last executing test programs: 13.88916199s ago: executing program 0 (id=640): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203db35457faf030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000080)={0xfcc4, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000a80)=""/188, 0xbc) read$char_usb(r1, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) ioctl$IOCTL_START_ACCEL_DEV(0xffffffffffffffff, 0x40096102, &(0x7f0000000040)={{&(0x7f0000000440)={'Accelerator\x00', {&(0x7f0000000380)=@adf_hex={@format={'Dc', '5', 'RingAsymRx\x00'}, {0x80000001}, {&(0x7f0000000100)=@adf_hex={@format={'Cy', '1', 'NumConcurrentSymRequests\x00'}, {0x4}}}}}, {&(0x7f0000000200)={'GENERAL\x00'}}}}, 0xf7}) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r3 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in=@rand_addr=0x64010101, @in6=@loopback, 0x20, 0x56, 0x42, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff6, 0x2000000, 0x1}, {0x4, 0x0, 0x4, 0x1000000000000}, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x2b}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x26}, 0x3507, 0x4, 0x2, 0x0, 0x8, 0x8, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) syz_usb_disconnect(r0) 10.827409081s ago: executing program 0 (id=653): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000080)=ANY=[@ANYRESDEC=0x0], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = getpid() capget(&(0x7f0000000100)={0x20080522, r2}, &(0x7f0000000180)={0x5, 0x8, 0xfffffffc, 0x7, 0xd, 0x9}) (async) capget(&(0x7f0000000100)={0x20080522, r2}, &(0x7f0000000180)={0x5, 0x8, 0xfffffffc, 0x7, 0xd, 0x9}) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x1, 0x10000000}}, 0x4f) bind$tipc(r1, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x1fb553244e946098, {{0x41, 0x2}, 0x1}}, 0x10) (async) bind$tipc(r1, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x1fb553244e946098, {{0x41, 0x2}, 0x1}}, 0x10) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) 9.235339983s ago: executing program 4 (id=659): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) recvmmsg(r0, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000c00)=""/71, 0x47}, {0x0}], 0x2}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)}, 0xfffffff7}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/161, 0xa1}, {&(0x7f0000000380)}, {&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f0000000400)=""/38, 0x26}], 0x4, &(0x7f00000005c0)=""/222, 0xde}, 0xffff}, {{&(0x7f00000006c0)=@ll, 0x80, &(0x7f0000000740), 0x0, &(0x7f0000000780)=""/137, 0x89}, 0x8f17}, {{&(0x7f0000000840)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000001300)=[{&(0x7f00000008c0)=""/170, 0xaa}, {&(0x7f0000000a00)=""/81, 0x51}, {&(0x7f0000000380)=""/4, 0x4}, {&(0x7f0000000a80)=""/183, 0xb7}, {&(0x7f0000004040)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/89, 0x59}, {&(0x7f0000000bc0)=""/18, 0x12}, {&(0x7f0000000cc0)=""/221, 0xdd}], 0x8, &(0x7f0000000e40)=""/64, 0x40}, 0x289}, {{&(0x7f0000000e80)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000f00)=""/99, 0x63}], 0x1, &(0x7f0000000fc0)=""/31, 0x1f}, 0x7}, {{0x0, 0x0, &(0x7f0000001200), 0x0, &(0x7f0000001240)=""/16, 0x10}, 0xb}], 0x8, 0x40000002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x20000000) 9.093920187s ago: executing program 4 (id=661): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000003c0), 0x8) sendmmsg$inet6(r0, &(0x7f0000001000)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000100)="90", 0x1}], 0x1}}], 0x1, 0x20008050) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x2, 0x16, 0x4, 0x6, 0x5, 0x0, 0x70bd2b, 0x25dfdbfc, [@sadb_address={0x3, 0x17, 0x6c, 0x20, 0x0, @in={0x2, 0x4e22, @multicast1}}]}, 0x28}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000032c0)=@newtaction={0x3a4, 0x30, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [{0x390, 0x1, [@m_ipt={0x25c, 0x17, 0x0, 0x0, {{0x8}, {0x1a0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xf1, 0x6, {0x0, 'raw\x00', 0xe, 0xb3, "01df771ed4aa468d466490bb6d3a762752b0276450737133d354ea68c13a92efe99064741e04d8a20e194e30a60295d386bccda0f3007979597e6d03b954a8f914ba7b899f16c20d6d72edd9b6f52db88f3ba2e308499f6252662a51fa4b12868b58f75e27ec9103b8068b9b811e21bd2aa37e31ee1bb8e60ecb8155c8e19ea1c7fdbb9aa819059c61aa86c434a7c8da18ab573d7585bec9c1d4494956d182e7b35a526fd48659ab60beb8f339651c715661a36a876cce3dd7a98863f318caef99752c65346980"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x3d, 0x6, {0xff3b, 'nat\x00', 0x6a, 0xfff, "ec6c358b1b02688c45d6891b8d39befc710e9c"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x3ff}, @TCA_IPT_HOOK={0x8}]}, {0x95, 0x6, "33c428b1016ea0e62b6c917780554ec63a01a7382016d430730d1158d5469fa35f73d351ec348637d292a8c8699738644c304a14a0ca2e2c1422d9493ae361a88a61e76022334cc9eff1d9b15acf815ab9bf490688724773d3775e92953306fa3923bf0b3eb78ed4c4e43760fb360a12727f0000004fe4c5639595b4ce1706ccb85c9b5872240c31834297cfb06b7eaaa1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x130, 0x11, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x9d, 0x6, {0x7, 'mangle\x00', 0x4, 0x7, "852c07967e4bde8acbdebf709c7f67b435415e9fad5eed399218069c30b3db399d5bdbdffc09aa13d6aef79a3360cf4b7d5e8a92b817394560aba652eb4e4ec31470dd9b8becbf6cad6f3328aec2ac14541a30a5f89f2a6e60534a70c1deccc519f73984d6d2ae8b9fe17278f03e9f60e876c3"}}]}, {0x65, 0x6, "195244b493b69a109e343c48236a318aa067ccccb2000506f4e63246fce6276de9355aae82ccf014b3a51009a53cc597e7eec180e252560262d28e1340152b8389fc3dcbd1c60cbef5aa738a80d9582b7bf553a33208654c9b7b642eb56b8a9716"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x3a4}}, 0x4000) recvmsg$kcm(r3, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f00000025c0)=""/214, 0xd6}, {&(0x7f00000026c0)=""/151, 0x97}], 0x2}, 0x1) shutdown(r1, 0x1) 8.807483521s ago: executing program 4 (id=662): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000180), 0x2, 0x2) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x8) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) r4 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000000)={0xa0000001}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x20}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r9, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000d70b024d564b"]) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84}, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800010600000000000000001c140000fe00000100000000040012"], 0x24}}, 0x0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000004540)='./file0\x00') syz_usb_connect(0x0, 0xc06, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000862c6b203b0904a10100010203010902f40b03000010000904"], 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 7.659204076s ago: executing program 2 (id=666): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect$cdc_ecm(0x5, 0x65, &(0x7f0000000900)={{0x12, 0x1, 0x301, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x53, 0x1, 0x1, 0x6, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x8, 0x24, 0x6, 0x0, 0x0, "f86132"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x1, 0x80}, [@mbim={0xc, 0x24, 0x1b, 0xe, 0xa000, 0x6a, 0x0, 0x6, 0x10}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xf, 0xad}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x2, 0x3, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x2a, 0x2, 0x1}}}}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x201, 0xf7, 0x3, 0x9, 0x8, 0xc6}, 0x25, &(0x7f0000000a40)={0x5, 0xf, 0x25, 0x1, [@ssp_cap={0x20, 0x10, 0xa, 0xf, 0x5, 0x8, 0xf, 0x83, [0x0, 0x0, 0x3fff, 0xff00, 0xf]}]}, 0x3, [{0x48, &(0x7f0000000a80)=@string={0x48, 0x3, "44119b78027b96b48898239b536522b1abcdad22c2cb049a45b02aa8e137959787377f89b7a97579cebdd57a9a1456d01bbd2dd7363a09291d35fee8b918b4912d008b5c0b11"}}, {0x8d, &(0x7f0000000e40)=@string={0x8d, 0x3, "8209a8f2b392a5911d42488c29a7503ca6eec7ea685cb1d0644994f3e4400279e8f2d378057ab8919d367df961972b323f859cdb3a3cee039821a57da0ef4c456925d630365b65bed1f7d13e7dce88f5692742e5a0d2d829e46f7ded9e95f1cc9faf581d863afc5b8942aa72a296312b2aa800b8296a8f327f7dc141879d0b9daadd2c8839da88cff48462"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x42a}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000cc0)={0x14, &(0x7f0000000bc0)={0x0, 0x23, 0xac, {0xac, 0x9, "a02c49e06d925f7d4c6ad1eb41b790c1eb0703a2ecc2f41cd0f668a90f3050c93dcd598a688411bec435bcca57a11d79237784bf1717b01f2dd7e46dde1515efb0c48e3496dbf6fd2a06e4fb73c0404a3eb9683a2d562412f08c9d0e5797b400c3e6ae7705fb5eb23fba930bf6aa72f515b76abe1fd9b95a4dff531a7cd8112ef72a49eccf490f8c82275c6ea9adca06c120ca61e2a3ad37971bb7ba3b7c11cfa0d8ae69c3de9f9c946d"}}, &(0x7f0000000c80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000e00)={0x1c, &(0x7f0000000d00)={0x20, 0xf, 0x74, "767ab30727a16eb14909b6c24c8eb21cf340917fd48988c1deb3b22f992b32e1aa86b769ab9b1781e6e3fe83e80cc862e0ec7aa43512020a0219f66e3ca098c933b24b6bdec712bef221259708bf0e93dadeae2b4f8ed045bbd1ed336e4e7c1e9d28681b5c1242fa525bff0689cca5d63000b3e1"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x8}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xb}, 0x48) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x273, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0xfd, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x3, 0x0, 0x2, 0x2, {0x9, 0x21, 0x3fe, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x0, 0x3}}}}}]}}]}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f00000008c0)={0x0, r3, 0x1}) read$eventfd(0xffffffffffffffff, &(0x7f0000000880), 0xfffffffffffffe94) syz_usb_control_io(r0, 0x0, 0x0) r4 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0xf8, 0x1, 0x7, 0x1, 0x1, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x1bf, 0x9, 0x7, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0x0, 0xb1}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xe, 0x2, 0x80, 0x10, 0x7}, 0xc, &(0x7f0000000080)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x9, 0x9}]}, 0x3, [{0x98, &(0x7f00000000c0)=@string={0x98, 0x3, "5ed76f88477d8ed01a196c60e941d75cf3338af5dc80ee25cbf3dc84b4015de15e0a75f5c70201bc391d81f5c5d3fe48f83e877589134c578c32a0df2612ebed691a5cbfe2afd068570c7eb4b389827657270a62e4cefd6f30a79378d283fccbadcc5a56d795c7c94ab6538e43554743e7423e43100e9e58b837e9804c1472de78a101b2478b0d36ef2d24a84256234077198d049291"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x3c0a}}]}) syz_usb_control_io$printer(r4, &(0x7f0000000540)={0x14, &(0x7f0000000340)={0x40, 0x23, 0xf2, {0xf2, 0x24, "34f14cd26bc2ac48ff5e2915b32e2abd21f0cd9f3231e101497835a8b94de17db0cf4de7a34edff295b6037a4132ddcd4264fb57df77a116dc3e38224e61f66346511f6317a88199580b3e5e3b225a2a8dd54dd0ce654dcf9ccc2958a38ff80c49b72d9c9c44e17f4b16730bd313756cf6bd02eecb3841aa02703338ee0e8ea6f48641463e41d32986509d4f7f32850b7e4097ad58faaab3a4ac9a4af057883f0886276e86d04b046a28feee704760283bb18be743e972a4c7b22309db12c9c1be6dbc5ab2291f881532e0c61daa927c7cf126f8f16bff062a6fae1d9906d355a1c3a2cfbaef652a4f24915f3c475bf3"}}, &(0x7f0000000440)={0x0, 0x3, 0xc2, @string={0xc2, 0x3, "7c9e1da87026ae1cb7ac6c2319293a9d8b85f08a93d10d31da17bf955682d76aee4344aba9f7a1d65856588d773142dc7ec0de4453e983e4a2eea8d8dc1da348469177012ad30fc580545decc1ba3b12baa8e3f2780e54d18c453566582e3d40b451fd136a0b2e3e3423e46bdfe20ec1437a7488898d61129e634cb504409799c1f989d9717a485b8b4345f14b8e2d29fa49f81df9b744f194d15ca5e9ce69acafdfc6875ec02696fdc1552597adf7969ad207a7d83790277145ae0afb63ab23"}}}, &(0x7f0000000840)={0x34, &(0x7f0000000580)={0x40, 0xf, 0xa3, "3280ac17e7ba9c06399993ef5f214df10e9c80c4150df2308f9fa9cd7afad4886fdaac7bee755e527911016704438548561ba23eeb31d71c7ee737d20f253d20d0069a0bc4e204eaae69be2b5505245b03a986b2fd64692b958455bce84eaec37b2a1ac11283bcc436fc34670fcde4d459aa0524b3753dcc691fe84fad57f83abc8a0ec869e290192276908f8d1307107a5edd0e95df0ec1ce82cdb2ff7926b32a9aff"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x8a}, &(0x7f00000006c0)={0x20, 0x0, 0x87, {0x85, "c3edbe3146aff41b141b03ece3e678b48f40dcebbc7b385885aaeca26da4ca102636561b05a5e7f718aec44de6122d4838d1c6bdfc48f1274f2b73687c5ce3696fd4d030db1f1f7e8f663897fff005077844d78071072bdf3fdb6447feb9eec1e92bd03e28a7229554a78f384cdd54ee9b5d907f0fd22ed8f83b6b35c8d4562f9221f89d6a"}}, &(0x7f00000007c0)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000000800)={0x20, 0x0, 0x1, 0x1}}) syz_usb_control_io(r0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 7.657947138s ago: executing program 0 (id=667): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000040)={0x0, 0xc, 0x1, "06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000cc0)='\"', 0x1}], 0x1}, 0x4008041) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r3 = dup(0xffffffffffffffff) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f00000000c0), 0x4) ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0x80) syz_usb_connect(0x2, 0x2d, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0x4e, 0x9e, 0x9, 0x40, 0x499, 0x101a, 0x4426, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x3, 0x80, 0x80, 0x0, [{{0x9, 0x4, 0x3d, 0x5, 0x1, 0x7f, 0x52, 0xb4, 0x8, [], [{{0x9, 0x5, 0x5, 0x10, 0x20, 0x4, 0x2, 0xf9}}]}}]}}]}}, &(0x7f0000000b00)={0x1, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x5, 0xd9, 0x4e, 0x8, 0x4}, 0x0, 0x0, 0x31}) syz_usb_connect$uac1(0x4, 0xd9, &(0x7f0000000480)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc7, 0x3, 0x1, 0xc0, 0xa0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xff, 0xe}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x300, 0x1, 0x6, 0x1}, @processing_unit={0xc, 0x24, 0x7, 0x2, 0x4, 0xb, "9dd8f1f2f4"}, @extension_unit={0x7, 0x24, 0x8, 0x3, 0x40, 0x82}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x1, 0x5, 0xfb, {0x7, 0x25, 0x1, 0x0, 0x53, 0x8001}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xd8, 0x3, 0x3, 0x7, "1293", '^'}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x81, 0x7, 0x2, "10009131822b34104b"}, @as_header={0x7, 0x24, 0x1, 0x4, 0x2, 0x4}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xa, 0x4, 0x3, 0x10, "", "c58529"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x8, 0xba, 0x2, "681e9c111adb"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x2, 0x3, 0x1, 0xf, "cd24943c71c4"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x8, 0xd, 0x6, {0x7, 0x25, 0x1, 0x83, 0x6, 0x80}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x3a, 0x3, 0x7, 0xe7, 0x7}, 0xf8, &(0x7f00000001c0)={0x5, 0xf, 0xf8, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x4, 0x4, 0xd}, @ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x4, 0xff0f, 0xfff9, [0xff0000, 0xc0]}, @generic={0xc3, 0x10, 0x1, "7b965db78b3d4c8669676d237d98bf552c12df3b824350a2fd7c34cb4651ebc1e3ec10a768e6240c46fe016e2a97f358a09a993ec398a524a047bb797664e0a9260d6237b852c389d0a5ffc23085aac290ef8d71a661c2efcac3384711c9fa87fc9548ad9a5491e53a108ca857c22f9a8e8229e00fc8b3cedc55d028248e34ad81415638445de5cac41502c037f83fd897d0dcf65b3ccda42ac7b3c4726d25686bd234a647f5056d50a06b3e372b8c22344cd2da89e74ec2f02167bfdb99a411"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0x9, 0x9, 0x1, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x91, 0xff, 0x8}]}, 0x3, [{0xa3, &(0x7f0000000000)=@string={0xa3, 0x3, "16fe98c11b6d802a7b6a91fa724022c5df214fbcf93707ee9548fd38522340e0aabf3968b47e58641625a373635c8bbe0e7c0c3dfe8cacd0bf9c1d8113c427f07d0329f4edba00f043515f246ad4d6e0f8c920485e5ed9c58a38f7c9e2b9b9e18cbc162203daba0631a1b6e1e1bc4ca9f5427f9b7b500e0f9e35aeac360823e4b501b4e8ee5c19904e44f4fb00d3cc99f1ecd7763f4c9d060b80ed609b9414e617"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x827}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xe30}}]}) 5.739252711s ago: executing program 2 (id=672): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) get_mempolicy(0x0, &(0x7f00000085c0), 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x1) recvfrom(r0, 0x0, 0x0, 0x40, 0x0, 0x0) lseek(r0, 0x6, 0x4) 5.591693513s ago: executing program 4 (id=673): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="02"], 0x33fe0}}, 0x40010) (async, rerun: 64) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) (rerun: 64) write$vga_arbiter(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="6c6f636b206e6f6e916500"], 0xa) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async, rerun: 32) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) (async, rerun: 32) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) (async, rerun: 32) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 32) sendmmsg$unix(r7, &(0x7f00000bd000), 0x2d, 0x20040040) (async, rerun: 32) close(0x4) (async, rerun: 32) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000000)=0x10000) (async, rerun: 32) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000100)={@local}) (async) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r5, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb776f6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7357c35c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x5, 0x4, 0x40000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cd5a44b, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) (async) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r5, 0x7b0, &(0x7f00000000c0)={@hyper, 0x1}) (async) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) (async, rerun: 32) add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000006900)="3e12", 0x2, 0xfffffffffffffffe) (async, rerun: 32) add_key$user(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x1}, &(0x7f00000016c0)="307006fd42fa361d0322d0422a96f816aa80afa2cbde9a87d70b63424a8241a18dc8b8b75332fbb1b1ef7809c5df38768ceff839d68a075d4e8e7d639339e30467468cd215c79dfc26879a23f5e0616c5cee33e120c379ad408bff33d1bf559f90095384fd5403508056945f08a9c44472428ec952a045fcca8219f93ae809ab22077ca9efca091fe07295890857a2043c766e4275173f9b91891e4ea75c28", 0x9f, 0x0) 5.447137325s ago: executing program 2 (id=674): syz_usbip_server_init(0x4) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x106, 0x4) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000340)={0x44, r2, 0x9, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, "f8e8"}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x80af}, 0x1c) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) 4.776837943s ago: executing program 1 (id=676): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) pwritev(r0, &(0x7f0000000040)=[{&(0x7f00000003c0)="42e8", 0x2}, {0x0, 0xfffffd66}], 0x2, 0x0, 0x1e0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x11000) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r6, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0xffff, r5, 0x0}]) read$FUSE(r4, &(0x7f0000000540)={0x2020}, 0x2020) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r7, 0x0, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r8, 0x5452, &(0x7f0000000280)=0x3) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r8, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_proto_private(r10, 0x891d, &(0x7f0000000000)="d84450a4bf57990ef9b33a") sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r9, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x800) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x230, r11, 0x0, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0xa}}}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0xbd91}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x6d}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x1}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0xfd}]}, @NL80211_ATTR_MESH_SETUP={0x1e4, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_IE={0xf8, 0x3, "46063777ec20a4924ac59acf259cd94687877ce68c7b62b33091b0a17118bbbeba1e778029e2e559a2aa50965d25fd45fa71947b17c42018c23538e131a388a69705c2d2c0d65437f929e3ce51b021a57eaee4329d04fbc30415f9a4afbc4e67e652570f4006f8c70f64419bc57701a2d97276688ac9253bdb0f14ec54e1245529fe4239c436febfa8e17630bcfd80228d0b47e1644a85e168b42acbd5579f757665d0f166809076e67ac20c1b2807e6b2532cca81cc296b3158f41dbba23c22952960680646d5f392cd874edff2e1c8a485c730d16cac43388fb8347ec945da9f3992a641c5e94af87997df1daa88f516bfe12c"}, @NL80211_MESH_SETUP_IE={0x7d, 0x3, "0ec4aa603443275e3a22ae1f39b2f0482ee3904d9dfa91cec25924009f7e5d80d7be43bc365d7d6b0a5a49ba0b6237826f4a375c8943e83552606b2095dc311cc6af24028466b8cbbc82a24f1da634c6368bf3ef76d6c7c3e523ff090b09b95792638b8359caddbedc1b913523e41918dd822406651035884e"}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_IE={0x42, 0x3, "0ee851e73b02701921200cd6eb42fc3703b45d9fa589a15e8dd8668088545652aeec15b4beaf40bc227e07ef5a91a340cf5ba2d373b43b1274ceb76fa248"}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x4}]}, 0x230}, 0x1, 0x0, 0x0, 0x20008090}, 0x20000011) 4.455314092s ago: executing program 0 (id=677): syz_open_dev$vcsn(&(0x7f0000000000), 0x7f, 0x800) socket(0x10, 0x803, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) sched_setattr(r2, &(0x7f00000000c0)={0x38, 0x5, 0x50, 0xf9cf, 0x4ae4, 0x4, 0x1ff, 0x1, 0x7, 0x8}, 0x0) sched_getattr(r2, &(0x7f0000000140)={0x38}, 0x38, 0x0) r3 = socket$netlink(0x10, 0x3, 0xa) dup(r3) r4 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x7, &(0x7f0000000300)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}, {0x2, 0x1, 0x7, 0x8}, {0x4004, 0x8, 0x2, 0x91b}, {0x3, 0x9, 0x0, 0x7}, {0x8, 0x6, 0x7d, 0x3}, {0x1000, 0xd7, 0x6, 0x8}]}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x10009, 0x9}, 0x0) r6 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x18c) ftruncate(r6, 0x200004) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = dup(r7) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000011146d7700000000000000e407004b"], 0x18}}, 0x8000) 4.438305868s ago: executing program 1 (id=678): socket$inet6_udplite(0xa, 0x2, 0x88) (async) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="00adb5c5ddfd72000a", @ANYRES64, @ANYRES32=0x0], 0x70}}, 0x20044000) (async) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="00adb5c5ddfd72000a", @ANYRES64, @ANYRES32=0x0], 0x70}}, 0x20044000) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f0000000700)=@ethtool_perm_addr}) syz_open_dev$dri(0x0, 0xffffffff, 0x200) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="070000000400000080000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800"/12, @ANYRES32=r4], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x88c, &(0x7f0000000140)={0x0, 0x20ca, 0x40, 0x2, 0x37c}, &(0x7f0000000480)=0x0, &(0x7f00000003c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket(0x22, 0x6, 0x0) (async) r6 = socket(0x22, 0x6, 