710887.806:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.4.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f589978eec9 code=0x7ffc0000 [ 362.566736][T10154] loop9: detected capacity change from 0 to 7 [ 362.584011][ T30] audit: type=1326 audit(1758710887.806:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.4.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589978eec9 code=0x7ffc0000 [ 362.606978][ T30] audit: type=1326 audit(1758710887.806:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.4.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589978eec9 code=0x7ffc0000 [ 362.610494][T10154] Dev loop9: unable to read RDB block 7 [ 362.632064][ T30] audit: type=1326 audit(1758710887.806:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.4.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f589978eec9 code=0x7ffc0000 [ 362.662729][ T30] audit: type=1326 audit(1758710887.806:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.4.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589978eec9 code=0x7ffc0000 [ 362.692590][T10154] loop9: unable to read partition table [ 362.706591][T10154] loop9: partition table beyond EOD, truncated [ 362.736193][T10154] loop_reread_partitions: partition scan of loop9 (3 xC) failed (rc=-5) [ 362.782187][ T7270] Dev loop9: unable to read RDB block 7 [ 362.789785][ T7270] loop9: unable to read partition table [ 362.838857][ T7270] loop9: partition table beyond EOD, truncated [ 362.864750][T10163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.894104][T10163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.013619][T10156] Dev loop9: unable to read RDB block 7 [ 363.019323][T10156] loop9: unable to read partition table [ 363.029150][T10156] loop9: partition table beyond EOD, truncated [ 363.042389][T10156] loop_reread_partitions: partition scan of loop9 (3 xC) failed (rc=-5) [ 363.073573][ T9] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 363.363656][ T9] usb 3-1: device descriptor read/64, error -71 [ 363.663561][ T9] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 363.691233][ T5946] kovaplus 0003:1E7D:2D50.0017: couldn't init struct kovaplus_device [ 363.714906][T10172] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1030'. [ 363.725996][ T5946] kovaplus 0003:1E7D:2D50.0017: couldn't install mouse [ 363.758676][ T5946] kovaplus 0003:1E7D:2D50.0017: probe with driver kovaplus failed with error -71 [ 363.792109][ T5946] usb 4-1: USB disconnect, device number 72 [ 363.824125][ T9] usb 3-1: device descriptor read/64, error -71 [ 363.944026][ T9] usb usb3-port1: attempt power cycle [ 364.163717][ T5946] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 364.383250][ T9] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 364.424353][ T9] usb 3-1: device descriptor read/8, error -71 [ 364.490576][ T5946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.500642][ T5946] usb 4-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 364.519310][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.636106][ T5946] usb 4-1: config 0 descriptor?? [ 364.704093][ T5864] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 364.763546][ T9] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 364.784319][ T9] usb 3-1: device descriptor read/8, error -71 [ 364.845591][ T5946] usbhid 4-1:0.0: can't add hid device: -71 [ 364.875184][ T5946] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 364.891922][ T5864] usb 5-1: Using ep0 maxpacket: 8 [ 364.919360][ T5864] usb 5-1: unable to get BOS descriptor or descriptor too short [ 364.944543][ T9] usb usb3-port1: unable to enumerate USB device [ 364.953664][ T5864] usb 5-1: config 152 has an invalid interface number: 136 but max is 0 [ 364.974190][ T5946] usb 4-1: USB disconnect, device number 73 [ 364.988218][ T5864] usb 5-1: config 152 has an invalid interface association descriptor of length 5, skipping [ 365.029502][ T5864] usb 5-1: config 152 has no interface number 0 [ 365.111685][ T5864] usb 5-1: config 152 interface 136 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 365.111720][ T5864] usb 5-1: config 152 interface 136 has no altsetting 0 [ 365.115799][ T5864] usb 5-1: New USB device found, idVendor=067b, idProduct=0000, bcdDevice=44.42 [ 365.115827][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.115845][ T5864] usb 5-1: Product: syz [ 365.115860][ T5864] usb 5-1: Manufacturer: syz [ 365.115874][ T5864] usb 5-1: SerialNumber: syz [ 366.303576][ T24] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 366.635629][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 367.042872][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.042905][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.042927][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 367.042966][ T24] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 367.042986][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.047181][ T24] usb 3-1: config 0 descriptor?? [ 368.792419][ T5864] plusb 5-1:152.136: probe with driver plusb failed with error -22 [ 368.855111][ T5864] usb 5-1: USB disconnect, device number 83 [ 369.184011][T10236] binder: 10235:10236 unknown command 0 [ 369.194054][T10236] binder: 10235:10236 ioctl c0306201 200000000080 returned -22 [ 369.660734][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 369.667519][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 369.675984][ T44] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 369.717683][ T24] usb 3-1: USB disconnect, device number 91 [ 369.726918][ T6004] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 369.833733][ T44] usb 4-1: device descriptor read/64, error -71 [ 369.973270][ T6004] usb 2-1: Using ep0 maxpacket: 8 [ 370.001587][ T6004] usb 2-1: unable to get BOS descriptor or descriptor too short [ 370.028245][ T6004] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 370.061076][ T6004] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 370.103952][ T44] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 370.117017][ T6004] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 370.137281][ T6004] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 370.150087][ T6004] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 370.196872][ T6004] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 370.244593][ T6004] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 370.255645][ T44] usb 4-1: device descriptor read/64, error -71 [ 370.282932][ T6004] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 370.292253][ T6004] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.305999][ T6004] usb 2-1: Product: syz [ 370.310165][ T6004] usb 2-1: Manufacturer: syz [ 370.317114][ T6004] usb 2-1: SerialNumber: syz [ 370.332916][ T6004] usb 2-1: config 0 descriptor?? [ 370.354683][T10240] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 370.363669][ T24] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 370.371556][ T44] usb usb4-port1: attempt power cycle [ 370.378051][ T6004] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 370.481621][T10256] sctp: [Deprecated]: syz.4.1048 (pid 10256) Use of struct sctp_assoc_value in delayed_ack socket option. [ 370.481621][T10256] Use struct sctp_sack_info instead [ 370.486775][ T6004] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 370.541304][ T24] usb 3-1: config 0 has no interfaces? [ 370.551089][ T24] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 370.560395][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.571704][ T24] usb 3-1: Product: syz [ 370.582851][ T24] usb 3-1: Manufacturer: syz [ 370.640141][ T24] usb 3-1: SerialNumber: syz [ 370.660817][ T6004] usb 2-1: USB disconnect, device number 83 [ 370.726842][ T24] usb 3-1: config 0 descriptor?? [ 370.743808][ T44] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 370.786906][ T44] usb 4-1: device descriptor read/8, error -71 [ 370.812688][ T5988] udevd[5988]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 371.026767][T10258] netlink: 'syz.4.1049': attribute type 5 has an invalid length. [ 371.035927][ T44] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 371.066903][ T44] usb 4-1: device descriptor read/8, error -71 [ 371.096004][T10258] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1049'. [ 371.193269][ T44] usb usb4-port1: unable to enumerate USB device [ 371.205402][T10258] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1049'. [ 371.366715][T10265] loop4: detected capacity change from 0 to 14 [ 371.458358][T10265] Dev loop4: unable to read RDB block 14 [ 371.464358][T10265] loop4: unable to read partition table [ 371.471797][T10265] loop4: partition table beyond EOD, truncated [ 371.481629][T10271] netlink: 408 bytes leftover after parsing attributes in process `syz.1.1050'. [ 371.545949][T10265] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 371.582584][T10272] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1050'. [ 371.981544][T10281] openvswitch: netlink: Duplicate or invalid key (type 0). [ 372.007825][T10281] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.416430][T10286] netlink: 'syz.0.1053': attribute type 2 has an invalid length. [ 372.948042][ T5864] usb 3-1: USB disconnect, device number 92 [ 373.235156][ T5946] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 373.453837][ T5946] usb 5-1: Using ep0 maxpacket: 16 [ 373.475806][ T5946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.512508][T10306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1060'. [ 373.691058][ T5946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.813489][ T44] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 373.863546][ T5946] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 373.910239][ T5946] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 373.937299][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.975983][ T44] usb 2-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 374.002117][ T44] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 374.030096][ T5946] usb 5-1: config 0 descriptor?? [ 374.043059][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 374.113868][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 374.320836][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 25304, setting to 64 [ 374.566410][T10316] fuse: Bad value for 'user_id' [ 374.571447][T10316] fuse: Bad value for 'user_id' [ 374.684736][ T44] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 374.711708][ T44] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 374.721248][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.740153][ T44] usb 2-1: Product: syz [ 374.773025][ T44] usb 2-1: Manufacturer: syz [ 374.797436][ T44] usb 2-1: SerialNumber: syz [ 375.244027][T10309] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 375.440203][ T44] usb 2-1: config 0 descriptor?? [ 375.496437][ T5864] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 375.503899][T10306] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 375.511451][T10306] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 375.737461][ T5864] usb 3-1: Using ep0 maxpacket: 16 [ 375.769555][ T5864] usb 3-1: config 0 has an invalid descriptor of length 57, skipping remainder of the config [ 375.791138][ T5864] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 375.816596][ T5864] usb 3-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 375.929154][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.978906][ T5864] usb 3-1: config 0 descriptor?? [ 376.676108][ T5946] usbhid 5-1:0.0: can't add hid device: -71 [ 376.682212][ T5946] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 376.731552][ T5946] usb 5-1: USB disconnect, device number 84 [ 376.918409][T10338] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 376.932901][T10338] trusted_key: encrypted_key: master key parameter 'dz' is invalid [ 377.213561][ T5946] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 377.701346][T10349] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 377.785993][ T5946] usb 1-1: Using ep0 maxpacket: 16 [ 377.815257][ T5946] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 377.827011][ T5946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 7 [ 377.893274][ T44] rc_core: IR keymap rc-snapstream-firefly not found [ 378.013620][ T44] Registered IR keymap rc-empty [ 378.019309][ T44] rc rc0: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 378.215038][ T44] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input75 [ 378.229091][ T5946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 1797, setting to 1024 [ 378.249073][ T5946] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 378.251860][ T44] input: syz syz mouse as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input76 [ 378.260011][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.356974][ T44] usb 2-1: USB disconnect, device number 84 [ 378.362945][ C1] ati_remote 2-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 378.392596][ T6004] usb 3-1: USB disconnect, device number 93 [ 378.592614][T10358] tipc: Started in network mode [ 378.603508][T10358] tipc: Node identity 7f000001, cluster identity 4711 [ 378.623728][ T5946] usb 1-1: Product: syz [ 378.624670][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.627907][ T5946] usb 1-1: Manufacturer: syz [ 378.642510][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.648874][ T5946] usb 1-1: SerialNumber: syz [ 