last executing test programs: 16.391824727s ago: executing program 4 (id=2559): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200"/62, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068", 0x9, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/18, @ANYBLOB="ebffffffffffffff280012800b00010065"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 15.790979129s ago: executing program 4 (id=2561): socket$inet6(0xa, 0x80001, 0x0) socket$l2tp6(0xa, 0x2, 0x73) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f00000000c0)={0x0, 0x41, 0x3, 0x2}, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x34) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000002c0)=@gcm_256={{0x304}, "e9bb07f400", "7d376431316d2e069b245c4113b4a67cde08bf5fa87e53dda73856be09fd4e45", "68faa2b5", "ffffffffffffffff"}, 0x38) sendmsg(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x20}, 0x8040) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') preadv(r4, 0x0, 0x0, 0x8, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c0000002000090002000000fedbdf2501000000080008", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x4000815}, 0x4000) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x107780) 15.575197506s ago: executing program 3 (id=2563): syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) 14.097784113s ago: executing program 3 (id=2566): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x52132248838576c8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @value}, 0x94) r2 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r2, 0x29, 0x4b, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000004580), 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10060, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80, 0x23456}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchdir(r6) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x44) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 12.706925511s ago: executing program 0 (id=2569): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00']) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) r5 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000000680)={0x9, {"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", 0x1000}}, 0x1006) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008094}, 0x4) sendmsg$IPCTNL_MSG_CT_GET(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}, 0x8103}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/180, 0xb4}, {0x0}, {&(0x7f0000000580)=""/84, 0x54}, {&(0x7f00000016c0)=""/217, 0xd9}], 0x4}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xb0}, {{0x0, 0x0, 0x0}, 0x6}, {{&(0x7f0000000600)=@isdn, 0x80, &(0x7f0000000040)=[{&(0x7f00000017c0)=""/98, 0x62}], 0x1}, 0xc}], 0x9, 0x20, 0x0) 11.27334806s ago: executing program 4 (id=2570): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000003ac0)={0x0, [[0x3, 0x443, 0x40, 0x0, 0x4], [0x7f7f, 0x40, 0x0, 0xfffffffe, 0x0, 0x0, 0xff], [0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x8001]], '\x00', [{0x0, 0x21, 0x0, 0x1}, {0x0, 0x1ff}, {0x0, 0x1000}, {}, {0x0, 0xfffffff8}, {0x0, 0xfffffffc}, {0x0, 0xfffffffd}, {0x0, 0x2000000}, {}, {}, {0xd4}], '\x00', 0x7}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x24008000) socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="ac008ac5ab41a2361d3e86d1", 0xc, 0x20040045, &(0x7f00000000c0)={0xa, 