0x0) sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f00000015c0)=ANY=[@ANYBLOB="d90d23001e9a23bd0b30bc19c88b251ddd1f101e83ee9e34c8f520d2a8c471ff4b4d126743b0dcd5be147e9476bbd7d717a6dd3c240a65f49291f21f7766826c7e2eb80eb730ad1a36b4c7495c4eff24eb6fd919212cbc0921476e0a47253a0000326ea85594000000000000000000", @ANYRES16=0x0, @ANYBLOB], 0xd94}, 0x1, 0x0, 0x0, 0x40008c0}, 0xc0014) (async) sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f00000015c0)=ANY=[@ANYBLOB="d90d23001e9a23bd0b30bc19c88b251ddd1f101e83ee9e34c8f520d2a8c471ff4b4d126743b0dcd5be147e9476bbd7d717a6dd3c240a65f49291f21f7766826c7e2eb80eb730ad1a36b4c7495c4eff24eb6fd919212cbc0921476e0a47253a0000326ea85594000000000000000000", @ANYRES16=0x0, @ANYBLOB], 0xd94}, 0x1, 0x0, 0x0, 0x40008c0}, 0xc0014) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r7, &(0x7f0000000080)=[{&(0x7f0000000300)=""/147, 0x93}], 0x1, 0x0, 0x6) sendto$inet6(r6, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9ea685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902060f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa415ac4d31c4f7a1", 0x8b, 0x0, 0x0, 0x0) (async) sendto$inet6(r6, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9ea685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902060f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa415ac4d31c4f7a1", 0x8b, 0x0, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x2c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r9, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) (async) r10 = openat$cgroup_procs(r9, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f00000001c0), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 3.859001204s ago: executing program 4 (id=679): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x0, 0x701, 0x70bd25, 0x2, {0xb}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c840}, 0x800) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv2(r0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/184, 0xb8}, {0x0}, {&(0x7f0000000440)=""/225, 0xe1}, {&(0x7f0000000540)=""/205, 0xcd}], 0x4, 0x50, 0x6, 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x10000001, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x800, 0x3}, 0x0) syz_open_dev$video4linux(&(0x7f00000001c0), 0x100000008, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r4, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1, 0x8d) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x20401, 0x1c3) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r5, &(0x7f0000001440)=""/126, 0x7e, 0x41) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 3.544127954s ago: executing program 3 (id=680): r0 = socket$packet(0x11, 0x2, 0x300) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x5a, 0x7, 0x3}, {0x5, 0x0, 0x0, 0x4}]}, 0xffffffffffffffa8) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket(0x400000000010, 0x3, 0x0) r4 = syz_open_dev$vbi(&(0x7f00000000c0), 0x3, 0x2) ioctl$VIDIOC_G_PARM(r4, 0xc0cc5615, &(0x7f0000000240)={0x7, @output={0x0, 0x1, {0x8, 0x1000003}, 0x6, 0x6}}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4}}}]}, 0x38}}, 0x20000000) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {}, {0xe}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0x2}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20018804}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="348007000000", @ANYRES16=r2, @ANYBLOB="000025bd7000ffdbdf250100000000000000014100000018001700000010000000087564703a73797a3200000000"], 0x34}, 0x1, 0x0, 0x0, 0xc080}, 0x24000880) 3.243232006s ago: executing program 3 (id=681): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000280)={@broadcast, @dev, @void, {@canfd={0xd, {{0x1, 0x1, 0x0, 0x1}, 0x16, 0x0, 0x0, 0x0, "f8b50d307d74af37e4da9707f653e812f340ace5733a33dc5af03aa1939e28153eb8282b1da382161fd80f7757e423f45751fd1dd4586f5d99cbaaf8b332233f"}}}}, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x80141) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r4 = dup3(r2, r3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0xc8}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0xfffffffd, 0x1, 0x7, 0x3a18, r4, 0x7ff, '\x00', 0x0, r4, 0x3, 0x3, 0x3}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r6}, &(0x7f0000000840), &(0x7f0000000880)=r5, 0x1000000}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) write$apparmor_exec(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB='exec '], 0x149) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f00000008c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x700, 0x20}}) socket(0x22, 0x80000, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000080)={0x0, "83e624170a2005004d5e9ac5be09e4bae4ffffffe900000000000000001300", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000280)={"840d6042cee820000028000000e8ff0000002000000000000000000f00", r8}) semtimedop(0x0, &(0x7f0000000580), 0x0, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) link(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.237815964s ago: executing program 2 (id=682): socket(0x2, 0x3, 0xff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$packet(0x11, 0x2, 0x300) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') preadv(r6, &(0x7f0000000500)=[{&(0x7f0000000280)=""/86, 0x56}], 0x1, 0x38000000, 0xfff7fffd) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) fcntl$setpipe(r3, 0x407, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040)="8f", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00', 0x6}, 0x1c, &(0x7f0000000700)}}], 0x2, 0x0) shutdown(r7, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f00000000c0), &(0x7f00000001c0)=0x8) 2.534068411s ago: executing program 0 (id=683): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006180)="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", 0x2000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)={0x2}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) process_mrelease(r4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) write$binfmt_misc(r6, &(0x7f00000002c0), 0x15) splice(r5, 0x0, r7, 0x0, 0x19404, 0x0) r8 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x79, 0x1844, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x40, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x100, 0x9c, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x0, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "59f1962c"}]}}, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x92}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 2.163459686s ago: executing program 1 (id=684): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x60, {0x2}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 2.100421598s ago: executing program 2 (id=685): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x1, 0x4) vmsplice(r2, &(0x7f0000001380)=[{&(0x7f0000001400)="d69daa27", 0x4}, {&(0x7f0000000100)="aac04d", 0x3}, {&(0x7f0000000200)="968ce8b68e", 0x5}, {&(0x7f00000002c0)="1c482bb6c0b9", 0x6}], 0x4, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2.056129591s ago: executing program 1 (id=686): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) recvmmsg(r0, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000c00)=""/71, 0x47}, {0x0}], 0x2}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)}, 0xfffffff7}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/161, 0xa1}, {&(0x7f0000000380)}, {&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f0000000400)=""/38, 0x26}], 0x4, &(0x7f00000005c0)=""/222, 0xde}, 0xffff}, {{&(0x7f00000006c0)=@ll, 0x80, &(0x7f0000000740), 0x0, &(0x7f0000000780)=""/137, 0x89}, 0x8f17}, {{&(0x7f0000000840)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000001300)=[{&(0x7f00000008c0)=""/170, 0xaa}, {&(0x7f0000000a00)=""/81, 0x51}, {&(0x7f0000000380)=""/4, 0x4}, {&(0x7f0000000a80)=""/183, 0xb7}, {&(0x7f0000004040)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/89, 0x59}, {&(0x7f0000000bc0)=""/18, 0x12}, {&(0x7f0000000cc0)=""/221, 0xdd}], 0x8, &(0x7f0000000e40)=""/64, 0x40}, 0x289}, {{&(0x7f0000000e80)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000f00)=""/99, 0x63}], 0x1, &(0x7f0000000fc0)=""/31, 0x1f}, 0x7}, {{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000001080)}, {&(0x7f00000010c0)=""/191, 0xbf}], 0x2, &(0x7f0000001240)=""/16, 0x10}, 0xb}], 0x8, 0x40000002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x20000000) 2.023422316s ago: executing program 4 (id=687): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, &(0x7f0000000040)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, 0xd, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x34}}, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x72, &(0x7f0000000000), 0xc) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000480)={0x20, 0x0, 0x4, "b85b9ee0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.624585953s ago: executing program 3 (id=688): ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000200)={0x236, "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"}) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x1412, 0x800, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x5}, 0x4880) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000004c0)={0x0, 0x0}) sched_setattr(r1, &(0x7f0000000500)={0x38, 0x0, 0x18, 0xdf, 0x9, 0x5c9, 0xc22, 0x9, 0x0, 0xf}, 0x0) (async) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="09010000b8e42d08da05990082d50102030109022d00010007000009040200030456f300090502000000000000090506c400000000000905", @ANYRES64, @ANYRESHEX], 0x0) (async) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) r4 = gettid() (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000680)=0xe8) quotactl_fd$Q_GETQUOTA(r2, 0xffffffff80000700, r5, &(0x7f00000006c0)) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) (async) sendmsg$tipc(r6, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x2}}, 0x10, 0x0}, 0x10) (async) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000440)={'\x00', 0x2, 0x7, 0x3, 0x7, 0x69a, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x7, 0x0, {r7}, {0xee00}, 0x91f, 0xa3c7}) quotactl_fd$Q_QUOTAOFF(r2, 0xffffffff80000301, r8, 0x0) 1.547068594s ago: executing program 3 (id=689): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = dup(r0) mmap(&(0x7f0000b08000/0x1000)=nil, 0x1000, 0x300000a, 0x810, r1, 0x2000) syz_emit_ethernet(0x3a, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200000ee43f6642531e08004800002c0000e000021190780000000000000000440c2d100000476d0000800100004e20000c907861100001843a9d2db25acbacd24af8733e067e8783ba3f8198df73063bffcf9d099f448df4c52ac648147a5e325df39567530aaa96d76084fe0754cc81e6d365704b88d8e6ab3204d08384d353085cc26ade1286e1"], 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f000009df00)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3ff, 0x1}, 0x20) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000740)={0x0, @in={{0x2, 0x0, @local}}, 0x4, 0x0, 0x400, 0xfffffffe, 0x32, 0xffffffff}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x2, @initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, 0x4}}, 0x0, 0x80, 0x0, 0x0, 0x8a, 0x4}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000000800)="58a8e1011ea54f21ea3e6af82d28f3d9decf00c1955d261fb3f4936c3525210d5ba9b889136777d895836a387c9f3bcf9f1b96362f9b5af82d7ee01477c96952b483f9851330087638e76add14557b95582e5cad18865fb213084a88f19109a193ead8c1aca64285bc75e3ceb5495bb3bd5124c4ff2e80e9d37856bd626bee3fb5aa6e23e7d61b718507b150bfe6", 0x8e, 0x4000015, &(0x7f00000003c0)={0xa, 0x4e23, 0xaa69, @mcast1, 0x3}, 0x1c) shutdown(r6, 0x1) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) r8 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xa83c, 0x20000, 0x2}, &(0x7f0000000000)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, &(0x7f0000000100)={0x222040, 0xa0, 0x2}, &(0x7f00000001c0)='./file0\x00', 0x18, 0x0, 0x12345}) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x288, 0x258, 0x258, 0x288, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x0, {@ipv4=@remote, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r3, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.119556763s ago: executing program 1 (id=690): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xa3}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x26}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) read$FUSE(r6, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}]}}}]}, 0x3c}}, 0x4000) syz_fuse_handle_req(r6, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r9, 0x0, 0x0) (async) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000000, 0x1, 0x2, '\x00', 0x8}}, 0x2a) (async) syz_fuse_handle_req(r6, &(0x7f00000021c0)="7b1713b4c6f02da7493fb6859f0143c68a58166f472c5078104b859bc37f9a49a8f85c9101df3b2736ff9bebcb1a3c2f570b28279b8ff7afdef7451b3d10b4578c2e81784b6e4f410800d997f0689546cee0852e9e9c64c1f95df7b136243cf7aee1b8e7a4e1d6e6fc01337370f0dfc098d975e9a6f90a08f5b845054d1e1fc81adadbf2836ff758bade0484377855b05b3556a91827599638458ad30baea03240b302638b88423ecaba6da1e40f6f1b24d60dde1652f2d5f818af43d49dd55c4eadea945e9b6aa744dca07ec2e00320bef5b045414836941469129670c4cdb953ed61efeeae2ced1b7cb3e7fa4c93cce5623a9e33c69d068b801fd1369aba759e2829c67c705853262fef6669aab956f0f733619dd361be5e1414c7e7ff6218e330156d609fa9f3244a0a4fb678a58e70b86f6dabc3331f755b786c42b4198149941a7a58c83f1f2811209025269c5ffcbe0c34ac98cc091cec2c993bca0aa8400ff9e39cc9fba8dda886f95357957bbad8bb850ab92f7aa9bebcdb0ef188749a1742e5597d199f3ccdc2d807bf757da45acc93e3e9645a1036cb041b3c38dafef367b8dae802bbbc03bacb905d40e1da78591687b416ee380103a670aa8f722c76e13f7f0e3effbb37f15a821b8315fe541e3ffc09289d96db1dfa8861e5da41c812b54ee20ca8b3180f2f46db56954791465cb572de0cce16d789d6fff216ca46977ed724dc0cc8cef7b295ebb2998a5c4662e32ae1001e59f3bfefcd72543bfe1aa6688d65c547089ec0fe1f1d9610095a5a4008b14f46775c368417376ee143856031947db71c455dc40eeeda210fbf258452781ce46e51f6df683a7918770f73d324d9401648d271cb9a7e919401567e400fec420cf363444a78eea03e73176abd6546e1657945aa88f64a21e07fc23edd74512cf89781e8ffe9bb1601ab25d31801332a6c5be9cebb6cb08207bb832106553ea9fc19b4b4f1f0cd55efc2925ffef75e9b12f06b5a7496506a274ca25f88398a1734b7013c3f78a2e49ef0d946a1aff362e37c9b5f5473de11401097722adda87944ee3eeb1bdde60e97484af4d2e5f8b0a9c63bb8bb99461b16edd824add1caf9d5247811cc4f6b48004774f1a4fe4dd125ddbfd8b69ff3ee314aeb445bee9f217a2f5a9e0e84ccd8718471f949086df6cdcbf95e568317e31dd01be1b826cf9a09373b16935fc864794a3886a2f4aacc42135db85f8921916a10aa7111a686979e2a5c9959cafc9774c416c4dfe0b9e06657feb2fbc31e7c11f6e2841680986557c1f2b1ec3c0fcc6a749a3c97a5b370550ab7110e25851b13c0b75a7fb0cd3c4659878209867659c216b467bdcf51e786a59fad084886490fc77e186ab827d844d0ac4682651fc4043f8e87b905532a53017ada44feee1f89f9bc6d2a8b144e721a479f7b90acb91033774f4c12df633548a9097c791ec7e80fa2607c86fce6e9abcae1296528b8488ccf18a4bb0fc9b50c15d294e8d380465465b4eeae26eb6800faba611785cd2ff95ca1923dfa47d5923f89e4eadb612002caceaebbe779c4e3a3833455752eae63689ab8dc03db63d82feeab7f1162eed5909b69ccd5abeb9c071da82cfc76cc692a51d99e0c4bdfa6c81c9878e893a77e1e7105e7910827ddb3353612fa8d5e547b43b5abfe50829c1eb7bfda1731db2a9a1e8f0fc298dfa7009679489f9d9323338b7e59f1e48419ca531d88170a5a1995f576aa125edae9e9ea26f6e9c4bc26323b7db0998c528a7b343ccd87ff44c77e6cfc0a324cc1d4ea79c30015f0caaeccd46e5db580aa5ce8030c2b13b37494557da58abbdc7ce9fc9afa49ce0e8a7a6fa058db210ed654203e7879cf5004ebec57522ed34481b749554b36cd7171209b0763e110096704604f2d3f28c5ddc66c877e3ab63f36137d5a67cbf872aa6af79cb3a66c9040009b5e1c7b718c1b8788156b82d6d800dbe9fc3d16c812a963c73599b79efb89aa74bdbd9b1a2dc0b8ad853f79c0867a3a45d7a1645059171877687a72dd5ed4213c0ab84ef6185e7935346a84450887bdb2b216883e907b13b03c133adc04ab3c5f60209bd90aad3d94443105f08f0ee1b2231e1a1f8cce71de74d5308b78b5d99ce4ad4573faba9fab48bc1615f14d453c67714b99f274de041512b07b885679e6f89f481c28b082084b853c9afcda31def2898284d6ca28fb124df67142821c9705e28093ded60992d9587fb466df839aa2a4973dd48f9372a55da6592646fc918e533955566a2d8dc59277308223aea4dbe0daf839f95516b8995e9eec87df1df9d38693e0824dca7423b08d553b0ae1c5c44533b918eaa02dd17b4c8ce515ae7de410970f670e17b5e3c0a207fb8464d5d442694a271d593fc23ac19619bac32ac17cc6705ce2e6262361eba24277a471602e7ca57cc614ee116e60a9e0b6ac5e3228ea2c650baf1a09e9e5c7a1b25a078d1d11a673d88f6ee33e50d036d7fe4b9c06adc70aede2e35c6738b255690ed3f7a8d2d14e36e360f3bb66978d6cfcfc41887c751c0efc9325d4485a2f561060413fe6af4ce40d87a476201f15a584fc7ba18ddfef5f1d729d5f544c2c6b06befccb444f0408451089f20b06f05ab7d6702b97819b0eff6fb090f21afb3076558e692920053702fc2348f8dade0cb2b007f38d6dcd4ed3bb42553b1bd684791743a1941e5bf2ed234f44be64a95b485a3e949538a40542f25ca4bfce44e291037ab282082f02157a96f4ca0a0c5cd39215fd07461093a4d87a7979f7aa97142bf5b9ef71db537f9acc90f22ca2ded5c1ecd1ba972d05db7f71e8466085c9b3e975fa3a948f2c4049d1a8e46f71157017a3a74ad25e215dcfe7a4c5cb0a7baea0b0ec60c5df82555c553ac60dd39174c721edc0304b836a4de539c3ee55401e13848018f889cc4a0fcd01d9f4978eb730fb1b4a94ede0283f8c95062f01c8c8a3169b2d5c50cdd4f3a248d80a26c950b4036fc6ffefaf5101269fe3594c2cc128220a1d0b5f9f23121f2b184894e129159eaa92d9a30e878839be44d20cbdff3c338cc95795c86121b2b498bd376e895c98d67f6a27eecb46a203aa9de744feedf27b6825cc17aaa098b5ca05cad6bdbe320908ed36bdc8a8f2c777eeb9b037b36c0e36019c264b3e36196501d6cc90e7b1899a72bea5c8a24a5ae62e3684a39a06208bd382cd32acfabd742c76334797fa0c09a2a2a7e1240974afe0f3d6eb44590cf171efb7602009a93bde85cea6701c765dbca7c6a879be41dd08847802d4f59e933df65f727cbb45e3a4a5019f503b6fad7e0338e653f8b2c87aa7f196444e0dc1be6d7c4f0c7ddd663d06ff1365a9c362384a33b0315adbfb2d73359c485cd5410d36d21044bd8d3771c5492803b19f7f3a1a5c3248e66786479fa4416a55855adebeb09528ff5add597790b97bddc16bb9b7b33a1f800701c4293e2c8428dc2684726cfe5539ae0a9bf89e1b6f1989fd0433cc865b308bd0c636402b4b285c290e2439b9ecf0eba156fb6b613ea7f97b04506fe28e9471343c854fdfd48945a7f564acc817e609be8f8a7fdee12e9b592fd8c5c08f51ba8cb95be12cfa497d1539a4b8217818d47ebb3cc669014261530205948fdb9983a0e5759afa9b290ce838102661750ab06d7fe65a39efa6af36c042d2dee36402a6686d58eb144b76033cab4482b8fbdd213a90170939ec98df1fdfca4b37b143a971b9b59fc351098942bba090056c20e8cfbfe8fcbe361d068c98a020f67e807b8db2e45cad83c9970907646c0049c05c1ed657d53d859f1a47bfe6f022be0689de224034d0160b1dbc878ba6dd685911288d7af22ff5eedc1634c36e25f51d0757c7b9c73d7937955da356dea68749d464a75f56c9f6ba36cc1ca8c2f3aa34beae14fba894ca705111cdb19094432c2f6caa0eac78ab09b0cee330f36b1b91a6a5d4896cd15d96c12547826559441cbf578f189f5f04526a4cf76d60144090c2386b747ad50f7962ef2950d2c6f4ff8477ad0681ab24c47ea7ded8c9accff0dfa30489f43f0f3182b88e757fd9a1d82e1c9bb4efe5215518a6e48c688b2dabbd15107c5c6245de0acfd740ea54e0ec212f405f25bc3aafc63009631a4e4749296d47c2bcf25cc95afceb0a1ddb3c6124208f5134981c30489b42eeb864b3123b03106c9b234a465d87c30ef36e00244390de36a5dd93794467ef37bd01b86387855d2ac24e05370212e845082bb22c8fcda0f0bc78ddf971b0b9d69fc50e0d907408e9c9ac4e5099f47db2d0c14d888e363ece768555362a08c408d0119c45f158aad695d455d28e223be2862c19262c9f43eff8855b5a9af4f2cede95e415e2f597bb64c8bb2d608f86b15950ffe2e6bea3cdb221cf8b7eb35e0bdf6638283b09c68cda0bf1ccb9e353a7f0afb58d806923e36b22db68615a7e4e04d0932d928afdc8af3963378ebd5e05058160ac67fadb7a7d9ec498e00f63671b84d880d196c93afb4fc823e7d6576ad824ffb4c90fc780b163a292899ccfcaed81dee2c992787a66800e206df3dfc4a6b441d54ccb1a19a587402a663d510e45a5b1aa96fc467efaf7e71cbbff087f3d2922a133466d5ae9f86b0bc39bb3093b87ac2db941b1fd9e40427402781425d6e8856a2c66cbdd274f4c689758db6dd58ec7d766b177739e8c9173f2b1946be5396aad6d7ed29d058ac231e8c2e6a9077b4a217df4580a2d72bcf0b73e4bd07465deb8798a55ee855b82f1fa7d3748a40485bd90fab94b617d92219c4b65efa022936895e51873058615a19b9d1347120c405c3254f290b4c8b99c8ea9dde3a749ec538421a29d27b48ccd83852abe1a461123e4d36e56508d1827880960362d10835df77f9d4be51f1447cac5ae2017a814de58cd99bcc0c194254b17114ea48f5a0cfe6547686088d527c65180474fd460ffea5d48767ceb65c6fa3d7d3c632591d2d9d65c6c3a35a6ae4dc56322cd84734b0e7a092a4c46c1c607afa6d0e477e8d04e4993e595ba708a0f4466cd8a89fbc06d3cd366007296a9f05b66cfdcd5b30b6745e71d513205d5dbe1e8516d9e9cf133caa994ec0ac2c543d107efd4b9a7d9ee1ee415830a6c2ea17114ea9683726f2c82741f9ad4ac1be6772f0809f18c13f4cfc82fd1b7b3bd29615336003c6784c03fbcae475a58a3c4d68099732c326dfb7643eb150f2354918077bb798b5ecf491cdd0765e3e1ed5d0a37840f1a28f7e188a021781f1896dae7153f9d6639bf66be0c7857d7eccd2a1e6c9fd0cc3594477bb005df9b29f680c966161e37bcec97fc2ef7a2c3bf64e4df5785c9b080c7f9c6d7c515408445d55da499c03ba66369a31157bb03588e84a5303c46cd393c5bd6fbbb8deed94b62d67a9351c259b263c6c4fa65a4dbdd7eee080d82cc5e478c885678edbc9cfce74169ab748d7f4a08aec3e114394fc1d5e361267b8f3fcf38a024928d58158560f7da427680e7611a9f1b8255c67e6ea6b597ebd31bed9fd6f85f9b6ee63d4374c1e50597d1c9f3c56b4266bc632ba66ebecc396f6bead40392dcc138098b4166ab7f8714bd4db0615480705dd200da92dc51ec215844d7599e0a6262e8d5dc6a9452db8994d8b8f19ad4029e0b41b5e13fd6b56230cecea57f3111fe6c78876b3e657fab112968e83a0b64ce9837b89f5dad0d5f0b8b410e3a9a56ab2e9143e90fe371a944989ee206eef777cf4a235333c647e45aab910af492bc7c2213246374251e23accf5818aa2f24823bcba12efe3658e1e2cb49a5d4ffd26453829739647eccd106605921641afe16bbe79c8739062eabeeda4d4a42cb70d84e1e1d3506c7bfba5f5135aaae85b03dc6518eb30d832175cedc5bdca95e600e04902d9eda90c1da4bdd3138ac889398c239068857103ad70b5d1d9fac27c8ccfbcfcf126d9a5441bc963bce4669047ac901a14ca7c7e76f94c77159cdbda5360e04bb539a9d5ccd16a8cc88bacaa5b952c86b163575d7f1cab58f0d612d796b570f3c5debd7d9abde7e24de2c252173f1edc93817192699bddad45eeb41ff398c1bee4d2194f38bf4d2b4ed3a8895476bc441f464753139e204ff5dee7f45ce639d7541c0d396141aeff30cbbfa7157a61993eec98a4356df98665546a1d1e8429fb0c78684000862aac50f7d9a1413e89958f4defd3f087769cafc32bcd6016e496b41b7754cfbe42b352346fd585fb19a80f4af9a19811311b5fc6ea8eb5519a3cf7dbc1a06eed41668e332224c1daa01776e0886044f5a95e5dffc8d9ccce7840eeae97e8cc916db95bdc33fb420e28030c6edb011d5281db1dbeac9bfcaf938a757e3939b025d339e69b9692c8c7352787d399f342e96096e37ca208609e5f93629e36ee442db9fb822ea236683f79875e7dc73ec97f98fe0795f9d83f473cc80a589043a7edd953473684ea4e80f698683a0fc1d8863adc44fc13c27a08921a681ca1ad76207b1a97f8fff7db247ea09b3a6407ea83d82d82d171fc80a8f5fb9f19cd7e94fe121a6a0ef9c4cff7a8689c0abf750dadcc7442c2ca5ed437af5e88e89b0a783a1164cd1eb2a33a64c919d9f08fe5aa7a775352ab6027a7b73d6fef51acebec5516c2a5f2b932b2621bbd2cdb415fce9ba1dbc3de205869fa0423adcedd5570ab0b4b64afafaa458b3840b48f018297aa46426d7893418033f00b5378eac6a70275ec860609b07851b88ecb5da05086adfb80f47c71a77301ca0f1520dfb7a800bc8421abf5eb94942ec818e3a1d45f09ff93e6549b3ef6152c6abe38231b4a82e355e27e363184df51418286d7073cf464eee02310e84b3eccabd2120fcca333130357e1967f67a69f437dcf6a20ca21797230aad086bd4c28348f58b80ec5d27626004533993b9f85897d00bc271a62ab67f92e2eed6d900000000549e8344ad90b47fb5c1ed5908bce94d03bbe98a87a1733b5031f89644c2d35d729e1375969a82f0252859219407c5c87f5d249