last executing test programs: 16.627188134s ago: executing program 2 (id=956): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) 15.319551362s ago: executing program 3 (id=958): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00']) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$midi(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) r4 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000000680)={0x9, {"a2e3ad214fc752f91b29090942f70e0dd038e7ff7fc6e5539b324c078b089b34313b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd736d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25987969a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e89198f595dc4d470e01002a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d0db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008094}, 0x4) sendmsg$IPCTNL_MSG_CT_GET(r1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}, 0x8103}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/180, 0xb4}, {0x0}, {&(0x7f0000000580)=""/84, 0x54}, {&(0x7f00000016c0)=""/217, 0xd9}], 0x4}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xb0}, {{0x0, 0x0, 0x0}, 0x6}, {{&(0x7f0000000600)=@isdn, 0x80, &(0x7f0000000040)=[{&(0x7f00000017c0)=""/98, 0x62}], 0x1}, 0xc}], 0x9, 0x20, 0x0) 15.118551527s ago: executing program 2 (id=959): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f00006d9000/0x1000)=nil], &(0x7f0000000080)=[0x101], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="ec000000210001002dbd7000fedbdf25fe880000000000000000000000000101ac1414bb0000000000000000000000004e240002000700010a0080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="af6b6e00010000009c0011001901010000000000000000000000000020010000000000000000000000000001ac14143e0000000000c8b10000000000ac1414bb00000000000000000000000032fcff00073500000a00020000000000000000000000020000000000ac1e01010000000000000000000000000a010102000000000000000000000000fe80000000000000000000000000002f33"], 0xec}}, 0x20000000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$FUSE_INIT(r2, &(0x7f0000002340)={0x6d, 0xfffffffffffffffe, 0x0, {0x7, 0x29, 0x0, 0x20582a, 0x0, 0x0, 0x9}}, 0x50) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f000021f000/0x4000)=nil, 0x4000, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='mode\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x17, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_clone(0x8a000000, 0x0, 0x0, 0x0, 0x0, 0x0) 14.434918572s ago: executing program 2 (id=961): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000003ac0)={0x0, [[0x3, 0x443, 0x40, 0x0, 0x4], [0x7f7f, 0x40, 0x0, 0xfffffffe, 0x0, 0x0, 0xff], [0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x8001]], '\x00', [{0x0, 0x21, 0x0, 0x1}, {0x0, 0x1ff}, {0x0, 0x1000}, {}, {0x0, 0xfffffff8}, {0x0, 0xfffffffc}, {0x0, 0xfffffffd}, {0x0, 0x2000000}, {}, {}, {0xd4}], '\x00', 0x7}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x24008000) socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="ac008ac5ab41a2361d3e86d1", 0xc, 0x20040045, &(0x7f00000000c0)={0xa, 0x4e21, 0x5ed1, @empty, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='yeah\x00', 0x5) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x80010, r4, 0xfffff000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000002100010000000000000000000200000000000000000000000a30cad8b96ed2a7436b6c8b895bbed8fc388f106553a335585c81ca2204a40a90b4349c75d05203238535335b310a2f70f43a9f14cbba26d79429c17b89da7e67886c27bf0aeb5d6558a7da06e178752a2309d09a3477849a34cf1a7fac37f38788a4"], 0x1c}}, 0x44044) openat$dsp1(0xffffffffffffff9c, 0x0, 0x4000, 0x0) syz_clone(0x800000, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000380), &(0x7f00000003c0)) 13.122404233s ago: executing program 4 (id=963): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000003ac0)={0x0, [[0x3, 0x443, 0x40, 0x0, 0x4], [0x7f7f, 0x40, 0x0, 0xfffffffe, 0x0, 0x0, 0xff], [0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x8001]], '\x00', [{0x0, 0x21, 0x0, 0x1}, {0x0, 0x1ff}, {0x0, 0x1000}, {}, {0x0, 0xfffffff8}, {0x0, 0xfffffffc}, {0x0, 0xfffffffd}, {0x0, 0x2000000}, {}, {}, {0xd4}], '\x00', 0x7}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x24008000) socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="ac008ac5ab41a2361d3e86d1", 0xc, 0x20040045, &(0x7f00000000c0)={0xa, 0x4e21, 0x5ed1, @empty, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='yeah\x00', 0x5) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x80010, r4, 0xfffff000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000002100010000000000000000000200000000000000000000000a30cad8b96ed2a7436b6c8b895bbed8fc388f106553a335585c81ca2204a40a90b4349c75d05203238535335b310a2f70f43a9f14cbba26d79429c17b89da7e67886c27bf0aeb5d6558a7da06e178752a2309d09a3477849a34cf1a7fac37f38788a4"], 0x1c}}, 0x44044) openat$dsp1(0xffffffffffffff9c, 0x0, 0x4000, 0x0) syz_clone(0x800000, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000380), &(0x7f00000003c0)) 13.084542275s ago: executing program 0 (id=964): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xce4, r2}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r2, 0x0, 0x100000000000000}, 0x38) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x1}], 0x1, 0x0) semop(0x0, 0x0, 0x0) epoll_create1(0xc247a82949ce9376) fsopen(&(0x7f0000000580)='overlay\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {0x0}], 0x2, 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x48, 0x7, r3, 0x0, 0x1, 0x0, 0x5, 0xffffffffffff1710}) epoll_create1(0x80000) socket$netlink(0x10, 0x3, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x800) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) 12.808807261s ago: executing program 1 (id=965): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) move_pages(r0, 0x1, &(0x7f0000000040)=[&(0x7f00006d9000/0x1000)=nil], &(0x7f0000000080)=[0x101, 0x8], &(0x7f00000000c0), 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="ec000000210001002dbd7000fedbdf25fe880000000000000000000000000101ac1414bb0000000000000000000000004e240002000700010a0080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="af6b6e00010000009c0011001901010000000000000000000000000020010000000000000000000000000001ac14143e0000000000c8b10000000000ac1414bb00000000000000000000000032fcff00073500000a00020000000000000000000000020000000000ac1e01010000000000000000000000000a010102000000000000000000000000fe80000000000000000000000000002f33"], 0xec}}, 0x20000000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$FUSE_INIT(r4, &(0x7f0000002340)={0x6d, 0xfffffffffffffffe, 0x0, {0x7, 0x29, 0x0, 0x20582a, 0x0, 0x0, 0x9}}, 0x50) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f000021f000/0x4000)=nil, 0x4000, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='mode\x00', 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x17, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_clone(0x8a000000, 0x0, 0x0, 0x0, 0x0, 0x0) 11.489227939s ago: executing program 0 (id=966): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, 0x0, &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200"/62, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068", 0x9, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/18, @ANYBLOB="ebffffffffffffff280012800b00010065"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 11.331802577s ago: executing program 3 (id=967): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000847fff), 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x200002, 0x0) fcntl$setlease(r3, 0x403, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) 10.689824538s ago: executing program 0 (id=968): mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%.,:', 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000003) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) sendfile(r5, r5, 0x0, 0x101) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) 10.101527364s ago: executing program 1 (id=969): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) move_pages(r0, 0x1, &(0x7f0000000040)=[&(0x7f00006d9000/0x1000)=nil], &(0x7f0000000080)=[0x101, 0x8], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="ec000000210001002dbd7000fedbdf25fe880000000000000000000000000101ac1414bb0000000000000000000000004e240002000700010a0080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="af6b6e00010000009c0011001901010000000000000000000000000020010000000000000000000000000001ac14143e0000000000c8b10000000000ac1414bb00000000000000000000000032fcff00073500000a00020000000000000000000000020000000000ac1e01010000000000000000000000000a010102000000000000000000000000fe80000000000000000000000000002f33"], 0xec}}, 0x20000000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$FUSE_INIT(r4, &(0x7f0000002340)={0x6d, 0xfffffffffffffffe, 0x0, {0x7, 0x29, 0x0, 0x20582a, 0x0, 0x0, 0x9}}, 0x50) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f000021f000/0x4000)=nil, 0x4000, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='mode\x00', 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x17, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_clone(0x8a000000, 0x0, 0x0, 0x0, 0x0, 0x0) 9.89577878s ago: executing program 4 (id=970): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000003ac0)={0x0, [[0x3, 0x443, 0x40, 0x0, 0x4], [0x7f7f, 0x40, 0x0, 0xfffffffe, 0x0, 0x0, 0xff], [0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x8001]], '\x00', [{0x0, 0x21, 0x0, 0x1}, {0x0, 0x1ff}, {0x0, 0x1000}, {}, {0x0, 0xfffffff8}, {0x0, 0xfffffffc}, {0x0, 0xfffffffd}, {0x0, 0x2000000}, {}, {}, {0xd4}], '\x00', 0x7}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x24008000) socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="ac008ac5ab41a2361d3e86d1", 0xc, 0x20040045, &(0x7f00000000c0)={0xa, 0x4e21, 0x5ed1, @empty, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='yeah\x00', 0x5) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x80010, r4, 0xfffff000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000002100010000000000000000000200000000000000000000000a30cad8b96ed2a7436b6c8b895bbed8fc388f106553a335585c81ca2204a40a90b4349c75d05203238535335b310a2f70f43a9f14cbba26d79429c17b89da7e67886c27bf0aeb5d6558a7da06e178752a2309d09a3477849a34cf1a7fac37f38788a4"], 0x1c}}, 0x44044) openat$dsp1(0xffffffffffffff9c, 0x0, 0x4000, 0x0) syz_clone(0x800000, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000380), &(0x7f00000003c0)) 9.816538556s ago: executing program 2 (id=971): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f00006d9000/0x1000)=nil], &(0x7f0000000080)=[0x101], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20000000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$FUSE_INIT(r2, &(0x7f0000002340)={0x6d, 0xfffffffffffffffe, 0x0, {0x7, 0x29, 0x0, 0x20582a, 0x0, 0x0, 0x9}}, 0x50) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f000021f000/0x4000)=nil, 0x4000, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='mode\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x17, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_clone(0x8a000000, 0x0, 0x0, 0x0, 0x0, 0x0) 9.287226523s ago: executing program 3 (id=972): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) gettid() r2 = dup(0xffffffffffffffff) openat(r2, &(0x7f0000000000)='./file0\x00', 0x111042, 0x11) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x1010, 0x89, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x400000000000235, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r3, 0x0, 0x7}, 0x38) 8.894894091s ago: executing program 1 (id=973): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000040)={{@local}, @local, 0x8, 0x6, 0x343, 0xffffffff7fffffe1, 0x7, 0x100, 0x9}) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0X#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r2 = fanotify_init(0x200, 0x0) r3 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x6) r4 = dup(r3) fanotify_mark(r2, 0x1, 0x48001059, r4, 0x0) r5 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r5, 0x0) fallocate(r5, 0x0, 0x0, 0x1000f4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000300)={0x0, 0x2, 0x24c0, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 8.04696796s ago: executing program 1 (id=974): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x52132248838576c8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @value}, 0x94) r2 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r2, 0x29, 0x4b, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000004580), 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10060, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x0) fchdir(r6) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x44) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 7.811095485s ago: executing program 0 (id=975): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x8, 0x0, 0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}]}, 0x68}}, 0x4800) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x24040884) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000150001000000000000000800050000000400"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) dup(r2) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {}, {0x5, 0xffe0}}}, 0x24}}, 0x0) sendto$packet(r4, &(0x7f0000000300)="5856ce23e94e01a4655943e3ef0d40a096804877b5617a973094970fdf6f2f49af6c061a69306061f9036987adeba5db6f10d9421010727c1bfbddba92ecd863ca1fcf331fe4c54aac9d1f4054255e3ff5e19da78996fc0835330fe074e16b5e35c41bdc470876193866481fe30216ee7831e6cb500a2320622c02ed10f64a6a6ba8e4c5192a32a35b081c3ef4c8e4d542", 0x91, 0x40080, &(0x7f0000000140)={0x11, 0x1, r6, 0x1, 0xb, 0x6, @local}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) mkdirat(r4, &(0x7f0000000440)='./file1/file3\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000001100)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x5) 7.429365905s ago: executing program 2 (id=976): socket$inet6(0xa, 0x80001, 0x0) socket$l2tp6(0xa, 0x2, 0x73) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f00000000c0)={0x0, 0x41, 0x3, 0x2}, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x34) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000002c0)=@gcm_256={{0x304}, "e9bb07f400", "7d376431316d2e069b245c4113b4a67cde08bf5fa87e53dda73856be09fd4e45", "68faa2b5", "ffffffffffffffff"}, 0x38) sendmsg(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x20}, 0x8040) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') preadv(r4, 0x0, 0x0, 0x8, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c0000002000090002000000fedbdf250100000008000800", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x4000815}, 0x4000) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x107780) 6.749692141s ago: executing program 0 (id=977): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000003ac0)={0x0, [[0x3, 0x443, 0x40, 0x0, 0x4], [0x7f7f, 0x40, 0x0, 0xfffffffe, 0x0, 0x0, 0xff], [0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x8001]], '\x00', [{0x0, 0x21, 0x0, 0x1}, {0x0, 0x1ff}, {0x0, 0x1000}, {}, {0x0, 0xfffffff8}, {0x0, 0xfffffffc}, {0x0, 0xfffffffd}, {0x0, 0x2000000}, {}, {}, {0xd4}], '\x00', 0x7}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x24008000) socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="ac008ac5ab41a2361d3e86d1", 0xc, 0x20040045, &(0x7f00000000c0)={0xa, 0x4e21, 0x5ed1, @empty, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='yeah\x00', 0x5) unshare(0x68040200) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000002100010000000000000000000200000000000000000000000a30cad8b96ed2a7436b6c8b895bbed8fc388f106553a335585c81ca2204a40a90b4349c75d05203238535335b310a2f70f43a9f14cbba26d79429c17b89da7e67886c27bf0aeb5d6558a7da06e178752a2309d09a3477849a34cf1a7fac37f38788a4"], 0x1c}}, 0x44044) openat$dsp1(0xffffffffffffff9c, 0x0, 0x4000, 0x0) syz_clone(0x800000, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000380), &(0x7f00000003c0)) 6.523409144s ago: executing program 4 (id=978): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) writev(r1, 0x0, 0x0) 6.311058755s ago: executing program 3 (id=979): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) move_pages(r0, 0x1, &(0x7f0000000040)=[&(0x7f00006d9000/0x1000)=nil], &(0x7f0000000080)=[0x101, 0x8], &(0x7f00000000c0), 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="ec000000210001002dbd7000fedbdf25fe880000000000000000000000000101ac1414bb0000000000000000000000004e240002000700010a0080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="af6b6e00010000009c0011001901010000000000000000000000000020010000000000000000000000000001ac14143e0000000000c8b10000000000ac1414bb00000000000000000000000032fcff00073500000a00020000000000000000000000020000000000ac1e01010000000000000000000000000a010102000000000000000000000000fe80000000000000000000000000002f33"], 0xec}}, 0x20000000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$FUSE_INIT(r4, &(0x7f0000002340)={0x6d, 0xfffffffffffffffe, 0x0, {0x7, 0x29, 0x0, 0x20582a, 0x0, 0x0, 0x9}}, 0x50) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f000021f000/0x4000)=nil, 0x4000, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='mode\x00', 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x17, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_clone(0x8a000000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.172116833s ago: executing program 1 (id=980): socket$inet6(0xa, 0x2, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000180), 0x4a000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = eventfd(0x401) write$eventfd(r2, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106d049cc20000000000010902"], 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000003d0007ff0f00000000000000037c000004"], 0x18}}, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x12000021) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x478) fsopen(&(0x7f0000000140)='vfat\x00', 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x3c, r5, 0x1, 0x170bd2c, 0x8000, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x80) 4.964560894s ago: executing program 3 (id=981): socket$inet6(0xa, 0x80001, 0x0) socket$l2tp6(0xa, 0x2, 0x73) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f00000000c0)={0x0, 0x41, 0x3, 0x2}, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x34) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000002c0)=@gcm_256={{0x304}, "e9bb07f400", "7d376431316d2e069b245c4113b4a67cde08bf5fa87e53dda73856be09fd4e45", "68faa2b5", "ffffffffffffffff"}, 0x38) sendmsg(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x20}, 0x8040) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') preadv(r4, 0x0, 0x0, 0x8, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c0000002000090002000000fedbdf250100000008000800", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x4000815}, 