0x4e21, 0x5ed1, @empty, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='yeah\x00', 0x5) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x80010, r4, 0xfffff000) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000002100010000000000000000000200000000000000000000000a30cad8b96ed2a7436b6c8b895bbed8fc388f106553a335585c81ca2204a40a90b4349c75d05203238535335b310a2f70f43a9f14cbba26d79429c17b89da7e67886c27bf0aeb5d6558a7da06e178752a2309d09a3477849a34cf1a7fac37f38788a4"], 0x1c}}, 0x44044) openat$dsp1(0xffffffffffffff9c, 0x0, 0x4000, 0x0) 11.208280176s ago: executing program 3 (id=2571): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/bus/input/handlers\x00', 0x0, 0x0) pread64(r5, 0x0, 0x0, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) socket$packet(0x11, 0x2, 0x300) read$FUSE(0xffffffffffffffff, 0x0, 0x0) lsetxattr$security_capability(0x0, &(0x7f0000000100), 0x0, 0x0, 0x2) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000480)={{0x1, 0x200, 0x261, 0x1, 0xffffffff, 0x1}, 0x37a, [0x4, 0x9f, 0x6, 0x7, 0x10000, 0x7f, 0x9, 0xb, 0x17, 0x3, 0x7, 0x80000001, 0xffff0001, 0x81, 0xf24b, 0x81, 0x7, 0x5, 0xffffffff, 0xfffffffd, 0x3295, 0x8, 0x1, 0x6, 0x1, 0x20000, 0x2, 0x642c, 0x101, 0xc, 0x9, 0xff, 0x6, 0xb, 0x4, 0x6, 0x20, 0xdb, 0x943, 0x3, 0x3c, 0x9, 0xd9d3, 0x32c, 0x2, 0x0, 0x8, 0x10000, 0x0, 0x139, 0xffffffff, 0x0, 0x560, 0x7, 0x7, 0x2, 0x4, 0x6, 0x5, 0x4, 0x82bd, 0x4, 0x7f, 0x3, 0x101, 0x7, 0x4, 0x0, 0x46a5, 0x9, 0x2, 0x101, 0x2, 0x81, 0x2c4, 0x2, 0xf1, 0x3, 0x3, 0x9, 0x9, 0x7d, 0x2, 0x9, 0x6e, 0x8, 0xef46, 0x943, 0x1, 0x0, 0x8, 0x7f, 0x4, 0xda6, 0xf360, 0x8, 0x3, 0x9c2, 0x8001, 0x5, 0x100, 0x80000000, 0xffff7fff, 0xffffffff, 0x7, 0x80000000, 0x7, 0xeb, 0x932, 0xffff, 0x0, 0x3, 0x7fffffff, 0x3ff, 0x0, 0x3, 0x7, 0x8, 0x3, 0x10001, 0xfffffff9, 0x4, 0xd, 0x2e, 0xffff, 0x1, 0x0, 0x7, 0x2, 0x80, 0x80000001, 0x0, 0x4, 0xffff7fff, 0x9, 0x80000000, 0x2, 0xf280, 0x2, 0x57, 0x0, 0x1, 0x6, 0x0, 0x397, 0x8, 0x5, 0x9, 0x8, 0x7c4c, 0x5b, 0x2, 0xc, 0x1, 0x5, 0x20, 0x7, 0x6, 0x65d0, 0x10001, 0x6, 0x6, 0x3ff, 0x8, 0x3, 0x5, 0x6, 0x124a, 0x9, 0x1ff, 0x80, 0xc, 0x3, 0x4270000, 0x0, 0x6b994df8, 0x9, 0x6, 0x0, 0x9, 0x9, 0x1ff, 0x9, 0x1000, 0x3ff, 0xffffffff, 0x0, 0x6, 0xffffffff, 0x7ff, 0x311, 0x0, 0x7, 0xfffffdd9, 0x0, 0x79, 0x5, 0xfffffffc, 0x8, 0xd, 0x6944, 0xb, 0x2, 0x8f01, 0x10, 0x3, 0x8, 0x5, 0x40, 0x2, 0x40, 0x9, 0x8, 0x21, 0xffffffff, 0xdf6, 0x3, 0x6, 0x7, 0x9, 0x8, 0x101, 0x8, 0x0, 0x10001, 0x0, 0x81e8, 0x5, 0xa9e, 0x2, 0x9, 0x3, 0x8, 0x2, 0x1, 0x8, 0x1000, 0x80000000, 0x7, 0x7, 0x4, 0x4, 0x7, 0x5, 0xe, 0x2, 0x155, 0x3, 0x8, 0x9, 0x1000, 0xe4ec, 0x0, 0x6, 0xa, 0x0, 0x8, 0x6, 0x3ff, 0x8001, 0x9, 0xa770, 0x7, 0x3ff, 0x2, 0x5, 0xf, 0x3, 0x9, 0x8, 0x3ff, 0x6, 0x100, 0xfffffffe, 0x6, 0x10000, 0x3, 0x2, 0xffff, 0x80, 0x180, 0x1, 0x10000, 0xa672, 0x0, 0x1, 0xca6, 0x3, 0x1ff, 0x0, 0x5, 0x400, 0x6, 0x159, 0x0, 0x5, 0xff, 0x2, 0xd62, 0x77, 0x7fff, 0xbdd5, 0x7, 0x7fff, 0x7, 0x401, 0x100, 0xde87b73, 0x3, 0x5, 0x6, 0xd3d, 0x8, 0x10000000, 0x6, 0x7fffffff, 0x1, 0x3ff, 0x10000, 0xa, 0x2, 0x6, 0x6b, 0x5, 0x3, 0x46, 0x8, 0x2, 0x3, 0xfffffffd, 0x4, 0x1, 0x8, 0x8000, 0x0, 0x35d, 0xfffffffd, 0x100, 0x3, 0x2, 0x2, 0x5, 0xec59, 0x1, 0x666, 0x2, 0x10001, 0x2, 0x0, 0x0, 0x2, 0x6, 0x6, 0xb, 0x5, 0x7fffffff, 0x9b3, 0x100, 0xffc00000, 0x20000000, 0x6, 0x9, 0x0, 0x9, 0xff, 0xfffffffa, 0x6, 0x4, 0x2, 0x5, 