d5eb8c17001fc7c6dc5d1825851b41e5e937f2c39d7f7196f38f83619da2cddce747bb0e906d0fc13a11fc6c2be3d140ea6da886cd5e194ca9dbff565d2a82e7e82dc5a36084bf02029ea05a9cfe1f3dc80489b426a14372232940ffad8124bd515f0a73fa85c2aa0cd51d76a0cc6e75ccc35b702a4fed4d2e2828d98939406ddc6df1048f0a22611859d6bfcbb0873d102e4b8a86b5d9af8056447f6c1552a603d9f67009fa070db73a01e1b4adbe4e841d0b9a92d148b626c386b25687817e5ec07dbbfa1d62d078578fe21d546414e3c5e29e8e086d7e542a2eb74a67127e7f171e076bbdd62767aae3db467db1df13b3121023bcee33f814d767a9ef14651f76ec89910ed33e9804df8619f69ad06bf0559b00d4efbf6f44e922d50a18ffa25d8ac58dec53a93642186c0ca81b07fe5c14c9c13397649a53ebfcec118e5bb84db053e6e505d07a09bb50f33906e7febac3c85ca337111dbfcb7b9becccaaefa3d857d48f0b3d8646d70fdcf2f1dfb89cc3ba1394cb5de24d999c88235418bc0f20d4036bd0113d298b91c44fe042d3b8e4070e3f828499972524601c4725389122c7fc3e38eb799f7b755f23bd5362880b9275e58eab2c8f42e583890cb84e17f35025d1d76dd28171bee561d21451b4b2ebf23b923221c9ea06b924815889d2b605af66539c3b0ffc30c7170a5581727f0faddb257cb6ab28b3456737d3588fa3bce0ba6a2a5c3c94301fa8a4e6db358731bd3a4a62b42181e04241010d7bc3e973b9fe428175ec8f8e6cbd4e53c8bd957621acb1e42504e6f8a7bb30c382058fc9dcd0cd0ba0b789c316cd58d7b5606cc2a66c872f10e6663346d572ecc37ad1c3d8146a137e35e54096ddc2a5e2d26765d75615fecd09b864b29adfe92763ab54272365f56feeb9b57059744e765485ee322cb879fd3c8fd8bc4727d860995c548bcd41852349f1b2227f5a1f39b24549693fb05c04ba8f190673d11eb27d0bf628489f9b8049f5f3a1e1fed97ba9881da0031ef5960b6b0af825cfae8252b931f6151cba9bf889a5c74051a176c56d3cbb8915d3f28f8f684629bd1e3f87f27909b4e8eca6b88cdd60f3b5bbe0641a469e396080fdd2feeac7a11703b758f1815f100ab2ca4403af34a655f4c35e62778c276c96bb94a3d9f58f3bbd7ae6c4f133f7c4199f18d02d66598a54769415b376bb04b520881f23b22b32685ea1ea0dc179ab2f33f07c7039d1a5eedd1905d2a8c7d3c9686758ba5aafdd74f36da7f5522aff5c40e565b50cdd92ce353c3d6c97ce87f0495bdb95d70ea52c8c26b87cd337fd2283b88d7301c32f26833451b8f7c2ee5f44eec58d9eef2a39b3021a29c8747d36a2dbca6c0c085399bb720000000000000009d67e17060abad89c7d8b8970244c2f11ad2f4ae878a3676659b77178a9b651b12cf9c21e658a32999d596af4648f636df4de8c037d1fa63b1a685e8850156bf99e00666dbc03d3e3b44018659743127f91d44c99b578b86a44f3bcf1523c8cb45accc3c5fedfd7796411eddfc3a7a6b7c57ae10fd4bd3fe9f662dc59747ac4b7cc2584ae3ce2e42a41066dd0d560f1b4c83edc57121dade5e397380bec5f40b5d0beb14aef21b2c68ccfd0eb4959b5e7f5b5779903963298e3c9a2141f145137de1d604d9124c3c4f60a4d54da38a7c32ef2632fe66a8ce8e95ee95a570e18e9fbd44884afe291550839dd61e65c952a3f5c6b61850d1c2a77e18fde734a305b407cf6dbf17afd66da6e42f0e8f66092df46c79b44711f6e8aafa831fa1188beea696672b0e94cc3cae584b30dccf053634f792c2d9f4c87e306991b407949f2870b525d123f9ca23142a0ee13d05f51ed4ff2653727ad5bf16453276b2d5e7d7a8a0a1c4847cb61ac4b08d9abee25165a120d156775a534a62f9af3a3b62726101b94ae1e14352262f017c5361b3341952d194a6a2d470e60df3fde61d343e0af8fdff36ad976af6732b732ceb69344550555174fa280153e08f74d81f4ee69c1eb44a3468e8cf78bf7c1663dae3d31553466faa207b8e9887cb54209fac0b6f6d12d9588351c76e6bad884799afe856a25b5fe737d0ba737a0f1a12b4eb3ede48a0c38e6787ab42fca1c7f2ab42fa6104d5a99aa36b73ac3622ccae122524c28a6557cb7d0a7c7eb5de795647dca0621fc2c9599441dae7cc2a8631252abb5e0f22e9355e0a156a1ab7b1641e345045e8303b5f6dda5c3c1cc2637700cea25c004460d101fc42ad78ae477739a4efbacc57272cfafae15292dc3b2800d9f42002c2062af9a1f329e11140f8317242c04ac1f11cdb45f5f9ab18877daa214c151fb9ac54e3e010b5e7944d7217442d5c4fc29956c1333cb932424096f5b6afe1128db53f7171be4372be8bae538bcb3e4a2eb29608678735a667135e0f2660956e9e2a3ed862209efe65d9ab2fbbf88e5d3384fb3362af00e1ec6b4d3ca40df442b70951026438877189c4b0ae136a9a35c131fdf19115e8dc1ee2b938bfbfdb3808aebbe7dfbbd3510c7070388f5813e8bc63be744b99116c4b84ea37d57c5da7a80cc883aa915d84a249ebfa78ceb124c63b3a0720b19483189ee50824e8581556f0520e434803204cd0f3dd09fc97c979f9a7e3f8e5eca8fccde98fc4939551338235c0c6378faade0d18f7050f29189485e01ec120239373c5478cd19ab27570921415a6680924baf9c5829f3f2115460d1fceb8a026fa1a0a0047fe1cd6fcf1861dd3784e006abfddfe79461c5001e4e32d99c5bc203c21f8c711c5ecccf8941093d95a8db73722bb7511443fb2670244cc1249492e92fc4bf7e06ec6f08c5c6931929d58232b551957b771ea5e4a932b037904b81916e662e3fe95af894e80f699e5c00ab664f381bd9c0bd41322a8b3cf367577429fa52c0f1c44ffc626c215e7103cba05bff4931d9a202c1eb9068f44983d1e0c6d9fb5fed738561651e854a3c1b362ae354a0b4a270386ed2dbef093bd82f07f25edfae31901cb86fd214576b25f769bcb215214c63026b2581a8d17779aae03ba310f3243b3631f4b01c9e3eb342c3bdb44d8e47cdc1683e3b1cfffef72e385cc8831f99425fc406575170e1c106618d5429144a436b9e92d241d8118b5cbe0dca5e8ddd86e671e13080eddcf8dee9e317d192a3a5386378de9b1ecd8cf5439cfbe9f65965e5a5f6c145627ac23fe30c2e06e623b0eca15b225b32b65ce568b656cec0e0d6752fdebffd39c7538472ad7a195b56fcad3fab80016ff006df6b01d785191e4fca143b14ce68b32571476a779515ccb14d35cf9aabd4849c03c9bf12a42cfc2a7146ed6c25892a9d1c48f95314f641142d38cd882e54534d69b3fcc18044309e6debef6dc79d7737956418b955d33737115b44360e0bac14b71e2e64f0c8aea428dce5b65e210c108f832a6041c0aab116488e5863cd1039dc8af537908be3541352bdad303de43387503d19d7c0f0390bdc5b95f1dfb0701fd0e14a22c210837cc0a1cb059de474f4476bfe9bddfe3e7977fb299e82d9eefb18111f7c4a5fbd406fca720fec69340d978f4c9832204d67f6fa5793325e04d4af84acde0b56158e4c606394286a4b3cfc04a426a665529b753e1ce2d6c613159844bd069a67b5b96cb8ec993f05a8e252ed3d8ed63d524af0845f519f9d47b85a773f37031cb91055fb963db50e6a1e368f10a82fa40ac055e0201c6d29661eadb76f8154ef9c1cc210ccf1ccb063e8c00324ed6a14fdefa0167a9abb04debbbf5e7b8a57a7772373c765947f0f67b5130d77a6ca6ab166147d4eba97b4ddf1465d25b02f4430227b5713a29fd84664bfdfa5fc450e48f5263eaca67c16033b79bf1cb819511cf16bae6ffd5d05a7d9cc93067b6f2512fea2424a9c7d178f653ffa7ce1c00924707e3817c7cd461cb2a8cc5eadc40821258eaad7720ee3976c5a60025c317480016e5e5bd884f3646651f3bdc1185ec1a4112eb24ba5b3b6f94ac66322042d4bc48cb5befabfcf950cf8a0165fba3fa019324b53fb56bbfaec7f4ec733e84c22f841c1c9c1dc51dd3ac4887e155ac4095a6b8846c8f401f3c2d48d4de18906193a9f05ed59e3b0add8bc27c0bad8418ccbb842123ce1d39fdeeaa7984dfba9ef121ab4d4d35de076262636f3815708e4bcf31e634a290b13317425b1a4a2e4ebf8537092c7e524c126faa9622bf1337168e003857805dd420a51816fea3cd37c34e483f64a2da3ab67442314ffff40727835a1bc7b9971ccb5f83183cf1a135defd468907b988d97028f904c4d9c712f7d0ed6abe4d80712a7b7e06efcbe6a5b83e32beb1556326af7a97437c35c6a706c6cf4403b98f5134547ac167fd1abcb9245ec3450202ab80e553952412032a6c3cfa64441d4aecabd1e182c50bf67801fd3b44b40648ac9926bbbd7095425a429f2a9550c2fd1267cbf6156897b705255cadf1c7f233f4effd788b3f446dba19e68bbf8b42ff6caf984a4eb51328ab5e2bc28366e8b4df4df967a166470a00", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="b00000000000000000000000000000000000000000200000000000000000000000000000000000000200000000000000000020000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000c0000000000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0021000000000000467700000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x58}}, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000001040168b800000000000000000004000500"], 0x1c}}, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x8417f, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000088000000060a010400000000000000000100000008000b400000000060000480280001800e000100636f6e6e6c696d69740000001400028008000140000006e508000240000000003400018008000100636d7000280002800800024000000001140003800400010009000100efbb17b799000000080001400000000e0900010073797a30"], 0xfc}}, 0x0) 1.103351578s ago: executing program 2 (id=691): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r8 = socket$kcm(0x29, 0x5, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x9, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) close_range(0xffffffffffffffff, r5, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r9, 0xc018ae85, &(0x7f00000000c0)={0x40000}) r11 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r11, 0x0, 0x0) syz_usb_control_io(r11, &(0x7f0000000000)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="007863e7de2fb4698bb9f8cd8d707821070000003d7da329159d634ce08b919a736e568a9800c230908c257befa0e8e0da556526c655c3cc65446fd0147f343a1f54c53a7056176f620e805ecd5ea71ef95837b893c11babd438f5970dc1192b8fcaa3c6a4bf259a381b67cf54f71ad87cbf58b742dddf7a738145529eae74eec07cd5f3fa393c58edae00"/150], 0x0, 0x0, 0x0, 0x0}, 0x0) 623.118138ms ago: executing program 3 (id=692): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000080)=0x800002, 0x4) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYRES32], 0x40) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000040)={0x5}) 616.268935ms ago: executing program 0 (id=693): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3ada0", @ANYRESDEC=0x0], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, "c6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 383.928175ms ago: executing program 3 (id=694): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c0000002076976e262cac0f069a00010000000000000000000a801400f256693b9cb0eef1edc85bebb3c3f2db4dbd494efa006e0b914bd2fdb7b3938b7b330d549328d92bc4051cf16997aff7236a0b0d019b8f6e937845d099260ed9e7ec4463fa4326631621686ff387a48c9ff67f787110780782aa3e15a1df1205915491cf1435815d0e31d50e5e259e32947279eab5"], 0x1c}}, 0x40000) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x27, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @main=@item_012={0x2, 0x0, 0xb, "1cee"}, @local=@item_4={0x3, 0x2, 0x0, "53743ff6"}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4, @main=@item_4={0x3, 0x0, 0x8}, @main=@item_4={0x3, 0x0, 0x8, "837ea6ba"}, @local=@item_4={0x3, 0x2, 0x6, "00000400"}, @local=@item_4={0x3, 0x2, 0x0, "9585f6b2"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0xa0000) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) open_tree(r2, &(0x7f0000000640)='\x00', 0x81101) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000080)={0x14, &(0x7f0000000240)={0x40, 0x1, 0xc1, {0xc1, 0x31, "1df853ff3215d60203b0ceec0f9dac057778e8c7c5e6041dec9861a823541897a98aefe3da90f9dd4c2046203198f53f84b2b37473c28e805922a85143bcbf276edeac0b32da2eae50e4379922c9932f1b2ff64a9bcc5814d87a8e89efdaf413802c70d8102704751a75c7d04af33aecdcd24ceb36189148cd3b1bfd5cff258f10f77e05cf985dd330137a32c2abe9ce2252a43c8d62d53c8226553d6ca24504f24ee32ff71d641275aceb8c7f192a496b7467fe9a252a8e755dd478f8ec71"}}, &(0x7f0000000340)={0x0, 0x3, 0xf7, @string={0xf7, 0x3, "a8999f2b00e53a0f19365050d485bba76bfcb0518932249ccc2f582a3120ae20bdc6691c25c826822237ae60cc2b3b3da66334bff89bffad983361da8c1ec4b8089b625640ab5f1aca2c6d0db1e3f9eb68017fb5f28fa0afd331bda04357e593cb90e73adbc2b23294c24e1b482585595ac80e3d5e96ba6d7b8620da44c88959ca5b5079bffaaba283869d40550944552949ce6ed6abebed3b85b16dc199be8bbf7ca6cb6d210b2a699cdf00acd52f9ac381358ecfe3ee0245ec0381eb8a0c97e2c8ae4ea48bfb46cdf1cc181b0e37ede871b5edf8a93034e8af2c77ea846bbb611aefaad48ca3ca52e0c20cacb5b4019fd19a529b"}}}, &(0x7f0000000640)={0x34, &(0x7f0000000440)={0x40, 0x15, 0xcf, "51703bb9aef9799f72de3d09699dc37342ff55cc990e8ef65345cdea9e4a3ac91836145319b801cf03ffc6c25e4cd78a3b4106604842c069587d744e2324236c8b10371852e68cb9694974908a73b46727f4f1b5ece5a119c32a3c7cff0f5cb0115d49f6ab16786ef5ee2ac62e7ef9dd1e5e3c94fe31c093ba7850624f1c44b217dc07d4120ab3c752f341d84cf66dbdf4d5fdf466a8a15073bb38a809776aff4cd11fa597fa8ae78a29e5aa608371c49a9364cfca2e7f8233888b9cb90a2abc5f82ae16031f9a3b2b88339ffe7f5a"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000580)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f00000005c0)={0x40, 0xa0, 0x4, 0x9}, &(0x7f0000000600)={0xc0, 0xa2, 0x2f, "48a6e0ce0688b92fc824631592a546f443381c8ec528a347b5c86321db23e48bf577e6484ddda5cd1fac57b70af89e"}}) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/101) 0s ago: executing program 1 (id=695): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) syz_usb_connect(0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="12011001d31ad240f0031d5842bb0102030109022d0005000000000904c50003ff01070009050502080000030109050c"], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) kernel console output (not intermixed with test programs): 0.51: probe with driver quatech2 failed with error -90 [ 160.717174][ T7133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.729930][ T7133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.844462][ T24] usb 2-1: USB disconnect, device number 13 [ 160.875199][ T7133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.901160][ T7133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.924049][ T7133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.934418][ T7133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.947154][ T7133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.958279][ T7133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.991616][ T9] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 161.076431][ T979] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 161.211513][ T9] usb 4-1: USB disconnect, device number 20 [ 161.258296][ T979] usb 1-1: not running at top speed; connect to a high speed hub [ 161.307913][ T979] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 161.364791][ T979] usb 1-1: can't read configurations, error -22 [ 161.533610][ T7160] loop9: detected capacity change from 0 to 7 [ 161.557282][ T979] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 161.576922][ T7160] Dev loop9: unable to read RDB block 7 [ 161.582918][ T7160] loop9: unable to read partition table [ 161.589202][ T7160] loop9: partition table beyond EOD, truncated [ 161.619575][ T7160] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 161.760415][ T979] usb 1-1: not running at top speed; connect to a high speed hub [ 161.775490][ T979] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 161.784808][ T979] usb 1-1: can't read configurations, error -22 [ 161.800124][ T979] usb usb1-port1: attempt power cycle [ 162.146046][ T979] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 162.190878][ T979] usb 1-1: not running at top speed; connect to a high speed hub [ 162.200870][ T979] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 162.216027][ T979] usb 1-1: can't read configurations, error -22 [ 162.386058][ T979] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 162.418655][ T979] usb 1-1: not running at top speed; connect to a high speed hub [ 162.436720][ T982] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 162.437699][ T979] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 162.473205][ T979] usb 1-1: can't read configurations, error -22 [ 162.512535][ T979] usb usb1-port1: unable to enumerate USB device [ 162.630277][ T982] usb 3-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 162.639722][ T982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.655927][ T982] usb 3-1: Product: syz [ 162.666012][ T982] usb 3-1: Manufacturer: syz [ 162.670740][ T982] usb 3-1: SerialNumber: syz [ 162.701004][ T982] usb 3-1: config 0 descriptor?? [ 162.729983][ T982] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 162.901968][ T7188] input: syz0 as /devices/virtual/input/input8 [ 163.138506][ T982] usb 3-1: USB disconnect, device number 16 [ 163.382173][ T7193] netlink: 28 bytes leftover after parsing attributes in process `syz.3.314'. [ 163.463014][ T7193] netlink: 12 bytes leftover after parsing attributes in process `syz.3.314'. [ 163.564345][ T7197] netlink: 28 bytes leftover after parsing attributes in process `syz.3.314'. [ 163.733103][ T7199] loop9: detected capacity change from 0 to 7 [ 163.756071][ T982] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 163.767956][ T7199] Dev loop9: unable to read RDB block 7 [ 163.809614][ T7199] loop9: unable to read partition table [ 163.826254][ T7199] loop9: partition table beyond EOD, truncated [ 163.852650][ T7199] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 163.963028][ T982] usb 5-1: Using ep0 maxpacket: 16 [ 164.024662][ T982] usb 5-1: config 5 has an invalid interface number: 206 but max is 0 [ 164.046662][ T982] usb 5-1: config 5 has no interface number 0 [ 164.052858][ T982] usb 5-1: config 5 interface 206 has no altsetting 0 [ 164.080640][ T982] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=60.44 [ 164.106105][ T982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.114129][ T982] usb 5-1: Product: syz [ 164.166113][ T982] usb 5-1: Manufacturer: syz [ 164.170753][ T982] usb 5-1: SerialNumber: syz [ 164.554730][ T7232] ptrace attach of "./syz-executor exec"[5880] was attempted by "./syz-executor exec"[7232] [ 164.626064][ T5980] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 164.634471][ T982] usb_ehset_test 5-1:5.206: probe with driver usb_ehset_test failed with error -32 [ 165.122962][ T982] usb 5-1: USB disconnect, device number 11 [ 165.193912][ T7227] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 165.296274][ T5980] usb 1-1: Using ep0 maxpacket: 16 [ 165.346338][ T5980] usb 1-1: config 0 has an invalid interface number: 39 but max is 0 [ 165.354417][ T5980] usb 1-1: config 0 has no interface number 0 [ 165.387882][ T5980] usb 1-1: config 0 interface 39 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 165.441545][ T5980] usb 1-1: config 0 interface 39 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 165.507525][ T5980] usb 1-1: New USB device found, idVendor=0c52, idProduct=2212, bcdDevice= 1.ca [ 165.576977][ T5980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.605645][ T7239] libceph: resolve '4' (ret=-3): failed [ 165.631399][ T5980] usb 1-1: Product: syz [ 165.646397][ T5980] usb 1-1: Manufacturer: syz [ 165.651024][ T5980] usb 1-1: SerialNumber: syz [ 165.677304][ T5980] usb 1-1: config 0 descriptor?? [ 165.732287][ T7215] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 165.818092][ T5980] ftdi_sio 1-1:0.39: FTDI USB Serial Device converter detected [ 165.869108][ T5980] usb 1-1: Detected SIO [ 165.886722][ T5980] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 166.166065][ T5980] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 166.341592][ T5980] usb 4-1: device descriptor read/64, error -71 [ 166.461765][ T7270] netlink: 16 bytes leftover after parsing attributes in process `syz.2.333'. [ 166.696093][ T5980] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 166.836057][ T5980] usb 4-1: device descriptor read/64, error -71 [ 166.946776][ T5980] usb usb4-port1: attempt power cycle [ 166.974896][ T7284] tipc: Can't bind to reserved service type 2 [ 167.296548][ T5980] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 167.316843][ T5980] usb 4-1: device descriptor read/8, error -71 [ 167.566003][ T5980] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 167.612663][ T982] usb 1-1: USB disconnect, device number 19 [ 167.636908][ T5980] usb 4-1: device descriptor read/8, error -71 [ 167.654522][ T982] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 167.670080][ T982] ftdi_sio 1-1:0.39: device disconnected [ 167.753913][ T5980] usb usb4-port1: unable to enumerate USB device [ 168.526078][ T5980] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 168.699201][ T5980] usb 5-1: config 0 has an invalid interface number: 168 but max is 0 [ 168.747994][ T5980] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.761219][ T5980] usb 5-1: config 0 has no interface number 0 [ 168.788024][ T5980] usb 5-1: config 0 interface 168 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 168.804249][ T5980] usb 5-1: config 0 interface 168 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 168.820066][ T5980] usb 5-1: config 0 interface 168 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 168.874596][ T5980] usb 5-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 168.884345][ T5980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.902364][ T5980] usb 5-1: config 0 descriptor?? [ 168.918296][ T5980] HFC-S_USB 5-1:0.168: probe with driver HFC-S_USB failed with error -5 [ 169.039942][ T7327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.348'. [ 169.107651][ T982] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 169.180287][ T5980] usb 5-1: USB disconnect, device number 12 [ 169.276501][ T982] usb 1-1: device descriptor read/64, error -71 [ 169.381514][ T7335] netlink: 28 bytes leftover after parsing attributes in process `syz.3.349'. [ 169.517057][ T982] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 169.614409][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 169.614424][ T30] audit: type=1326 audit(1758389875.902:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7339 comm="syz.1.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b898ec29 code=0x7ffc0000 [ 169.667581][ T5980] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 169.675372][ T982] usb 1-1: device descriptor read/64, error -71 [ 169.683053][ T30] audit: type=1326 audit(1758389875.942:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7339 comm="syz.1.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b898ec29 code=0x7ffc0000 [ 169.727491][ T30] audit: type=1326 audit(1758389875.942:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7339 comm="syz.1.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f29b898ec29 code=0x7ffc0000 [ 169.787553][ T982] usb usb1-port1: attempt power cycle [ 169.825985][ T5980] usb 4-1: Using ep0 maxpacket: 8 [ 169.836527][ T5980] usb 4-1: unable to get BOS descriptor or descriptor too short [ 169.855384][ T5980] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 169.879726][ T30] audit: type=1326 audit(1758389875.942:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7339 comm="syz.1.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b898ec29 code=0x7ffc0000 [ 169.904909][ T5980] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 169.921876][ T5980] usb 4-1: config 1 interface 0 has no altsetting 0 [ 169.930227][ T30] audit: type=1326 audit(1758389875.942:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7339 comm="syz.1.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f29b898d590 code=0x7ffc0000 [ 169.955135][ T5980] usb 4-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 169.984149][ T5980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.996060][ T30] audit: type=1326 audit(1758389875.942:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7339 comm="syz.1.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b898ec29 code=0x7ffc0000 [ 170.020776][ T5980] usb 4-1: Product: syz [ 170.024935][ T5980] usb 4-1: Manufacturer: syz [ 170.046019][ T5980] usb 4-1: SerialNumber: syz [ 170.056391][ T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 170.074494][ T7337] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 170.088389][ T30] audit: type=1326 audit(1758389875.942:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7339 comm="syz.1.