378.655601][T10358] tipc: New replicast peer: 0.0.0.0 [ 378.662441][ T5946] usb 1-1: config 0 descriptor?? [ 378.672342][ T5946] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 378.682192][ T5946] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 378.703770][T10358] tipc: Enabled bearer , priority 10 [ 379.466920][ T5946] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 379.477039][ T5946] em28xx 1-1:0.0: Config register raw data: 0x97 [ 379.597152][ T24] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 379.690991][ T5946] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 379.765769][ T5946] em28xx 1-1:0.0: No AC97 audio processor [ 379.775800][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.800414][ T9] tipc: Node number set to 2130706433 [ 379.803977][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 379.848051][T10370] binder_alloc: binder_alloc_mmap_handler: 10367 200000ffd000-200001000000 already mapped failed -16 [ 379.876094][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 379.984102][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 380.000654][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 380.011636][ T24] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 380.020868][ T24] usb 3-1: Manufacturer: syz [ 380.033668][ T5946] usb 1-1: USB disconnect, device number 87 [ 380.040793][ T24] usb 3-1: config 0 descriptor?? [ 380.068387][ T5946] em28xx 1-1:0.0: Disconnecting em28xx [ 380.095352][ T5946] em28xx 1-1:0.0: Freeing device [ 380.293540][ T9] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 380.397769][ T24] rc_core: IR keymap rc-hauppauge not found [ 380.413674][ T24] Registered IR keymap rc-empty [ 380.442628][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 380.444450][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 380.458683][ T9] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 380.599254][ T9] usb 4-1: config 0 has no interface number 0 [ 380.609002][ T9] usb 4-1: config 0 interface 89 has no altsetting 0 [ 380.618219][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 380.629666][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.719980][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 380.764751][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 380.860713][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input77 [ 380.943504][ T9] usb 4-1: Product: syz [ 380.949759][ T9] usb 4-1: Manufacturer: syz [ 380.989249][ T9] usb 4-1: SerialNumber: syz [ 381.013664][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 381.016251][ T9] usb 4-1: config 0 descriptor?? [ 381.059408][ T9] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 381.073749][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 381.124404][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 381.150779][ T9] em28xx 4-1:0.89: Video interface 89 found: bulk [ 381.183828][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 381.231640][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 381.300202][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 381.340599][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 381.373862][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 381.415719][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 381.484043][ T980] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 381.538084][ T9] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 381.553731][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 381.580512][ T44] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 381.590007][ T24] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 381.619953][ T24] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 381.646247][ T980] usb 1-1: device descriptor read/64, error -71 [ 381.763538][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 381.841789][ T9] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 381.868324][ T9] em28xx 4-1:0.89: board has no eeprom [ 381.877732][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.889228][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.903593][ T980] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 381.911577][ T44] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 381.972143][ T44] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 382.020190][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.067443][ T44] usb 2-1: config 0 descriptor?? [ 382.083640][ T980] usb 1-1: device descriptor read/64, error -71 [ 382.274032][ T980] usb usb1-port1: attempt power cycle [ 382.384949][ T9] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 382.396396][ T9] em28xx 4-1:0.89: analog set to bulk mode. [ 382.402483][ T5864] em28xx 4-1:0.89: Registering V4L2 extension [ 382.688347][ T24] usb 3-1: USB disconnect, device number 94 [ 382.718285][ T5864] em28xx 4-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 382.738413][ T5864] em28xx 4-1:0.89: read from i2c device at 0x48 failed with unknown error (status=64) [ 382.748261][ T980] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 382.800653][ T980] usb 1-1: device descriptor read/8, error -71 [ 383.055122][ T980] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 383.148536][ T9] usb 4-1: USB disconnect, device number 78 [ 383.155962][ T5864] em28xx 4-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 383.170362][ T9] em28xx 4-1:0.89: Disconnecting em28xx [ 383.178623][ T5864] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 383.197344][ T5864] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 383.220165][ T980] usb 1-1: device descriptor read/8, error -71 [ 383.246376][ T5864] em28xx 4-1:0.89: No AC97 audio processor [ 383.279848][ T5864] usb 4-1: Decoder not found [ 383.331227][ T5864] em28xx 4-1:0.89: failed to create media graph [ 383.347424][ T5864] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 383.363677][ T980] usb usb1-port1: unable to enumerate USB device [ 383.394302][ T5864] em28xx 4-1:0.89: Registering snapshot button... [ 383.394719][T10403] ================================================================== [ 383.408799][T10403] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430 [ 383.416156][T10403] Read of size 8 at addr ffff888031f00740 by task v4l_id/10403 [ 383.423677][T10403] [ 383.426039][T10403] CPU: 1 UID: 0 PID: 10403 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 383.426053][T10403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 383.426065][T10403] Call Trace: [ 383.426071][T10403] [ 383.426076][T10403] dump_stack_lvl+0x189/0x250 [ 383.426091][T10403] ? rcu_is_watching+0x15/0xb0 [ 383.426101][T10403] ? __kasan_check_byte+0x12/0x40 [ 383.426115][T10403] ? __pfx_dump_stack_lvl+0x10/0x10 [ 383.426126][T10403] ? rcu_is_watching+0x15/0xb0 [ 383.426134][T10403] ? lock_release+0x4b/0x3e0 [ 383.426149][T10403] ? __virt_addr_valid+0x1c8/0x5c0 [ 383.426161][T10403] ? __virt_addr_valid+0x4a5/0x5c0 [ 383.426173][T10403] print_report+0xca/0x240 [ 383.426182][T10403] ? v4l2_fh_open+0xc7/0x430 [ 383.426192][T10403] kasan_report+0x118/0x150 [ 383.426205][T10403] ? v4l2_fh_open+0xc7/0x430 [ 383.426216][T10403] v4l2_fh_open+0xc7/0x430 [ 383.426226][T10403] em28xx_v4l2_open+0x157/0x9a0 [ 383.426243][T10403] v4l2_open+0x20f/0x360 [ 383.426254][T10403] chrdev_open+0x4c9/0x5e0 [ 383.426263][T10403] ? __pfx_chrdev_open+0x10/0x10 [ 383.426272][T10403] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 383.426288][T10403] ? __pfx_chrdev_open+0x10/0x10 [ 383.426295][T10403] do_dentry_open+0x950/0x13f0 [ 383.426308][T10403] vfs_open+0x3b/0x340 [ 383.426316][T10403] ? path_openat+0x2ecd/0x3830 [ 383.426328][T10403] path_openat+0x2ee5/0x3830 [ 383.426339][T10403] ? arch_stack_walk+0xfc/0x150 [ 383.426353][T10403] ? stack_depot_save_flags+0x40/0x860 [ 383.426371][T10403] ? __pfx_path_openat+0x10/0x10 [ 383.426381][T10403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.426394][T10403] do_filp_open+0x1fa/0x410 [ 383.426405][T10403] ? __lock_acquire+0xab9/0xd20 [ 383.426418][T10403] ? __pfx_do_filp_open+0x10/0x10 [ 383.426433][T10403] ? _raw_spin_unlock+0x28/0x50 [ 383.426448][T10403] ? alloc_fd+0x64c/0x6c0 [ 383.426463][T10403] do_sys_openat2+0x121/0x1c0 [ 383.426474][T10403] ? __pfx_do_sys_openat2+0x10/0x10 [ 383.426495][T10403] ? exc_page_fault+0x76/0xf0 [ 383.426506][T10403] ? do_user_addr_fault+0xc8a/0x1390 [ 383.426521][T10403] __x64_sys_openat+0x138/0x170 [ 383.426532][T10403] do_syscall_64+0xfa/0x3b0 [ 383.426542][T10403] ? lockdep_hardirqs_on+0x9c/0x150 [ 383.426551][T10403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.426560][T10403] ? clear_bhb_loop+0x60/0xb0 [ 383.426571][T10403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.426582][T10403] RIP: 0033:0x7f05ceea7407 [ 383.426594][T10403] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 383.426603][T10403] RSP: 002b:00007ffcb0ac3660 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 383.426614][T10403] RAX: ffffffffffffffda RBX: 00007f05cf545880 RCX: 