0x7, 0x9, 0x5c69, 0x2, 0x7, 0x9, 0x3, 0x505, 0x7, 0x7f, 0x3, 0x5, 0x80, 0x2, 0x1, 0x7, 0x3, 0x9, 0x3, 0xc00000, 0x1, 0xffff, 0x7, 0x0, 0x0, 0x7, 0x6, 0x8, 0x7, 0xb, 0x5, 0x6, 0xff67, 0x3, 0x8, 0x55, 0xfff, 0xfffffffb, 0x7, 0x0, 0x30, 0x63, 0x8, 0xbc00, 0x8, 0xfffffc71, 0x3, 0xa5, 0x6, 0x0, 0xc2f, 0xd75, 0x4, 0x2, 0x9, 0xffffffc0, 0x6, 0x9, 0x8, 0x6, 0x9, 0x6, 0x2, 0x7ff, 0x0, 0x7f, 0x74d067f7, 0x8, 0x9, 0x8, 0x0, 0x7, 0x4, 0x2, 0x8, 0x6, 0x5, 0x9fd5, 0x4, 0x8, 0x8001, 0x8, 0x7, 0x401, 0x8, 0x1b800, 0x2dd, 0x7, 0x9, 0x2, 0x4, 0x5, 0x3, 0xae, 0x8001, 0x0, 0x1ff, 0xa7, 0x800, 0x2, 0x4, 0x7, 0x6, 0x0, 0x0, 0x68, 0x1, 0x7, 0x80000000, 0x8f, 0x1ff, 0x7, 0x7f, 0x0, 0xa0, 0x8, 0x0, 0x6, 0xea, 0x9, 0x6, 0x81, 0x4, 0x8, 0x4, 0x2, 0xfffffe00, 0x9, 0x7fff, 0x0, 0x3, 0xa1, 0x7, 0x7, 0x0, 0xb, 0x8, 0xfffffffb, 0x9, 0x0, 0xc, 0x3, 0xd2, 0x200, 0x7, 0x3, 0xf, 0x3, 0x3ff, 0x42, 0xb697, 0x4, 0x80000, 0x60, 0x9, 0x6, 0x4, 0x6, 0x6, 0xd, 0x2, 0x4, 0x80000001, 0x3, 0xb, 0x5b, 0x6, 0x6, 0x74, 0x8, 0x3, 0x9, 0x0, 0x4, 0x4, 0x7f, 0x3, 0xc, 0x4, 0x8, 0x935a, 0x85, 0x6, 0x6, 0x2, 0x400, 0x3, 0x4, 0x6, 0x9, 0x1, 0x34, 0x5, 0x6, 0x8001, 0x0, 0xffffffff, 0x9, 0x6, 0xbab, 0x8, 0x5, 0x1, 0x4, 0x7, 0x400, 0x2, 0x9, 0x1ff, 0x4, 0x8, 0x7fff, 0x3, 0x7, 0x1, 0x4, 0x7fff, 0x0, 0x1, 0xa, 0x3, 0xa, 0x10000, 0x5, 0x495, 0x4, 0x101, 0x180, 0x3, 0x60d, 0xffffff00, 0x2, 0x8, 0x79f5, 0x2cbd, 0x2, 0x9, 0x6, 0x2, 0x6, 0x9, 0x0, 0xfffff6b8, 0x7, 0x5, 0x10001, 0x7, 0x9, 0x3, 0x81, 0x1, 0x0, 0x10000, 0x80000001, 0x7, 0xff, 0xfffffff8, 0x7b1f, 0x7, 0xb9e3, 0x5, 0x0, 0x401, 0xd, 0x8e, 0x7, 0x3, 0x80000000, 0x7, 0x8, 0x3, 0x9, 0x0, 0x1, 0xee9, 0x12, 0x2, 0x80000000, 0x1000, 0x0, 0x6, 0x5, 0x1000000, 0x1, 0x100, 0x9, 0x7, 0x101, 0xcff7, 0x0, 0x1ff, 0x401, 0x6, 0x5ce, 0x0, 0x5, 0x0, 0x8, 0x4, 0xfffffffa, 0x80000001, 0xb7, 0x2, 0x8, 0x9, 0xfffff9ec, 0x1, 0x6, 0x4, 0x401, 0x401, 0x8, 0x4, 0x1, 0x7fff, 0x3, 0x8, 0x8, 0x9, 0x6, 0x2c, 0xa54, 0x40, 0xd634, 0x249d, 0x18, 0x4, 0xd, 0xa26c, 0x1, 0x3, 0x3ff, 0x6a, 0xffffff2a, 0x1, 0x6c, 0x3, 0xabeb, 0x0, 0x0, 0x5, 0x6, 0x4, 0x2, 0x6236, 0x1, 0x8, 0x2, 0x8000, 0x4000000, 0x180000, 0x5, 0x9, 0x3ff, 0x1000000, 0x3, 0x3ff, 0x2, 0x1, 0x9, 0x10000, 0x5, 0xb, 0x62a, 0x7, 0x5, 0xb15, 0x9, 0x2, 0x4, 0x10, 0x8000000, 0x80000001, 0x7fffffff, 0x5, 0x400, 0x7, 0x8, 0x5, 0x7fff, 0x3, 0x5, 0x7, 0x1, 0x800, 0x4, 0x8, 0xe700, 0x2, 0x4, 0x9, 0x7, 0x9, 0x6, 0x12, 0x4, 0xfffffff8, 0x7, 0x7, 0x7, 0x8, 0xfffffffc, 0x6, 0x0, 0x3, 0xcf2, 0x8, 0x7, 0x7ff, 0x7, 0x8, 0x8, 0x9, 0x5, 0x800, 0x7, 0x9f, 0x5, 0x7cd6, 0x2, 0x5e369cb1, 0x1, 0x7fffffff, 0x10, 0x2, 0x5, 0x10001, 0x8, 0x6, 0x8, 0xd4fb, 0x9, 0x6, 0x1, 0x5, 0x9, 0x5, 0xc, 0xfffffff1, 0x400, 0x5, 0x5, 0x3, 0x2, 0x5, 0x9, 0x1, 0x4b, 0x6, 0x78d, 0xc6, 0xec62, 0x4, 0x0, 0x5, 0x101, 0x2, 0x1, 0x9, 0x3365, 0x3, 0x3, 0xfffeffff, 0x3359, 0x200, 0xfffffff2, 0x7, 0x9, 0x5, 0x1, 0x9d, 0x7, 0x3ab, 0x5, 0x1, 0x7ff, 0x101, 0x8000, 0x34e0, 0x1, 0x8, 0x10000, 0x3, 0x7, 0x2, 0x1, 0x7, 0x9, 0x662, 0x6, 0x4db1, 0x3, 0x7fff, 0x6, 0xa021, 0x4, 0x3, 0x4, 0x1, 0x8, 0x40, 0x3, 0x80, 0x3, 0x7ff, 0x7, 0x4, 0x0, 0x3f00, 0xfffffff7, 0x7, 0x7, 0x2, 0x0, 0x1, 0x922c, 0x4, 0x400, 0x401, 0xfffffffe, 0x10, 0x9, 0x5, 0x2, 0x3, 0x4, 0x9, 0x6, 0xb4c, 0x8, 0x2, 0x1, 0x5000000, 0x5, 0x2, 0xf2, 0x6, 0x600d, 0xffff, 0x2, 0x0, 0xc1, 0xff, 0x8, 0xcc3, 0x400, 0x807, 0x5, 0x8, 0x1cce, 0xdb, 0x4, 0x8001, 0x1, 0x0, 