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b898ec29 code=0x7ffc0000 [ 170.146114][ T982] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 170.174325][ T30] audit: type=1326 audit(1758389875.942:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7339 comm="syz.1.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f29b898ec29 code=0x7ffc0000 [ 170.197868][ T982] usb 1-1: device descriptor read/8, error -71 [ 170.228468][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 170.251419][ T30] audit: type=1326 audit(1758389875.942:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7339 comm="syz.1.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b898ec29 code=0x7ffc0000 [ 170.306566][ T7335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.317860][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.355972][ T7335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.374168][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 170.384781][ T5980] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input11 [ 170.405219][ T30] audit: type=1326 audit(1758389875.942:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7339 comm="syz.1.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f29b898ec29 code=0x7ffc0000 [ 170.410053][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.443616][ T5980] bcm5974 4-1:1.0: could not read from device [ 170.450615][ T982] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 170.476553][ T982] usb 1-1: device descriptor read/8, error -71 [ 170.485106][ T5219] bcm5974 4-1:1.0: could not read from device [ 170.495785][ T5980] input: failed to attach handler mousedev to device input11, error: -5 [ 170.525319][ T24] usb 5-1: config 0 descriptor?? [ 170.533002][ T5219] bcm5974 4-1:1.0: could not read from device [ 170.551403][ T5980] usb 4-1: USB disconnect, device number 26 [ 170.554301][ T24] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 170.565579][ T5219] bcm5974 4-1:1.0: could not read from device [ 170.596564][ T982] usb usb1-port1: unable to enumerate USB device [ 170.949742][ T7347] ======================================================= [ 170.949742][ T7347] WARNING: The mand mount option has been deprecated and [ 170.949742][ T7347] and is ignored by this kernel. Remove the mand [ 170.949742][ T7347] option from the mount to silence this warning. [ 170.949742][ T7347] ======================================================= [ 171.221368][ T7352] netlink: 16 bytes leftover after parsing attributes in process `syz.3.355'. [ 171.222904][ T7352] netlink: 16 bytes leftover after parsing attributes in process `syz.3.355'. [ 171.233768][ T7345] block nbd0: Attempted send on invalid socket [ 171.233934][ T7345] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 171.270220][ T5930] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 171.273184][ T7345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.273616][ T7345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.396223][ T5930] usb 3-1: device descriptor read/64, error -71 [ 171.456311][ T24] gspca_vc032x: reg_r err -110 [ 171.462459][ T24] vc032x 5-1:0.0: probe with driver vc032x failed with error -110 [ 171.476098][ T982] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 171.635952][ T5930] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 171.649801][ T982] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 171.662723][ T982] usb 4-1: config 3 has 1 interface, different from the descriptor's value: 2 [ 171.672624][ T982] usb 4-1: config 3 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 171.692535][ T982] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 171.701994][ T982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.713988][ T982] usb 4-1: Product: syz [ 171.719772][ T982] usb 4-1: Manufacturer: syz [ 171.724804][ T982] usb 4-1: SerialNumber: syz [ 171.749354][ T982] cdc_ncm 4-1:3.0: CDC Union missing and no IAD found [ 171.758293][ T982] cdc_ncm 4-1:3.0: bind() failure [ 171.766090][ T5930] usb 3-1: device descriptor read/64, error -71 [ 171.882769][ T5930] usb usb3-port1: attempt power cycle [ 171.930075][ T5980] usb 5-1: USB disconnect, device number 13 [ 172.007998][ T6029] usb 4-1: USB disconnect, device number 27 [ 172.030346][ T7358] netlink: 'syz.4.357': attribute type 4 has an invalid length. [ 172.054568][ T7358] netlink: 17 bytes leftover after parsing attributes in process `syz.4.357'. [ 172.226065][ T5930] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 172.336874][ T5930] usb 3-1: device descriptor read/8, error -71 [ 172.398968][ T7365] vim2m vim2m.0: vidioc_s_fmt queue busy [ 172.466345][ T5980] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 172.596050][ T5930] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 172.686085][ T5980] usb 5-1: Using ep0 maxpacket: 32 [ 172.719578][ T5980] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 172.787833][ T5980] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 172.800878][ T5980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.816892][ T5930] usb 3-1: device descriptor read/8, error -71 [ 172.831145][ T5980] usb 5-1: Product: syz [ 172.837015][ T5980] usb 5-1: Manufacturer: syz [ 172.842852][ T5980] usb 5-1: SerialNumber: syz [ 172.868523][ T5980] usb 5-1: config 0 descriptor?? [ 172.895438][ T7358] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 172.918817][ T5980] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input12 [ 173.006813][ T5930] usb usb3-port1: unable to enumerate USB device [ 173.286593][ T7379] netlink: 'syz.4.357': attribute type 4 has an invalid length. [ 173.352265][ T7379] netlink: 17 bytes leftover after parsing attributes in process `syz.4.357'. [ 173.441499][ T5930] usb 5-1: USB disconnect, device number 14 [ 173.441649][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 173.753427][ T7382] netlink: 28 bytes leftover after parsing attributes in process `syz.4.360'. [ 173.858746][ T5879] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 174.826238][ T5944] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 174.991127][ T7397] netlink: 'syz.3.364': attribute type 1 has an invalid length. [ 175.033521][ T5944] usb 3-1: device descriptor read/64, error -71 [ 175.342972][ T5944] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 175.549549][ T5944] usb 3-1: device descriptor read/64, error -71 [ 175.667628][ T5944] usb usb3-port1: attempt power cycle [ 176.026023][ T5944] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 176.064234][ T5944] usb 3-1: device descriptor read/8, error -71 [ 176.107936][ T7420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.370'. [ 176.316128][ T5944] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 176.360123][ T5944] usb 3-1: device descriptor read/8, error -71 [ 176.494688][ T5944] usb usb3-port1: unable to enumerate USB device [ 177.592102][ T7453] binder_alloc: 7450: pid 7450 spamming oneway? 1 buffers allocated for a total size of 4096 [ 177.644601][ T5944] IPVS: starting estimator thread 0... [ 177.766196][ T7457] IPVS: using max 36 ests per chain, 86400 per kthread [ 177.773351][ T7460] binder_alloc: 7450: pid 7450 spamming oneway? 2 buffers allocated for a total size of 5120 [ 177.819351][ T7453] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 177.968678][ T7463] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 178.001393][ T7465] netlink: 20 bytes leftover after parsing attributes in process `syz.1.379'. [ 178.025278][ T7463] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 178.585131][ T7478] fuse: Unknown parameter 'bn³YùÃÇ™[ÊÝ;²bd' [ 178.722945][ T7482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.385'. [ 178.737293][ T7482] netlink: 60 bytes leftover after parsing attributes in process `syz.3.385'. [ 178.761445][ T7447] delete_channel: no stack [ 178.871556][ T979] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 179.077035][ T979] usb 3-1: Using ep0 maxpacket: 32 [ 179.084374][ T979] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 179.093769][ T979] usb 3-1: config 0 has no interface number 0 [ 179.103743][ T979] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 179.113068][ T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.125946][ T979] usb 3-1: Product: syz [ 179.130125][ T979] usb 3-1: Manufacturer: syz [ 179.144336][ T979] usb 3-1: SerialNumber: syz [ 179.146071][ T982] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 179.176614][ T979] usb 3-1: config 0 descriptor?? [ 179.193278][ T979] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 179.218381][ T979] usb 3-1: selecting invalid altsetting 1 [ 179.234537][ T979] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 179.260656][ T979] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 179.281676][ T979] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 179.295974][ T5944] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 179.306298][ T979] usb 3-1: media controller created [ 179.315980][ T982] usb 4-1: Using ep0 maxpacket: 32 [ 179.324450][ T982] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.340929][ T982] usb 4-1: config 0 has no interfaces? [ 179.347389][ T982] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 179.369504][ T982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.387486][ T982] usb 4-1: config 0 descriptor?? [ 179.427662][ T979] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 179.469874][ T5944] usb 5-1: Using ep0 maxpacket: 32 [ 179.494589][ T5944] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 179.508787][ T5944] usb 5-1: config 0 has no interface number 0 [ 179.526693][ T5944] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 179.535897][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.545281][ T5944] usb 5-1: Product: syz [ 179.557431][ T979] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 179.574934][ T5944] usb 5-1: Manufacturer: syz [ 179.585150][ T979] zl10353_read_register: readreg error (reg=127, ret==-71) [ 179.592859][ T5944] usb 5-1: SerialNumber: syz [ 179.598073][ T979] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 179.610370][ T5944] usb 5-1: config 0 descriptor?? [ 179.632198][ T5944] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 179.707236][ T979] usb 3-1: USB disconnect, device number 25 [ 179.741124][ T7485] ip6gretap0: entered promiscuous mode [ 179.753536][ T7485] vlan3: entered promiscuous mode [ 179.773883][ T7491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.866510][ T5944] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 179.916818][ T7491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.946968][ T5944] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 179.981489][ T7495] loop2: detected capacity change from 0 to 7 [ 180.013286][ T7495] Dev loop2: unable to read RDB block 7 [ 180.046944][ T7487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.055780][ T7487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.100345][ T7495] loop2: unable to read partition table [ 180.117158][ T7495] loop2: partition table beyond EOD, truncated [ 180.133714][ T7495] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 180.135374][ T7487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.387'. [ 180.168450][ T7487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.264718][ T7487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.412587][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 180.429341][ T5944] usb 5-1: USB disconnect, device number 15 [ 180.438623][ T5944] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 180.481913][ T982] usb 4-1: USB disconnect, device number 28 [ 180.514199][ T5944] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 180.571558][ T5944] quatech2 5-1:0.51: device disconnected [ 180.906319][ T5980] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 181.106056][ T5980] usb 1-1: device descriptor read/64, error -71 [ 181.321910][ T7524] netlink: 52 bytes leftover after parsing attributes in process `syz.4.394'. [ 181.351555][ T5980] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 181.505937][ T5980] usb 1-1: device descriptor read/64, error -71 [ 181.626585][ T5980] usb usb1-port1: attempt power cycle [ 181.870743][ T7539] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.398' resets device [ 181.895309][ T7541] netlink: 408 bytes leftover after parsing attributes in process `syz.4.399'. [ 181.897271][ T7539] fuse: Unknown parameter 'î' [ 182.046060][ T5980] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 182.107120][ T5980] usb 1-1: device descriptor read/8, error -71 [ 182.213529][ T7550] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 182.220330][ T7550] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 182.256406][ T7550] vhci_hcd vhci_hcd.0: Device attached [ 182.297231][ T7550] syz.2.402 (7550): /proc/7549/oom_adj is deprecated, please use /proc/7549/oom_score_adj instead. [ 182.328740][ T982] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 182.339429][ T7553] vhci_hcd: connection closed [ 182.377262][ T6025] vhci_hcd: stop threads [ 182.385980][ T5980] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 182.407048][ T6025] vhci_hcd: release socket [ 182.447932][ T5980] usb 1-1: device descriptor read/8, error -71 [ 182.464442][ T24] vhci_hcd: vhci_device speed not set [ 182.501473][ T982] usb 5-1: Using ep0 maxpacket: 16 [ 182.511273][ T982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.526217][ T6025] vhci_hcd: disconnect device [ 182.553200][ T982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.553382][ T7562] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 182.588476][ T5980] usb usb1-port1: unable to enumerate USB device [ 182.589222][ T7562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.405'. [ 182.607190][ T982] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 182.619513][ T982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.635364][ T982] usb 5-1: config 0 descriptor?? [ 183.521269][ T982] usb 5-1: string descriptor 0 read error: -71 [ 183.575508][ T982] usb 5-1: Max retries (5) exceeded reading string descriptor 200 [ 183.583556][ T982] letsketch 0003:6161:4D15.0005: probe with driver letsketch failed with error -32 [ 183.740804][ T982] usb 5-1: USB disconnect, device number 16 [ 184.046007][ T5980] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 184.126240][ T7584] loop2: detected capacity change from 0 to 7 [ 184.156606][ T7584] Dev loop2: unable to read RDB block 7 [ 184.163716][ T7584] loop2: unable to read partition table [ 184.215167][ T7584] loop2: partition table beyond EOD, truncated [ 184.229406][ T5980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.232418][ T7584] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 184.264517][ T5980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.303356][ T5980] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 184.329385][ T5980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.344452][ T5980] usb 3-1: config 0 descriptor?? [ 184.556088][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 184.583298][ T5980] usbhid 3-1:0.0: can't add hid device: -71 [ 184.604985][ T5980] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 184.640440][ T5980] usb 3-1: USB disconnect, device number 26 [ 184.716043][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 184.725532][ T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 184.742816][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 184.753160][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 184.768713][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 184.793667][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.807562][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 184.817904][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.836456][ T6029] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 184.875953][ T24] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 184.999735][ T6029] usb 5-1: unable to get BOS descriptor or descriptor too short [ 185.014400][ T6029] usb 5-1: not running at top speed; connect to a high speed hub [ 185.028004][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 185.034431][ T6029] usb 5-1: config index 0 descriptor too short (expected 14610, got 18) [ 185.050861][ T9] usb 4-1: usb_control_msg returned -32 [ 185.059699][ T9] usbtmc 4-1:16.0: can't read capabilities [ 185.060612][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 217 [ 185.068180][ T6029] usb 5-1: config 79 has too many interfaces: 199, using maximum allowed: 32 [ 185.099825][ T24] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 185.102026][ T6029] usb 5-1: config 79 has an invalid descriptor of length 224, skipping remainder of the config [ 185.120513][ T5980] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 185.122291][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.139237][ T6029] usb 5-1: config 79 has 0 interfaces, different from the descriptor's value: 199 [ 185.145489][ T7606] loop9: detected capacity change from 0 to 7 [ 185.153825][ T6029] usb 5-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=51.70 [ 185.163582][ T24] usb 2-1: config 0 descriptor?? [ 185.170000][ T6029] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.170785][ T7597] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 185.180215][ T6029] usb 5-1: Product: syz [ 185.190934][ T6029] usb 5-1: Manufacturer: syz [ 185.194356][ T7606] Dev loop9: unable to read RDB block 7 [ 185.195616][ T6029] usb 5-1: SerialNumber: syz [ 185.203290][ T7606] loop9: unable to read partition table [ 185.224513][ T7606] loop9: partition table beyond EOD, truncated [ 185.231105][ T7606] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 185.286631][ T5980] usb 3-1: Using ep0 maxpacket: 16 [ 185.299442][ T5980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.333149][ T5980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.350289][ T5980] usb 3-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 185.363522][ T5980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.442245][ T6029] usb 5-1: USB disconnect, device number 17 [ 185.469610][ T5980] usb 3-1: config 0 descriptor?? [ 185.475590][ T7597] tc_dump_action: action bad kind [ 185.526403][ T24] ath6kl: Failed to submit usb control message: -71 [ 185.541804][ T24] ath6kl: unable to send the bmi data to the device: -71 [ 185.558228][ T24] ath6kl: Unable to send get target info: -71 [ 185.583732][ T24] ath6kl: Failed to init ath6kl core: -71 [ 185.604806][ T24] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 185.634045][ T24] usb 2-1: USB disconnect, device number 14 [ 186.113647][ T7578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.132679][ T7578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.183178][ T7578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.206739][ T7578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.258737][ T7578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.280845][ T7578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.379534][ T6029] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 186.530541][ T5980] usbhid 3-1:0.0: can't add hid device: -71 [ 186.546157][ T7625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.422'. [ 186.555366][ T5980] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 186.574550][ T5980] usb 3-1: USB disconnect, device number 27 [ 186.633203][ T6029] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 186.659637][ T6029] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.682651][ T6029] usb 5-1: New USB device found, idVendor=1477, idProduct=1026, bcdDevice= 0.00 [ 186.706081][ T6029] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.728701][ T6029] usb 5-1: config 0 descriptor?? [ 187.335982][ T6029] hid-generic 0003:1477:1026.0006: hidraw0: USB HID v0.00 Device [HID 1477:1026] on usb-dummy_hcd.4-1/input0 [ 187.551983][ T9] usb 4-1: USB disconnect, device number 29 [ 187.597635][ T6029] usb 5-1: USB disconnect, device number 18 [ 188.024809][ T7644] fido_id[7644]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 188.320054][ T7657] loop9: detected capacity change from 0 to 7 [ 188.336347][ T7657] Dev loop9: unable to read RDB block 7 [ 188.371833][ T7657] loop9: unable to read partition table [ 188.380130][ T7657] loop9: partition table beyond EOD, truncated [ 188.393650][ T7657] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 188.435962][ T6029] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 188.460774][ T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 188.636696][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 188.648392][ T6029] usb 2-1: config 1 interface 0 has no altsetting 0 [ 188.651777][ T24] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 188.657237][ T6029] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 188.676664][ T24] usb 5-1: config 0 has no interface number 0 [ 188.686086][ T6029] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.706532][ T24] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 188.706736][ T6029] usb 2-1: Product: syz [ 188.738860][ T6029] usb 2-1: Manufacturer: syz [ 188.740640][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.745758][ T6029] usb 2-1: SerialNumber: syz [ 188.814384][ T24] usb 5-1: Product: syz [ 188.819252][ T24] usb 5-1: Manufacturer: syz [ 188.823870][ T24] usb 5-1: SerialNumber: syz [ 188.846988][ T24] usb 5-1: config 0 descriptor?? [ 188.879802][ T24] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 189.181267][ T24] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 189.206187][ T5944] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 189.226780][ T24] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 189.414373][ T5944] usb 1-1: unable to get BOS descriptor or descriptor too short [ 189.438991][ T5944] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 189.466745][ T5944] usb 1-1: config 1 has no interface number 1 [ 189.481919][ T5944] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 189.540728][ T5944] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 189.555057][ T5944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.574067][ T5944] usb 1-1: Product: syz [ 189.580431][ T5944] usb 1-1: Manufacturer: syz [ 189.590828][ T5944] usb 1-1: SerialNumber: syz [ 189.617604][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 189.660539][ T9] usb 5-1: USB