0x4000) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x107780) 3.978516603s ago: executing program 2 (id=982): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) landlock_restrict_self(r3, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x4, 0x3}, &(0x7f0000000200)=0x8) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8000000) syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) unshare(0x20020480) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0x2, 0x4, 0x3a0, 0xffffffff, 0xd0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x7, 0x45}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@srh={{0x30}}, @common=@unspec=@mark={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40048}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000056fffffff00000000200000005700e0ff000002009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r6 = signalfd(0xffffffffffffffff, 0x0, 0x0) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d5304905) close(r7) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) fcntl$setstatus(r6, 0x4, 0x2c00) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582", @ANYRES16=r7], 0x0) syz_usb_control_io(r8, 0x0, 0x0) 3.454057647s ago: executing program 0 (id=983): socket$inet6(0xa, 0x80001, 0x0) socket$l2tp6(0xa, 0x2, 0x73) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f00000000c0)={0x0, 0x41, 0x3, 0x2}, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x34) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000002c0)=@gcm_256={{0x304}, "e9bb07f400", "7d376431316d2e069b245c4113b4a67cde08bf5fa87e53dda73856be09fd4e45", "68faa2b5", "ffffffffffffffff"}, 0x38) 3.246665351s ago: executing program 4 (id=984): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="1800", @ANYRES16=r0, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) 2.332460138s ago: executing program 4 (id=985): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce07020000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068", 0x9, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/18, @ANYBLOB="ebffffffffffffff280012800b00010065"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.687230594s ago: executing program 4 (id=986): socket$inet6(0xa, 0x80001, 0x0) socket$l2tp6(0xa, 0x2, 0x73) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f00000000c0)={0x0, 0x41, 0x3, 0x2}, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x34) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000002c0)=@gcm_256={{0x304}, "e9bb07f400", "7d376431316d2e069b245c4113b4a67cde08bf5fa87e53dda73856be09fd4e45", "68faa2b5", "ffffffffffffffff"}, 0x38) sendmsg(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x20}, 0x8040) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') preadv(r4, 0x0, 0x0, 0x8, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) 626.022272ms ago: executing program 1 (id=987): socket$inet6(0xa, 0x80001, 0x0) socket$l2tp6(0xa, 0x2, 0x73) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f00000000c0)={0x0, 0x41, 0x3, 0x2}, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x34) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000002c0)=@gcm_256={{0x304}, "e9bb07f400", "7d376431316d2e069b245c4113b4a67cde08bf5fa87e53dda73856be09fd4e45", "68faa2b5", "ffffffffffffffff"}, 0x38) sendmsg(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x20}, 0x8040) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') preadv(r4, 0x0, 0x0, 0x8, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c0000002000090002000000fedbdf250100000008000800", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x4000815}, 0x4000) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x107780) 0s ago: executing program 3 (id=988): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff"], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) kernel console output (not intermixed with test programs): [ T6414] loop8: detected capacity change from 0 to 16384 [ 141.427442][ T5917] usb 4-1: SerialNumber: syz [ 141.485727][ T5917] hso 4-1:6.2: Failed to find INT IN ep [ 141.617910][ T6414] loop8: detected capacity change from 16384 to 16320 [ 141.694845][ T5917] usb 4-1: USB disconnect, device number 3 [ 142.916384][ T9] usb 5-1: USB disconnect, device number 8 [ 143.457586][ T5917] usb 2-1: USB disconnect, device number 7 [ 145.573947][ T5842] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 146.076855][ T5829] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 146.142264][ T6457] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 146.227099][ T5829] usb 4-1: device descriptor read/64, error -71 [ 146.556876][ T5829] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 146.817249][ T5829] usb 4-1: device descriptor read/64, error -71 [ 146.927201][ T5829] usb usb4-port1: attempt power cycle [ 147.388349][ T5829] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 147.417829][ T5829] usb 4-1: device descriptor read/8, error -71 [ 147.764059][ T6470] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 147.771578][ T6470] IPv6: NLM_F_CREATE should be set when creating new route [ 147.793193][ T5829] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 147.811368][ T6470] lo: entered allmulticast mode [ 147.839281][ T6470] tunl0: entered allmulticast mode [ 147.845486][ T5829] usb 4-1: device descriptor read/8, error -71 [ 147.864317][ T6470] gre0: entered allmulticast mode [ 147.907998][ T6470] gretap0: entered allmulticast mode [ 147.917793][ T6470] erspan0: entered allmulticast mode [ 147.932497][ T6470] ip_vti0: entered allmulticast mode [ 147.966306][ T6470] ip6_vti0: entered allmulticast mode [ 147.966560][ T5829] usb usb4-port1: unable to enumerate USB device [ 148.240657][ T6470] sit0: entered allmulticast mode [ 148.341177][ T6470] ip6tnl0: entered allmulticast mode [ 148.439776][ T6470] ip6gre0: entered allmulticast mode [ 148.644857][ T6470] syz_tun: entered allmulticast mode [ 148.814871][ T6470] ip6gretap0: entered allmulticast mode [ 148.830117][ T6470] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.838381][ T6470] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.887405][ T6470] bridge0: entered allmulticast mode [ 148.907881][ T6470] vcan0: entered allmulticast mode [ 148.914832][ T6470] bond0: entered allmulticast mode [ 148.971115][ T6470] bond_slave_0: entered allmulticast mode [ 148.977280][ T6470] bond_slave_1: entered allmulticast mode [ 149.125798][ T6470] team0: entered allmulticast mode [ 149.158196][ T6470] team_slave_0: entered allmulticast mode [ 149.195844][ T6470] team_slave_1: entered allmulticast mode [ 149.233867][ T6470] dummy0: entered allmulticast mode [ 149.313984][ T6470] nlmon0: entered allmulticast mode [ 149.354878][ T6470] caif0: entered allmulticast mode [ 149.385643][ T6470] batadv0: entered allmulticast mode [ 149.450898][ T6470] vxcan0: entered allmulticast mode [ 149.479816][ T6470] vxcan1: entered allmulticast mode [ 149.505608][ T6470] veth0: entered allmulticast mode [ 149.554647][ T6470] veth1: entered allmulticast mode [ 149.872248][ T6470] wg0: entered allmulticast mode [ 149.922378][ T6470] wg1: entered allmulticast mode [ 149.962135][ T6470] wg2: entered allmulticast mode [ 150.049399][ T6470] veth0_to_bridge: entered allmulticast mode [ 150.076959][ T43] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 150.087542][ T6470] veth1_to_bridge: entered allmulticast mode [ 150.164298][ T6470] veth1_to_bond: entered allmulticast mode [ 150.185971][ T6470] veth0_to_team: entered allmulticast mode [ 150.242266][ T6470] veth1_to_team: entered allmulticast mode [ 150.338817][ T6470] veth0_to_batadv: entered allmulticast mode [ 150.350060][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.360911][ T43] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 150.374538][ T6470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.382296][ T43] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 150.392408][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.401246][ T6470] batadv_slave_0: entered allmulticast mode [ 150.424206][ T43] usb 3-1: config 0 descriptor?? [ 150.434175][ T6470] veth1_to_batadv: entered allmulticast mode [ 150.452164][ T43] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 150.464986][ T43] dvb-usb: bulk message failed: -22 (3/0) [ 150.486023][ T6470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.511621][ T43] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 150.532497][ T6470] batadv_slave_1: entered allmulticast mode [ 150.555164][ T43] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 150.580148][ T6470] xfrm0: entered allmulticast mode [ 150.587593][ T6470] veth0_to_hsr: entered allmulticast mode [ 150.596157][ T6470] hsr_slave_0: entered allmulticast mode [ 150.604675][ T43] usb 3-1: media controller created [ 150.913791][ T6488] netlink: 'syz.2.159': attribute type 13 has an invalid length. [ 150.954075][ T6470] veth1_to_hsr: entered allmulticast mode [ 150.968228][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 150.984053][ T6470] hsr_slave_1: entered allmulticast mode [ 150.991937][ T43] dvb-usb: bulk message failed: -22 (6/0) [ 150.999109][ T6470] hsr0: entered allmulticast mode [ 151.003251][ T43] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 151.019568][ T6470] veth1_virt_wifi: entered allmulticast mode [ 151.024189][ T43] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 151.049833][ T43] dvb-usb: schedule remote query interval to 150 msecs. [ 151.054062][ T6470] veth0_virt_wifi: entered allmulticast mode [ 151.062074][ T43] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 151.099129][ T6470] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 151.205833][ T6470] veth1_vlan: entered allmulticast mode [ 151.218755][ T6484] dvb-usb: bulk message failed: -22 (1/0) [ 151.226140][ T6484] dvb-usb: error while querying for an remote control event. [ 151.272107][ T6470] veth0_vlan: entered allmulticast mode [ 151.296606][ T6470] vlan0: entered allmulticast mode [ 151.303476][ T6470] vlan1: entered allmulticast mode [ 151.311855][ T6470] macvlan0: entered allmulticast mode [ 151.330156][ T6470] macvlan1: entered allmulticast mode [ 151.474217][ T43] dvb-usb: bulk message failed: -22 (1/0) [ 151.494559][ T43] dvb-usb: error while querying for an remote control event. [ 151.506109][ T6470] ipvlan0: entered allmulticast mode [ 151.511829][ T6470] ipvlan1: entered allmulticast mode [ 151.518213][ T6470] veth1_macvtap: entered allmulticast mode [ 151.530900][ T6470] veth0_macvtap: entered allmulticast mode [ 151.554371][ T6470] macvtap0: entered allmulticast mode [ 151.565968][ T6470] macsec0: entered allmulticast mode [ 151.580888][ T6470] geneve0: entered allmulticast mode [ 151.600868][ T6470] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.616995][ T6470] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.625962][ T6470] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.640293][ T6470] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.649534][ T6470] geneve1: entered allmulticast mode [ 151.657035][ T43] dvb-usb: bulk message failed: -22 (1/0) [ 151.671612][ T6470] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 151.681807][ T43] dvb-usb: error while querying for an remote control event. [ 151.713317][ T6470] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 151.728695][ T6470] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 151.742591][ T6470] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 151.770249][ T6470] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 151.796704][ T6470] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 151.848456][ T6482] dvb-usb: bulk message failed: -22 (1/0) [ 151.855044][ T6488] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 151.871592][ T6482] dvb-usb: error while querying for an remote control event. [ 152.036999][ T6482] dvb-usb: bulk message failed: -22 (1/0) [ 152.061431][ T6482] dvb-usb: error while querying for an remote control event. [ 152.258065][ T6484] dvb-usb: bulk message failed: -22 (1/0) [ 152.263966][ T6484] dvb-usb: error while querying for an remote control event. [ 152.446887][ T6482] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 152.506649][ T6484] dvb-usb: bulk message failed: -22 (1/0) [ 152.517038][ T5967] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 152.656934][ T6484] dvb-usb: error while querying for an remote control event. [ 152.776182][ T6510] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 152.806505][ T6510] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 152.836982][ T6484] dvb-usb: bulk message failed: -22 (1/0) [ 152.849457][ T5967] usb 1-1: config 0 has no interfaces? [ 152.872342][ T5967] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 152.885251][ T5967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.900835][ T5967] usb 1-1: Product: syz [ 152.982141][ T6484] dvb-usb: error while querying for an remote control event. [ 152.999736][ T6482] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 153.007970][ T977] usb 3-1: USB disconnect, device number 8 [ 153.163920][ T5967] usb 1-1: Manufacturer: syz [ 153.191692][ T5967] usb 1-1: SerialNumber: syz [ 153.225859][ T6482] usb 4-1: config 1 has an invalid descriptor of length 51, skipping remainder of the config [ 153.232844][ T5967] usb 1-1: config 0 descriptor?? [ 153.299986][ T977] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 153.381616][ T6482] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 153.469678][ T6482] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 154.071673][ T6482] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 154.146029][ T6482] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 154.264426][ T6482] usb 4-1: Product: syz [ 154.271239][ T6527] loop6: detected capacity change from 0 to 524287999 [ 154.281242][ T6527] Buffer I/O error on dev loop6, logical block 0, async page read [ 154.301300][ T6527] Buffer I/O error on dev loop6, logical block 0, async page read [ 154.316243][ T6482] usb 4-1: Manufacturer: syz [ 154.358121][ T6527] Buffer I/O error on dev loop6, logical block 0, async page read [ 154.367364][ T6482] cdc_wdm 4-1:1.0: skipping garbage [ 154.372682][ T6482] cdc_wdm 4-1:1.0: skipping garbage [ 154.378442][ T6527] Buffer I/O error on dev loop6, logical block 0, async page read [ 154.387257][ T6528] Buffer I/O error on dev loop6, logical block 1048575, async page read [ 154.406639][ T6482] cdc_wdm 4-1:1.0: skipping garbage [ 154.466604][ T6529] usb usb8: usbfs: process 6529 (syz.2.165) did not claim interface 0 before use [ 154.508577][ T6482] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 154.526888][ T6527] Buffer I/O error on dev loop6, logical block 0, async page read [ 154.549210][ T6527] Buffer I/O error on dev loop6, logical block 0, async page read [ 154.552647][ T6517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.166'. [ 154.655593][ T6527] Buffer I/O error on dev loop6, logical block 0, async page read [ 154.688553][ T6527] Buffer I/O error on dev loop6, logical block 0, async page read [ 154.721789][ T6527] ldm_validate_partition_table(): Disk read failed. [ 154.742488][ T6527] Buffer I/O error on dev loop6, logical block 0, async page read [ 154.963544][ T6527] Dev loop6: unable to read RDB block 0 [ 154.975725][ T6517] input: syz0 as /devices/virtual/input/input9 [ 154.986419][ T6527] loop6: unable to read partition table [ 155.228001][ T6527] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 155.585933][ T6482] usb 1-1: USB disconnect, device number 6 [ 156.025894][ T6536] netlink: 468 bytes leftover after parsing attributes in process `syz.0.168'. [ 156.535636][ T6482] usb 4-1: USB disconnect, device number 8 [ 156.982849][ T30] audit: type=1326 audit(1750765144.889:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.2.170" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbbebf8e929 code=0x0 [ 157.326880][ T6482] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 157.507264][ T6482] usb 3-1: Using ep0 maxpacket: 16 [ 157.514695][ T6482] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 157.523345][ T6482] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 157.535425][ T6482] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 157.586852][ T6482] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 157.620484][ T6482] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 157.688783][ T6482] usb 3-1: config 0 has no interface number 0 [ 157.713879][ T6482] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 157.746246][ T6482] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 157.756707][ T6482] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 157.766630][ T6482] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 157.857323][ T6482] usb 3-1: config 0 interface 125 has no altsetting 0 [ 157.883830][ T6482] usb 3-1: config 0 interface 125 has no altsetting 2 [ 158.020888][ T6482] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 158.035798][ T6482] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.060396][ T6482] usb 3-1: Product: syz [ 158.074964][ T6482] usb 3-1: Manufacturer: syz [ 158.080084][ T6482] usb 3-1: SerialNumber: syz [ 158.101949][ T6482] usb 3-1: config 0 descriptor?? [ 158.122790][ T6482] usb 3-1: selecting invalid altsetting 2 [ 159.206427][ T6482] get_1284_register timeout [ 159.214071][ T6482] uss720 3-1:0.125: probe with driver uss720 failed with error -5 [ 159.316625][ T6569] sctp: [Deprecated]: syz.4.176 (pid 6569) Use of int in max_burst socket option deprecated. [ 159.316625][ T6569] Use struct sctp_assoc_value instead [ 160.049299][ T6574] netlink: 36 bytes leftover after parsing attributes in process `syz.4.177'. [ 160.086100][ T6574] netlink: 16 bytes leftover after parsing attributes in process `syz.4.177'. [ 160.134593][ T6574] netlink: 36 bytes leftover after parsing attributes in process `syz.4.177'. [ 160.150358][ T6574] netlink: 36 bytes leftover after parsing attributes in process `syz.4.177'. [ 160.459626][ T5967] usb 3-1: USB disconnect, device number 9 [ 162.748858][ T5916] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 162.917192][ T5916] usb 2-1: Using ep0 maxpacket: 16 [ 162.924982][ T5916] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 162.935225][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.958282][ T5916] usb 2-1: config 0 descriptor?? [ 162.966343][ T6587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.978829][ T5916] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 162.988796][ T6587] batadv_slave_0: entered promiscuous mode [ 163.427191][ T5916] gspca_sonixj: reg_r err -32 [ 163.465687][ T5916] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 163.736941][ T5903] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 164.026862][ T5903] usb 4-1: Using ep0 maxpacket: 16 [ 164.060223][ T5903] usb 4-1: config 0 interface 0 has no altsetting 0 [ 164.147892][ T5903] usb 4-1: New USB device found, idVendor=05ac, idProduct=abdf, bcdDevice=3d.49 [ 164.190859][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.462906][ T5903] usb 4-1: Product: syz [ 164.526898][ T5903] usb 4-1: Manufacturer: syz [ 164.601797][ T5903] usb 4-1: SerialNumber: syz [ 164.750325][ T5903] usb 4-1: config 0 descriptor?? [ 164.767237][ T5903] ipheth 4-1:0.0: Unable to find endpoints [ 166.354454][ T6484] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 166.636910][ T6484] usb 3-1: Using ep0 maxpacket: 32 [ 166.644226][ T6484] usb 3-1: config 0 has an invalid interface number: 183 but max is 0 [ 166.652753][ T6484] usb 3-1: config 0 has no interface number 0 [ 166.659376][ T6484] usb 3-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528 [ 166.704883][ T6484] usb 3-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 166.746337][ T6484] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.867737][ T6484] usb 3-1: Product: syz [ 166.965489][ T6484] usb 3-1: Manufacturer: syz [ 167.182432][ T6484] usb 3-1: SerialNumber: syz [ 167.218732][ T6484] usb 3-1: config 0 descriptor?? [ 167.237168][ T6629] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 167.325430][ T5916] usb 2-1: USB disconnect, device number 8 [ 167.401166][ T5903] usb 4-1: USB disconnect, device number 9 [ 167.711024][ T6637] netlink: 'syz.2.190': attribute type 10 has an invalid length. [ 167.718984][ T6637] netlink: 55 bytes leftover after parsing attributes in process `syz.2.190'. [ 170.288542][ T6484] net1080 3-1:0.183: probe with driver net1080 failed with error -71 [ 170.368723][ T6484] usb 3-1: USB disconnect, device number 10 [ 171.236946][ T5916] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 171.458518][ T5916] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 171.467844][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.618163][ T5916] usb 3-1: config 0 descriptor?? [ 171.684289][ T5916] gspca_main: spca508-2.14.0 probing 8086:0110 [ 171.863168][ T5916] gspca_spca508: reg_read err -32 [ 171.886168][ T5916] gspca_spca508: reg_read err -32 [ 171.892575][ T5916] gspca_spca508: reg_read err -32 [ 172.537714][ T5916] gspca_spca508: reg_read err -110 [ 172.553185][ T5916] gspca_spca508: reg write: error -32 [ 172.568955][ T5916] spca508 3-1:0.0: probe with driver spca508 failed with error -32 [ 173.728216][ T5916] usb 3-1: USB disconnect, device number 11 [ 174.236161][ T6695] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 174.538043][ T43] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 174.912490][ T43] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 174.922013][ T43] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 174.945070][ T43] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 174.964445][ T43] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 174.995899][ T43] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 175.058417][ T43] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 175.069953][ T43] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 175.084406][ T43] usb 5-1: Product: syz [ 175.091012][ T43] usb 5-1: Manufacturer: syz [ 175.167767][ T43] cdc_wdm 5-1:1.0: skipping garbage [ 175.213819][ T43] cdc_wdm 5-1:1.0: skipping garbage [ 175.238203][ T43] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 175.281351][ T43] cdc_wdm 5-1:1.0: Unknown control protocol [ 176.267016][ T6715] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 176.296861][ T6484] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 176.446912][ T6484] usb 3-1: Using ep0 maxpacket: 16 [ 178.541157][ T43] usb 5-1: USB disconnect, device number 9 [ 179.076938][ T43] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 179.240661][ T43] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 179.250438][ T43] usb 5-1: config 0 has no interface number 0 [ 179.262221][ T43] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.326846][ T43] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.372126][ T43] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 179.432279][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.483891][ T43] usb 5-1: config 0 descriptor?? [ 179.811530][ T6484] usb 3-1: unable to get BOS descriptor or descriptor too short [ 179.858116][ T6484] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 179.865799][ T6484] usb 3-1: can't read configurations, error -71 [ 180.112870][ T43] prodikeys 0003:041E:2801.0008: unknown main item tag 0x4 [ 180.143184][ T43] prodikeys 0003:041E:2801.0008: unknown main item tag 0x3 [ 180.218431][ T6743] netlink: 'syz.0.215': attribute type 27 has an invalid length. [ 180.226233][ T6743] lo: left allmulticast mode [ 180.247059][ T6743] tunl0: left allmulticast mode [ 180.253592][ T6743] gre0: left allmulticast mode [ 180.268489][ T6743] gretap0: left allmulticast mode [ 180.276354][ T6743] erspan0: left allmulticast mode [ 180.283119][ T6743] ip_vti0: left allmulticast mode [ 180.288843][ T6743] ip6_vti0: left allmulticast mode [ 180.294236][ T6743] sit0: left allmulticast mode [ 180.299368][ T6743] ip6tnl0: left allmulticast mode [ 180.305763][ T6743] ip6gre0: left allmulticast mode [ 180.311154][ T6743] syz_tun: left allmulticast mode [ 180.316432][ T6743] ip6gretap0: left allmulticast mode [ 180.322154][ T6743] bridge0: left allmulticast mode [ 180.327622][ T6743] vcan0: left allmulticast mode [ 180.332782][ T6743] bond0: left allmulticast mode [ 180.338085][ T6743] team0: left allmulticast mode [ 180.343255][ T6743] dummy0: left allmulticast mode [ 180.348747][ T6743] nlmon0: left allmulticast mode [ 180.358591][ T6743] caif0: left allmulticast mode [ 180.363914][ T6743] batadv0: left allmulticast mode [ 180.369265][ T6743] vxcan0: left allmulticast mode [ 180.374394][ T6743] vxcan1: left allmulticast mode [ 180.379670][ T6743] veth0: left allmulticast mode [ 180.384809][ T6743] veth1: left allmulticast mode [ 180.386567][ T6748] netlink: 'syz.0.215': attribute type 27 has an invalid length. [ 180.398417][ T6743] wg0: left allmulticast mode [ 180.403200][ T6743] wg1: left allmulticast mode [ 180.481096][ T6743] wg2: left allmulticast mode [ 180.486509][ T6743] veth0_to_bridge: left allmulticast mode [ 180.502980][ T43] prodikeys 0003:041E:2801.0008: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input1 [ 180.523457][ T6743] veth1_to_bridge: left allmulticast mode [ 180.531413][ T6743] bond_slave_0: left allmulticast mode [ 180.560335][ T6743] veth1_to_bond: left allmulticast mode [ 180.566286][ T6743] bond_slave_1: left allmulticast mode [ 180.605633][ T6743] veth0_to_team: left allmulticast mode [ 180.618367][ T43] hid_prodikeys: hid-prodikeys: failed to find output report [ 180.618367][ T43] [ 180.631564][ T6743] team_slave_0: left allmulticast mode [ 180.673351][ T6743] veth1_to_team: left allmulticast mode [ 180.719891][ T6743] team_slave_1: left allmulticast mode [ 180.726309][ T6743] veth0_to_batadv: left allmulticast mode [ 180.733462][ T6743] batadv_slave_0: left allmulticast mode [ 180.764889][ T6743] veth1_to_batadv: left allmulticast mode [ 181.061894][ T6743] batadv_slave_1: left allmulticast mode [ 181.136567][ T6743] xfrm0: left allmulticast mode [ 181.142571][ T6743] veth0_to_hsr: left allmulticast mode [ 181.193639][ T6743] veth1_to_hsr: left allmulticast mode [ 181.273668][ T6743] hsr0: left allmulticast mode [ 181.316822][ T43] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 181.324692][ T6743] hsr_slave_0: left allmulticast mode [ 181.378303][ T6743] hsr_slave_1: left allmulticast mode [ 181.383994][ T6743] veth1_virt_wifi: left allmulticast mode [ 181.407135][ T6743] veth0_virt_wifi: left allmulticast mode [ 181.420273][ T6743] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 181.443625][ T6743] veth1_vlan: left allmulticast mode [ 181.513727][ T43] usb 4-1: config 0 has no interfaces? [ 181.528770][ T43] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 181.539941][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.584446][ T43] usb 4-1: Product: syz [ 181.616926][ T43] usb 4-1: Manufacturer: syz [ 181.622053][ T6743] vlan0: left allmulticast mode [ 181.631881][ T43] usb 4-1: SerialNumber: syz [ 181.637302][ T6743] vlan1: left allmulticast mode [ 181.686356][ T6743] macvlan0: left allmulticast mode [ 181.719436][ T43] usb 4-1: config 0 descriptor?? [ 181.743149][ T6743] macvlan1: left allmulticast mode [ 181.764525][ T6743] ipvlan0: left allmulticast mode [ 181.828553][ T6743] ipvlan1: left allmulticast mode [ 181.846890][ T6743] veth0_vlan: left allmulticast mode [ 181.853140][ T6743] veth1_macvtap: left allmulticast mode [ 181.859288][ T6743] veth0_macvtap: left allmulticast mode [ 181.865459][ T6743] macvtap0: left allmulticast mode [ 181.871005][ T6743] macsec0: left allmulticast mode [ 181.876487][ T6743] geneve0: left allmulticast mode [ 181.881833][ T6743] geneve1: left allmulticast mode [ 181.887201][ T6743] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 181.894596][ T6743] netdevsim netdevsim0 netdevsim1: left allmulticast mode [ 181.987322][ T6743] netdevsim netdevsim0 netdevsim2: left allmulticast mode [ 181.997409][ T6743] netdevsim netdevsim0 netdevsim3: left allmulticast mode [ 182.004845][ T6743] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 182.024651][ T6743] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 182.033174][ T6743] vlan2: left allmulticast mode [ 182.039358][ T6743] bond1: left allmulticast mode [ 182.046553][ T6743] veth0_to_bond: left allmulticast mode [ 182.116922][ T43] usb 5-1: USB disconnect, device number 10 [ 182.748535][ T6762] usb usb8: usbfs: process 6762 (syz.4.217) did not claim interface 0 before use [ 182.891116][ T6765] netlink: 76 bytes leftover after parsing attributes in process `syz.2.218'. [ 183.851969][ T6772] capability: warning: `syz.0.220' uses deprecated v2 capabilities in a way that may be insecure [ 184.937456][ T43] usb 4-1: USB disconnect, device number 10 [ 185.452581][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 185.876882][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 185.957270][ T9] usb 2-1: config 0 has an invalid interface number: 130 but max is 0 [ 185.981199][ T9] usb 2-1: config 0 has no interface number 0 [ 186.010323][ T9] usb 2-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 186.019664][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.036891][ T9] usb 2-1: Product: syz [ 186.041776][ T9] usb 2-1: Manufacturer: syz [ 186.221749][ T9] usb 2-1: SerialNumber: syz [ 186.305796][ T9] usb 2-1: config 0 descriptor?? [ 186.321856][ T9] as10x_usb: device has been detected [ 186.328893][ T9] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 186.360229][ T9] usb 2-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 186.647170][ T9] as10x_usb: error during firmware upload part1 [ 186.668062][ T9] Registered device PCTV Systems picoStick (74e) [ 189.253405][ T5916] usb 2-1: USB disconnect, device number 9 [ 189.495360][ T5916] Unregistered device PCTV Systems picoStick (74e) [ 189.499667][ T5916] as10x_usb: device has been disconnected [ 191.556826][ T43] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 191.805780][ T43] usb 4-1: config 0 has no interfaces? [ 191.824487][ T43] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 191.844363][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.925749][ T43] usb 4-1: Product: syz [ 191.938900][ T43] usb 4-1: Manufacturer: syz [ 191.965421][ T43] usb 4-1: SerialNumber: syz [ 192.009816][ T43] usb 4-1: config 0 descriptor?? [ 192.556925][ T5916] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 192.727792][ T5916] usb 1-1: Using ep0 maxpacket: 8 [ 192.744818][ T5916] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 192.825873][ T5916] usb 1-1: config 2 has no interface number 0 [ 192.868098][ T5916] usb 1-1: config 2 interface 31 has no altsetting 0 [ 192.934106][ T5916] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 192.945261][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.963707][ T5916] usb 1-1: Product: syz [ 192.996259][ T5916] usb 1-1: Manufacturer: syz [ 193.500825][ T5916] usb 1-1: SerialNumber: syz [ 193.871744][ T5916] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [ 194.385365][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.395023][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.726840][ T5916] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 194.967349][ T5916] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 195.003287][ T5916] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 195.023831][ T43] usb 4-1: USB disconnect, device number 11 [ 195.076362][ T5916] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 195.141272][ T5916] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 195.221460][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.281650][ T5916] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 195.355641][ T5916] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 195.722578][ T6129] udevd[6129]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 195.876938][ T6882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.886844][ T6882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.635578][ T43] usb 1-1: USB disconnect, device number 7 [ 197.447263][ T43] usb 2-1: USB disconnect, device number 10 [ 198.784700][ T6921] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 201.539034][ T6481] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 202.847790][ T6481] usb 5-1: config 0 has no interfaces? [ 203.029510][ T6481] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 203.075943][ T6481] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.117152][ T6481] usb 5-1: Product: syz [ 203.121596][ T6481] usb 5-1: Manufacturer: syz [ 203.166935][ T6481] usb 5-1: SerialNumber: syz [ 203.178077][ T6481] usb 5-1: config 0 descriptor?? [ 204.116350][ T6966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.256'. [ 205.617668][ T43] usb 5-1: USB disconnect, device number 11 [ 211.840200][ T5150] Bluetooth: hci1: command 0x0406 tx timeout [ 211.847124][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 211.853654][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 211.859904][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 211.866274][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 212.602028][ T43] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 213.166846][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 213.228439][ T43] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 213.244546][ T43] usb 3-1: config 2 has no interface number 0 [ 213.322530][ T43] usb 3-1: config 2 interface 31 has no altsetting 0 [ 213.381628][ T43] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 213.430543][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.501587][ T43] usb 3-1: Product: syz [ 213.542108][ T43] usb 3-1: Manufacturer: syz [ 213.566888][ T43] usb 3-1: SerialNumber: syz [ 213.629173][ T43] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22 [ 214.831361][ T6482] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 214.996881][ T6482] usb 2-1: Using ep0 maxpacket: 8 [ 215.015851][ T6482] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 215.097510][ T6482] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 215.160910][ T6482] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 215.225202][ T6482] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 215.279434][ T6482] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 215.289207][ T6482] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.415360][ T6482] usbtmc 2-1:16.0: bulk endpoints not found [ 216.531105][ T7071] pim6reg0: tun_chr_ioctl cmd 1074025680 [ 216.779162][ T7084] netlink: 'syz.3.278': attribute type 1 has an invalid length. [ 216.818187][ T6482] usb 3-1: USB disconnect, device number 14 [ 218.714295][ T5903] usb 2-1: USB disconnect, device number 11 [ 220.718003][ T7109] block device autoloading is deprecated and will be removed. [ 223.285119][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.447317][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.172307][ T7157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.295'. [ 225.358296][ T7159] netlink: 'syz.4.296': attribute type 1 has an invalid length. [ 228.605762][ T43] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 228.886879][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 228.899313][ T43] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 228.907738][ T43] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 228.929196][ T43] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 228.963582][ T43] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 229.144204][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 229.154015][ T43] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 229.165631][ T43] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 229.175933][ T43] usb 1-1: Product: syz [ 229.182452][ T43] usb 1-1: Manufacturer: syz [ 229.187382][ T43] usb 1-1: SerialNumber: syz [ 229.195840][ T43] usb 1-1: config 0 descriptor?? [ 229.205879][ T43] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 229.246630][ T43] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 229.309800][ T7190] netlink: 'syz.1.303': attribute type 1 has an invalid length. [ 230.122591][ T43] usb 1-1: USB disconnect, device number 8 [ 230.128480][ C1] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 230.137246][ T7192] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 230.839502][ T43] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 230.919193][ T6481] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 231.099980][ T6481] usb 2-1: config 0 has no interfaces? [ 231.117175][ T6481] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 231.126602][ T6481] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.134989][ T6481] usb 2-1: Product: syz [ 231.178229][ T6481] usb 2-1: Manufacturer: syz [ 231.275297][ T6481] usb 2-1: SerialNumber: syz [ 231.340418][ T6481] usb 2-1: config 0 descriptor?? [ 231.413100][ T2958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.669838][ T2958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.156597][ T6481] usb 2-1: USB disconnect, device number 12 [ 236.101015][ T5916] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 