0x1, 0x5, 0x1, 0x7, 0x8, 0x0, 0x7, 0x10, 0x5, 0x7f, 0x3, 0xea4, 0x5, 0x1, 0x2, 0x1, 0xf, 0x6, 0x1ff, 0x10001, 0xac73, 0x3, 0x0, 0x7fff, 0x9, 0xffffffff, 0x8, 0x8, 0x200, 0x6, 0xffffff8a, 0x1, 0x81, 0x800, 0x9, 0x8, 0x7ff, 0x101, 0x8000, 0x1, 0x7, 0x10000, 0x101, 0x8, 0x7f, 0x31aea55a, 0x0, 0x7, 0x8, 0x4, 0x1d7f, 0x1, 0x10, 0x2, 0x0, 0xcd6, 0x9, 0x10, 0x0, 0x7, 0x9, 0xfffff7db, 0x2, 0x4, 0x5, 0xc8, 0x4, 0x2, 0xb48, 0x3, 0xfffffffd, 0x2, 0x9, 0x8, 0x4, 0xb, 0x7, 0x8, 0x6, 0x0, 0x3, 0x3, 0x0, 0x4, 0x80000001, 0x1, 0x4, 0x5, 0x5, 0x189d, 0x1, 0x3ff, 0x5, 0x9, 0x9, 0x5, 0xb, 0xe9f, 0x7]}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c026000041000701000000000700"], 0x26c0}}, 0x4010) 11.139851113s ago: executing program 1 (id=2572): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) landlock_restrict_self(r3, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x4, 0x3}, &(0x7f0000000200)=0x8) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8000000) syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) unshare(0x20020480) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0x2, 0x4, 0x3a0, 0xffffffff, 0xd0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x7, 0x45}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@srh={{0x30}}, @common=@unspec=@mark={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40048}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000056fffffff00000000200000005700e0ff000002009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r6 = signalfd(0xffffffffffffffff, 0x0, 0x0) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d5304905) close(r7) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) fcntl$setstatus(r6, 0x4, 0x2c00) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582", @ANYRES16=r7], 0x0) syz_usb_control_io(r8, 0x0, 0x0) 9.911392855s ago: executing program 0 (id=2573): io_setup(0x10000, &(0x7f0000000800)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="2309fefffffffcffffff010000000500070000000000080009000000000006000200feffff7f08000a0004000100080017"], 0x3c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x40, r7, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}]}, 0x40}, 0x1, 0x0, 0x0, 0xc800}, 0x40c1) getsockopt$sock_buf(r1, 0x1, 0x1f, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x0) io_setup(0x9, &(0x7f0000002e40)) 8.589809449s ago: executing program 2 (id=2575): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xce4, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r0, 0x0, 0x100000000000000}, 0x38) semop(0x0, 0x0, 0x0) epoll_create1(0xc247a82949ce9376) fsopen(&(0x7f0000000580)='overlay\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x800, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {0x0}], 0x2, 0x0, 0x0) epoll_create1(0x80000) socket$netlink(0x10, 0x3, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x800) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) 8.328493925s ago: executing program 4 (id=2576): syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) 8.264687949s ago: executing program 2 (id=2577): mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%.,:', 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000003) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r5, r5, 0x0, 0x101) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) 7.683605352s ago: executing program 