disconnect, device number 19 [ 189.681054][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 189.747107][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 189.780285][ T6029] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 189.828851][ T9] quatech2 5-1:0.51: device disconnected [ 189.839565][ T5944] usb 1-1: found format II with max.bitrate = 26774, frame size=2 [ 189.876921][ T6029] usb 2-1: USB disconnect, device number 15 [ 189.900353][ T6029] usblp0: removed [ 189.905312][ T5944] usb 1-1: found format II with max.bitrate = 26774, frame size=2 [ 189.925595][ T5944] usb 1-1: failed to enable PITCH for EP 0x82 [ 190.083692][ T5944] usb 1-1: USB disconnect, device number 28 [ 190.218649][ T5988] udevd[5988]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.324009][ T7687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.438'. [ 190.771090][ T7695] loop9: detected capacity change from 0 to 7 [ 190.781656][ T7695] Dev loop9: unable to read RDB block 7 [ 190.791191][ T7695] loop9: unable to read partition table [ 190.798122][ T7695] loop9: partition table beyond EOD, truncated [ 190.804443][ T7695] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 190.870774][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 190.956201][ T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 191.086079][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 191.096089][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.132008][ T9] usb 1-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 191.144080][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.155969][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 191.162693][ T9] usb 1-1: config 0 descriptor?? [ 191.192205][ T24] usb 2-1: config 0 has an invalid interface number: 16 but max is 0 [ 191.211629][ T24] usb 2-1: config 0 has no interface number 0 [ 191.230709][ T24] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 191.299375][ T24] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 191.437714][ T24] usb 2-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 191.468351][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.476502][ T24] usb 2-1: Product: syz [ 191.480916][ T24] usb 2-1: Manufacturer: syz [ 191.485942][ T24] usb 2-1: SerialNumber: syz [ 191.495344][ T24] usb 2-1: config 0 descriptor?? [ 191.501860][ T7693] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 191.529629][ T7693] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 191.553786][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 191.582640][ T9] sunplus 0003:04FC:05D8.0007: unknown main item tag 0x0 [ 191.606055][ T9] sunplus 0003:04FC:05D8.0007: unknown main item tag 0x0 [ 191.616848][ T9] sunplus 0003:04FC:05D8.0007: unknown main item tag 0x0 [ 191.625652][ T9] sunplus 0003:04FC:05D8.0007: unknown main item tag 0x0 [ 191.643811][ T9] sunplus 0003:04FC:05D8.0007: unknown main item tag 0x0 [ 191.709341][ T9] sunplus 0003:04FC:05D8.0007: unknown main item tag 0x0 [ 191.717998][ T9] sunplus 0003:04FC:05D8.0007: unknown main item tag 0x0 [ 191.726291][ T9] sunplus 0003:04FC:05D8.0007: unknown main item tag 0x0 [ 191.733622][ T9] sunplus 0003:04FC:05D8.0007: unknown main item tag 0x0 [ 191.741780][ T9] sunplus 0003:04FC:05D8.0007: unknown main item tag 0x0 [ 191.751823][ T6029] usb 2-1: USB disconnect, device number 16 [ 191.776275][ T7691] netlink: 36 bytes leftover after parsing attributes in process `syz.0.439'. [ 191.812619][ T9] sunplus 0003:04FC:05D8.0007: hidraw0: USB HID vff.fd Device [HID 04fc:05d8] on usb-dummy_hcd.0-1/input0 [ 192.008858][ T9] usb 1-1: USB disconnect, device number 29 [ 192.075489][ T7705] fido_id[7705]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 192.472010][ T7721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.447'. [ 193.516157][ T6029] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 193.720697][ T6029] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 193.733755][ T6029] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.758055][ T6029] usb 1-1: Product: syz [ 193.764677][ T6029] usb 1-1: Manufacturer: syz [ 193.795098][ T6029] usb 1-1: SerialNumber: syz [ 193.836778][ T6029] usb 1-1: config 0 descriptor?? [ 194.087497][ T6029] hso 1-1:0.0: Failed to find BULK IN ep [ 194.100776][ T6029] usb-storage 1-1:0.0: USB Mass Storage device detected [ 194.138562][ T7733] dlm: non-version read from control device 36 [ 194.288739][ T9] usb 1-1: USB disconnect, device number 30 [ 194.413270][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.420721][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.572476][ T7741] loop9: detected capacity change from 0 to 7 [ 194.630988][ T7741] Dev loop9: unable to read RDB block 7 [ 194.660282][ T7741] loop9: unable to read partition table [ 194.670583][ T7741] loop9: partition table beyond EOD, truncated [ 194.690678][ T7741] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 195.316027][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 195.316044][ T30] audit: type=1326 audit(1758389901.602:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7764 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48a1f8ec29 code=0x7ffc0000 [ 195.347490][ T7765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.460'. [ 195.389847][ T30] audit: type=1326 audit(1758389901.642:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7764 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48a1f8ec29 code=0x7ffc0000 [ 195.442874][ T30] audit: type=1326 audit(1758389901.642:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7764 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f48a1f8ec29 code=0x7ffc0000 [ 195.476825][ T30] audit: type=1326 audit(1758389901.642:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7764 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48a1f8ec29 code=0x7ffc0000 [ 195.560841][ T30] audit: type=1326 audit(1758389901.642:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7764 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f48a1f8ec29 code=0x7ffc0000 [ 195.616071][ T6029] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 195.633942][ T30] audit: type=1326 audit(1758389901.652:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7764 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48a1f8ec29 code=0x7ffc0000 [ 195.666797][ T30] audit: type=1326 audit(1758389901.662:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7764 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48a1f8ec29 code=0x7ffc0000 [ 195.696936][ T30] audit: type=1326 audit(1758389901.662:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7764 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f48a1f8ec29 code=0x7ffc0000 [ 195.836872][ T6029] usb 1-1: Using ep0 maxpacket: 8 [ 195.857343][ T6029] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.868466][ T6029] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.878510][ T6029] usb 1-1: config 0 interface 0 has no altsetting 0 [ 195.885254][ T30] audit: type=1326 audit(1758389901.662:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7764 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48a1f8ec29 code=0x7ffc0000 [ 196.031873][ T6029] usb 1-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 196.078011][ T6029] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.088900][ T30] audit: type=1326 audit(1758389901.662:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7764 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f48a1f8ec29 code=0x7ffc0000 [ 196.141636][ T6029] usb 1-1: config 0 descriptor?? [ 196.512314][ T7787] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 196.529081][ T7790] loop9: detected capacity change from 0 to 7 [ 196.566704][ T7790] Dev loop9: unable to read RDB block 7 [ 196.582655][ T7790] loop9: unable to read partition table [ 196.591890][ T6029] smartjoyplus 0003:0B43:0003.0008: ignoring exceeding usage max [ 196.614759][ T7790] loop9: partition table beyond EOD, truncated [ 196.632575][ T6029] smartjoyplus 0003:0B43:0003.0008: unbalanced collection at end of report description [ 196.646132][ T7790] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 196.696843][ T6029] smartjoyplus 0003:0B43:0003.0008: parse failed [ 196.714992][ T6029] smartjoyplus 0003:0B43:0003.0008: probe with driver smartjoyplus failed with error -22 [ 197.186309][ T5930] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 197.196228][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 197.349190][ T9] usb 2-1: device descriptor read/64, error -71 [ 197.357648][ T5930] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.369148][ T5930] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 197.380952][ T5930] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 197.390404][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.398573][ T24] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 197.406286][ T5930] usb 5-1: Product: syz [ 197.410478][ T5930] usb 5-1: Manufacturer: syz [ 197.415065][ T5930] usb 5-1: SerialNumber: syz [ 197.574909][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 197.583367][ T24] usb 3-1: not running at top speed; connect to a high speed hub [ 197.586177][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 197.599784][ T24] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 197.610255][ T24] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 22619, setting to 1023 [ 197.624042][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 197.629625][ T7797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.633247][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.649607][ T24] usb 3-1: Product: syz [ 197.653870][ T24] usb 3-1: Manufacturer: syz [ 197.658587][ T24] usb 3-1: SerialNumber: syz [ 197.664131][ T7797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.688915][ T5930] usb 5-1: 0:2 : does not exist [ 197.702284][ T5930] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 197.724680][ T5930] usb 5-1: USB disconnect, device number 20 [ 197.735983][ T9] usb 2-1: device descriptor read/64, error -71 [ 197.750182][ T6052] udevd[6052]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 197.849217][ T9] usb usb2-port1: attempt power cycle [ 197.881170][ T24] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 197.892238][ T24] usb 3-1: 2:1: cannot set freq 4656509 to ep 0x82 [ 197.920019][ T24] usb 3-1: USB disconnect, device number 28 [ 197.962259][ T5988] udevd[5988]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 198.030398][ T6029] usb 1-1: USB disconnect, device number 31 [ 198.187155][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 198.207031][ T9] usb 2-1: device descriptor read/8, error -71 [ 198.254103][ T7808] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 198.266487][ T7808] bond0: (slave lo): Error: Device can not be enslaved while up [ 198.274175][ T7809] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 198.290695][ T7809] bond0: (slave lo): Error: Device can not be enslaved while up [ 198.299967][ T7808] fuse: Unknown parameter 'xÂpÖX°¯>S`‰ßöÖž‘Õ™±öYãÂi˜ò’r™¿œø±¬û½×N;B[„…¾Žj‰ù²/N¿†C…É‚Ñt%}›á«M¸10×)9uþïÃtæ)¦uõyã¯ìHm{Ù–þ”F¦l´È~ Êa()' [ 198.299967][ T7809] fuse: Unknown parameter 'xÂpÖX°¯>S`‰ßöÖž‘Õ™±öYãÂi˜ò’r™¿œø±¬û½×N;B[„…¾Žj‰ù²/N¿†C…É‚Ñt%}›á«M¸10×)9uþïÃtæ)¦uõyã¯ìHm{Ù–þ”F¦l´È~ Êa()' [ 198.305557][ T7810] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 198.337192][ T7810] syzkaller1: linktype set to 768 [ 198.342540][ T7809] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 198.348555][ T7809] syzkaller1: linktype set to 768 [ 198.466758][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 198.501804][ T9] usb 2-1: device descriptor read/8, error -71 [ 198.617231][ T9] usb usb2-port1: unable to enumerate USB device [ 198.711363][ T7825] loop9: detected capacity change from 0 to 7 [ 198.716850][ T7823] bridge_slave_0: left allmulticast mode [ 198.723264][ T7823] bridge_slave_0: left promiscuous mode [ 198.732057][ T6052] Dev loop9: unable to read RDB block 7 [ 198.735269][ T7823] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.751096][ T6052] loop9: unable to read partition table [ 198.764777][ T6052] loop9: partition table beyond EOD, truncated [ 198.772701][ T7823] bridge_slave_1: left allmulticast mode [ 198.788644][ T7825] Dev loop9: unable to read RDB block 7 [ 198.804595][ T7825] loop9: unable to read partition table [ 198.811040][ T7825] loop9: partition table beyond EOD, truncated [ 198.817877][ T7825] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 198.886226][ T7823] bridge_slave_1: left promiscuous mode [ 198.892016][ T7823] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.949662][ T7823] bond0: (slave bond_slave_0): Releasing backup interface [ 198.980667][ T7823] bond0: (slave bond_slave_1): Releasing backup interface [ 199.028230][ T7823] team0: Port device team_slave_0 removed [ 199.065244][ T7823] team0: Port device team_slave_1 removed [ 199.081188][ T7823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.090647][ T7823] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.100828][ T7823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.131325][ T7823] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.737632][ T5930] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 199.915205][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.939899][ T5930] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 199.960667][ T5930] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 199.970404][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.995001][ T5930] usb 5-1: config 0 descriptor?? [ 200.470974][ T5930] kovaplus 0003:1E7D:2D50.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 200.553338][ T7846] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 200.563660][ T7846] block device autoloading is deprecated and will be removed. [ 200.657336][ T7840] futex_wake_op: syz.2.481 tries to shift op by 32; fix this program [ 201.376204][ T979] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 201.536176][ T979] usb 4-1: Using ep0 maxpacket: 32 [ 201.543599][ T979] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 201.586975][ T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 201.638772][ T979] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 201.647972][ T5944] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 201.665720][ T979] usb 4-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 201.721221][ T979] usb 4-1: Product: syz [ 201.743746][ T979] usb 4-1: Manufacturer: syz [ 201.776112][ T979] usb 4-1: SerialNumber: syz [ 201.800343][ T979] usb 4-1: config 0 descriptor?? [ 201.846635][ T5944] usb 1-1: Using ep0 maxpacket: 8 [ 201.876307][ T979] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 201.900564][ T5944] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 201.917064][ T5944] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 201.948669][ T5944] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 201.979136][ T5944] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 202.006773][ T5944] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.026367][ T5944] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 202.047591][ T5944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.320352][ T5944] usb 1-1: usb_control_msg returned -32 [ 202.336018][ T5944] usbtmc 1-1:16.0: can't read capabilities [ 202.584435][ T5930] kovaplus 0003:1E7D:2D50.0009: couldn't init struct kovaplus_device [ 202.668708][ T5930] kovaplus 0003:1E7D:2D50.0009: couldn't install mouse [ 202.741534][ T5930] kovaplus 0003:1E7D:2D50.0009: probe with driver kovaplus failed with error -71 [ 202.830117][ T5930] usb 5-1: USB disconnect, device number 21 [ 202.920438][ T2996] usb 4-1: Failed to submit usb control message: -110 [ 202.986485][ T2996] usb 4-1: unable to send the bmi data to the device: -110 [ 203.436004][ T5930] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 203.544789][ T2996] usb 4-1: unable to get target info from device [ 203.554883][ T2996] usb 4-1: could not get target info (-110) [ 203.564808][ T2996] usb 4-1: could not probe fw (-110) [ 203.694848][ T5930] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 203.711614][ T5930] usb 5-1: config 1 has no interface number 0 [ 203.741350][ T5930] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.822657][ T5930] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 203.855147][ T9] usb 4-1: USB disconnect, device number 30 [ 203.895252][ T5930] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 203.930650][ T5930] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 203.946018][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.974932][ T7874] loop9: detected capacity change from 0 to 7 [ 203.991162][ T5930] usb 5-1: Product: syz [ 204.018056][ T5930] usb 5-1: Manufacturer: syz [ 204.042489][ T7874] Dev loop9: unable to read RDB block 7 [ 204.058667][ T5930] usb 5-1: SerialNumber: syz [ 204.065642][ T7874] loop9: unable to read partition table [ 204.098418][ T7874] loop9: partition table beyond EOD, truncated [ 204.148783][ T7874] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 204.516148][ T5944] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 204.700286][ T5944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 204.714953][ T5944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.730168][ T7867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.739436][ T7867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.748022][ T5930] cdc_ncm 5-1:1.1: failed GET_NTB_PARAMETERS [ 204.758794][ T5930] cdc_ncm 5-1:1.1: bind() failure [ 204.796301][ T5944] usb 3-1: New USB device found, idVendor=05f6, idProduct=3201, bcdDevice= 0.00 [ 204.845951][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.889650][ T5944] usb 3-1: config 0 descriptor?? [ 205.237635][ T7877] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=33554656 (67109312 ns) > initial count (504 ns). Using initial count to start timer. [ 205.302081][ T982] usb 1-1: USB disconnect, device number 32 [ 205.329766][ T7877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.366534][ T7877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.447437][ T7877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.483349][ T7877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.876608][ T5944] hid-generic 0003:05F6:3201.000A: hidraw0: USB HID v1.01 Device [HID 05f6:3201] on usb-dummy_hcd.2-1/input0 [ 206.275080][ T5944] usb 5-1: USB disconnect, device number 22 [ 206.451458][ T982] usb 3-1: USB disconnect, device number 29 [ 206.926311][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 207.196935][ T7905] netlink: 20 bytes leftover after parsing attributes in process `syz.3.496'. [ 207.249509][ T7905] netlink: 136 bytes leftover after parsing attributes in process `syz.3.496'. [ 207.261767][ T7905] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 207.280432][ T5944] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 207.492202][ T9] usb 5-1: config 0 has no interfaces? [ 207.500229][ T5944] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 207.530376][ T5944] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.548739][ T5944] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.558815][ T5944] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 207.573488][ T5944] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 207.582846][ T5944] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 207.593005][ T5944] usb 1-1: Manufacturer: syz [ 207.609868][ T5944] usb 1-1: config 0 descriptor?? [ 207.616691][ T9] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 207.698805][ T7912] netlink: 32 bytes leftover after parsing attributes in process `syz.1.497'. [ 207.759959][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.926258][ T9] usb 5-1: Product: syz [ 207.943283][ T9] usb 5-1: Manufacturer: syz [ 207.967220][ T9] usb 5-1: SerialNumber: syz [ 208.023328][ T9] usb 5-1: config 0 descriptor?? [ 208.029502][ T5944] hid_parser_main: 150 callbacks suppressed [ 208.029516][ T5944] appleir 0003:05AC:8243.000B: unknown main item tag 0x0 [ 208.070731][ T5944] appleir 0003:05AC:8243.000B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 208.453340][ T7927] loop9: detected capacity change from 0 to 7 [ 208.485356][ T7927] Dev loop9: unable to read RDB block 7 [ 208.510164][ T7927] loop9: unable to read partition table [ 208.533141][ T7927] loop9: partition table beyond EOD, truncated [ 208.614353][ T7927] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 208.996972][ T5944] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 209.165027][ T5944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.208901][ T5944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.247361][ T5944] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 209.290846][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.343848][ T5944] usb 2-1: config 0 descriptor?? [ 209.546100][ T6029] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 209.687970][ T5930] usb 5-1: USB disconnect, device number 23 [ 209.710114][ T6029] usb 3-1: config 1 has an invalid descriptor of length 66, skipping remainder of the config [ 209.734021][ T6029] usb 3-1: config 1 interface 0 altsetting 190 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.762967][ T6029] usb 3-1: config 1 interface 0 has no altsetting 0 [ 209.789130][ T6029] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 209.806952][ T6029] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.822296][ T6029] usb 3-1: Product: 뎟쌚锂횶ç„ﵙ녙얆ìŒï’ í©ê’Œæ…²ì­˜î†©æ“‹á¥è£˜ë¹®ç— å˜…䦃親ᬘ穋ë¶çŸ»èŠ¦è˜ˆâŒ‚ܠ迡湞ꤨ⿶Ḍ⡘넄ꥵឣ檩븠⌳ꦲԢ鰾㊮æ²Ê‡àª¡ì­±æ¥­â¶Žã¸­à´ªë—±á·¼îŒ¤à³¤äŸ¬á‘㗀ᕃ桳驋豱䓌ᑠ䡴ì¡ë€—廨䊥㔬纷䅌儲硛ç²á·™ä“±æŒ¤ä§¨ëƒ»á«¯à¾¨ê¸‰é¯Ì¨î”·î–°ê›·ïƒƒï¤ëŸ¸æ¶ ì˜Žç¿°ä–—Գ㙇駻࿃ [ 209.853241][ C0] vkms_vblank_simulate: vblank timer overrun [ 209.869474][ T6029] usb 3-1: Manufacturer: Ð [ 209.874180][ T6029] usb 3-1: SerialNumber: Я [ 210.180484][ T5944] hid-led 0003:27B8:01ED.000C: probe with driver hid-led failed with error -71 [ 210.237639][ T5944] usb 2-1: USB disconnect, device number 21 [ 210.266209][ T43] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 210.438543][ T43] usb 5-1: unable to get BOS descriptor or descriptor too short [ 210.452513][ T43] usb 5-1: not running at top speed; connect to a high speed hub [ 210.462922][ T43] usb 5-1: config 0 has an invalid descriptor of length 204, skipping remainder of the config [ 210.512990][ T43] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 210.573550][ T43] usb 5-1: New USB device found, idVendor=2040, idProduct=721e, bcdDevice=5e.2b [ 210.595335][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.604795][ T43] usb 5-1: Product: syz [ 210.609278][ T43] usb 5-1: Manufacturer: syz [ 210.614113][ T43] usb 5-1: SerialNumber: syz [ 210.643411][ T43] usb 5-1: config 0 descriptor?? [ 210.653973][ T7950] tipc: Started in network mode [ 210.715196][ T7950] tipc: Node identity 8ec19490c03c, cluster identity 4711 [ 210.831688][ T7950] tipc: Enabled bearer , priority 0 [ 210.838786][ T7952] syzkaller0: entered promiscuous mode [ 210.845025][ T7952] syzkaller0: entered allmulticast mode [ 210.869074][ T9] usb 1-1: USB disconnect, device number 33 [ 210.983078][ T7952] tipc: Resetting bearer [ 211.019883][ T7949] tipc: Resetting bearer [ 211.071657][ T6029] usb 3-1: bad CDC descriptors [ 211.078957][ T43] usb 5-1: USB disconnect, device number 24 [ 211.099005][ T6029] usb 3-1: USB disconnect, device number 30 [ 211.146518][ T7949] tipc: Disabling bearer [ 211.237799][ T7959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.508'. [ 211.247239][ T7959] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 211.254925][ T7959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.274978][ T7958] loop2: detected capacity change from 0 to 7 [ 211.285197][ T7958] loop2: [ 211.301792][ T7958] loop2: partition table partially beyond EOD, truncated [ 211.972928][ T7974] loop9: detected capacity change from 0 to 7 [ 211.995956][ T7972] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 212.002293][ T7972] syzkaller1: linktype set to 768 [ 212.106068][ T7974] Dev loop9: unable to read RDB block 7 [ 212.152253][ T7974] loop9: unable to read partition table [ 212.165752][ T7978] netlink: 220 bytes leftover after parsing attributes in process `syz.3.511'. [ 212.377864][ T7974] loop9: partition table beyond EOD, truncated [ 212.379861][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 212.379876][ T30] audit: type=1326 audit(1758389918.452:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7962 comm="syz.3.