236.286864][ T5916] usb 1-1: Using ep0 maxpacket: 32 [ 236.306219][ T5916] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 236.331921][ T5916] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 236.365999][ T5916] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 236.390963][ T5916] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 236.418666][ T5916] usb 1-1: config 0 interface 0 has no altsetting 0 [ 236.519893][ T5916] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 236.551002][ T5916] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 236.564311][ T5916] usb 1-1: Product: syz [ 236.575413][ T5916] usb 1-1: Manufacturer: syz [ 236.583201][ T5916] usb 1-1: SerialNumber: syz [ 236.594992][ T5916] usb 1-1: config 0 descriptor?? [ 236.662744][ T5916] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 236.674388][ T5916] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 237.633120][ T7262] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 237.651431][ T6484] usb 1-1: USB disconnect, device number 9 [ 237.657402][ C1] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 237.724656][ T6484] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 238.333987][ T7269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.323'. [ 239.203503][ T6484] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 239.527542][ T6484] usb 2-1: config 0 has no interfaces? [ 239.631352][ T6484] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 239.754852][ T6484] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.854865][ T6484] usb 2-1: Product: syz [ 239.890009][ T6484] usb 2-1: Manufacturer: syz [ 239.925327][ T6484] usb 2-1: SerialNumber: syz [ 240.037899][ T6484] usb 2-1: config 0 descriptor?? [ 242.947958][ T9] usb 2-1: USB disconnect, device number 13 [ 243.874695][ T6481] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 244.199905][ T6481] usb 5-1: config 0 has no interfaces? [ 244.213547][ T6481] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 244.223037][ T6481] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.231344][ T6481] usb 5-1: Product: syz [ 244.246319][ T6481] usb 5-1: Manufacturer: syz [ 244.251535][ T6481] usb 5-1: SerialNumber: syz [ 244.341525][ T6481] usb 5-1: config 0 descriptor?? [ 247.501568][ T6484] usb 5-1: USB disconnect, device number 12 [ 247.640699][ T7369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.348'. [ 248.014624][ T7381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.166680][ T7386] netlink: 'syz.3.351': attribute type 1 has an invalid length. [ 248.457253][ T7388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.355'. [ 255.806600][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.817106][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.960716][ T7484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.377'. [ 261.981955][ T7502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.298944][ T7556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.397'. [ 267.825024][ T7563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.398'. [ 273.796873][ T6484] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 274.022090][ T6484] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 274.043457][ T6484] usb 5-1: config 0 interface 0 has no altsetting 0 [ 274.119816][ T6484] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 274.148941][ T6484] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 274.178079][ T6484] usb 5-1: Product: syz [ 274.191297][ T6484] usb 5-1: Manufacturer: syz [ 274.325409][ T6484] usb 5-1: SerialNumber: syz [ 274.380490][ T6484] usb 5-1: config 0 descriptor?? [ 274.404067][ T6484] usb 5-1: selecting invalid altsetting 0 [ 274.662735][ T6484] usb 5-1: USB disconnect, device number 13 [ 275.514863][ T7627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.412'. [ 277.436265][ T7642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.416'. [ 277.549194][ T7644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.417'. [ 281.765671][ T5916] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 282.022798][ T5916] usb 3-1: device descriptor read/64, error -71 [ 282.791451][ T7706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.430'. [ 282.996369][ T5916] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 283.455088][ T5916] usb 3-1: device descriptor read/64, error -71 [ 283.613322][ T5916] usb usb3-port1: attempt power cycle [ 283.997004][ T5916] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 284.297621][ T5916] usb 3-1: device not accepting address 17, error -71 [ 287.258222][ T7756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.442'. [ 287.372356][ T7757] netlink: zone id is out of range [ 287.377815][ T7757] netlink: zone id is out of range [ 287.388188][ T7757] netlink: zone id is out of range [ 287.395295][ T7757] netlink: zone id is out of range [ 287.402639][ T7757] netlink: zone id is out of range [ 287.408237][ T7757] netlink: zone id is out of range [ 287.416719][ T7757] netlink: zone id is out of range [ 287.417007][ T43] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 287.430104][ T7757] netlink: zone id is out of range [ 287.436213][ T7757] netlink: zone id is out of range [ 287.441893][ T7757] netlink: zone id is out of range [ 288.040649][ T43] usb 5-1: device descriptor read/64, error -71 [ 288.357036][ T43] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 288.496938][ T43] usb 5-1: device descriptor read/64, error -71 [ 288.629876][ T43] usb usb5-port1: attempt power cycle [ 289.323376][ T43] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 289.827372][ T43] usb 5-1: device descriptor read/8, error -71 [ 290.106813][ T43] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 290.692104][ T7773] netlink: 68 bytes leftover after parsing attributes in process `syz.2.447'. [ 290.934588][ T43] usb 5-1: device descriptor read/8, error -71 [ 291.047139][ T43] usb usb5-port1: unable to enumerate USB device [ 291.223195][ T7779] netlink: 'syz.4.448': attribute type 1 has an invalid length. [ 293.206821][ T43] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 293.501074][ T43] usb 3-1: config 0 has no interfaces? [ 293.531528][ T43] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 293.647056][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.655170][ T43] usb 3-1: Product: syz [ 293.695832][ T43] usb 3-1: Manufacturer: syz [ 293.701237][ T43] usb 3-1: SerialNumber: syz [ 293.742792][ T43] usb 3-1: config 0 descriptor?? [ 293.995169][ T7797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.453'. [ 294.232876][ T7813] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 295.027985][ T6481] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 295.079883][ T43] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 295.168030][ T6481] usb 2-1: device descriptor read/64, error -71 [ 295.251548][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 295.260947][ T43] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 295.269571][ T43] usb 4-1: config 0 has no interface number 0 [ 295.277779][ T43] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 295.403971][ T43] usb 4-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 295.421226][ T43] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 295.431160][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.439515][ T43] usb 4-1: Product: syz [ 295.466340][ T7824] net_ratelimit: 18 callbacks suppressed [ 295.466429][ T7824] netlink: zone id is out of range [ 295.477646][ T6481] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 295.485658][ T7824] netlink: zone id is out of range [ 295.509554][ T7824] netlink: zone id is out of range [ 295.521043][ T7824] netlink: zone id is out of range [ 295.528024][ T7824] netlink: zone id is out of range [ 295.534356][ T7824] netlink: zone id is out of range [ 295.540859][ T7824] netlink: zone id is out of range [ 295.547946][ T7824] netlink: zone id is out of range [ 295.558733][ T7824] netlink: zone id is out of range [ 295.566794][ T7824] netlink: zone id is out of range [ 295.774744][ T43] usb 4-1: Manufacturer: syz [ 295.795950][ T43] usb 4-1: SerialNumber: syz [ 295.823578][ T6481] usb 2-1: device descriptor read/64, error -71 [ 295.847741][ T43] usb 4-1: config 0 descriptor?? [ 295.885262][ T43] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 295.897110][ T43] em28xx 4-1:0.132: Video interface 132 found: bulk [ 295.938689][ T6481] usb usb2-port1: attempt power cycle [ 296.487763][ T6481] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 296.635937][ T6481] usb 2-1: device descriptor read/8, error -71 [ 296.886931][ T6481] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 296.928921][ T6481] usb 2-1: device descriptor read/8, error -71 [ 297.038576][ T6481] usb usb2-port1: unable to enumerate USB device [ 297.079354][ T6481] usb 3-1: USB disconnect, device number 19 [ 297.443024][ T43] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 297.605004][ T43] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 297.648629][ T43] em28xx 4-1:0.132: board has no eeprom [ 297.746830][ T43] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 297.795000][ T43] em28xx 4-1:0.132: analog set to bulk mode. [ 297.807189][ T6482] em28xx 4-1:0.132: Registering V4L2 extension [ 297.840608][ T43] usb 4-1: USB disconnect, device number 12 [ 297.861001][ T43] em28xx 4-1:0.132: Disconnecting em28xx [ 298.996248][ T6482] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 299.050108][ T6482] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 299.115498][ T6482] em28xx 4-1:0.132: No AC97 audio processor [ 299.193774][ T6482] usb 4-1: Decoder not found [ 299.201121][ T6482] em28xx 4-1:0.132: failed to create media graph [ 299.216868][ T6482] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 299.301293][ T7850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.327067][ T6482] em28xx 4-1:0.132: Remote control support is not available for this card. [ 299.377104][ T43] em28xx 4-1:0.132: Closing input extension [ 299.763098][ T43] em28xx 4-1:0.132: Freeing device [ 303.709522][ T7890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.474'. [ 307.393886][ T7925] net_ratelimit: 23 callbacks suppressed [ 307.393984][ T7925] netlink: zone id is out of range [ 307.406352][ T7925] netlink: zone id is out of range [ 307.425477][ T7925] netlink: zone id is out of range [ 307.435699][ T7925] netlink: zone id is out of range [ 307.442138][ T7925] netlink: zone id is out of range [ 307.449526][ T7925] netlink: zone id is out of range [ 307.456577][ T7925] netlink: zone id is out of range [ 307.464347][ T7925] netlink: zone id is out of range [ 307.476160][ T7925] netlink: zone id is out of range [ 307.486633][ T7925] netlink: zone id is out of range [ 312.957608][ T7983] net_ratelimit: 44 callbacks suppressed [ 312.957630][ T7983] netlink: zone id is out of range [ 312.968626][ T7983] netlink: zone id is out of range [ 312.977605][ T7983] netlink: zone id is out of range [ 312.985393][ T7983] netlink: zone id is out of range [ 312.990712][ T7983] netlink: zone id is out of range [ 312.996355][ T7983] netlink: zone id is out of range [ 313.001995][ T7983] netlink: zone id is out of range [ 313.008471][ T7983] netlink: zone id is out of range [ 313.016939][ T7983] netlink: zone id is out of range [ 313.023303][ T7983] netlink: zone id is out of range [ 313.286788][ T5916] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 313.426816][ T5916] usb 1-1: device descriptor read/64, error -71 [ 314.026850][ T5916] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 314.196829][ T5916] usb 1-1: device descriptor read/64, error -71 [ 314.377137][ T5916] usb usb1-port1: attempt power cycle [ 314.797640][ T5916] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 314.877183][ T5916] usb 1-1: device descriptor read/8, error -71 [ 315.081052][ T7998] netlink: 12 bytes leftover after parsing attributes in process `syz.4.498'. [ 315.146797][ T5916] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 315.400463][ T8002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.499'. [ 315.437982][ T5916] usb 1-1: device descriptor read/8, error -71 [ 315.551475][ T5916] usb usb1-port1: unable to enumerate USB device [ 317.203415][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.209764][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.397207][ T5916] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 321.628646][ T5916] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 321.650739][ T5916] usb 4-1: config 0 interface 0 has no altsetting 0 [ 321.663249][ T5916] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 321.680596][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 321.704508][ T5916] usb 4-1: Product: syz [ 321.716249][ T5916] usb 4-1: Manufacturer: syz [ 321.729757][ T5916] usb 4-1: SerialNumber: syz [ 321.846960][ T6481] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 322.257458][ T5916] usb 4-1: config 0 descriptor?? [ 322.305131][ T5916] usb 4-1: selecting invalid altsetting 0 [ 322.706160][ T5916] usb 4-1: USB disconnect, device number 13 [ 322.836817][ T6481] usb 2-1: device descriptor read/64, error -71 [ 323.096812][ T6481] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 323.366790][ T6481] usb 2-1: device descriptor read/64, error -71 [ 323.477286][ T6481] usb usb2-port1: attempt power cycle [ 323.846954][ T6481] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 323.894014][ T6481] usb 2-1: device descriptor read/8, error -71 [ 324.139074][ T6481] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 324.318312][ T6481] usb 2-1: device descriptor read/8, error -71 [ 324.453100][ T6481] usb usb2-port1: unable to enumerate USB device [ 324.829877][ T8090] net_ratelimit: 18 callbacks suppressed [ 324.829934][ T8090] netlink: zone id is out of range [ 324.840981][ T8090] netlink: zone id is out of range [ 324.855854][ T8090] netlink: zone id is out of range [ 324.863792][ T8090] netlink: zone id is out of range [ 324.869140][ T8090] netlink: zone id is out of range [ 324.880884][ T8090] netlink: zone id is out of range [ 324.886467][ T8090] netlink: zone id is out of range [ 324.893264][ T8090] netlink: zone id is out of range [ 324.901614][ T8090] netlink: zone id is out of range [ 324.907846][ T8090] netlink: zone id is out of range [ 326.545255][ T8098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.516824][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 327.732047][ T9] usb 1-1: config 0 has no interfaces? [ 327.747817][ T9] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 327.766533][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.787790][ T9] usb 1-1: Product: syz [ 327.824965][ T9] usb 1-1: Manufacturer: syz [ 327.830606][ T9] usb 1-1: SerialNumber: syz [ 327.843126][ T9] usb 1-1: config 0 descriptor?? [ 330.172538][ T5916] usb 1-1: USB disconnect, device number 14 [ 330.188261][ T8131] netlink: 'syz.2.527': attribute type 1 has an invalid length. [ 331.126876][ T5903] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 331.256901][ T5903] usb 2-1: device descriptor read/64, error -71 [ 331.596815][ T5903] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 331.808512][ T8150] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 332.021123][ T5903] usb 2-1: device descriptor read/64, error -71 [ 332.207216][ T5903] usb usb2-port1: attempt power cycle [ 332.239841][ T6482] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 332.555941][ T6482] usb 1-1: Using ep0 maxpacket: 32 [ 332.571564][ T6482] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 332.593365][ T6482] usb 1-1: config 0 has no interface number 0 [ 332.629994][ T6482] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 332.686805][ T5903] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 332.701775][ T6482] usb 1-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 332.780778][ T5903] usb 2-1: device descriptor read/8, error -71 [ 332.796505][ T6482] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 332.808295][ T6482] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.850126][ T6482] usb 1-1: Product: syz [ 332.878735][ T6482] usb 1-1: Manufacturer: syz [ 332.902269][ T6482] usb 1-1: SerialNumber: syz [ 332.929484][ T6482] usb 1-1: config 0 descriptor?? [ 333.179781][ T6482] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 333.197197][ T5903] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 333.217997][ T6482] em28xx 1-1:0.132: Video interface 132 found: bulk [ 333.295837][ T5903] usb 2-1: device descriptor read/8, error -71 [ 333.464237][ T5903] usb usb2-port1: unable to enumerate USB device [ 333.474082][ T8164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.535'. [ 334.507752][ T6482] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 334.597732][ T6482] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 334.607313][ T6482] em28xx 1-1:0.132: board has no eeprom [ 334.667762][ T6482] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 334.704143][ T6482] em28xx 1-1:0.132: analog set to bulk mode. [ 334.734391][ T6481] em28xx 1-1:0.132: Registering V4L2 extension [ 334.767388][ T6482] usb 1-1: USB disconnect, device number 15 [ 334.803097][ T6482] em28xx 1-1:0.132: Disconnecting em28xx [ 335.755677][ T6481] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 335.884907][ T6481] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 335.966429][ T6481] em28xx 1-1:0.132: No AC97 audio processor [ 336.134067][ T6481] usb 1-1: Decoder not found [ 336.214641][ T6481] em28xx 1-1:0.132: failed to create media graph [ 336.282972][ T6481] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 336.434791][ T43] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 336.458795][ T6481] em28xx 1-1:0.132: Remote control support is not available for this card. [ 336.607248][ T6482] em28xx 1-1:0.132: Closing input extension [ 336.743298][ T43] usb 2-1: config 0 has no interfaces? [ 336.751480][ T6482] em28xx 1-1:0.132: Freeing device [ 336.781924][ T43] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 336.906863][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.952738][ T43] usb 2-1: Product: syz [ 336.968438][ T43] usb 2-1: Manufacturer: syz [ 337.045513][ T43] usb 2-1: SerialNumber: syz [ 337.294225][ T43] usb 2-1: config 0 descriptor?? [ 339.791411][ T8211] netlink: 68 bytes leftover after parsing attributes in process `syz.0.545'. [ 340.736478][ T43] usb 2-1: USB disconnect, device number 26 [ 340.972690][ T8224] kAFS: unable to lookup cell '.,' [ 341.709532][ T8233] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 