1 (id=2578): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYBLOB="ff83"], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 7.62172013s ago: executing program 1 (id=2579): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/bus/input/handlers\x00', 0x0, 0x0) pread64(r5, 0x0, 0x0, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) socket$packet(0x11, 0x2, 0x300) read$FUSE(0xffffffffffffffff, 0x0, 0x0) lsetxattr$security_capability(0x0, &(0x7f0000000100), 0x0, 0x0, 0x2) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000480)={{0x1, 0x200, 0x261, 0x1, 0xffffffff, 0x1}, 0x37a, [0x4, 0x9f, 0x6, 0x7, 0x10000, 0x7f, 0x9, 0xb, 0x17, 0x3, 0x7, 0x80000001, 0xffff0001, 0x81, 0xf24b, 0x81, 0x7, 0x5, 0xffffffff, 0xfffffffd, 0x3295, 0x8, 0x1, 0x6, 0x1, 0x20000, 0x2, 0x642c, 0x101, 0xc, 0x9, 0xff, 0x6, 0xb, 0x4, 0x6, 0x20, 0xdb, 0x943, 0x3, 0x3c, 0x9, 0xd9d3, 0x32c, 0x2, 0x0, 0x8, 0x10000, 0x0, 0x139, 0xffffffff, 0x0, 0x560, 0x7, 0x7, 0x2, 0x4, 0x6, 0x5, 0x4, 0x82bd, 0x4, 0x7f, 0x3, 0x101, 0x7, 0x4, 0x0, 0x46a5, 0x9, 0x2, 0x101, 0x2, 0x81, 0x2c4, 0x2, 0xf1, 0x3, 0x3, 0x9, 0x9, 0x7d, 0x2, 0x9, 0x6e, 0x8, 0xef46, 0x943, 0x1, 0x0, 0x8, 0x7f, 0x4, 0xda6, 0xf360, 0x8, 0x3, 0x9c2, 0x8001, 0x5, 0x100, 0x80000000, 0xffff7fff, 0xffffffff, 0x7, 0x80000000, 0x7, 0xeb, 0x932, 0xffff, 0x0, 0x3, 0x7fffffff, 0x3ff, 0x0, 0x3, 0x7, 0x8, 0x3, 0x10001, 0xfffffff9, 0x4, 0xd, 0x2e, 0xffff, 0x1, 0x0, 0x7, 0x2, 0x80, 0x80000001, 0x0, 0x4, 0xffff7fff, 0x9, 0x80000000, 0x2, 0xf280, 0x2, 0x57, 0x0, 0x1, 0x6, 0x0, 0x397, 0x8, 0x5, 0x9, 0x8, 0x7c4c, 0x5b, 0x2, 0xc, 0x1, 0x5, 0x20, 0x7, 0x6, 0x65d0, 0x10001, 0x6, 0x6, 0x3ff, 0x8, 0x3, 0x5, 0x6, 0x124a, 0x9, 0x1ff, 0x80, 0xc, 0x3, 0x4270000, 0x0, 0x6b994df8, 0x9, 0x6, 0x0, 0x9, 0x9, 0x1ff, 0x9, 0x1000, 0x3ff, 0xffffffff, 0x0, 0x6, 0xffffffff, 0x7ff, 0x311, 0x0, 0x7, 0xfffffdd9, 0x0, 0x79, 0x5, 0xfffffffc, 0x8, 0xd, 0x6944, 0xb, 0x2, 0x8f01, 0x10, 0x3, 0x8, 0x5, 0x40, 0x2, 0x40, 0x9, 0x8, 0x21, 0xffffffff, 0xdf6, 0x3, 0x6, 0x7, 0x9, 0x8, 0x101, 0x8, 0x0, 0x10001, 0x0, 0x81e8, 0x5, 0xa9e, 0x2, 0x9, 0x3, 0x8, 0x2, 0x1, 0x8, 0x1000, 0x80000000, 0x7, 0x7, 0x4, 0x4, 0x7, 0x5, 0xe, 0x2, 0x155, 0x3, 0x8, 0x9, 0x1000, 0xe4ec, 0x0, 0x6, 0xa, 0x0, 0x8, 0x6, 0x3ff, 0x8001, 0x9, 0xa770, 0x7, 0x3ff, 0x2, 0x5, 0xf, 0x3, 0x9, 0x8, 0x3ff, 0x6, 0x100, 0xfffffffe, 0x6, 0x10000, 0x3, 0x2, 0xffff, 0x80, 0x180, 0x1, 0x10000, 0xa672, 0x0, 0x1, 0xca6, 0x3, 0x1ff, 0x0, 0x5, 0x400, 0x6, 0x159, 0x0, 0x5, 0xff, 0x2, 0xd62, 0x77, 0x7fff, 0xbdd5, 0x7, 0x7fff, 0x7, 0x401, 0x100, 0xde87b73, 0x3, 0x5, 0x6, 0xd3d, 0x8, 0x10000000, 0x6, 0x7fffffff, 0x1, 0x3ff, 0x10000, 0xa, 0x2, 0x6, 0x6b, 0x5, 0x3, 0x46, 0x8, 0x2, 0x3, 0xfffffffd, 0x4, 0x1, 0x8, 0x8000, 0x0, 0x35d, 0xfffffffd, 0x100, 0x3, 0x2, 0x2, 0x5, 0xec59, 0x1, 0x666, 0x2, 0x10001, 0x2, 0x0, 0x0, 0x2, 0x6, 0x6, 0xb, 0x5, 0x7fffffff, 0x9b3, 0x100, 0xffc00000, 0x20000000, 0x6, 0x9, 0x0, 0x9, 0xff, 0xfffffffa, 0x6, 0x4, 0x2, 0x5, 0x7, 0x9, 0x5c69, 0x2, 0x7, 0x9, 0x3, 0x505, 0x7, 0x7f, 0x3, 0x5, 0x80, 0x2, 0x1, 0x7, 0x3, 0x9, 0x3, 0xc00000, 0x1, 0xffff, 0x7, 0x0, 0x0, 0x7, 0x6, 0x8, 0x7, 0xb, 0x5, 0x6, 0xff67, 0x3, 0x8, 0x55, 0xfff, 0xfffffffb, 0x7, 0x0, 0x30, 0x63, 0x8, 0xbc00, 0x8, 0xfffffc71, 0x3, 0xa5, 0x6, 0x0, 0xc2f, 0xd75, 0x4, 0x2, 0x9, 0xffffffc0, 0x6, 0x9, 0x8, 0x6, 0x9, 0x6, 0x2, 0x7ff, 0x0, 0x7f, 0x74d067f7, 0x8, 0x9, 0x8, 0x0, 0x7, 