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f038ec29 code=0x7ffc0000 [ 212.384085][ T7974] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 212.412525][ T30] audit: type=1326 audit(1758389918.452:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7962 comm="syz.3.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f038ec29 code=0x7ffc0000 [ 212.531440][ T30] audit: type=1326 audit(1758389918.452:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7962 comm="syz.3.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f29f038ec29 code=0x7ffc0000 [ 212.654474][ T30] audit: type=1326 audit(1758389918.452:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7962 comm="syz.3.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f038ec29 code=0x7ffc0000 [ 212.761939][ T30] audit: type=1326 audit(1758389918.452:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7962 comm="syz.3.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f29f038ec29 code=0x7ffc0000 [ 212.785674][ T30] audit: type=1326 audit(1758389918.472:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7962 comm="syz.3.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f038ec29 code=0x7ffc0000 [ 212.809279][ T30] audit: type=1326 audit(1758389918.472:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7962 comm="syz.3.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f29f038ec29 code=0x7ffc0000 [ 212.836110][ T30] audit: type=1326 audit(1758389918.472:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7962 comm="syz.3.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f038ec29 code=0x7ffc0000 [ 212.859480][ T30] audit: type=1326 audit(1758389918.472:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7962 comm="syz.3.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f29f038ec29 code=0x7ffc0000 [ 212.916044][ T5944] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 213.115966][ T5944] usb 5-1: device descriptor read/64, error -71 [ 213.140289][ T30] audit: type=1326 audit(1758389918.512:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7962 comm="syz.3.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f038ec29 code=0x7ffc0000 [ 213.417664][ T5944] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 213.615930][ T5944] usb 5-1: device descriptor read/64, error -71 [ 213.676166][ T6029] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 213.728884][ T5944] usb usb5-port1: attempt power cycle [ 213.826045][ T6029] usb 2-1: Using ep0 maxpacket: 32 [ 213.834564][ T6029] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 213.845049][ T6029] usb 2-1: config 0 has no interface number 0 [ 213.860345][ T6029] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 213.870372][ T6029] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.879443][ T6029] usb 2-1: Product: syz [ 213.896177][ T7992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.518'. [ 213.907132][ T6029] usb 2-1: Manufacturer: syz [ 213.911794][ T6029] usb 2-1: SerialNumber: syz [ 213.936041][ T982] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 214.246597][ T7993] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 214.256173][ T5944] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 214.308766][ T5944] usb 5-1: device descriptor read/8, error -71 [ 214.315051][ T6029] usb 2-1: config 0 descriptor?? [ 214.330354][ T6029] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 214.344697][ T6029] usb 2-1: selecting invalid altsetting 1 [ 214.351476][ T6029] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 214.371049][ T982] usb 4-1: device descriptor read/64, error -71 [ 214.409204][ T6029] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 214.430385][ T6029] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 214.450398][ T6029] usb 2-1: media controller created [ 214.556193][ T5944] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 214.557274][ T6029] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 214.586830][ T5944] usb 5-1: device descriptor read/8, error -71 [ 214.616080][ T982] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 214.706341][ T5944] usb usb5-port1: unable to enumerate USB device [ 214.745945][ T982] usb 4-1: device descriptor read/64, error -71 [ 214.818082][ T6029] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 214.858410][ T982] usb usb4-port1: attempt power cycle [ 214.956772][ T5944] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 214.965536][ T6029] usb 2-1: USB disconnect, device number 22 [ 215.009408][ T5944] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 215.236850][ T982] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 215.257599][ T982] usb 4-1: device descriptor read/8, error -71 [ 215.328887][ T8007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.521'. [ 215.377485][ T7998] netlink: 24 bytes leftover after parsing attributes in process `syz.0.521'. [ 215.496052][ T982] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 215.518684][ T8010] netlink: 12 bytes leftover after parsing attributes in process `syz.1.523'. [ 215.530731][ T8012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.523'. [ 215.537335][ T982] usb 4-1: device descriptor read/8, error -71 [ 215.637608][ T8010] netlink: 'syz.1.523': attribute type 1 has an invalid length. [ 215.684220][ T982] usb usb4-port1: unable to enumerate USB device [ 215.737987][ T8010] netlink: 'syz.1.523': attribute type 1 has an invalid length. [ 215.789754][ T8010] netlink: 'syz.1.523': attribute type 1 has an invalid length. [ 216.029164][ T8020] loop9: detected capacity change from 0 to 7 [ 216.067880][ T6052] Dev loop9: unable to read RDB block 7 [ 216.073980][ T6052] loop9: unable to read partition table [ 216.083563][ T6052] loop9: partition table beyond EOD, truncated [ 216.091769][ T8020] Dev loop9: unable to read RDB block 7 [ 216.100446][ T8020] loop9: unable to read partition table [ 216.110844][ T8020] loop9: partition table beyond EOD, truncated [ 216.123997][ T8020] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 218.244458][ T8057] netlink: 48 bytes leftover after parsing attributes in process `syz.3.534'. [ 218.992725][ T24] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 219.036208][ T8055] ipvlan2: entered promiscuous mode [ 219.042573][ T8055] bridge0: port 3(ipvlan2) entered blocking state [ 219.049429][ T8055] bridge0: port 3(ipvlan2) entered disabled state [ 219.056023][ T9] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 219.083553][ T8055] ipvlan2: entered allmulticast mode [ 219.092828][ T8055] bridge0: entered allmulticast mode [ 219.159082][ T8055] ipvlan2: left allmulticast mode [ 219.164221][ T8055] bridge0: left allmulticast mode [ 219.173048][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 219.173062][ T30] audit: type=1326 audit(1758389925.452:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.0.535" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f894f58ec29 code=0x0 [ 219.213724][ T24] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 219.224298][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.226645][ T9] usb 3-1: config 4 has an invalid interface number: 156 but max is 0 [ 219.235724][ T24] usb 2-1: config 0 descriptor?? [ 219.256690][ T9] usb 3-1: config 4 has no interface number 0 [ 219.270320][ T9] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=53.3e [ 219.282443][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.284261][ T24] cp210x 2-1:0.0: cp210x converter detected [ 219.299084][ T9] usb 3-1: Product: syz [ 219.305573][ T9] usb 3-1: Manufacturer: syz [ 219.312785][ T9] usb 3-1: SerialNumber: syz [ 219.381153][ T9] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state. [ 219.419248][ T9] usb 3-1: setting power ON [ 219.424438][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 219.453910][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 219.476334][ T9] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware error while loading driver (-19) [ 219.494898][ T8062] netlink: 228 bytes leftover after parsing attributes in process `syz.1.537'. [ 219.545335][ T9] dvb_usb_cxusb 3-1:4.156: probe with driver dvb_usb_cxusb failed with error -22 [ 219.715228][ T24] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 219.733586][ T24] usb 2-1: cp210x converter now attached to ttyUSB0 [ 219.785370][ T8063] bridge_slave_0: left allmulticast mode [ 219.830223][ T8063] bridge_slave_0: left promiscuous mode [ 219.839098][ T8063] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.854756][ T8063] bridge_slave_1: left allmulticast mode [ 219.863024][ T8063] bridge_slave_1: left promiscuous mode [ 219.870852][ T8063] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.910116][ T8080] mmap: syz.0.543 (8080) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 219.919718][ T8063] bond0: (slave bond_slave_0): Releasing backup interface [ 219.937414][ T24] usb 2-1: USB disconnect, device number 23 [ 219.957735][ T8063] bond0: (slave bond_slave_1): Releasing backup interface [ 219.966018][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 220.014658][ T5944] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 220.034067][ T8063] team0: Port device team_slave_0 removed [ 220.057861][ T24] cp210x 2-1:0.0: device disconnected [ 220.109869][ T8063] team0: Port device team_slave_1 removed [ 220.129886][ T8063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.141065][ T8063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.153246][ T8063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.173273][ T8063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.180701][ T5944] usb 4-1: device descriptor read/64, error -71 [ 220.208150][ T8086] syz.4.545 uses obsolete (PF_INET,SOCK_PACKET) [ 220.209536][ T8063] bond1: (slave gretap1): Releasing active interface [ 220.257449][ T6029] usb 3-1: USB disconnect, device number 31 [ 220.366641][ T982] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 220.436142][ T5944] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 220.516502][ T982] usb 1-1: Using ep0 maxpacket: 32 [ 220.524686][ T982] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 220.536794][ T982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.559711][ T982] usb 1-1: config 0 descriptor?? [ 220.606540][ T5944] usb 4-1: device descriptor read/64, error -71 [ 220.650195][ T8095] loop9: detected capacity change from 0 to 7 [ 220.659982][ T6052] Dev loop9: unable to read RDB block 7 [ 220.665608][ T6052] loop9: unable to read partition table [ 220.672016][ T6052] loop9: partition table beyond EOD, truncated [ 220.680264][ T8095] Dev loop9: unable to read RDB block 7 [ 220.686304][ T8095] loop9: unable to read partition table [ 220.692190][ T8095] loop9: partition table beyond EOD, truncated [ 220.712256][ T8095] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 220.733318][ T5944] usb usb4-port1: attempt power cycle [ 220.770335][ T982] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 220.822018][ T982] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 220.858292][ T982] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 220.902997][ T982] usb 1-1: media controller created [ 220.955140][ T982] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 221.076788][ T5944] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 221.130028][ T8111] netlink: 56 bytes leftover after parsing attributes in process `syz.0.544'. [ 221.142639][ T5944] usb 4-1: device descriptor read/8, error -71 [ 221.208348][ T982] DVB: Unable to find symbol dib7000p_attach() [ 221.306738][ T982] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 221.396872][ T5944] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 221.437817][ T5944] usb 4-1: device descriptor read/8, error -71 [ 221.476159][ T982] rc_core: IR keymap rc-dib0700-rc5 not found [ 221.503676][ T982] Registered IR keymap rc-empty [ 221.522123][ T982] dvb-usb: could not initialize remote control. [ 221.566304][ T5944] usb usb4-port1: unable to enumerate USB device [ 221.576818][ T982] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 221.640896][ T982] usb 1-1: USB disconnect, device number 34 [ 221.719699][ T982] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 222.795959][ T5944] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 222.925032][ T8141] loop9: detected capacity change from 0 to 7 [ 222.954409][ T8141] Dev loop9: unable to read RDB block 7 [ 222.973910][ T8141] loop9: unable to read partition table [ 222.986042][ T5944] usb 3-1: Using ep0 maxpacket: 8 [ 222.993708][ T8141] loop9: partition table beyond EOD, truncated [ 223.003530][ T5944] usb 3-1: unable to get BOS descriptor or descriptor too short [ 223.004481][ T8141] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 223.096332][ T5944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 223.138069][ T8144] netlink: 'syz.0.562': attribute type 29 has an invalid length. [ 223.159019][ T5944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 223.174061][ T8143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.562'. [ 223.217729][ T5944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 223.239232][ T8143] hsr_slave_0: left promiscuous mode [ 223.255479][ T8143] hsr_slave_1: left promiscuous mode [ 223.260989][ T5944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 223.291754][ T5944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 223.311863][ T5944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 223.353311][ T5944] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 223.363588][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.374062][ T5944] usb 3-1: Product: syz [ 223.380837][ T5944] usb 3-1: Manufacturer: syz [ 223.390817][ T5944] usb 3-1: SerialNumber: syz [ 223.422008][ T5944] usb 3-1: config 0 descriptor?? [ 223.445004][ T8146] bond2: entered promiscuous mode [ 223.462429][ T5944] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 223.488079][ T8146] 8021q: adding VLAN 0 to HW filter on device bond2 [ 223.672739][ T5923] udevd[5923]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 223.726291][ T982] usb 3-1: USB disconnect, device number 32 [ 223.906058][ T9] usb 1-1: new low-speed USB device number 35 using dummy_hcd [ 223.927437][ T8157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.567'. [ 223.964027][ T8157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.567'. [ 223.989503][ T8157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.567'. [ 224.001049][ T8157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.567'. [ 224.059827][ T9] usb 1-1: Invalid ep0 maxpacket: 32 [ 224.206244][ T9] usb 1-1: new low-speed USB device number 36 using dummy_hcd [ 224.366129][ T9] usb 1-1: Invalid ep0 maxpacket: 32 [ 224.372053][ T9] usb usb1-port1: attempt power cycle [ 224.525405][ T8168] netlink: 'syz.4.571': attribute type 1 has an invalid length. [ 224.536494][ T5944] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 224.554776][ T8168] netlink: 'syz.4.571': attribute type 5 has an invalid length. [ 224.570441][ T8168] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.571'. [ 224.679637][ T8172] loop9: detected capacity change from 0 to 7 [ 224.710631][ T5944] usb 2-1: config 150 has an invalid interface number: 204 but max is 1 [ 224.719111][ T5944] usb 2-1: config 150 has no interface number 0 [ 224.726045][ T9] usb 1-1: new low-speed USB device number 37 using dummy_hcd [ 224.726468][ T5944] usb 2-1: config 150 interface 204 has no altsetting 0 [ 224.748642][ T8172] Dev loop9: unable to read RDB block 7 [ 224.754280][ T8172] loop9: unable to read partition table [ 224.769822][ T9] usb 1-1: Invalid ep0 maxpacket: 32 [ 224.785915][ T5944] usb 2-1: config 150 interface 1 has no altsetting 0 [ 224.794399][ T8172] loop9: partition table beyond EOD, truncated [ 224.816482][ T5944] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 224.835145][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.843527][ T8172] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 224.858283][ T5944] usb 2-1: Product: syz [ 224.862461][ T5944] usb 2-1: Manufacturer: syz [ 224.886394][ T5944] usb 2-1: SerialNumber: syz [ 224.914535][ T9] usb 1-1: new low-speed USB device number 38 using dummy_hcd [ 224.936749][ T9] usb 1-1: Invalid ep0 maxpacket: 32 [ 224.942638][ T9] usb usb1-port1: unable to enumerate USB device [ 225.171003][ T5944] xr_serial 2-1:150.204: xr_serial converter detected [ 225.386219][ T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 225.578702][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 225.626500][ T9] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 225.649349][ T9] usb 4-1: config 0 has no interface number 0 [ 225.676729][ T9] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 225.706029][ T9] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 225.728274][ T9] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 225.738419][ T9] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 225.764174][ T9] usb 4-1: Product: syz [ 225.775939][ T9] usb 4-1: SerialNumber: syz [ 225.787869][ T9] usb 4-1: config 0 descriptor?? [ 225.807253][ T9] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 225.836624][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input14 [ 226.027195][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 226.033211][ T5944] usb 2-1: xr_serial converter now attached to ttyUSB0 [ 226.036678][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 226.048983][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 226.057559][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 226.064746][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 226.072013][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 226.078974][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 226.088240][ T9] usb 4-1: USB disconnect, device number 39 [ 226.117623][ T9] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 226.537062][ T8200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.580'. [ 227.004560][ T5930] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 227.216031][ T5930] usb 4-1: Using ep0 maxpacket: 32 [ 227.230021][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.246189][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.259497][ T5930] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 227.272392][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.296515][ T5930] usb 4-1: config 0 descriptor?? [ 227.310937][ T5930] hub 4-1:0.0: USB hub found [ 227.510156][ T43] usb 2-1: USB disconnect, device number 24 [ 227.521626][ T43] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 227.545746][ T5930] hub 4-1:0.0: 2 ports detected [ 227.571296][ T43] xr_serial 2-1:150.204: device disconnected [ 227.691957][ T8215] netlink: 'syz.2.584': attribute type 1 has an invalid length. [ 227.752791][ T8217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.585'. [ 228.014746][ T8221] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.318343][ T5930] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 228.331041][ T5930] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 228.343011][ T5930] usbhid 4-1:0.0: can't add hid device: -71 [ 228.349377][ T5930] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 228.379177][ T5930] usb 4-1: USB disconnect, device number 40 [ 230.226366][ T982] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 230.249280][ T5930] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 230.392138][ T982] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 230.401702][ T6029] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 230.420624][ T5930] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 230.432662][ T982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.436395][ T5930] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 230.456524][ T982] usb 3-1: Product: syz [ 230.457135][ T5930] usb 2-1: config 0 interface 0 has no altsetting 0 [ 230.466269][ T982] usb 3-1: Manufacturer: syz [ 230.472213][ T982] usb 3-1: SerialNumber: syz [ 230.473596][ T5930] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 230.486523][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.494431][ T982] usb 3-1: config 0 descriptor?? [ 230.494538][ T5930] usb 2-1: Product: syz [ 230.503925][ T5930] usb 2-1: Manufacturer: syz [ 230.508702][ T5930] usb 2-1: SerialNumber: syz [ 230.519076][ T5930] usb 2-1: config 0 descriptor?? [ 230.576877][ T6029] usb 5-1: Using ep0 maxpacket: 8 [ 230.583825][ T6029] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 230.594055][ T6029] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 230.608190][ T6029] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 230.618574][ T6029] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.626947][ T6029] usb 5-1: Product: syz [ 230.631132][ T6029] usb 5-1: Manufacturer: syz [ 230.635742][ T6029] usb 5-1: SerialNumber: syz [ 230.719410][ T982] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 230.806271][ T5980] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 230.860035][ T6029] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 230.875944][ T6029] usb 5-1: USB disconnect, device number 29 [ 230.885537][ T6029] usblp0: removed [ 230.944998][ T9] usb 2-1: USB disconnect, device number 25 [ 230.995555][ T5980] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 231.005811][ T5980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.006506][ T982] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 231.024864][ T5980] usb 1-1: Product: syz [ 231.030925][ T5980] usb 1-1: Manufacturer: syz [ 231.035540][ T5980] usb 1-1: SerialNumber: syz [ 231.052905][ T982] usb 3-1: USB disconnect, device number 33 [ 231.083711][ T8277] netlink: 'syz.3.602': attribute type 10 has an invalid length. [ 231.095808][ T8277] macvlan1: entered allmulticast mode [ 231.102914][ T8277] veth1_vlan: entered allmulticast mode [ 231.117164][ T8277] team0: Port device macvlan1 added [ 231.191281][ T8282] lo: entered promiscuous mode [ 231.197377][ T8282] netlink: 'syz.3.604': attribute type 1 has an invalid length. [ 231.205388][ T8282] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 231.282265][ T8268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.295754][ T8268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.504362][ T8285] syzkaller1: entered promiscuous mode [ 231.533456][ T8285] syzkaller1: entered allmulticast mode [ 231.855962][ T43] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 231.895959][ T5930] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 231.956204][ T24] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 232.016024][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 232.023257][ T43] usb 4-1: config 1 interface 0 altsetting 111 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 232.035037][ T43] usb 4-1: config 1 interface 0 has no altsetting 0 [ 232.044489][ T43] usb 4-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 232.053956][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.062290][ T43] usb 4-1: Product: syz [ 232.066837][ T43] usb 4-1: Manufacturer: syz [ 232.071905][ T43] usb 4-1: SerialNumber: syz [ 232.078225][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.102631][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.114375][ T5930] usb 2-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 232.123554][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 232.128779][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.147967][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.174709][ T5930] usb 2-1: config 0 descriptor?? [ 232.180491][ T24] usb 5-1: config 0 has no interfaces? [ 232.188183][ T24] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 232.201489][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.217390][ T24] usb 5-1: config 0 descriptor?? [ 232.296200][ T982] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 232.322777][ T43] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input15 [ 232.336383][ T5219] bcm5974 4-1:1.0: could not read from device [ 232.345582][ T5219] bcm5974 4-1:1.0: could not read from device [ 232.356768][ T5219] bcm5974 4-1:1.0: could not read from device [ 232.364434][ T43] usb 4-1: USB disconnect, device number 41 [ 232.372602][ T5219] bcm5974 4-1:1.0: could not read from device [ 232.456181][ T982] usb 3-1: Using ep0 maxpacket: 32 [ 232.470326][ T8298] netlink: 24 bytes leftover after parsing attributes in process `syz.1.608'. [ 232.504571][ T982] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 232.528309][ T982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.543086][ T8300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.546567][ T982] usb 3-1: Product: syz [ 232.557943][ T8300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.562302][ T982] usb 3-1: Manufacturer: syz [ 232.595523][ T982] usb 3-1: SerialNumber: syz [ 232.621325][ T982] usb 3-1: config 0 descriptor?? [ 232.663652][ T982] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 232.761944][ T9] usb 5-1: USB disconnect, device number 30 [ 233.471866][ T8295] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.610'. [ 233.506257][ T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 233.647123][ T5980] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 233.672707][ T5980] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 233.689607][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 233.721604][ T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 233.742551][ T5980] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 233.756918][ T9] usb 4-1: config 179 has no interface number 0 [ 233.766188][ T9] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 233.779706][ T5980] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 233.791108][ T9] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 233.831278][ T5980] usb 1-1: USB disconnect, device number 39 [ 233.854708][ T9] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 233.901505][ T9] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 233.912964][ T982] gspca_ov534_9: reg_w failed -71 [ 233.920787][ T9] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 233.939960][ T9] usb 4-1: config 179 interface 65 has no altsetting 0 [ 233.947105][ T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 233.960953][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.023067][ T8321] ptrace attach of "./syz-executor exec"[5884] was attempted by "./syz-executor exec"[8321] [ 234.336523][ T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input17 [ 234.355946][ T5980] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 234.406118][ T982] gspca_ov534_9: Unknown sensor 0000 [ 234.406210][ T982] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 234.450303][ T982] usb 3-1: USB disconnect, device number 34 [ 234.525937][ T5980] usb 1-1: Using ep0 maxpacket: 16 [ 234.545320][ T5980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.595319][ T5980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.606661][ T5980] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 234.654183][ T5980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.703438][ T5980] usb 1-1: config 0 descriptor?? [ 234.742708][ T5930] usbhid 2-1:0.0: can't add hid device: -71 [ 234.893706][ T5930] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 234.935416][ T5980] lua 0003:1E7D:2C2E.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.0-1/input0 [ 234.951155][ T5930] usb 2-1: USB disconnect, device number 26 [ 235.133657][ T5980] usb 1-1: USB disconnect, device number 40 [ 235.267160][ T8334] fido_id[8334]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 235.486748][ T982] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 235.647741][ T982] usb 3-1: config 0 has an invalid interface number: 249 but max is 0 [ 235.702033][ T982] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.737886][ T982] usb 3-1: config 0 has no interface number 0 [ 235.760500][ T982] usb 3-1: config 0 interface 249 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 235.784389][ T982] usb 3-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 235.807956][ T982] usb 3-1: config 0 interface 249 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 235.843095][ T982] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 235.873079][ T982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.903040][ T982] usb 3-1: config 0 descriptor?? [ 235.929191][ T982] port100 3-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 236.223776][ T8331] syzkaller0: entered promiscuous mode [ 236.298564][ T8331] syzkaller0: entered allmulticast mode [ 236.327644][ T8331] binder: 8330:8331 ioctl c018620c 200000000640 returned -22 [ 236.382572][ T5930] usb 3-1: USB disconnect, device number 35 [ 236.826728][ T43] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 236.882880][ T6028] usb 4-1: USB disconnect, device number 42 [ 237.020032][ T5930] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 237.318944][ T5930] usb 1-1: config 0 has no interfaces? [ 237.328886][ T5930] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 237.338133][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.396061][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 237.486257][ T6028] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 237.646094][ T6028] usb 4-1: Using ep0 maxpacket: 8 [ 237.663306][ T6028] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 237.706611][ T6028] usb 4-1: config 0 has no interface number 0 [ 237.744298][ T6028] usb 4-1: config 0 interface 29 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 237.857157][ T5930] usb 1-1: Product: syz [ 237.861355][ T5930] usb 1-1: Manufacturer: syz [ 237.880657][ T6028] usb 4-1: config 0 interface 29 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 237.894386][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.985882][ T5930] usb 1-1: SerialNumber: syz [ 237.990584][ T43] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 238.003446][ T5930] usb 1-1: config 0 descriptor?? [ 238.022274][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.046265][ T6028] usb 4-1: config 0 interface 29 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 238.046939][ T43] usb 5-1: config 0 descriptor?? [ 238.159918][ T6028] usb 4-1: config 0 interface 29 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 238.248275][ T5980] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 238.285545][ T6028] usb 4-1: config 0 interface 29 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 238.420562][ T8333] capability: warning: `syz.1.620' uses deprecated v2 capabilities in a way that may be insecure [ 238.428965][ T5980] usb 3-1: Using ep0 maxpacket: 16 [ 238.441071][ T5980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.459006][ T5980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.471877][ T6028] usb 4-1: config 0 interface 29 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 238.484823][ T5980] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 238.501758][ T6028] usb 4-1: config 0 interface 29 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 238.510738][ T43] apple 0003:05AC:024B.000F: unknown main item tag 0x6 [ 238.522054][ T5980] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 238.533978][ T5980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.561899][ T6028] usb 4-1: New USB device found, idVendor=03f0, idProduct=0207, bcdDevice= 0.01 [ 238.572208][ T6028] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.580471][ T6028] usb 4-1: Product: syz [ 238.585079][ T6028] usb 4-1: Manufacturer: syz [ 238.593028][ T6028] usb 4-1: SerialNumber: syz [ 238.594787][ T43] apple 0003:05AC:024B.000F: invalid report_size 24312 [ 238.598917][ T5980] usb 3-1: config 0 descriptor?? [ 238.612633][ T6028] usb 4-1: config 0 descriptor?? [ 238.619282][ T8358] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 238.629379][ T6028] ums-usbat 4-1:0.29: USB Mass Storage device detected [ 238.645621][ T43] apple 0003:05AC:024B.000F: item 0 2 1 7 parsing failed [ 238.672018][ T43] apple 0003:05AC:024B.000F: parse failed [ 238.678764][ T43] apple 0003:05AC:024B.000F: probe with driver apple failed with error -22 [ 238.695960][ T5930] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 238.837153][ T8361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.852568][ T8361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.870116][ T8361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.883751][ T5930] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 238.897316][ T5930] usb 2-1: config 0 has no interface number 0 [ 238.904938][ T8361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.914017][ T5930] usb 2-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 238.929786][ T8358] openvswitch: netlink: Message has 4 unknown bytes. [ 238.941028][ T5930] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 238.954307][ T5930] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 238.965083][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.991783][ T5930] usb 2-1: config 0 descriptor?? [ 238.997660][ T8333] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 239.019265][ T5930] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/input/input18 [ 239.130730][ T6028] ums-usbat 4-1:0.29: probe with driver ums-usbat failed with error -5 [ 239.158489][ T6028] usb 4-1: USB disconnect, device number 43 [ 239.189955][ T5980] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 239.216495][ T5980] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 239.222304][ T5930] usb 2-1: USB disconnect, device number 27 [ 239.224106][ T5980] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 239.265114][ T5980] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 239.273231][ T5980] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 239.285514][ T5980] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 239.293295][ T5980] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 239.302693][ T5980] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 239.313835][ T5980] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 239.326644][ T5980] microsoft 0003:045E:07DA.0010: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 239.339169][ T5980] microsoft 0003:045E:07DA.0010: no inputs found [ 239.345671][ T5980] microsoft 0003:045E:07DA.0010: could not initialize ff, continuing anyway [ 239.431108][ T8361] netlink: 16 bytes leftover after parsing attributes in process `syz.2.628'. [ 239.463167][ T8370] netlink: 72 bytes leftover after parsing attributes in process `syz.1.629'. [ 239.508265][ T5930] usb 3-1: USB disconnect, device number 36 [ 239.845122][ T5980] usb 5-1: USB disconnect, device number 31 [ 240.074952][ T43] usb 1-1: USB disconnect, device number 41 [ 240.796226][ T6028] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 240.945967][ T6028] usb 1-1: Using ep0 maxpacket: 8 [ 240.951700][ T6028] usb 1-1: too many configurations: 219, using maximum allowed: 8 [ 240.993626][ T6028] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 241.009678][ T6028] usb 1-1: can't read configurations, error -61 [ 241.126543][ T5980] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 241.156084][ T6028] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 241.306011][ T5980] usb 4-1: Using ep0 maxpacket: 16 [ 241.311253][ T6028] usb 1-1: Using ep0 maxpacket: 8 [ 241.318163][ T6028] usb 1-1: too many configurations: 219, using maximum allowed: 8 [ 241.326707][ T5980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.347467][ T6028] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 241.355225][ T5980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.376733][ T6028] usb 1-1: can't read configurations, error -61 [ 241.386231][ T6028] usb usb1-port1: attempt power cycle [ 241.391699][ T5980] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 241.409567][ T5980] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 241.431322][ T5980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.448182][ T5980] usb 4-1: config 0 descriptor?? [ 241.661363][ T8386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.766436][ T6028] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 241.797546][ T6028] usb 1-1: Using ep0 maxpacket: 8 [ 241.806015][ T6028] usb 1-1: too many configurations: 219, using maximum allowed: 8 [ 241.831984][ T6028] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 241.841928][ T6028] usb 1-1: can't read configurations, error -61 [ 241.902036][ T5980] HID 045e:07da: Invalid code 65791 type 1 [ 241.915240][ T5980] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0011/input/input20 [ 241.949337][ T5980] microsoft 0003:045E:07DA.0011: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 242.276016][ T6028] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 242.317304][ T6028] usb 1-1: Using ep0 maxpacket: 8 [ 242.342624][ T5980] usb 4-1: USB disconnect, device number 44 [ 242.371330][ T6028] usb 1-1: too many configurations: 219, using maximum allowed: 8 [ 242.405561][ T6028] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 242.596451][ T6028] usb 1-1: can't read configurations, error -61 [ 242.624199][ T6028] usb usb1-port1: unable to enumerate USB device [ 242.682738][ T8427] fido_id[8427]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 243.556428][ T5980] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 243.706146][ T5980] usb 4-1: device descriptor read/64, error -71 [ 243.755988][ T6028] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 243.876313][ T9] usb 1-1: new low-speed USB device number 46 using dummy_hcd [ 243.931145][ T6028] usb 2-1: New USB device found, idVendor=0af0, idProduct=7805, bcdDevice= 0.00 [ 243.950801][ T5980] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 243.976108][ T6028] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.991554][ T6028] usb 2-1: Product: syz [ 244.006189][ T6028] usb 2-1: Manufacturer: syz [ 244.014053][ T6028] usb 2-1: SerialNumber: syz [ 244.025426][ T6028] usb 2-1: config 0 descriptor?? [ 244.035963][ T9] usb 1-1: device descriptor read/64, error -71 [ 244.126196][ T5980] usb 4-1: device descriptor read/64, error -71 [ 244.236294][ T5980] usb usb4-port1: attempt power cycle [ 244.286052][ T9] usb 1-1: new low-speed USB device number 47 using dummy_hcd [ 244.340227][ T8464] netlink: 'syz.4.656': attribute type 1 has an invalid length. [ 244.367795][ T8464] 8021q: adding VLAN 0 to HW filter on device bond1 [ 244.395300][ T8464] bond1: (slave veth3): Enslaving as an active interface with a down link [ 244.412015][ T8464] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 244.426142][ T9] usb 1-1: device descriptor read/64, error -71 [ 244.441117][ T8464] vlan3: entered allmulticast mode [ 244.446750][ T8464] veth0_to_bond: entered allmulticast mode [ 244.453105][ T8464] veth0_to_bond: entered promiscuous mode [ 244.460500][ T8464] veth0_to_bond: left promiscuous mode [ 244.466655][ T8464] veth0_to_bond: entered promiscuous mode [ 244.473926][ T8464] bond1: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 244.490961][ T8464] veth0_to_bond: left promiscuous mode [ 244.546385][ T9] usb usb1-port1: attempt power cycle [ 244.595920][ T5980] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 244.617129][ T5980] usb 4-1: device descriptor read/8, error -71 [ 244.866102][ T5980] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 244.896576][ T9] usb 1-1: new low-speed USB device number 48 using dummy_hcd [ 244.912435][ T5980] usb 4-1: device descriptor read/8, error -71 [ 244.938440][ T9] usb 1-1: device descriptor read/8, error -71 [ 245.031651][ T5980] usb usb4-port1: unable to enumerate USB device [ 245.168749][ T30] audit: type=1326 audit(1758389951.462:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8474 comm="syz.2.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48a1f8ec29 code=0x7ffc0000 [ 245.176707][ T9] usb 1-1: new low-speed USB device number 49 using dummy_hcd [ 245.204509][ T30] audit: type=1326 audit(1758389951.462:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8474 comm="syz.2.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48a1f8ec29 code=0x7ffc0000 [ 245.227802][ T30] audit: type=1326 audit(1758389951.462:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8474 comm="syz.2.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f48a1f8d590 code=0x7ffc0000 [ 245.249953][ C0] vkms_vblank_simulate: vblank timer overrun [ 245.257991][ T9] usb 1-1: device descriptor read/8, error -71 [ 245.264449][ T30] audit: type=1326 audit(1758389951.462:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8474 comm="syz.2.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f48a1f8e82b code=0x7ffc0000 [ 245.289101][ T30] audit: type=1326 audit(1758389951.462:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8474 comm="syz.2.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48a1f8ec29 code=0x7ffc0000 [ 245.311273][ C0] vkms_vblank_simulate: vblank timer overrun [ 245.319463][ T30] audit: type=1326 audit(1758389951.462:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8474 comm="syz.2.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f48a1f8e82b code=0x7ffc0000 [ 245.341869][ T30] audit: type=1326 audit(1758389951.462:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8474 comm="syz.2.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f48a1f8e82b code=0x7ffc0000 [ 245.363930][ C0] vkms_vblank_simulate: vblank timer overrun [ 245.375452][ T30] audit: type=1326 audit(1758389951.462:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8474 comm="syz.2.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f48a1f8e82b code=0x7ffc0000 [ 245.375773][ T9] usb usb1-port1: unable to enumerate USB device [ 245.397580][ C0] vkms_vblank_simulate: vblank timer overrun [ 245.407904][ T30] audit: type=1326 audit(1758389951.582:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8474 comm="syz.2.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f48a1f8e82b code=0x7ffc0000 [ 245.435419][ T30] audit: type=1326 audit(1758389951.722:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8474 comm="syz.2.