341.747336][ T43] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 341.914216][ T43] usb 2-1: device descriptor read/64, error -71 [ 342.147030][ T5916] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 342.216798][ T43] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 342.336760][ T5916] usb 5-1: Using ep0 maxpacket: 32 [ 342.345376][ T5916] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 342.353791][ T5916] usb 5-1: config 0 has no interface number 0 [ 342.360038][ T43] usb 2-1: device descriptor read/64, error -71 [ 342.360046][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 342.378338][ T5916] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 342.495207][ T5916] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 342.504647][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.518941][ T43] usb usb2-port1: attempt power cycle [ 342.525895][ T9] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 342.550204][ T5916] usb 5-1: Product: syz [ 342.555011][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 342.590288][ T5916] usb 5-1: Manufacturer: syz [ 342.595098][ T5916] usb 5-1: SerialNumber: syz [ 342.612104][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 342.621441][ T9] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 342.662667][ T5916] usb 5-1: config 0 descriptor?? [ 342.685112][ T9] usb 3-1: Product: syz [ 342.708455][ T9] usb 3-1: Manufacturer: syz [ 342.719989][ T5916] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 342.777206][ T9] usb 3-1: SerialNumber: syz [ 342.804991][ T5916] em28xx 5-1:0.132: Video interface 132 found: isoc [ 342.821248][ T9] usb 3-1: config 0 descriptor?? [ 342.886970][ T43] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 342.943066][ T43] usb 2-1: device descriptor read/8, error -71 [ 342.949367][ T9] usb 3-1: selecting invalid altsetting 0 [ 343.235305][ T9] usb 3-1: USB disconnect, device number 20 [ 343.277885][ T43] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 343.375750][ T43] usb 2-1: device descriptor read/8, error -71 [ 343.586611][ T43] usb usb2-port1: unable to enumerate USB device [ 344.066989][ T5916] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 344.139920][ T5916] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 344.155959][ T5916] em28xx 5-1:0.132: board has no eeprom [ 344.239529][ T5916] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 344.274300][ T5916] em28xx 5-1:0.132: analog set to isoc mode. [ 344.503073][ T9] em28xx 5-1:0.132: Registering V4L2 extension [ 344.761109][ T5967] usb 5-1: USB disconnect, device number 18 [ 344.814531][ T5967] em28xx 5-1:0.132: Disconnecting em28xx [ 345.609641][ T9] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 345.634631][ T9] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 345.872624][ T9] em28xx 5-1:0.132: No AC97 audio processor [ 345.982440][ T9] usb 5-1: Decoder not found [ 345.997994][ T9] em28xx 5-1:0.132: failed to create media graph [ 346.021800][ T9] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 346.061105][ T9] em28xx 5-1:0.132: Remote control support is not available for this card. [ 346.080833][ T8265] net_ratelimit: 74 callbacks suppressed [ 346.080866][ T8265] netlink: zone id is out of range [ 346.092454][ T8265] netlink: zone id is out of range [ 346.102857][ T8265] netlink: zone id is out of range [ 346.110424][ T8265] netlink: zone id is out of range [ 346.115643][ T8265] netlink: zone id is out of range [ 346.121201][ T8265] netlink: zone id is out of range [ 346.126555][ T8265] netlink: zone id is out of range [ 346.132137][ T8265] netlink: zone id is out of range [ 346.139458][ T8265] netlink: zone id is out of range [ 346.145538][ T8265] netlink: zone id is out of range [ 346.314999][ T5967] em28xx 5-1:0.132: Closing input extension [ 346.398465][ T5967] em28xx 5-1:0.132: Freeing device [ 347.663080][ T8279] netlink: 68 bytes leftover after parsing attributes in process `syz.3.561'. [ 347.887137][ T5967] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 348.160396][ T5967] usb 3-1: config 0 has no interfaces? [ 348.174830][ T5967] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 348.184638][ T5967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.192939][ T5967] usb 3-1: Product: syz [ 348.388852][ T8289] kAFS: unable to lookup cell '.,' [ 348.411244][ T5967] usb 3-1: Manufacturer: syz [ 348.441769][ T5967] usb 3-1: SerialNumber: syz [ 348.547460][ T5967] usb 3-1: config 0 descriptor?? [ 350.344916][ T43] usb 3-1: USB disconnect, device number 21 [ 350.381944][ T5967] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 350.568651][ T8308] kAFS: unable to lookup cell '.,' [ 350.925059][ T8312] kAFS: unable to lookup cell '.,' [ 350.931368][ T5967] usb 1-1: device descriptor read/64, error -71 [ 351.596154][ T5967] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 351.806778][ T5967] usb 1-1: device descriptor read/64, error -71 [ 351.950977][ T5967] usb usb1-port1: attempt power cycle [ 352.118053][ T8317] kAFS: unable to lookup cell '.,' [ 352.477033][ T5967] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 352.571030][ T5967] usb 1-1: device descriptor read/8, error -71 [ 352.979297][ T8331] kAFS: unable to lookup cell '.,' [ 353.266827][ T5967] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 353.732074][ T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 353.950444][ T9] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 353.990968][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 354.031323][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 354.055006][ T5967] usb 1-1: device descriptor read/8, error -71 [ 354.074949][ T9] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 354.113422][ T9] usb 2-1: Product: syz [ 354.130709][ T9] usb 2-1: Manufacturer: syz [ 354.179446][ T9] usb 2-1: SerialNumber: syz [ 354.194526][ T5967] usb usb1-port1: unable to enumerate USB device [ 354.247586][ T9] usb 2-1: config 0 descriptor?? [ 354.291656][ T9] usb 2-1: selecting invalid altsetting 0 [ 354.608807][ T9] usb 2-1: USB disconnect, device number 31 [ 354.955631][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 355.256764][ T6481] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 355.706679][ T6481] usb 5-1: config 0 has no interfaces? [ 355.849748][ T6481] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 355.861369][ T6481] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.875016][ T6481] usb 5-1: Product: syz [ 355.885524][ T6481] usb 5-1: Manufacturer: syz [ 355.894244][ T6481] usb 5-1: SerialNumber: syz [ 355.912928][ T6481] usb 5-1: config 0 descriptor?? [ 356.035298][ T8357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.036856][ T6481] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 358.192182][ T6481] usb 2-1: device descriptor read/64, error -71 [ 358.436784][ T6481] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 358.452523][ T9] usb 5-1: USB disconnect, device number 19 [ 358.667123][ T6481] usb 2-1: device descriptor read/64, error -71 [ 358.887071][ T6481] usb usb2-port1: attempt power cycle [ 359.259079][ T6481] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 359.297980][ T6481] usb 2-1: device descriptor read/8, error -71 [ 359.584949][ T6481] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 360.240718][ T6481] usb 2-1: device descriptor read/8, error -71 [ 360.877028][ T6481] usb usb2-port1: unable to enumerate USB device [ 363.298022][ T8423] kAFS: unable to lookup cell '.,' [ 364.119838][ T5967] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 364.317679][ T5967] usb 5-1: Using ep0 maxpacket: 32 [ 364.334741][ T5967] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 364.357215][ T5967] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 364.396312][ T8434] netlink: 68 bytes leftover after parsing attributes in process `syz.3.599'. [ 364.423689][ T5967] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 364.464467][ T5967] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 364.648946][ T5967] usb 5-1: config 0 interface 0 has no altsetting 0 [ 364.734505][ T5967] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 364.753372][ T5967] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 364.770546][ T5967] usb 5-1: Product: syz [ 364.774823][ T5967] usb 5-1: Manufacturer: syz [ 364.791633][ T5967] usb 5-1: SerialNumber: syz [ 364.819548][ T5967] usb 5-1: config 0 descriptor?? [ 364.868601][ T5967] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 364.923370][ T5967] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 365.166353][ T8442] kAFS: unable to lookup cell '.,' [ 365.539276][ T8451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.602'. [ 365.957567][ T8457] net_ratelimit: 18 callbacks suppressed [ 365.957589][ T8457] netlink: zone id is out of range [ 366.051997][ T8457] netlink: zone id is out of range [ 366.090968][ T8457] netlink: zone id is out of range [ 366.135818][ T8457] netlink: zone id is out of range [ 366.232812][ T8457] netlink: zone id is out of range [ 366.316998][ T8457] netlink: zone id is out of range [ 366.322365][ T8457] netlink: zone id is out of range [ 366.406399][ T8457] netlink: zone id is out of range [ 366.525801][ T8457] netlink: zone id is out of range [ 366.585145][ T8457] netlink: zone id is out of range [ 367.009622][ T6484] usb 5-1: USB disconnect, device number 20 [ 367.015569][ C1] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 367.353376][ T6484] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 370.918614][ T8505] netlink: 'syz.1.614': attribute type 1 has an invalid length. [ 374.486979][ T5903] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 374.656925][ T8541] netlink: 68 bytes leftover after parsing attributes in process `syz.3.624'. [ 374.686744][ T5903] usb 2-1: device descriptor read/64, error -71 [ 374.819105][ T6481] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 374.926900][ T5903] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 375.012292][ T6481] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 375.043789][ T6481] usb 1-1: config 0 interface 0 has no altsetting 0 [ 375.076855][ T5903] usb 2-1: device descriptor read/64, error -71 [ 375.104534][ T6481] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 375.126135][ T6481] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 375.146539][ T6481] usb 1-1: Product: syz [ 375.155440][ T6481] usb 1-1: Manufacturer: syz [ 375.165580][ T6481] usb 1-1: SerialNumber: syz [ 375.190709][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 375.199961][ T5903] usb usb2-port1: attempt power cycle [ 375.213208][ T6481] usb 1-1: config 0 descriptor?? [ 375.234427][ T6481] usb 1-1: selecting invalid altsetting 0 [ 375.368604][ T9] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 375.384360][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 375.393555][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 375.404440][ T9] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 375.416130][ T9] usb 3-1: Product: syz [ 375.424750][ T9] usb 3-1: Manufacturer: syz [ 375.442337][ T9] usb 3-1: SerialNumber: syz [ 375.464145][ T5967] usb 1-1: USB disconnect, device number 20 [ 375.483610][ T9] usb 3-1: config 0 descriptor?? [ 375.542648][ T9] usb 3-1: selecting invalid altsetting 0 [ 375.556831][ T5903] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 375.588556][ T5903] usb 2-1: device descriptor read/8, error -71 [ 375.741196][ T5967] usb 3-1: USB disconnect, device number 22 [ 375.828032][ T5903] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 375.895451][ T5903] usb 2-1: device descriptor read/8, error -71 [ 376.107425][ T5903] usb usb2-port1: unable to enumerate USB device [ 377.151358][ T8577] kAFS: unable to lookup cell '.,' [ 378.246778][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 378.510570][ T9] usb 2-1: config 0 has no interfaces? [ 378.520173][ T9] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 378.533542][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.647184][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.654525][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.688304][ T9] usb 2-1: Product: syz [ 378.727518][ T9] usb 2-1: Manufacturer: syz [ 378.741026][ T9] usb 2-1: SerialNumber: syz [ 378.767429][ T9] usb 2-1: config 0 descriptor?? [ 379.195619][ T8588] kAFS: unable to lookup cell '.,' [ 381.287129][ T5967] usb 2-1: USB disconnect, device number 40 [ 381.895326][ T8616] kAFS: unable to lookup cell '.,' [ 382.207505][ T8625] netlink: 68 bytes leftover after parsing attributes in process `syz.1.644'. [ 382.287806][ T8623] kAFS: unable to lookup cell '.,' [ 383.296787][ T30] audit: type=1804 audit(1750765371.079:3): pid=8639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.647" name="file0" dev="ramfs" ino=19006 res=1 errno=0 [ 384.097961][ T8645] netlink: 68 bytes leftover after parsing attributes in process `syz.2.649'. [ 385.941019][ T30] audit: type=1804 audit(1750765373.759:4): pid=8671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.657" name="file0" dev="ramfs" ino=19498 res=1 errno=0 [ 386.687205][ T8680] kAFS: unable to lookup cell '.,' [ 387.445406][ T8687] netlink: 'syz.1.658': attribute type 1 has an invalid length. [ 387.856958][ T6481] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 388.290648][ T6481] usb 4-1: config 0 has no interfaces? [ 388.301046][ T6481] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 388.330050][ T6481] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.338559][ T6481] usb 4-1: Product: syz [ 388.342824][ T6481] usb 4-1: Manufacturer: syz [ 388.386868][ T6481] usb 4-1: SerialNumber: syz [ 388.412341][ T6481] usb 4-1: config 0 descriptor?? [ 388.713047][ T8690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.727100][ T8698] netlink: 68 bytes leftover after parsing attributes in process `syz.0.662'. [ 388.744193][ T8690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.772983][ T6481] usb 4-1: USB disconnect, device number 14 [ 393.868641][ T5903] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 394.126447][ T5903] usb 2-1: config 0 has no interfaces? [ 394.140262][ T5903] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 394.149487][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.162027][ T5903] usb 2-1: Product: syz [ 394.183961][ T5903] usb 2-1: Manufacturer: syz [ 394.205339][ T5903] usb 2-1: SerialNumber: syz [ 394.252986][ T5903] usb 2-1: config 0 descriptor?? [ 394.638594][ T5967] usb 2-1: USB disconnect, device number 41 [ 395.504804][ T8752] kAFS: unable to lookup cell '.,' [ 397.480292][ T8770] netlink: 68 bytes leftover after parsing attributes in process `syz.3.680'. [ 397.627068][ T5967] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 397.796736][ T5967] usb 1-1: Using ep0 maxpacket: 32 [ 397.805225][ T5967] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 397.817565][ T5967] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.828303][ T5967] usb 1-1: config 0 has no interfaces? [ 397.836528][ T5967] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 397.848662][ T5967] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 397.861277][ T5967] usb 1-1: Product: syz [ 397.866030][ T5967] usb 1-1: Manufacturer: syz [ 397.872662][ T5967] usb 1-1: SerialNumber: syz [ 397.887125][ T5967] usb 1-1: config 0 descriptor?? [ 398.126767][ T6484] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 398.315342][ T6484] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 398.339525][ T6484] usb 2-1: config 0 interface 0 has no altsetting 0 [ 398.360034][ T6484] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 398.369182][ T6484] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 398.377717][ T6484] usb 2-1: Product: syz [ 398.382024][ T6484] usb 2-1: Manufacturer: syz [ 398.391552][ T6484] usb 2-1: SerialNumber: syz [ 398.403663][ T6484] usb 2-1: config 0 descriptor?? [ 398.444382][ T6484] usb 2-1: selecting invalid altsetting 0 [ 399.010619][ T6484] usb 2-1: USB disconnect, device number 42 [ 400.076750][ T30] audit: type=1804 audit(1750765387.979:5): pid=8803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.690" name="file0" dev="ramfs" ino=19288 res=1 errno=0 [ 400.540667][ T6482] usb 1-1: USB disconnect, device number 21 [ 400.885323][ T8813] netlink: 68 bytes leftover after parsing attributes in process `syz.1.693'. [ 403.536936][ T6482] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 403.767305][ T6482] usb 1-1: config 0 has no interfaces? [ 403.775715][ T6482] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 403.794959][ T6482] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.842651][ T6482] usb 1-1: Product: syz [ 403.862916][ T6482] usb 1-1: Manufacturer: syz [ 403.873315][ T6482] usb 1-1: SerialNumber: syz [ 403.954890][ T6482] usb 1-1: config 0 descriptor?? [ 404.184269][ T8828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.193330][ T8828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.207098][ T8843] net_ratelimit: 18 callbacks suppressed [ 404.207152][ T8843] netlink: zone id is out of range [ 404.220919][ T8843] netlink: zone id is out of range [ 404.239064][ T8843] netlink: zone id is out of range [ 404.257026][ T8843] netlink: zone id is out of range [ 404.262521][ T8843] netlink: zone id is out of range [ 404.268592][ T8843] netlink: zone id is out of range [ 404.274653][ T8843] netlink: zone id is out of range [ 404.281129][ T8843] netlink: zone id is out of range [ 404.290634][ T8843] netlink: zone id is out of range [ 404.297567][ T8843] netlink: zone id is out of range [ 404.566381][ T6482] usb 1-1: USB disconnect, device number 22 [ 406.178325][ T5967] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 406.484634][ T5967] usb 5-1: Using ep0 maxpacket: 32 [ 406.817110][ T5967] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 406.826946][ T5967] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.846730][ T5967] usb 5-1: config 0 has no interfaces? [ 406.870602][ T5967] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 406.880374][ T5903] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 406.891902][ T5967] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 406.908964][ T5967] usb 5-1: Product: syz [ 406.925761][ T5967] usb 5-1: Manufacturer: syz [ 406.937876][ T5967] usb 5-1: SerialNumber: syz [ 406.945791][ T5967] usb 5-1: config 0 descriptor?? [ 407.041746][ T5903] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 407.051987][ T5903] usb 3-1: config 0 interface 0 has no altsetting 0 [ 407.067980][ T5903] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 