0x4, 0x2, 0x8, 0x6, 0x5, 0x9fd5, 0x4, 0x8, 0x8001, 0x8, 0x7, 0x401, 0x8, 0x1b800, 0x2dd, 0x7, 0x9, 0x2, 0x4, 0x5, 0x3, 0xae, 0x8001, 0x0, 0x1ff, 0xa7, 0x800, 0x2, 0x4, 0x7, 0x6, 0x0, 0x0, 0x68, 0x1, 0x7, 0x80000000, 0x8f, 0x1ff, 0x7, 0x7f, 0x0, 0xa0, 0x8, 0x0, 0x6, 0xea, 0x9, 0x6, 0x81, 0x4, 0x8, 0x4, 0x2, 0xfffffe00, 0x9, 0x7fff, 0x0, 0x3, 0xa1, 0x7, 0x7, 0x0, 0xb, 0x8, 0xfffffffb, 0x9, 0x0, 0xc, 0x3, 0xd2, 0x200, 0x7, 0x3, 0xf, 0x3, 0x3ff, 0x42, 0xb697, 0x4, 0x80000, 0x60, 0x9, 0x6, 0x4, 0x6, 0x6, 0xd, 0x2, 0x4, 0x80000001, 0x3, 0xb, 0x5b, 0x6, 0x6, 0x74, 0x8, 0x3, 0x9, 0x0, 0x4, 0x4, 0x7f, 0x3, 0xc, 0x4, 0x8, 0x935a, 0x85, 0x6, 0x6, 0x2, 0x400, 0x3, 0x4, 0x6, 0x9, 0x1, 0x34, 0x5, 0x6, 0x8001, 0x0, 0xffffffff, 0x9, 0x6, 0xbab, 0x8, 0x5, 0x1, 0x4, 0x7, 0x400, 0x2, 0x9, 0x1ff, 0x4, 0x8, 0x7fff, 0x3, 0x7, 0x1, 0x4, 0x7fff, 0x0, 0x1, 0xa, 0x3, 0xa, 0x10000, 0x5, 0x495, 0x4, 0x101, 0x180, 0x3, 0x60d, 0xffffff00, 0x2, 0x8, 0x79f5, 0x2cbd, 0x2, 0x9, 0x6, 0x2, 0x6, 0x9, 0x0, 0xfffff6b8, 0x7, 0x5, 0x10001, 0x7, 0x9, 0x3, 0x81, 0x1, 0x0, 0x10000, 0x80000001, 0x7, 0xff, 0xfffffff8, 0x7b1f, 0x7, 0xb9e3, 0x5, 0x0, 0x401, 0xd, 0x8e, 0x7, 0x3, 0x80000000, 0x7, 0x8, 0x3, 0x9, 0x0, 0x1, 0xee9, 0x12, 0x2, 0x80000000, 0x1000, 0x0, 0x6, 0x5, 0x1000000, 0x1, 0x100, 0x9, 0x7, 0x101, 0xcff7, 0x0, 0x1ff, 0x401, 0x6, 0x5ce, 0x0, 0x5, 0x0, 0x8, 0x4, 0xfffffffa, 0x80000001, 0xb7, 0x2, 0x8, 0x9, 0xfffff9ec, 0x1, 0x6, 0x4, 0x401, 0x401, 0x8, 0x4, 0x1, 0x7fff, 0x3, 0x8, 0x8, 0x9, 0x6, 0x2c, 0xa54, 0x40, 0xd634, 0x249d, 0x18, 0x4, 0xd, 0xa26c, 0x1, 0x3, 0x3ff, 0x6a, 0xffffff2a, 0x1, 0x6c, 0x3, 0xabeb, 0x0, 0x0, 0x5, 0x6, 0x4, 0x2, 0x6236, 0x1, 0x8, 0x2, 0x8000, 0x4000000, 0x180000, 0x5, 0x9, 0x3ff, 0x1000000, 0x3, 0x3ff, 0x2, 0x1, 0x9, 0x10000, 0x5, 0xb, 0x62a, 0x7, 0x5, 0xb15, 0x9, 0x2, 0x4, 0x10, 0x8000000, 0x80000001, 0x7fffffff, 0x5, 0x400, 0x7, 0x8, 0x5, 0x7fff, 0x3, 0x5, 0x7, 0x1, 0x800, 0x4, 0x8, 0xe700, 0x2, 0x4, 0x9, 0x7, 0x9, 0x6, 0x12, 0x4, 0xfffffff8, 0x7, 0x7, 0x7, 0x8, 0xfffffffc, 0x6, 0x0, 0x3, 0xcf2, 0x8, 0x7, 0x7ff, 0x7, 0x8, 0x8, 0x9, 0x5, 0x800, 0x7, 0x9f, 0x5, 0x7cd6, 0x2, 0x5e369cb1, 0x1, 0x7fffffff, 0x10, 0x2, 0x5, 0x10001, 0x8, 0x6, 0x8, 0xd4fb, 0x9, 0x6, 0x1, 0x5, 0x9, 0x5, 0xc, 0xfffffff1, 0x400, 0x5, 0x5, 0x3, 0x2, 0x5, 0x9, 0x1, 0x4b, 0x6, 0x78d, 0xc6, 0xec62, 0x4, 0x0, 0x5, 0x101, 0x2, 0x1, 0x9, 0x3365, 0x3, 0x3, 0xfffeffff, 0x3359, 0x200, 0xfffffff2, 0x7, 0x9, 0x5, 0x1, 0x9d, 0x7, 0x3ab, 0x5, 0x1, 0x7ff, 0x101, 0x8000, 0x34e0, 0x1, 0x8, 0x10000, 0x3, 0x7, 0x2, 0x1, 0x7, 0x9, 0x662, 0x6, 0x4db1, 0x3, 0x7fff, 0x6, 0xa021, 0x4, 0x3, 0x4, 0x1, 0x8, 0x40, 0x3, 0x80, 0x3, 0x7ff, 0x7, 0x4, 0x0, 0x3f00, 0xfffffff7, 0x7, 0x7, 0x2, 0x0, 0x1, 0x922c, 0x4, 0x400, 0x401, 0xfffffffe, 0x10, 0x9, 0x5, 0x2, 0x3, 0x4, 0x9, 0x6, 0xb4c, 0x8, 0x2, 0x1, 0x5000000, 0x5, 0x2, 0xf2, 0x6, 0x600d, 0xffff, 0x2, 0x0, 0xc1, 0xff, 0x8, 0xcc3, 0x400, 0x807, 0x5, 0x8, 0x1cce, 0xdb, 0x4, 0x8001, 0x1, 0x0, 0x1, 0x5, 0x1, 0x7, 0x8, 0x0, 0x7, 0x10, 0x5, 0x7f, 0x3, 0xea4, 0x5, 0x1, 0x2, 0x1, 0xf, 0x6, 0x1ff, 0x10001, 0xac73, 0x3, 0x0, 0x7fff, 0x9, 0xffffffff, 0x8, 0x8, 0x200, 0x6, 0xffffff8a, 0x1, 0x81, 0x800, 0x9, 0x8, 0x7ff, 0x101, 0x8000, 0x1, 0x7, 0x10000, 0x101, 0x8, 0x7f, 0x31aea55a, 0x0, 0x7, 0x8, 0x4, 0x1d7f, 0x1, 0x10, 0x2, 0x0, 0xcd6, 0x9, 0x10, 0x0, 0x7, 0x9, 0xfffff7db, 0x2, 0x4, 0x5, 0xc8, 0x4, 0x2, 0xb48, 0x3, 