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f48a1f8e82b code=0x7ffc0000 [ 245.467006][ T5980] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 245.636417][ T5980] usb 3-1: Using ep0 maxpacket: 8 [ 245.651990][ T5980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 245.664184][ T8482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.662'. [ 245.713346][ T5980] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 245.729870][ T5980] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 245.742234][ T5980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.753312][ T5980] usb 3-1: Product: syz [ 245.761179][ T5980] usb 3-1: Manufacturer: syz [ 245.772499][ T5980] usb 3-1: SerialNumber: syz [ 245.785043][ T5980] usb 3-1: config 0 descriptor?? [ 245.966273][ T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 246.115978][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 246.126573][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.146837][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 246.162478][ T9] usb 5-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 246.175262][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.190792][ T9] usb 5-1: Product: syz [ 246.198573][ T9] usb 5-1: Manufacturer: syz [ 246.204645][ T8475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.660'. [ 246.224783][ T9] usb 5-1: SerialNumber: syz [ 246.232731][ T8475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.250833][ T8475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.269135][ T9] usb 5-1: config 0 descriptor?? [ 246.289315][ T9] go7007 5-1:0.0: probe with driver go7007 failed with error -12 [ 246.301765][ T5930] usb 3-1: USB disconnect, device number 37 [ 246.517389][ T5930] usb 2-1: USB disconnect, device number 28 [ 246.756011][ T43] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 246.896430][ T5980] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 246.926063][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 246.935280][ T43] usb 4-1: config 0 has an invalid interface number: 236 but max is 0 [ 246.944333][ T43] usb 4-1: config 0 has no interface number 0 [ 246.952529][ T43] usb 4-1: New USB device found, idVendor=f205, idProduct=b038, bcdDevice=26.19 [ 246.962120][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.970461][ T43] usb 4-1: Product: syz [ 246.974657][ T43] usb 4-1: Manufacturer: syz [ 246.979348][ T43] usb 4-1: SerialNumber: syz [ 246.989286][ T43] usb 4-1: config 0 descriptor?? [ 246.996845][ T43] usb-storage 4-1:0.236: USB Mass Storage device detected [ 247.046431][ T6028] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 247.066877][ T5980] usb 3-1: Using ep0 maxpacket: 32 [ 247.075529][ T5980] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.089909][ T5980] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.102497][ T5980] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 247.112499][ T5980] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 247.121208][ T5980] usb 3-1: Product: syz [ 247.125493][ T5980] usb 3-1: Manufacturer: syz [ 247.139155][ T5980] hub 3-1:4.0: USB hub found [ 247.156237][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 247.200610][ T8489] netlink: 16 bytes leftover after parsing attributes in process `syz.3.664'. [ 247.209791][ T8489] netlink: 52 bytes leftover after parsing attributes in process `syz.3.664'. [ 247.221700][ T8489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.228930][ T6028] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 247.231130][ T8489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.244774][ T6028] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.256909][ T43] usb 4-1: USB disconnect, device number 49 [ 247.257098][ T6028] usb 1-1: config 0 has no interface number 0 [ 247.277796][ T6028] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 247.289692][ T6028] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 247.305261][ T6028] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 247.314587][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 247.320361][ T6028] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.330950][ T9] usb 2-1: config 8 has no interfaces? [ 247.336789][ T6028] usb 1-1: Product: syz [ 247.345267][ T5980] hub 3-1:4.0: 2 ports detected [ 247.345391][ T6028] usb 1-1: Manufacturer: syz [ 247.356223][ T9] usb 2-1: New USB device found, idVendor=045b, idProduct=0212, bcdDevice=f1.c2 [ 247.365490][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.374192][ T9] usb 2-1: Product: syz [ 247.378551][ T6028] usb 1-1: SerialNumber: syz [ 247.384241][ T9] usb 2-1: Manufacturer: syz [ 247.390403][ T9] usb 2-1: SerialNumber: syz [ 247.396339][ T6028] usb 1-1: config 0 descriptor?? [ 247.547253][ T8493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.557724][ T8493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.570783][ T8493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.579874][ T8493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.591286][ T8493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.602963][ T8493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.620543][ T5980] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 247.628836][ T5980] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 247.643636][ T9] usb 2-1: USB disconnect, device number 29 [ 247.688053][ T5980] usb 3-1: USB disconnect, device number 38 [ 247.830512][ T8499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.840769][ T8499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.643991][ T43] usb 5-1: USB disconnect, device number 32 [ 249.032382][ T8523] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 249.038936][ T8523] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 249.055319][ T8523] vhci_hcd vhci_hcd.0: Device attached [ 249.226021][ T43] vhci_hcd: vhci_device speed not set [ 249.288997][ T43] usb 37-1: new full-speed USB device number 3 using vhci_hcd [ 249.326562][ T5944] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 249.497812][ T5944] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 249.550780][ T5944] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 249.724307][ T5944] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 249.797572][ T6028] usbtouchscreen 1-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 249.916003][ T6028] usb 1-1: USB disconnect, device number 50 [ 250.123509][ T5944] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 250.214092][ T8541] netlink: 'syz.0.677': attribute type 75 has an invalid length. [ 250.245138][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.284232][ T8523] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 250.531757][ T5944] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 250.542595][ T8524] vhci_hcd: connection reset by peer [ 250.566151][ T5944] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input22 [ 250.643330][ T6025] vhci_hcd: stop threads [ 250.666174][ T6025] vhci_hcd: release socket [ 250.675683][ T6025] vhci_hcd: disconnect device [ 250.728206][ T5944] usb 3-1: USB disconnect, device number 39 [ 250.734255][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 252.106159][ T979] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 252.279696][ T979] usb 1-1: Using ep0 maxpacket: 16 [ 252.327266][ T979] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.345929][ T979] usb 1-1: config 0 interface 0 has no altsetting 0 [ 252.356991][ T979] usb 1-1: New USB device found, idVendor=0079, idProduct=1844, bcdDevice= 0.00 [ 252.394834][ T979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.410234][ T979] usb 1-1: config 0 descriptor?? [ 252.626080][ T5944] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 252.785945][ T5944] usb 5-1: Using ep0 maxpacket: 32 [ 252.792796][ T5944] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 252.801562][ T5944] usb 5-1: config 0 has no interface number 0 [ 252.808114][ T5944] usb 5-1: config 0 interface 89 has no altsetting 0 [ 252.817832][ T5944] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 252.827619][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.843409][ T979] hid_mf 0003:0079:1844.0012: hidraw0: USB HID v1.00 Device [HID 0079:1844] on usb-dummy_hcd.0-1/input0 [ 252.862551][ T5944] usb 5-1: Product: syz [ 252.876006][ T979] hid_mf 0003:0079:1844.0012: Invalid report, this should never happen! [ 252.884481][ T5944] usb 5-1: Manufacturer: syz [ 252.894652][ T5944] usb 5-1: SerialNumber: syz [ 252.899405][ T979] hid_mf 0003:0079:1844.0012: Force feedback init failed. [ 252.917777][ T5944] usb 5-1: config 0 descriptor?? [ 252.956346][ T5944] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 253.020668][ T5944] em28xx 5-1:0.89: Video interface 89 found: bulk [ 253.038705][ T979] usb 1-1: USB disconnect, device number 51 [ 253.523080][ T8592] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 253.546648][ T5944] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 253.796039][ T6028] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 253.803703][ T8597] dlm: plock device version mismatch: kernel (1.2.0), user (4294967295.0.0) [ 253.981308][ T6028] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.995951][ T6028] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.006201][ T9] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 254.028162][ T6028] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 254.048382][ T6028] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.069411][ T6028] usb 3-1: config 0 descriptor?? [ 254.172797][ T5944] em28xx 5-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 254.190296][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.203613][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.230311][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 254.269607][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 254.281230][ T5944] em28xx 5-1:0.89: board has no eeprom [ 254.290084][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.355892][ T5944] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 254.366729][ T5944] em28xx 5-1:0.89: analog set to bulk mode. [ 254.372777][ T979] em28xx 5-1:0.89: Registering V4L2 extension [ 254.373918][ T9] usb 1-1: config 0 descriptor?? [ 254.427073][ T5944] usb 5-1: USB disconnect, device number 33 [ 254.478224][ T5944] em28xx 5-1:0.89: Disconnecting em28xx [ 254.505913][ T43] vhci_hcd: vhci_device speed not set [ 254.542368][ T979] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 254.550094][ T24] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 254.562470][ T979] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 254.580241][ T979] em28xx 5-1:0.89: No AC97 audio processor [ 254.605404][ T979] usb 5-1: Decoder not found [ 254.619303][ T979] em28xx 5-1:0.89: failed to create media graph [ 254.625609][ T979] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 254.681146][ T979] em28xx 5-1:0.89: Registering snapshot button... [ 254.681460][ T8603] ================================================================== [ 254.695635][ T8603] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430 [ 254.702988][ T8603] Read of size 8 at addr ffff8880512d0740 by task v4l_id/8603 [ 254.710414][ T8603] [ 254.712731][ T8603] CPU: 0 UID: 0 PID: 8603 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 254.712745][ T8603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 254.712757][ T8603] Call Trace: [ 254.712761][ T8603] [ 254.712767][ T8603] dump_stack_lvl+0x189/0x250 [ 254.712782][ T8603] ? rcu_is_watching+0x15/0xb0 [ 254.712792][ T8603] ? __kasan_check_byte+0x12/0x40 [ 254.712806][ T8603] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.712816][ T8603] ? rcu_is_watching+0x15/0xb0 [ 254.712825][ T8603] ? lock_release+0x4b/0x3e0 [ 254.712840][ T8603] ? __virt_addr_valid+0x1c8/0x5c0 [ 254.712852][ T8603] ? __virt_addr_valid+0x4a5/0x5c0 [ 254.712864][ T8603] print_report+0xca/0x240 [ 254.712873][ T8603] ? v4l2_fh_open+0xc7/0x430 [ 254.712882][ T8603] kasan_report+0x118/0x150 [ 254.712895][ T8603] ? v4l2_fh_open+0xc7/0x430 [ 254.712906][ T8603] v4l2_fh_open+0xc7/0x430 [ 254.712916][ T8603] em28xx_v4l2_open+0x157/0x9a0 [ 254.712934][ T8603] v4l2_open+0x20f/0x360 [ 254.712945][ T8603] chrdev_open+0x4c9/0x5e0 [ 254.712954][ T8603] ? __pfx_chrdev_open+0x10/0x10 [ 254.712962][ T8603] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 254.712979][ T8603] ? __pfx_chrdev_open+0x10/0x10 [ 254.712986][ T8603] do_dentry_open+0x950/0x13f0 [ 254.712999][ T8603] vfs_open+0x3b/0x340 [ 254.713007][ T8603] ? path_openat+0x2ecd/0x3830 [ 254.713019][ T8603] path_openat+0x2ee5/0x3830 [ 254.713030][ T8603] ? arch_stack_walk+0xfc/0x150 [ 254.713044][ T8603] ? stack_depot_save_flags+0x40/0x860 [ 254.713062][ T8603] ? __pfx_path_openat+0x10/0x10 [ 254.713072][ T8603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.713086][ T8603] do_filp_open+0x1fa/0x410 [ 254.713096][ T8603] ? __lock_acquire+0xab9/0xd20 [ 254.713110][ T8603] ? __pfx_do_filp_open+0x10/0x10 [ 254.713124][ T8603] ? _raw_spin_unlock+0x28/0x50 [ 254.713141][ T8603] ? alloc_fd+0x64c/0x6c0 [ 254.713156][ T8603] do_sys_openat2+0x121/0x1c0 [ 254.713167][ T8603] ? __pfx_do_sys_openat2+0x10/0x10 [ 254.713176][ T8603] ? exc_page_fault+0x76/0xf0 [ 254.713187][ T8603] ? do_user_addr_fault+0xc8a/0x1390 [ 254.713202][ T8603] __x64_sys_openat+0x138/0x170 [ 254.713213][ T8603] do_syscall_64+0xfa/0x3b0 [ 254.713224][ T8603] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.713233][ T8603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.713242][ T8603] ? clear_bhb_loop+0x60/0xb0 [ 254.713252][ T8603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.713261][ T8603] RIP: 0033:0x7f16291d3407 [ 254.713277][ T8603] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 254.713286][ T8603] RSP: 002b:00007ffc3cbec820 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 254.713297][ T8603] RAX: ffffffffffffffda RBX: 00007f1629147880 RCX: 00007f16291d3407 [ 254.713304][ T8603] RDX: 0000000000000000 RSI: 00007ffc3cbecf1c RDI: ffffffffffffff9c [ 254.713311][ T8603] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 254.713316][ T8603] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 254.713322][ T8603] R13: 00007ffc3cbeca70 R14: 00007f162942c000 R15: 000055aa06e4d4d8 [ 254.713332][ T8603] [ 254.713335][ T8603] [ 255.019800][ T8603] Allocated by task 979: [ 255.024014][ T8603] kasan_save_track+0x3e/0x80 [ 255.028671][ T8603] __kasan_kmalloc+0x93/0xb0 [ 255.033235][ T8603] __kmalloc_cache_noprof+0x230/0x3d0 [ 255.038582][ T8603] em28xx_v4l2_init+0x10b/0x2e70 [ 255.043497][ T8603] em28xx_init_extension+0x120/0x1c0 [ 255.048755][ T8603] process_scheduled_works+0xae1/0x17b0 [ 255.054274][ T8603] worker_thread+0x8a0/0xda0 [ 255.058832][ T8603] kthread+0x70e/0x8a0 [ 255.062871][ T8603] ret_from_fork+0x439/0x7d0 [ 255.067431][ T8603] ret_from_fork_asm+0x1a/0x30 [ 255.072170][ T8603] [ 255.074466][ T8603] Freed by task 979: [ 255.078352][ T8603] kasan_save_track+0x3e/0x80 [ 255.083017][ T8603] kasan_save_free_info+0x46/0x50 [ 255.088016][ T8603] __kasan_slab_free+0x5b/0x80 [ 255.092760][ T8603] kfree+0x18e/0x440 [ 255.096629][ T8603] em28xx_v4l2_init+0x1683/0x2e70 [ 255.101629][ T8603] em28xx_init_extension+0x120/0x1c0 [ 255.106885][ T8603] process_scheduled_works+0xae1/0x17b0 [ 255.112401][ T8603] worker_thread+0x8a0/0xda0 [ 255.116967][ T8603] kthread+0x70e/0x8a0 [ 255.121035][ T8603] ret_from_fork+0x439/0x7d0 [ 255.125633][ T8603] ret_from_fork_asm+0x1a/0x30 [ 255.130467][ T8603] [ 255.132770][ T8603] The buggy address belongs to the object at ffff8880512d0000 [ 255.132770][ T8603] which belongs to the cache kmalloc-8k of size 8192 [ 255.146800][ T8603] The buggy address is located 1856 bytes inside of [ 255.146800][ T8603] freed 8192-byte region [ffff8880512d0000, ffff8880512d2000) [ 255.160744][ T8603] [ 255.163046][ T8603] The buggy address belongs to the physical page: [ 255.169439][ T8603] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x512d0 [ 255.178182][ T8603] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 255.186660][ T8603] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 255.194528][ T8603] page_type: f5(slab) [ 255.198486][ T8603] raw: 00fff00000000040 ffff88801a442280 ffffea00014be200 0000000000000003 [ 255.207043][ T8603] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 255.215598][ T8603] head: 00fff00000000040 ffff88801a442280 ffffea00014be200 0000000000000003 [ 255.224241][ T8603] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 255.232890][ T8603] head: 00fff00000000003 ffffea000144b401 00000000ffffffff 00000000ffffffff [ 255.241537][ T8603] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 255.250181][ T8603] page dumped because: kasan: bad access detected [ 255.256572][ T8603] page_owner tracks the page as allocated [ 255.262262][ T8603] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7343, tgid 7339 (syz.1.351), ts 169722468943, free_ts 169467681227 [ 255.283509][ T8603] post_alloc_hook+0x240/0x2a0 [ 255.288267][ T8603] get_page_from_freelist+0x21e4/0x22c0 [ 255.293787][ T8603] __alloc_frozen_pages_noprof+0x181/0x370 [ 255.299565][ T8603] alloc_pages_mpol+0x232/0x4a0 [ 255.304395][ T8603] allocate_slab+0x8a/0x370 [ 255.308872][ T8603] ___slab_alloc+0xbeb/0x1420 [ 255.313527][ T8603] __kmalloc_cache_noprof+0x296/0x3d0 [ 255.318891][ T8603] audit_log_d_path+0xb5/0x190 [ 255.323631][ T8603] audit_log_d_path_exe+0x42/0x70 [ 255.328633][ T8603] audit_log_task+0x2b3/0x3c0 [ 255.333286][ T8603] audit_seccomp+0x86/0x190 [ 255.337765][ T8603] __seccomp_filter+0x9aa/0x1a40 [ 255.342674][ T8603] syscall_trace_enter+0xaa/0x160 [ 255.347676][ T8603] do_syscall_64+0xd3/0x3b0 [ 255.352153][ T8603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.358021][ T8603] page last free pid 5234 tgid 5234 stack trace: [ 255.364317][ T8603] __free_frozen_pages+0xbc4/0xd30 [ 255.369407][ T8603] __put_partials+0x156/0x1a0 [ 255.374055][ T8603] put_cpu_partial+0x17c/0x250 [ 255.378798][ T8603] __slab_free+0x2d5/0x3c0 [ 255.383202][ T8603] qlist_free_all+0x97/0x140 [ 255.387768][ T8603] kasan_quarantine_reduce+0x148/0x160 [ 255.393203][ T8603] __kasan_slab_alloc+0x22/0x80 [ 255.398029][ T8603] __kmalloc_noprof+0x224/0x4f0 [ 255.402855][ T8603] tomoyo_encode+0x28b/0x550 [ 255.407419][ T8603] tomoyo_realpath_from_path+0x58d/0x5d0 [ 255.413022][ T8603] tomoyo_path_perm+0x213/0x4b0 [ 255.417847][ T8603] security_inode_getattr+0x12f/0x330 [ 255.423193][ T8603] __x64_sys_newfstat+0xfc/0x200 [ 255.428109][ T8603] do_syscall_64+0xfa/0x3b0 [ 255.432603][ T8603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.438480][ T8603] [ 255.440780][ T8603] Memory state around the buggy address: [ 255.446404][ T8603] ffff8880512d0600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 255.454440][ T8603] ffff8880512d0680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 255.462474][ T8603] >ffff8880512d0700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 255.470504][ T8603] ^ [ 255.476647][ T8603] ffff8880512d0780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 255.484681][ T8603] ffff8880512d0800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 255.492727][ T8603] ================================================================== [ 255.521326][ T5980] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 255.529278][ T979] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input23 [ 255.539864][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 255.552659][ T8603] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 255.559880][ T8603] CPU: 0 UID: 0 PID: 8603 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 255.568819][ T8603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 255.578875][ T8603] Call Trace: [ 255.582158][ T8603] [ 255.585076][ T8603] dump_stack_lvl+0x99/0x250 [ 255.589666][ T8603] ? __asan_memcpy+0x40/0x70 [ 255.594254][ T8603] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.599459][ T8603] ? __pfx__printk+0x10/0x10 [ 255.604055][ T8603] vpanic+0x281/0x750 [ 255.608038][ T8603] ? preempt_schedule+0xae/0xc0 [ 255.612897][ T8603] ? __pfx_vpanic+0x10/0x10 [ 255.617404][ T8603] ? preempt_schedule_common+0x83/0xd0 [ 255.622854][ T8603] ? preempt_schedule+0xae/0xc0 [ 255.627701][ T8603] ? __pfx_preempt_schedule+0x10/0x10 [ 255.633075][ T8603] panic+0xb9/0xc0 [ 255.636796][ T8603] ? __pfx_panic+0x10/0x10 [ 255.641206][ T8603] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 255.647106][ T8603] ? v4l2_fh_open+0xc7/0x430 [ 255.651683][ T8603] check_panic_on_warn+0x89/0xb0 [ 255.656614][ T8603] ? v4l2_fh_open+0xc7/0x430 [ 255.661206][ T8603] end_report+0x78/0x160 [ 255.665464][ T8603] kasan_report+0x129/0x150 [ 255.669962][ T8603] ? v4l2_fh_open+0xc7/0x430 [ 255.674535][ T8603] v4l2_fh_open+0xc7/0x430 [ 255.678946][ T8603] em28xx_v4l2_open+0x157/0x9a0 [ 255.683793][ T8603] v4l2_open+0x20f/0x360 [ 255.688044][ T8603] chrdev_open+0x4c9/0x5e0 [ 255.692458][ T8603] ? __pfx_chrdev_open+0x10/0x10 [ 255.697391][ T8603] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 255.703709][ T8603] ? __pfx_chrdev_open+0x10/0x10 [ 255.708648][ T8603] do_dentry_open+0x950/0x13f0 [ 255.713423][ T8603] vfs_open+0x3b/0x340 [ 255.717479][ T8603] ? path_openat+0x2ecd/0x3830 [ 255.722239][ T8603] path_openat+0x2ee5/0x3830 [ 255.726820][ T8603] ? arch_stack_walk+0xfc/0x150 [ 255.731677][ T8603] ? stack_depot_save_flags+0x40/0x860 [ 255.737145][ T8603] ? __pfx_path_openat+0x10/0x10 [ 255.742077][ T8603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.748148][ T8603] do_filp_open+0x1fa/0x410 [ 255.752638][ T8603] ? __lock_acquire+0xab9/0xd20 [ 255.757489][ T8603] ? __pfx_do_filp_open+0x10/0x10 [ 255.762519][ T8603] ? _raw_spin_unlock+0x28/0x50 [ 255.767360][ T8603] ? alloc_fd+0x64c/0x6c0 [ 255.771681][ T8603] do_sys_openat2+0x121/0x1c0 [ 255.776341][ T8603] ? __pfx_do_sys_openat2+0x10/0x10 [ 255.781532][ T8603] ? exc_page_fault+0x76/0xf0 [ 255.786196][ T8603] ? do_user_addr_fault+0xc8a/0x1390 [ 255.791477][ T8603] __x64_sys_openat+0x138/0x170 [ 255.796328][ T8603] do_syscall_64+0xfa/0x3b0 [ 255.800824][ T8603] ? lockdep_hardirqs_on+0x9c/0x150 [ 255.806002][ T8603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.812061][ T8603] ? clear_bhb_loop+0x60/0xb0 [ 255.816722][ T8603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.822607][ T8603] RIP: 0033:0x7f16291d3407 [ 255.827008][ T8603] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 255.846597][ T8603] RSP: 002b:00007ffc3cbec820 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 255.855015][ T8603] RAX: ffffffffffffffda RBX: 00007f1629147880 RCX: 00007f16291d3407 [ 255.862985][ T8603] RDX: 0000000000000000 RSI: 00007ffc3cbecf1c RDI: ffffffffffffff9c [ 255.870957][ T8603] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 255.878927][ T8603] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 255.886893][ T8603] R13: 00007ffc3cbeca70 R14: 00007f162942c000 R15: 000055aa06e4d4d8 [ 255.894870][ T8603] [ 255.898139][ T8603] Kernel Offset: disabled [ 255.902446][ T8603] Rebooting in 86400 seconds..