00007f05ceea7407 [ 383.426636][T10403] RDX: 0000000000000000 RSI: 00007ffcb0ac3f1c RDI: ffffffffffffff9c [ 383.426642][T10403] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 383.426648][T10403] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 383.426653][T10403] R13: 00007ffcb0ac38b0 R14: 00007f05cf6ac000 R15: 000055ee4dea54d8 [ 383.426663][T10403] [ 383.426667][T10403] [ 383.733350][T10403] Allocated by task 5864: [ 383.737658][T10403] kasan_save_track+0x3e/0x80 [ 383.742319][T10403] __kasan_kmalloc+0x93/0xb0 [ 383.746889][T10403] __kmalloc_cache_noprof+0x230/0x3d0 [ 383.752243][T10403] em28xx_v4l2_init+0x10b/0x2e70 [ 383.757164][T10403] em28xx_init_extension+0x120/0x1c0 [ 383.762429][T10403] process_scheduled_works+0xae1/0x17b0 [ 383.767950][T10403] worker_thread+0x8a0/0xda0 [ 383.772520][T10403] kthread+0x70e/0x8a0 [ 383.776568][T10403] ret_from_fork+0x439/0x7d0 [ 383.781138][T10403] ret_from_fork_asm+0x1a/0x30 [ 383.785885][T10403] [ 383.788186][T10403] Freed by task 5864: [ 383.792141][T10403] kasan_save_track+0x3e/0x80 [ 383.796802][T10403] kasan_save_free_info+0x46/0x50 [ 383.801809][T10403] __kasan_slab_free+0x5b/0x80 [ 383.806557][T10403] kfree+0x18e/0x440 [ 383.810440][T10403] em28xx_v4l2_init+0x1683/0x2e70 [ 383.815450][T10403] em28xx_init_extension+0x120/0x1c0 [ 383.820716][T10403] process_scheduled_works+0xae1/0x17b0 [ 383.826240][T10403] worker_thread+0x8a0/0xda0 [ 383.830811][T10403] kthread+0x70e/0x8a0 [ 383.834862][T10403] ret_from_fork+0x439/0x7d0 [ 383.839433][T10403] ret_from_fork_asm+0x1a/0x30 [ 383.844207][T10403] [ 383.846512][T10403] The buggy address belongs to the object at ffff888031f00000 [ 383.846512][T10403] which belongs to the cache kmalloc-8k of size 8192 [ 383.860546][T10403] The buggy address is located 1856 bytes inside of [ 383.860546][T10403] freed 8192-byte region [ffff888031f00000, ffff888031f02000) [ 383.874589][T10403] [ 383.876896][T10403] The buggy address belongs to the physical page: [ 383.883297][T10403] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x31f00 [ 383.892057][T10403] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 383.900543][T10403] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 383.908080][T10403] page_type: f5(slab) [ 383.912051][T10403] raw: 00fff00000000040 ffff88801a442280 dead000000000122 0000000000000000 [ 383.920616][T10403] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 383.929181][T10403] head: 00fff00000000040 ffff88801a442280 dead000000000122 0000000000000000 [ 383.937833][T10403] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 383.946494][T10403] head: 00fff00000000003 ffffea0000c7c001 00000000ffffffff 00000000ffffffff [ 383.955146][T10403] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 383.963905][T10403] page dumped because: kasan: bad access detected [ 383.970295][T10403] page_owner tracks the page as allocated [ 383.975996][T10403] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5864, tgid 5864 (kworker/0:3), ts 382411813944, free_ts 382253912071 [ 383.997419][T10403] post_alloc_hook+0x240/0x2a0 [ 384.002173][T10403] get_page_from_freelist+0x21e4/0x22c0 [ 384.007700][T10403] __alloc_frozen_pages_noprof+0x181/0x370 [ 384.013485][T10403] alloc_pages_mpol+0x232/0x4a0 [ 384.018323][T10403] allocate_slab+0x8a/0x370 [ 384.022808][T10403] ___slab_alloc+0xbeb/0x1420 [ 384.027467][T10403] __kmalloc_cache_noprof+0x296/0x3d0 [ 384.032824][T10403] em28xx_v4l2_init+0x10b/0x2e70 [ 384.037743][T10403] em28xx_init_extension+0x120/0x1c0 [ 384.043011][T10403] process_scheduled_works+0xae1/0x17b0 [ 384.048546][T10403] worker_thread+0x8a0/0xda0 [ 384.053134][T10403] kthread+0x70e/0x8a0 [ 384.057279][T10403] ret_from_fork+0x439/0x7d0 [ 384.061856][T10403] ret_from_fork_asm+0x1a/0x30 [ 384.066612][T10403] page last free pid 980 tgid 980 stack trace: [ 384.072751][T10403] __free_frozen_pages+0xbc4/0xd30 [ 384.077853][T10403] __put_partials+0x156/0x1a0 [ 384.082514][T10403] put_cpu_partial+0x17c/0x250 [ 384.087264][T10403] __slab_free+0x2d5/0x3c0 [ 384.091665][T10403] qlist_free_all+0x97/0x140 [ 384.096234][T10403] kasan_quarantine_reduce+0x148/0x160 [ 384.101677][T10403] __kasan_slab_alloc+0x22/0x80 [ 384.106515][T10403] __kmalloc_cache_noprof+0x1be/0x3d0 [ 384.111876][T10403] usb_control_msg+0x73/0x3e0 [ 384.116573][T10403] hub_port_disable+0x3d2/0x670 [ 384.121406][T10403] hub_port_init+0x1823/0x2800 [ 384.126153][T10403] hub_event+0x2532/0x4a20 [ 384.130558][T10403] process_scheduled_works+0xae1/0x17b0 [ 384.136081][T10403] worker_thread+0x8a0/0xda0 [ 384.140649][T10403] kthread+0x70e/0x8a0 [ 384.144699][T10403] ret_from_fork+0x439/0x7d0 [ 384.149279][T10403] [ 384.151585][T10403] Memory state around the buggy address: [ 384.157206][T10403] ffff888031f00600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 384.165246][T10403] ffff888031f00680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 384.173288][T10403] >ffff888031f00700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 384.181328][T10403] ^ [ 384.187459][T10403] ffff888031f00780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 384.195587][T10403] ffff888031f00800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 384.203628][T10403] ================================================================== [ 384.244998][ T5864] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input78 [ 384.273701][T10403] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 384.280920][T10403] CPU: 1 UID: 0 PID: 10403 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 384.290010][T10403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 384.300051][T10403] Call Trace: [ 384.303318][T10403] [ 384.306233][T10403] dump_stack_lvl+0x99/0x250 [ 384.310814][T10403] ? __asan_memcpy+0x40/0x70 [ 384.315391][T10403] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.320572][T10403] ? __pfx__printk+0x10/0x10 [ 384.325155][T10403] vpanic+0x281/0x750 [ 384.329123][T10403] ? preempt_schedule+0xae/0xc0 [ 384.333957][T10403] ? __pfx_vpanic+0x10/0x10 [ 384.338453][T10403] ? preempt_schedule_common+0x83/0xd0 [ 384.343895][T10403] ? preempt_schedule+0xae/0xc0 [ 384.348727][T10403] ? __pfx_preempt_schedule+0x10/0x10 [ 384.354093][T10403] panic+0xb9/0xc0 [ 384.357820][T10403] ? __pfx_panic+0x10/0x10 [ 384.362225][T10403] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 384.368116][T10403] ? v4l2_fh_open+0xc7/0x430 [ 384.372694][T10403] check_panic_on_warn+0x89/0xb0 [ 384.377624][T10403] ? v4l2_fh_open+0xc7/0x430 [ 384.382206][T10403] end_report+0x78/0x160 [ 384.386438][T10403] kasan_report+0x129/0x150 [ 384.390931][T10403] ? v4l2_fh_open+0xc7/0x430 [ 384.395522][T10403] v4l2_fh_open+0xc7/0x430 [ 384.399926][T10403] em28xx_v4l2_open+0x157/0x9a0 [ 384.404771][T10403] v4l2_open+0x20f/0x360 [ 384.408998][T10403] chrdev_open+0x4c9/0x5e0 [ 384.413422][T10403] ? __pfx_chrdev_open+0x10/0x10 [ 384.418432][T10403] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 384.424750][T10403] ? __pfx_chrdev_open+0x10/0x10 [ 384.429669][T10403] do_dentry_open+0x950/0x13f0 [ 384.434426][T10403] vfs_open+0x3b/0x340 [ 384.438479][T10403] ? path_openat+0x2ecd/0x3830 [ 384.443230][T10403] path_openat+0x2ee5/0x3830 [ 384.447806][T10403] ? arch_stack_walk+0xfc/0x150 [ 384.452648][T10403] ? stack_depot_save_flags+0x40/0x860 [ 384.458098][T10403] ? __pfx_path_openat+0x10/0x10 [ 384.463020][T10403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.469086][T10403] do_filp_open+0x1fa/0x410 [ 384.473579][T10403] ? __lock_acquire+0xab9/0xd20 [ 384.478429][T10403] ? __pfx_do_filp_open+0x10/0x10 [ 384.483533][T10403] ? _raw_spin_unlock+0x28/0x50 [ 384.488372][T10403] ? alloc_fd+0x64c/0x6c0 [ 384.492779][T10403] do_sys_openat2+0x121/0x1c0 [ 384.497445][T10403] ? __pfx_do_sys_openat2+0x10/0x10 [ 384.502626][T10403] ? exc_page_fault+0x76/0xf0 [ 384.507289][T10403] ? do_user_addr_fault+0xc8a/0x1390 [ 384.512562][T10403] __x64_sys_openat+0x138/0x170 [ 384.517398][T10403] do_syscall_64+0xfa/0x3b0 [ 384.521885][T10403] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.527064][T10403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.533117][T10403] ? clear_bhb_loop+0x60/0xb0 [ 384.537785][T10403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.543712][T10403] RIP: 0033:0x7f05ceea7407 [ 384.548127][T10403] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 384.567802][T10403] RSP: 002b:00007ffcb0ac3660 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 384.576202][T10403] RAX: ffffffffffffffda RBX: 00007f05cf545880 RCX: 00007f05ceea7407 [ 384.584157][T10403] RDX: 0000000000000000 RSI: 00007ffcb0ac3f1c RDI: ffffffffffffff9c [ 384.592110][T10403] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 384.600061][T10403] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 384.608012][T10403] R13: 00007ffcb0ac38b0 R14: 00007f05cf6ac000 R15: 000055ee4dea54d8 [ 384.615972][T10403] [ 384.619255][T10403] Kernel Offset: disabled [ 384.623557][T10403] Rebooting in 86400 seconds..