0xfffffffd, 0x2, 0x9, 0x8, 0x4, 0xb, 0x7, 0x8, 0x6, 0x0, 0x3, 0x3, 0x0, 0x4, 0x80000001, 0x1, 0x4, 0x5, 0x5, 0x189d, 0x1, 0x3ff, 0x5, 0x9, 0x9, 0x5, 0xb, 0xe9f, 0x7]}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x26c0}}, 0x4010) 7.566457921s ago: executing program 3 (id=2580): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200"/62, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068", 0x9, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/18, @ANYBLOB="ebffffffffffffff280012800b00010065"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7.498839766s ago: executing program 0 (id=2581): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x52132248838576c8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @value}, 0x94) r2 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r2, 0x29, 0x4b, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000004580), 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10060, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80, 0x23456}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchdir(r6) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x44) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 7.197374134s ago: executing program 4 (id=2582): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000003ac0)={0x0, [[0x3, 0x443, 0x40, 0x0, 0x4], [0x7f7f, 0x40, 0x0, 0xfffffffe, 0x0, 0x0, 0xff], [0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x8001]], '\x00', [{0x0, 0x21, 0x0, 0x1}, {0x0, 0x1ff}, {0x0, 0x1000}, {}, {0x0, 0xfffffff8}, {0x0, 0xfffffffc}, {0x0, 0xfffffffd}, {0x0, 0x2000000}, {}, {}, {0xd4}], '\x00', 0x7}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x24008000) socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="ac008ac5ab41a2361d3e86d1", 0xc, 0x20040045, &(0x7f00000000c0)={0xa, 0x4e21, 0x5ed1, @empty, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='yeah\x00', 0x5) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x80010, r4, 0xfffff000) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000002100010000000000000000000200000000000000000000000a30cad8b96ed2a7436b6c8b895bbed8fc388f106553a335585c81ca2204a40a90b4349c75d05203238535335b310a2f70f43a9f14cbba26d79429c17b89da7e67886c27bf0aeb5d6558a7da06e178752a2309d09a3477849a34cf1a7fac37f38788a4"], 0x1c}}, 0x44044) openat$dsp1(0xffffffffffffff9c, 0x0, 0x4000, 0x0) 6.613819103s ago: executing program 3 (id=2583): socket$inet6(0xa, 0x2, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000180), 0x4a000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = eventfd(0x401) write$eventfd(r2, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106d049cc20000000000010902"], 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="4016fb000000eaf62cbe9095752fb3392f1cc68561"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000003d0007ff0f00000000000000037c000004"], 0x18}}, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x12000021) fsopen(&(0x7f0000000140)='vfat\x00', 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x3c, r5, 0x1, 0x170bd2c, 0x8000, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x80) 4.76750243s ago: executing program 1 (id=2584): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xce4, r2}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r2, 0x0, 0x100000000000000}, 0x38) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x1}], 