407.078352][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 407.097490][ T5903] usb 3-1: Product: syz [ 407.106235][ T5903] usb 3-1: Manufacturer: syz [ 407.126973][ T5903] usb 3-1: SerialNumber: syz [ 407.147359][ T5903] usb 3-1: config 0 descriptor?? [ 407.176422][ T5903] usb 3-1: selecting invalid altsetting 0 [ 407.742515][ T8871] kAFS: unable to lookup cell '.,' [ 407.866117][ T5903] usb 3-1: USB disconnect, device number 23 [ 408.813199][ T8886] program syz.1.714 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 409.012196][ T6482] usb 5-1: USB disconnect, device number 21 [ 409.321354][ T8894] program syz.0.716 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 409.557172][ T8899] kAFS: unable to lookup cell '.,' [ 410.574122][ T8909] program syz.4.718 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 411.728204][ T8921] kAFS: unable to lookup cell '.,' [ 413.697125][ T6482] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 413.701798][ T8943] kAFS: unable to lookup cell '.,' [ 413.782571][ T6484] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 414.019176][ T6484] usb 4-1: Using ep0 maxpacket: 32 [ 414.040840][ T6484] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 414.056039][ T6482] usb 1-1: config 0 has no interfaces? [ 414.065741][ T6484] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.098078][ T6482] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 414.112877][ T6484] usb 4-1: config 0 has no interfaces? [ 414.122465][ T6482] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.141891][ T6484] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 414.169727][ T6482] usb 1-1: Product: syz [ 414.175161][ T6484] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 414.205379][ T6482] usb 1-1: Manufacturer: syz [ 414.222798][ T6482] usb 1-1: SerialNumber: syz [ 414.227837][ T6484] usb 4-1: Product: syz [ 414.251788][ T6484] usb 4-1: Manufacturer: syz [ 414.266433][ T6482] usb 1-1: config 0 descriptor?? [ 414.277355][ T6484] usb 4-1: SerialNumber: syz [ 414.302996][ T6484] usb 4-1: config 0 descriptor?? [ 414.621078][ T8935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.631462][ T8935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.690344][ T6484] usb 1-1: USB disconnect, device number 23 [ 414.949380][ T30] audit: type=1804 audit(1750765402.759:6): pid=8947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.727" name="file0" dev="ramfs" ino=20697 res=1 errno=0 [ 416.455800][ T6482] usb 4-1: USB disconnect, device number 15 [ 416.739083][ T8957] netlink: 68 bytes leftover after parsing attributes in process `syz.3.729'. [ 417.328030][ T8971] net_ratelimit: 18 callbacks suppressed [ 417.328051][ T8971] netlink: zone id is out of range [ 417.339413][ T8971] netlink: zone id is out of range [ 417.348407][ T8971] netlink: zone id is out of range [ 417.357238][ T8971] netlink: zone id is out of range [ 417.392492][ T8971] netlink: zone id is out of range [ 417.428990][ T8971] netlink: zone id is out of range [ 417.442107][ T8971] netlink: zone id is out of range [ 417.463279][ T8971] netlink: zone id is out of range [ 417.507238][ T8971] netlink: zone id is out of range [ 417.527439][ T8971] netlink: zone id is out of range [ 418.578982][ T6482] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 418.836720][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 418.992043][ T6482] usb 5-1: config 0 has no interfaces? [ 419.058008][ T6482] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 419.083301][ T6482] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.113086][ T9] usb 4-1: config 0 has no interfaces? [ 419.127731][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 419.145849][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.194707][ T9] usb 4-1: Product: syz [ 419.199320][ T6482] usb 5-1: Product: syz [ 419.204391][ T6482] usb 5-1: Manufacturer: syz [ 419.212152][ T9] usb 4-1: Manufacturer: syz [ 419.235931][ T6482] usb 5-1: SerialNumber: syz [ 419.242803][ T9] usb 4-1: SerialNumber: syz [ 419.268788][ T6482] usb 5-1: config 0 descriptor?? [ 419.323567][ T9] usb 4-1: config 0 descriptor?? [ 419.508112][ T8989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.519169][ T8989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.567330][ T9] usb 5-1: USB disconnect, device number 22 [ 419.589991][ T8986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.604750][ T8986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.726787][ T6482] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 419.765229][ T6484] usb 4-1: USB disconnect, device number 16 [ 419.982943][ T6482] usb 2-1: config 0 has no interfaces? [ 419.999627][ T6482] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 420.009202][ T6482] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.150460][ T6482] usb 2-1: Product: syz [ 420.256697][ T6482] usb 2-1: Manufacturer: syz [ 420.277747][ T6482] usb 2-1: SerialNumber: syz [ 420.313361][ T6482] usb 2-1: config 0 descriptor?? [ 420.574415][ T9009] netlink: 68 bytes leftover after parsing attributes in process `syz.0.742'. [ 420.655283][ T9001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.678820][ T9001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.681984][ T9017] program syz.0.744 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 422.442042][ T9030] kAFS: unable to lookup cell '.,' [ 423.677138][ T9] usb 2-1: USB disconnect, device number 43 [ 424.855213][ T9052] netlink: 68 bytes leftover after parsing attributes in process `syz.0.753'. [ 426.067066][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 426.535632][ T9074] net_ratelimit: 18 callbacks suppressed [ 426.535655][ T9074] netlink: zone id is out of range [ 426.552788][ T9074] netlink: zone id is out of range [ 426.565729][ T9074] netlink: zone id is out of range [ 426.837945][ T9074] netlink: zone id is out of range [ 426.843269][ T9074] netlink: zone id is out of range [ 426.849000][ T9074] netlink: zone id is out of range [ 426.854741][ T9074] netlink: zone id is out of range [ 426.862759][ T9074] netlink: zone id is out of range [ 426.877112][ T9074] netlink: zone id is out of range [ 426.957441][ T9074] netlink: zone id is out of range [ 426.963733][ T9] usb 1-1: config 0 has no interfaces? [ 426.981955][ T9] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 427.130649][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.353886][ T9] usb 1-1: Product: syz [ 427.382809][ T9] usb 1-1: Manufacturer: syz [ 427.440086][ T9] usb 1-1: SerialNumber: syz [ 427.485717][ T9] usb 1-1: config 0 descriptor?? [ 427.896251][ T9064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.915396][ T9064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.128402][ T9] usb 1-1: USB disconnect, device number 24 [ 428.867050][ T6484] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 429.035940][ T6484] usb 4-1: config 0 has no interfaces? [ 429.049629][ T6484] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 429.059846][ T6484] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.068532][ T6484] usb 4-1: Product: syz [ 429.076566][ T6484] usb 4-1: Manufacturer: syz [ 429.081845][ T6484] usb 4-1: SerialNumber: syz [ 429.094249][ T6484] usb 4-1: config 0 descriptor?? [ 429.338719][ T9081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.349685][ T9081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.381581][ T43] usb 4-1: USB disconnect, device number 17 [ 430.218279][ T9104] program syz.2.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 432.269203][ T9118] program syz.0.767 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 432.324969][ T9119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.766'. [ 432.741064][ T9128] program syz.4.770 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 434.877508][ T9143] program syz.4.772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 435.236979][ T9152] netlink: 156 bytes leftover after parsing attributes in process `syz.1.774'. [ 435.558739][ T9] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 435.787660][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 435.796313][ T9] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 435.806462][ T9] usb 2-1: config 0 has no interface number 0 [ 435.818842][ T9] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 435.846540][ T9] usb 2-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 435.891677][ T9] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 435.905413][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.914953][ T9] usb 2-1: Product: syz [ 435.923685][ T9] usb 2-1: Manufacturer: syz [ 435.930784][ T9] usb 2-1: SerialNumber: syz [ 435.948424][ T9] usb 2-1: config 0 descriptor?? [ 436.093933][ T9] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 436.165212][ T9] em28xx 2-1:0.132: Video interface 132 found: bulk [ 437.143250][ T9167] kAFS: unable to lookup cell '.,' [ 437.427423][ T9] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 437.509074][ T9] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 437.521808][ T9] em28xx 2-1:0.132: board has no eeprom [ 437.662541][ T9] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 437.787470][ T9] em28xx 2-1:0.132: analog set to bulk mode. [ 437.799050][ T5967] em28xx 2-1:0.132: Registering V4L2 extension [ 437.880917][ T5967] em28xx 2-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 437.899810][ T5967] em28xx 2-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 438.316257][ T9] usb 2-1: USB disconnect, device number 44 [ 438.362736][ T5967] em28xx 2-1:0.132: failed to trigger read from i2c address 0x42 (error=-19) [ 438.423230][ T9] em28xx 2-1:0.132: Disconnecting em28xx [ 438.847135][ T5967] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 438.880110][ T5967] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 438.996728][ T5967] em28xx 2-1:0.132: No AC97 audio processor [ 439.018595][ T5967] usb 2-1: Decoder not found [ 439.051946][ T5967] em28xx 2-1:0.132: failed to create media graph [ 439.069950][ T5967] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 439.121936][ T5967] em28xx 2-1:0.132: Remote control support is not available for this card. [ 439.231989][ T9] em28xx 2-1:0.132: Closing input extension [ 439.324170][ T9] em28xx 2-1:0.132: Freeing device [ 439.630887][ T9199] program syz.3.783 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 439.736754][ T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 440.069255][ T1004] kworker/u8:5 (1004) used greatest stack depth: 19224 bytes left [ 440.102002][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.108541][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.165696][ T9] usb 2-1: config 0 has no interfaces? [ 440.185549][ T9] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 440.446073][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.492432][ T9] usb 2-1: Product: syz [ 440.835484][ T9] usb 2-1: Manufacturer: syz [ 440.848836][ T9] usb 2-1: SerialNumber: syz [ 440.864708][ T9] usb 2-1: config 0 descriptor?? [ 441.071802][ T9219] net_ratelimit: 46 callbacks suppressed [ 441.071825][ T9219] netlink: zone id is out of range [ 441.083853][ T9219] netlink: zone id is out of range [ 441.089079][ T9219] netlink: zone id is out of range [ 441.094485][ T9219] netlink: zone id is out of range [ 441.100050][ T9219] netlink: zone id is out of range [ 441.105577][ T9219] netlink: zone id is out of range [ 441.113028][ T9219] netlink: zone id is out of range [ 441.119659][ T9219] netlink: zone id is out of range [ 441.125099][ T9219] netlink: zone id is out of range [ 441.131410][ T9219] netlink: zone id is out of range [ 441.249738][ T9193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.277972][ T9193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.296579][ T6484] usb 2-1: USB disconnect, device number 45 [ 443.676764][ T6484] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 443.846713][ T6484] usb 1-1: Using ep0 maxpacket: 16 [ 443.895431][ T6484] usb 1-1: config 0 has no interfaces? [ 443.924330][ T6484] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 443.982050][ T6484] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.098124][ T9242] program syz.2.791 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 444.148897][ T6484] usb 1-1: config 0 descriptor?? [ 444.728740][ T5967] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 444.887310][ T5967] usb 2-1: Using ep0 maxpacket: 16 [ 444.907830][ T5967] usb 2-1: config 0 has no interfaces? [ 444.913667][ T5967] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 444.992769][ T5967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.501112][ T5967] usb 2-1: config 0 descriptor?? [ 447.133580][ T5903] usb 1-1: USB disconnect, device number 25 [ 447.626364][ T9276] program syz.0.801 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 447.703868][ T9279] kAFS: unable to lookup cell '.,' [ 448.124228][ T6481] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 448.276933][ T6484] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 448.310121][ T6481] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.362617][ T5903] usb 2-1: USB disconnect, device number 46 [ 448.687310][ T6481] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 448.779075][ T6481] usb 3-1: config 0 interface 0 has no altsetting 0 [ 448.939880][ T6481] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 448.988306][ T6481] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 449.047643][ T6481] usb 3-1: Product: syz [ 449.058258][ T6481] usb 3-1: Manufacturer: syz [ 449.071913][ T6481] usb 3-1: SerialNumber: syz [ 449.228035][ T6484] usb 4-1: config 0 has no interfaces? [ 449.238425][ T6481] usb 3-1: config 0 descriptor?? [ 449.324241][ T6484] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 449.344664][ T6484] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.372342][ T6484] usb 4-1: Product: syz [ 449.376908][ T6484] usb 4-1: Manufacturer: syz [ 449.383927][ T6484] usb 4-1: SerialNumber: syz [ 449.392756][ T6481] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 449.405456][ T6484] usb 4-1: config 0 descriptor?? [ 449.509161][ T6481] usb 3-1: USB disconnect, device number 24 [ 449.542253][ T6129] udevd[6129]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 449.635976][ T9285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.649156][ T9285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.707265][ T6482] usb 4-1: USB disconnect, device number 18 [ 449.866900][ T9296] net_ratelimit: 100 callbacks suppressed [ 449.866990][ T9296] netlink: zone id is out of range [ 449.878819][ T9296] netlink: zone id is out of range [ 449.905864][ T9296] netlink: zone id is out of range [ 449.916975][ T9296] netlink: zone id is out of range [ 449.923274][ T9296] netlink: zone id is out of range [ 449.929446][ T9296] netlink: zone id is out of range [ 449.937164][ T9296] netlink: zone id is out of range [ 449.944356][ T9296] netlink: zone id is out of range [ 449.955668][ T9296] netlink: zone id is out of range [ 449.964017][ T9296] netlink: zone id is out of range [ 451.387867][ T9306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.806'. [ 451.857019][ T6482] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 452.145598][ T6482] usb 5-1: config 0 has no interfaces? [ 452.153066][ T6482] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 452.162636][ T6482] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.194948][ T6482] usb 5-1: Product: syz [ 452.246789][ T6482] usb 5-1: Manufacturer: syz [ 452.267605][ T6482] usb 5-1: SerialNumber: syz [ 452.275653][ T6482] usb 5-1: config 0 descriptor?? [ 452.507913][ T9309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.518406][ T9309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.566996][ T9] usb 5-1: USB disconnect, device number 23 [ 452.762590][ T5967] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 453.153005][ T5967] usb 1-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 453.257393][ T5967] usb 1-1: config 0 interface 0 has no altsetting 0 [ 453.416403][ T5967] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 453.447222][ T5967] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 453.483985][ T5967] usb 1-1: Product: syz [ 453.491303][ T5967] usb 1-1: Manufacturer: syz [ 453.510955][ T5967] usb 1-1: SerialNumber: syz [ 453.545484][ T5967] usb 1-1: config 0 descriptor?? [ 453.622938][ T9326] kAFS: unable to lookup cell '.,' [ 453.649198][ T5967] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 453.914701][ T977] usb 1-1: USB disconnect, device number 26 [ 453.960318][ T6129] udevd[6129]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 453.990567][ T9332] kAFS: unable to lookup cell '.,' [ 455.398970][ T9351] program syz.1.818 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 456.427288][ T9356] program syz.4.819 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 457.220595][ T9369] program syz.1.823 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 459.140730][ T9391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.827'. [ 459.576820][ T5883] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 459.821904][ T5883] usb 5-1: config 0 has no interfaces? [ 460.021578][ T5883] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 460.032636][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.041724][ T5883] usb 5-1: Product: syz [ 460.049228][ T5883] usb 5-1: Manufacturer: syz [ 460.056391][ T5883] usb 5-1: SerialNumber: syz [ 460.098033][ T5883] usb 5-1: config 0 descriptor?? [ 460.556296][ T9395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.576300][ T9395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.613677][ T6484] usb 5-1: USB disconnect, device number 24 [ 461.846720][ T977] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 462.097549][ T977] usb 3-1: config 0 has no interfaces? [ 462.364831][ T977] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 462.399563][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.426999][ T977] usb 3-1: Product: syz [ 462.431226][ T977] usb 3-1: Manufacturer: syz [ 462.449564][ T9425] net_ratelimit: 23 callbacks suppressed [ 462.449586][ T9425] netlink: zone id is out of range [ 462.460621][ T9425] netlink: zone id is out of range [ 462.471263][ T9425] netlink: zone id is out of range [ 462.478909][ T9425] netlink: zone id is out of range [ 462.484513][ T9425] netlink: zone id is out of range [ 462.490019][ T9425] netlink: zone id is out of range [ 462.495591][ T9425] netlink: zone id is out of range [ 462.501229][ T9425] netlink: zone id is out of range [ 462.507712][ T9425] netlink: zone id is out of range [ 462.513447][ T9425] netlink: zone id is out of range [ 462.578990][ T977] usb 3-1: SerialNumber: syz [ 462.637619][ T977] usb 3-1: config 0 descriptor?? [ 462.929420][ T9417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.939946][ T9417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.011882][ T977] usb 3-1: USB disconnect, device number 25 [ 464.116719][ T977] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 464.366945][ T977] usb 2-1: Using ep0 maxpacket: 16 [ 464.416848][ T977] usb 2-1: config 0 has no interfaces? [ 464.436730][ T6484] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 464.451866][ T977] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 464.548018][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.585357][ T977] usb 2-1: config 0 descriptor?? [ 464.701224][ T6484] usb 5-1: Using ep0 maxpacket: 16 [ 464.949951][ T6484] usb 5-1: config 0 has no interfaces? [ 465.113743][ T6484] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 465.123059][ T6484] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.136577][ T6484] usb 5-1: config 0 descriptor?? [ 465.528266][ T5883] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 465.560464][ T9451] program syz.3.841 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 465.727015][ T5883] usb 1-1: Using ep0 maxpacket: 16 [ 466.039607][ T5883] usb 1-1: config 0 has no interfaces? [ 466.047478][ T5883] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 466.157275][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.177034][ T977] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 466.226888][ T5883] usb 1-1: config 0 descriptor?? [ 466.507415][ T977] usb 3-1: Using ep0 maxpacket: 16 [ 466.545038][ T977] usb 3-1: config 0 has no interfaces? [ 466.608751][ T977] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 466.729369][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.868426][ T977] usb 3-1: config 0 descriptor?? [ 467.630365][ T5883] usb 2-1: USB disconnect, device number 47 [ 467.856188][ T9461] program syz.3.844 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 467.906390][ T5967] usb 5-1: USB disconnect, device number 25 [ 468.103182][ T30] audit: type=1804 audit(1750765455.999:7): pid=9469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.843" name="file0" dev="ramfs" ino=23826 res=1 errno=0 [ 468.679503][ T9] usb 1-1: USB disconnect, device number 27 [ 470.205838][ T5883] usb 3-1: USB disconnect, device number 26 [ 470.227759][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 470.386713][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 470.464835][ T9] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 470.473915][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 470.503568][ T9] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 470.525505][ T9] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 470.554439][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 470.570958][ T9] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 470.580517][ T9] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 470.592367][ T9] usb 4-1: Product: syz [ 470.601020][ T9] usb 4-1: Manufacturer: syz [ 470.616661][ T9] usb 4-1: SerialNumber: syz [ 470.805586][ T9] usb 4-1: config 0 descriptor?? [ 470.900655][ T9] ldusb 4-1:0.0: Interrupt in endpoint not found [ 471.047026][ T5883] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 471.556968][ T5883] usb 3-1: Using ep0 maxpacket: 16 [ 471.672213][ T5883] usb 3-1: config 0 has no interfaces? [ 471.690363][ T5883] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 471.720657][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.992515][ T5883] usb 3-1: config 0 descriptor?? [ 473.075452][ T6481] usb 4-1: USB disconnect, device number 19 [ 473.224773][ T9505] netlink: 68 bytes leftover after parsing attributes in process `syz.3.853'. [ 473.616181][ T9512] program syz.3.856 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 474.516722][ T5967] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 474.779473][ T5967] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 474.836772][ T5967] usb 1-1: config 0 interface 0 has no altsetting 0 [ 474.869971][ T5967] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 474.906708][ T5967] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 474.956661][ T5967] usb 1-1: Product: syz [ 474.986085][ T5967] usb 1-1: Manufacturer: syz [ 474.991434][ T5916] usb 3-1: USB disconnect, device number 27 [ 475.026855][ T5967] usb 1-1: SerialNumber: syz [ 475.073863][ T5967] usb 1-1: config 0 descriptor?? [ 475.121119][ T9525] program syz.2.859 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 475.136358][ T5967] usb 1-1: selecting invalid altsetting 0 [ 475.257964][ T9528] program syz.1.860 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 475.337324][ T5967] usb 1-1: USB disconnect, device number 28 [ 477.425768][ T5967] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 477.626936][ T5967] usb 1-1: Using ep0 maxpacket: 32 [ 477.650863][ T5967] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 477.677609][ T6481] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 477.698966][ T5967] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 477.770511][ T5967] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 477.804222][ T5967] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 477.848679][ T9555] netlink: 68 bytes leftover after parsing attributes in process `syz.1.866'. [ 477.857892][ T6481] usb 5-1: Using ep0 maxpacket: 16 [ 477.879127][ T6481] usb 5-1: config 0 has no interfaces? [ 477.889279][ T6481] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 477.921398][ T6481] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.925745][ T5967] usb 1-1: config 0 interface 0 has no altsetting 0 [ 477.971659][ T6481] usb 5-1: config 0 descriptor?? [ 478.002061][ T9556] syzkaller1: entered promiscuous mode [ 478.007685][ T9556] syzkaller1: entered allmulticast mode [ 478.093541][ T5967] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 478.117173][ T5967] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 478.125729][ T5967] usb 1-1: Product: syz [ 478.131324][ T5967] usb 1-1: Manufacturer: syz [ 478.136476][ T5967] usb 1-1: SerialNumber: syz [ 478.153862][ T5967] usb 1-1: config 0 descriptor?? [ 478.245513][ T5967] ldusb 1-1:0.0: Interrupt in endpoint not found [ 478.759663][ T6481] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 478.926232][ T6481] usb 2-1: config 0 has no interfaces? [ 478.935781][ T6481] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 478.950599][ T6481] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.960686][ T6481] usb 2-1: Product: syz [ 478.965260][ T6481] usb 2-1: Manufacturer: syz [ 478.971833][ T6481] usb 2-1: SerialNumber: syz [ 478.999590][ T6481] usb 2-1: config 0 descriptor?? [ 479.241833][ T9560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.254093][ T9560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.771694][ T5883] usb 2-1: USB disconnect, device number 48 [ 480.291908][ T5883] usb 1-1: USB disconnect, device number 29 [ 481.087079][ T5967] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 481.176925][ T977] usb 5-1: USB disconnect, device number 26 [ 481.336751][ T5967] usb 1-1: Using ep0 maxpacket: 16 [ 481.370868][ T5967] usb 1-1: config 0 has no interfaces? [ 481.376459][ T5967] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 481.388190][ T5967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.458746][ T5967] usb 1-1: config 0 descriptor?? [ 481.556766][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 481.858360][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 481.960394][ T9] usb 4-1: config 0 has no interfaces? [ 481.966035][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 481.975654][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.071095][ T9] usb 4-1: config 0 descriptor?? [ 482.257534][ T9602] kAFS: unable to lookup cell '.,' [ 482.937270][ T6481] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 483.137299][ T6481] usb 5-1: config 0 has no interfaces? [ 483.146489][ T6481] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 483.156894][ T6481] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.174987][ T6481] usb 5-1: Product: syz [ 483.186389][ T6481] usb 5-1: Manufacturer: syz [ 483.199055][ T6481] usb 5-1: SerialNumber: syz [ 483.307137][ T5883] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 483.321077][ T6481] usb 5-1: config 0 descriptor?? [ 483.506939][ T5883] usb 3-1: Using ep0 maxpacket: 16 [ 483.530244][ T5883] usb 3-1: config 0 has no interfaces? [ 483.535943][ T5883] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 483.561056][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.581223][ T5883] usb 3-1: config 0 descriptor?? [ 483.697545][ T9599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.708560][ T9599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.383949][ T6482] usb 1-1: USB disconnect, device number 30 [ 484.509758][ T9610] netlink: 68 bytes leftover after parsing attributes in process `syz.1.878'. [ 484.826754][ T6482] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 485.007275][ T6482] usb 1-1: config 0 has no interfaces? [ 485.071043][ T5967] usb 4-1: USB disconnect, device number 20 [ 485.217643][ T6482] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 485.282450][ T9620] kAFS: unable to lookup cell '.,' [ 485.438714][ T6482] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.471552][ T6482] usb 1-1: Product: syz [ 485.479977][ T6482] usb 1-1: Manufacturer: syz [ 485.486982][ T6482] usb 1-1: SerialNumber: syz [ 485.494762][ T6482] usb 1-1: config 0 descriptor?? [ 485.729769][ T9612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.740030][ T9612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.775782][ T6482] usb 1-1: USB disconnect, device number 31 [ 485.935240][ T5967] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 486.115668][ T6481] usb 5-1: USB disconnect, device number 27 [ 486.153272][ T5967] usb 4-1: Using ep0 maxpacket: 16 [ 486.471136][ T9626] kAFS: unable to lookup cell '.,' [ 486.546181][ T5967] usb 4-1: config 0 has no interfaces? [ 486.552047][ T5967] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 486.561541][ T5967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.587078][ T5967] usb 4-1: config 0 descriptor?? [ 487.110231][ T5883] usb 3-1: USB disconnect, device number 28 [ 487.512129][ T30] audit: type=1804 audit(1750765475.399:8): pid=9631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.884" name="file0" dev="ramfs" ino=24713 res=1 errno=0 [ 488.866282][ T9642] program syz.4.887 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 489.514942][ T977] usb 4-1: USB disconnect, device number 21 [ 489.626806][ T30] audit: type=1804 audit(1750765477.529:9): pid=9649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.888" name="file0" dev="ramfs" ino=24801 res=1 errno=0 [ 489.812004][ T9651] kAFS: unable to lookup cell '.,' [ 489.985808][ T9653] netlink: 68 bytes leftover after parsing attributes in process `syz.3.890'. [ 491.096958][ T6481] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 491.416918][ T6481] usb 2-1: Using ep0 maxpacket: 16 [ 491.499732][ T6481] usb 2-1: config 0 has no interfaces? [ 491.505965][ T6481] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 491.598770][ T6481] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.636015][ T6481] usb 2-1: config 0 descriptor?? [ 494.129428][ T5967] usb 2-1: USB disconnect, device number 49 [ 494.210625][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.303299][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.482255][ T9697] netlink: 68 bytes leftover after parsing attributes in process `syz.1.901'. [ 495.546761][ T6481] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 496.010523][ T6481] usb 4-1: Using ep0 maxpacket: 16 [ 496.042785][ T6481] usb 4-1: config 0 has no interfaces? [ 496.072353][ T6481] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 496.176022][ T6481] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.241502][ T6481] usb 4-1: config 0 descriptor?? [ 497.202560][ T9716] kAFS: unable to lookup cell '.,' [ 497.996923][ T5883] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 498.209967][ T5883] usb 3-1: config 0 has no interfaces? [ 498.219146][ T5883] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 498.299834][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.308910][ T6481] usb 4-1: USB disconnect, device number 22 [ 498.725280][ T5883] usb 3-1: Product: syz [ 498.881068][ T5883] usb 3-1: Manufacturer: syz [ 498.970432][ T9742] netlink: 9896 bytes leftover after parsing attributes in process `syz.0.910'. [ 499.026552][ T5883] usb 3-1: SerialNumber: syz [ 499.149020][ T5883] usb 3-1: config 0 descriptor?? [ 499.687869][ T9725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.700948][ T9725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.017112][ T5916] usb 3-1: USB disconnect, device number 29 [ 500.364619][ T9748] program syz.1.912 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 500.642303][ T9752] netlink: 68 bytes leftover after parsing attributes in process `syz.4.913'. [ 500.898885][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.908014][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.520178][ T5883] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 501.528916][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.535489][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.777340][ T5883] usb 1-1: config 0 has no interfaces? [ 501.789947][ T5883] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 501.799196][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.832760][ T5883] usb 1-1: Product: syz [ 501.841814][ T5883] usb 1-1: Manufacturer: syz [ 502.057957][ T5883] usb 1-1: SerialNumber: syz [ 502.076424][ T5883] usb 1-1: config 0 descriptor?? [ 502.835379][ T5916] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 503.336688][ T5916] usb 4-1: Using ep0 maxpacket: 16 [ 503.366722][ T5916] usb 4-1: config 0 has no interfaces? [ 503.372537][ T5916] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 503.403163][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.604056][ T5916] usb 4-1: config 0 descriptor?? [ 504.996819][ T30] audit: type=1804 audit(1750765492.829:10): pid=9797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.922" name="file0" dev="ramfs" ino=26726 res=1 errno=0 [ 505.024847][ T6482] usb 1-1: USB disconnect, device number 32 [ 505.355083][ T9804] netlink: 68 bytes leftover after parsing attributes in process `syz.0.924'. [ 505.692697][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.767767][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.804716][ T5883] usb 4-1: USB disconnect, device number 23 [ 507.566767][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 507.931325][ T9] usb 4-1: config 0 has no interfaces? [ 507.947453][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 507.957136][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.965124][ T9] usb 4-1: Product: syz [ 507.975291][ T9] usb 4-1: Manufacturer: syz [ 508.082147][ T9] usb 4-1: SerialNumber: syz [ 508.245621][ T9] usb 4-1: config 0 descriptor?? [ 508.398913][ T5967] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 508.614664][ T5967] usb 3-1: config 0 has no interfaces? [ 508.734646][ T5916] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 509.106301][ T5967] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 509.143184][ T5967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.162475][ T5967] usb 3-1: Product: syz [ 509.323988][ T5967] usb 3-1: Manufacturer: syz [ 509.449359][ T5967] usb 3-1: SerialNumber: syz [ 509.487673][ T5967] usb 3-1: config 0 descriptor?? [ 509.862035][ T5916] usb 2-1: config 0 has no interfaces? [ 509.881027][ T5916] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 509.972351][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.980931][ T5916] usb 2-1: Product: syz [ 509.985354][ T5916] usb 2-1: Manufacturer: syz [ 509.994653][ T5916] usb 2-1: SerialNumber: syz [ 510.456811][ T5916] usb 2-1: config 0 descriptor?? [ 510.622723][ T9856] netlink: 68 bytes leftover after parsing attributes in process `syz.0.935'. [ 510.666517][ T5967] usb 4-1: USB disconnect, device number 24 [ 510.860414][ T977] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 511.142308][ T977] usb 5-1: config 0 has no interfaces? [ 511.203840][ T9863] netlink: 9896 bytes leftover after parsing attributes in process `syz.3.936'. [ 511.265290][ T977] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 511.275788][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.325970][ T977] usb 5-1: Product: syz [ 511.331290][ T977] usb 5-1: Manufacturer: syz [ 511.343894][ T977] usb 5-1: SerialNumber: syz [ 511.380165][ T977] usb 5-1: config 0 descriptor?? [ 511.612755][ T9854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.631302][ T9854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.727493][ T6481] usb 5-1: USB disconnect, device number 28 [ 511.961638][ T5883] usb 2-1: USB disconnect, device number 50 [ 513.061255][ T5883] usb 3-1: USB disconnect, device number 30 [ 514.957058][ T5967] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 515.176744][ T5967] usb 3-1: Using ep0 maxpacket: 16 [ 515.200437][ T5967] usb 3-1: config 0 has no interfaces? [ 515.220245][ T5967] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 515.355977][ T9901] netlink: 68 bytes leftover after parsing attributes in process `syz.3.947'. [ 515.711067][ T5967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.767718][ T5916] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 515.847637][ T5967] usb 3-1: config 0 descriptor?? [ 516.058448][ T9908] netlink: 68 bytes leftover after parsing attributes in process `syz.4.950'. [ 516.164566][ T5916] usb 1-1: config 0 has no interfaces? [ 516.288334][ T5916] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 516.312323][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.352135][ T5916] usb 1-1: Product: syz [ 516.363143][ T5916] usb 1-1: Manufacturer: syz [ 516.371313][ T5916] usb 1-1: SerialNumber: syz [ 516.545180][ T5916] usb 1-1: config 0 descriptor?? [ 516.806984][ T9318] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 517.095499][ T9318] usb 5-1: Using ep0 maxpacket: 16 [ 517.117123][ T9318] usb 5-1: config 0 has no interfaces? [ 517.122716][ T9318] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 517.152492][ T9318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.190570][ T9318] usb 5-1: config 0 descriptor?? [ 517.853644][ T5883] usb 3-1: USB disconnect, device number 31 [ 518.306559][ T5883] usb 1-1: USB disconnect, device number 33 [ 519.175793][ T9943] program syz.1.957 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 520.829775][ T9318] usb 5-1: USB disconnect, device number 29 [ 524.636892][T10002] syzkaller1: entered promiscuous mode [ 524.642710][T10002] syzkaller1: entered allmulticast mode [ 524.826490][T10006] kAFS: unable to lookup cell '.,' [ 526.688919][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.712995][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.658049][ T43] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 528.885111][ T43] usb 3-1: config 0 has no interfaces? [ 529.046055][ T43] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 529.055338][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.063588][ T43] usb 3-1: Product: syz [ 529.068496][ T43] usb 3-1: Manufacturer: syz [ 529.073147][ T43] usb 3-1: SerialNumber: syz [ 529.091493][ T43] usb 3-1: config 0 descriptor?? [ 529.147197][ T6482] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 529.406968][ T6482] usb 5-1: Using ep0 maxpacket: 32 [ 529.522214][ T6482] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 529.574787][ T6482] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 529.607247][ T6482] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 529.618995][ T6482] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 529.639295][ T6482] usb 5-1: config 0 interface 0 has no altsetting 0 [ 529.667662][ T6482] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 529.676892][ T6482] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 529.685329][ T6482] usb 5-1: Product: syz [ 529.689910][ T6482] usb 5-1: Manufacturer: syz [ 529.695009][ T6482] usb 5-1: SerialNumber: syz [ 529.711767][ T6482] usb 5-1: config 0 descriptor?? [ 529.723601][ T6482] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 529.736984][ T6482] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 530.796666][ T43] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 530.896728][ T6482] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 531.138108][ T9318] usb 3-1: USB disconnect, device number 32 [ 531.346814][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 531.358693][ T6482] usb 4-1: config 0 has no interfaces? [ 531.366247][ T43] usb 2-1: config 0 has no interfaces? [ 531.372447][ T43] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 531.394338][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.403412][ T6482] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 531.416696][ T6482] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.434106][ T6482] usb 4-1: Product: syz [ 531.442383][ T6482] usb 4-1: Manufacturer: syz [ 531.453963][ T6482] usb 4-1: SerialNumber: syz [ 531.468146][ T43] usb 2-1: config 0 descriptor?? [ 531.512186][ T6482] usb 4-1: config 0 descriptor?? [ 531.583895][T10079] netlink: 156 bytes leftover after parsing attributes in process `syz.2.982'. [ 531.609836][T10079] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 531.906955][ T6482] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 531.924368][ T43] usb 5-1: USB disconnect, device number 30 [ 531.953398][ T43] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 532.087757][ T6482] usb 3-1: Using ep0 maxpacket: 32 [ 532.157302][ T6482] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 532.190903][ T6482] usb 3-1: config 0 has no interface number 0 [ 532.245845][ T6482] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 532.295651][ T6482] usb 3-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 532.390852][ T6482] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 532.412641][ T6482] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.428596][ T6482] usb 3-1: Product: syz [ 532.435874][ T6482] usb 3-1: Manufacturer: syz [ 532.440648][ T6481] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 532.456205][ T6482] usb 3-1: SerialNumber: syz [ 532.503793][ T6482] usb 3-1: config 0 descriptor?? [ 532.530077][ T6482] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 532.566298][ T6482] em28xx 3-1:0.132: Video interface 132 found: bulk [ 532.611565][ T6481] usb 1-1: config 0 has no interfaces? [ 532.623219][ T6481] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 532.633003][ T6481] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.641524][ T6481] usb 1-1: Product: syz [ 532.647413][ T6481] usb 1-1: Manufacturer: syz [ 532.666708][ T6481] usb 1-1: SerialNumber: syz [ 532.702614][ T6481] usb 1-1: config 0 descriptor?? [ 533.841239][ T6482] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 533.954889][ T6482] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 533.973646][ T6482] em28xx 3-1:0.132: board has no eeprom [ 534.037294][ T6482] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 534.045305][ T6482] em28xx 3-1:0.132: analog set to bulk mode. [ 534.053566][ T6481] em28xx 3-1:0.132: Registering V4L2 extension [ 534.076756][ T43] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 534.166487][ T6481] em28xx 3-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 534.409669][ T43] usb 5-1: config 0 has no interfaces? [ 534.417617][ T6481] em28xx 3-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 534.450930][ T43] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 534.464374][ T6481] em28xx 3-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 534.476877][ T6481] em28xx 3-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 534.572678][ T5967] usb 2-1: USB disconnect, device number 51 [ 534.605050][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.628037][ T6482] usb 3-1: USB disconnect, device number 33 [ 534.639303][ T43] usb 5-1: Product: syz [ 534.654619][ T6482] em28xx 3-1:0.132: Disconnecting em28xx [ 534.664025][ T43] usb 5-1: Manufacturer: syz [ 534.672629][ T43] usb 5-1: SerialNumber: syz [ 534.687946][ T43] usb 5-1: config 0 descriptor?? [ 535.021564][ T6481] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 535.108177][ T6481] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 535.139268][ T9318] usb 4-1: USB disconnect, device number 25 [ 535.204621][ T6481] em28xx 3-1:0.132: No AC97 audio processor [ 535.342242][ T6481] usb 3-1: Decoder not found [ 535.358427][ T6481] em28xx 3-1:0.132: failed to create media graph [ 535.406779][ T5967] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 535.586841][ T6481] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 535.603045][ T5967] usb 2-1: config 0 has no interfaces? [ 535.616350][ T6481] em28xx 3-1:0.132: Remote control support is not available for this card. [ 535.617989][T10103] ================================================================== [ 535.633333][T10103] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430 [ 535.640713][T10103] Read of size 8 at addr ffff88807dff4738 by task v4l_id/10103 [ 535.648252][T10103] [ 535.650569][T10103] CPU: 0 UID: 0 PID: 10103 Comm: v4l_id Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 535.650586][T10103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 535.650593][T10103] Call Trace: [ 535.650598][T10103] [ 535.650603][T10103] dump_stack_lvl+0x189/0x250 [ 535.650621][T10103] ? __virt_addr_valid+0x1c8/0x5c0 [ 535.650631][T10103] ? rcu_is_watching+0x15/0xb0 [ 535.650647][T10103] ? __pfx_dump_stack_lvl+0x10/0x10 [ 535.650662][T10103] ? rcu_is_watching+0x15/0xb0 [ 535.650677][T10103] ? lock_release+0x4b/0x3e0 [ 535.650691][T10103] ? __virt_addr_valid+0x1c8/0x5c0 [ 535.650702][T10103] ? __virt_addr_valid+0x4a5/0x5c0 [ 535.650712][T10103] print_report+0xd2/0x2b0 [ 535.650726][T10103] ? v4l2_fh_open+0xc7/0x430 [ 535.650740][T10103] kasan_report+0x118/0x150 [ 535.650752][T10103] ? v4l2_fh_open+0xc7/0x430 [ 535.650769][T10103] v4l2_fh_open+0xc7/0x430 [ 535.650783][T10103] ? __pfx___mutex_lock+0x10/0x10 [ 535.650800][T10103] em28xx_v4l2_open+0x157/0x9a0 [ 535.650818][T10103] v4l2_open+0x20f/0x360 [ 535.650829][T10103] chrdev_open+0x4c9/0x5e0 [ 535.650841][T10103] ? __pfx_chrdev_open+0x10/0x10 [ 535.650854][T10103] ? __pfx_chrdev_open+0x10/0x10 [ 535.650864][T10103] do_dentry_open+0xdf0/0x1970 [ 535.650880][T10103] vfs_open+0x3b/0x340 [ 535.650892][T10103] ? path_openat+0x2ecd/0x3830 [ 535.650907][T10103] path_openat+0x2ee5/0x3830 [ 535.650926][T10103] ? arch_stack_walk+0xfc/0x150 [ 535.650943][T10103] ? __pfx_path_openat+0x10/0x10 [ 535.650957][T10103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.650972][T10103] do_filp_open+0x1fa/0x410 [ 535.650986][T10103] ? __lock_acquire+0xab9/0xd20 [ 535.651000][T10103] ? __pfx_do_filp_open+0x10/0x10 [ 535.651019][T10103] ? _raw_spin_unlock+0x28/0x50 [ 535.651031][T10103] ? alloc_fd+0x64c/0x6c0 [ 535.651044][T10103] do_sys_openat2+0x121/0x1c0 [ 535.651058][T10103] ? __pfx_do_sys_openat2+0x10/0x10 [ 535.651071][T10103] ? exc_page_fault+0x76/0xf0 [ 535.651086][T10103] ? do_user_addr_fault+0xc8a/0x1390 [ 535.651099][T10103] __x64_sys_openat+0x138/0x170 [ 535.651113][T10103] do_syscall_64+0xfa/0x3b0 [ 535.651123][T10103] ? lockdep_hardirqs_on+0x9c/0x150 [ 535.651136][T10103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.651146][T10103] ? clear_bhb_loop+0x60/0xb0 [ 535.651158][T10103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.651169][T10103] RIP: 0033:0x7f22a34a7407 [ 535.651180][T10103] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 535.651190][T10103] RSP: 002b:00007ffedce61770 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 535.651203][T10103] RAX: ffffffffffffffda RBX: 00007f22a3b9e880 RCX: 00007f22a34a7407 [ 535.651211][T10103] RDX: 0000000000000000 RSI: 00007ffedce62f1b RDI: ffffffffffffff9c [ 535.651219][T10103] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 535.651225][T10103] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 535.651232][T10103] R13: 00007ffedce619c0 R14: 00007f22a3d05000 R15: 00005589d29604d8 [ 535.651243][T10103] [ 535.651247][T10103] [ 535.956602][T10103] Allocated by task 6481: [ 535.960998][T10103] kasan_save_track+0x3e/0x80 [ 535.965705][T10103] __kasan_kmalloc+0x93/0xb0 [ 535.970558][T10103] __kmalloc_cache_noprof+0x230/0x3d0 [ 535.975933][T10103] em28xx_v4l2_init+0x10b/0x2e70 [ 535.980872][T10103] em28xx_init_extension+0x11d/0x1c0 [ 535.986172][T10103] process_scheduled_works+0xae1/0x17b0 [ 535.991717][T10103] worker_thread+0x8a0/0xda0 [ 535.996323][T10103] kthread+0x70e/0x8a0 [ 536.000382][T10103] ret_from_fork+0x3fc/0x770 [ 536.004968][T10103] ret_from_fork_asm+0x1a/0x30 [ 536.009723][T10103] [ 536.012045][T10103] Freed by task 6481: [ 536.016099][T10103] kasan_save_track+0x3e/0x80 [ 536.020787][T10103] kasan_save_free_info+0x46/0x50 [ 536.025809][T10103] __kasan_slab_free+0x62/0x70 [ 536.030573][T10103] kfree+0x18e/0x440 [ 536.034464][T10103] em28xx_v4l2_init+0x1683/0x2e70 [ 536.039499][T10103] em28xx_init_extension+0x11d/0x1c0 [ 536.044789][T10103] process_scheduled_works+0xae1/0x17b0 [ 536.050965][T10103] worker_thread+0x8a0/0xda0 [ 536.055658][T10103] kthread+0x70e/0x8a0 [ 536.059718][T10103] ret_from_fork+0x3fc/0x770 [ 536.064302][T10103] ret_from_fork_asm+0x1a/0x30 [ 536.069069][T10103] [ 536.071480][T10103] The buggy address belongs to the object at ffff88807dff4000 [ 536.071480][T10103] which belongs to the cache kmalloc-8k of size 8192 [ 536.085613][T10103] The buggy address is located 1848 bytes inside of [ 536.085613][T10103] freed 8192-byte region [ffff88807dff4000, ffff88807dff6000) [ 536.099573][T10103] [ 536.101887][T10103] The buggy address belongs to the physical page: [ 536.108311][T10103] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7dff0 [ 536.117059][T10103] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 536.125632][T10103] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 536.133535][T10103] page_type: f5(slab) [ 536.137507][T10103] raw: 00fff00000000040 ffff88801a442280 ffffea0001e03a00 0000000000000003 [ 536.146082][T10103] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 536.154744][T10103] head: 00fff00000000040 ffff88801a442280 ffffea0001e03a00 0000000000000003 [ 536.163523][T10103] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 536.172271][T10103] head: 00fff00000000003 ffffea0001f7fc01 00000000ffffffff 00000000ffffffff [ 536.180963][T10103] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 536.189618][T10103] page dumped because: kasan: bad access detected [ 536.196034][T10103] page_owner tracks the page as allocated [ 536.201836][T10103] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 9848, tgid 9846 (syz.0.933), ts 510352994006, free_ts 509787289522 [ 536.223062][T10103] post_alloc_hook+0x240/0x2a0 [ 536.227828][T10103] get_page_from_freelist+0x21e4/0x22c0 [ 536.233367][T10103] __alloc_frozen_pages_noprof+0x181/0x370 [ 536.239164][T10103] alloc_pages_mpol+0x232/0x4a0 [ 536.244115][T10103] allocate_slab+0x8a/0x3b0 [ 536.248636][T10103] ___slab_alloc+0xbfc/0x1480 [ 536.253309][T10103] __kvmalloc_node_noprof+0x429/0x5f0 [ 536.258677][T10103] kvm_dev_ioctl_get_cpuid+0x204/0x7c0 [ 536.264130][T10103] kvm_arch_dev_ioctl+0x37f/0x8f0 [ 536.269150][T10103] kvm_dev_ioctl+0x595/0x18e0 [ 536.273818][T10103] __se_sys_ioctl+0xf9/0x170 [ 536.278398][T10103] do_syscall_64+0xfa/0x3b0 [ 536.282890][T10103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.288774][T10103] page last free pid 9848 tgid 9846 stack trace: [ 536.295084][T10103] __free_frozen_pages+0xc71/0xe70 [ 536.300186][T10103] __put_partials+0x161/0x1c0 [ 536.304980][T10103] put_cpu_partial+0x17c/0x250 [ 536.309736][T10103] __slab_free+0x2f7/0x400 [ 536.314145][T10103] qlist_free_all+0x97/0x140 [ 536.318746][T10103] kasan_quarantine_reduce+0x148/0x160 [ 536.324217][T10103] __kasan_slab_alloc+0x22/0x80 [ 536.329075][T10103] __kmalloc_noprof+0x224/0x4f0 [ 536.334052][T10103] tomoyo_realpath_from_path+0xe3/0x5d0 [ 536.339785][T10103] tomoyo_path_number_perm+0x1e8/0x5a0 [ 536.345244][T10103] security_file_ioctl+0xcb/0x2d0 [ 536.350292][T10103] __se_sys_ioctl+0x47/0x170 [ 536.354971][T10103] do_syscall_64+0xfa/0x3b0 [ 536.359468][T10103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.365352][T10103] [ 536.367673][T10103] Memory state around the buggy address: [ 536.373295][T10103] ffff88807dff4600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 536.381440][T10103] ffff88807dff4680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 536.389489][T10103] >ffff88807dff4700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 536.397554][T10103] ^ [ 536.403533][T10103] ffff88807dff4780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 536.411581][T10103] ffff88807dff4800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 536.419629][T10103] ================================================================== [ 536.679761][ T6482] em28xx 3-1:0.132: Closing input extension [ 536.759345][ T5967] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 536.768543][ T5967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.777016][ T5967] usb 2-1: Product: syz [ 536.781221][ T5967] usb 2-1: Manufacturer: syz [ 536.785854][ T5967] usb 2-1: SerialNumber: syz [ 536.802781][ T5967] usb 2-1: config 0 descriptor?? [ 536.808633][ T5903] usb 1-1: USB disconnect, device number 34 [ 536.819458][T10103] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 536.826729][T10103] CPU: 0 UID: 0 PID: 10103 Comm: v4l_id Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 536.838486][T10103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 536.848665][T10103] Call Trace: [ 536.851980][T10103] [ 536.854913][T10103] dump_stack_lvl+0x99/0x250 [ 536.859525][T10103] ? __asan_memcpy+0x40/0x70 [ 536.864162][T10103] ? __pfx_dump_stack_lvl+0x10/0x10 [ 536.869392][T10103] ? __pfx__printk+0x10/0x10 [ 536.873983][T10103] panic+0x2db/0x790 [ 536.877890][T10103] ? __pfx_panic+0x10/0x10 [ 536.882329][T10103] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 536.888229][T10103] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 536.894653][T10103] ? print_memory_metadata+0x314/0x400 [ 536.900126][T10103] ? v4l2_fh_open+0xc7/0x430 [ 536.904725][T10103] check_panic_on_warn+0x89/0xb0 [ 536.909669][T10103] ? v4l2_fh_open+0xc7/0x430 [ 536.914373][T10103] end_report+0x78/0x160 [ 536.918647][T10103] kasan_report+0x129/0x150 [ 536.923174][T10103] ? v4l2_fh_open+0xc7/0x430 [ 536.927790][T10103] v4l2_fh_open+0xc7/0x430 [ 536.932228][T10103] ? __pfx___mutex_lock+0x10/0x10 [ 536.937271][T10103] em28xx_v4l2_open+0x157/0x9a0 [ 536.942142][T10103] v4l2_open+0x20f/0x360 [ 536.946394][T10103] chrdev_open+0x4c9/0x5e0 [ 536.950822][T10103] ? __pfx_chrdev_open+0x10/0x10 [ 536.955766][T10103] ? __pfx_chrdev_open+0x10/0x10 [ 536.960706][T10103] do_dentry_open+0xdf0/0x1970 [ 536.965493][T10103] vfs_open+0x3b/0x340 [ 536.969665][T10103] ? path_openat+0x2ecd/0x3830 [ 536.974643][T10103] path_openat+0x2ee5/0x3830 [ 536.979279][T10103] ? arch_stack_walk+0xfc/0x150 [ 536.984160][T10103] ? __pfx_path_openat+0x10/0x10 [ 536.989113][T10103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.995193][T10103] do_filp_open+0x1fa/0x410 [ 536.999703][T10103] ? __lock_acquire+0xab9/0xd20 [ 537.004567][T10103] ? __pfx_do_filp_open+0x10/0x10 [ 537.009612][T10103] ? _raw_spin_unlock+0x28/0x50 [ 537.014491][T10103] ? alloc_fd+0x64c/0x6c0 [ 537.018865][T10103] do_sys_openat2+0x121/0x1c0 [ 537.023641][T10103] ? __pfx_do_sys_openat2+0x10/0x10 [ 537.028846][T10103] ? exc_page_fault+0x76/0xf0 [ 537.033536][T10103] ? do_user_addr_fault+0xc8a/0x1390 [ 537.038825][T10103] __x64_sys_openat+0x138/0x170 [ 537.043684][T10103] do_syscall_64+0xfa/0x3b0 [ 537.048214][T10103] ? lockdep_hardirqs_on+0x9c/0x150 [ 537.053441][T10103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.059514][T10103] ? clear_bhb_loop+0x60/0xb0 [ 537.064197][T10103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.070104][T10103] RIP: 0033:0x7f22a34a7407 [ 537.074524][T10103] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 537.094145][T10103] RSP: 002b:00007ffedce61770 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 537.102572][T10103] RAX: ffffffffffffffda RBX: 00007f22a3b9e880 RCX: 00007f22a34a7407 [ 537.110731][T10103] RDX: 0000000000000000 RSI: 00007ffedce62f1b RDI: ffffffffffffff9c [ 537.118709][T10103] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 537.126783][T10103] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 537.134768][T10103] R13: 00007ffedce619c0 R14: 00007f22a3d05000 R15: 00005589d29604d8 [ 537.142753][T10103] [ 537.145935][T10103] Kernel Offset: disabled [ 537.150264][T10103] Rebooting in 86400 seconds..