0x1, 0x0) semop(0x0, 0x0, 0x0) epoll_create1(0xc247a82949ce9376) fsopen(&(0x7f0000000580)='overlay\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {0x0}], 0x2, 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x48, 0x7, r3, 0x0, 0x1, 0x0, 0x5, 0xffffffffffff1710}) epoll_create1(0x80000) socket$netlink(0x10, 0x3, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x800) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) 4.735441524s ago: executing program 2 (id=2585): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200"/62, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068", 0x9, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/18, @ANYBLOB="ebffffffffffffff280012800b00010065"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.397585307s ago: executing program 0 (id=2586): mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f00000000c0)='%.,:', 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000003) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r5, r5, 0x0, 0x101) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) 4.105611611s ago: executing program 2 (id=2587): io_setup(0x10000, &(0x7f0000000800)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="2309fefffffffcffffff010000000500070000000000080009000000000006000200feffff7f08000a0004000100080017"], 0x3c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x40, r7, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}]}, 0x40}, 0x1, 0x0, 0x0, 0xc800}, 0x40c1) getsockopt$sock_buf(r1, 0x1, 0x1f, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x0) io_setup(0x9, &(0x7f0000002e40)) 3.932311358s ago: executing program 4 (id=2588): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) landlock_restrict_self(r3, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x4, 0x3}, &(0x7f0000000200)=0x8) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8000000) syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) unshare(0x20020480) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0x2, 0x4, 0x3a0, 0xffffffff, 0xd0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x7, 0x45}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@srh={{0x30}}, @common=@unspec=@mark={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40048}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000056fffffff00000000200000005700e0ff000002009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r6 = signalfd(0xffffffffffffffff, 0x0, 0x0) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d5304905) close(r7) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) fcntl$setstatus(r6, 0x4, 0x2c00) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582", @ANYRES16=r7], 0x0) syz_usb_control_io(r8, 0x0, 0x0) 2.807184869s ago: executing program 2 (id=2589): mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%.,:', 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000003) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r5, r5, 0x0, 0x101) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) 2.428074499s ago: executing program 1 (id=2590): mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000003) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r5, r5, 0x0, 0x101) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) 2.233845387s ago: executing program 3 (id=2591): socket$inet6(0xa, 0x80001, 0x0) socket$l2tp6(0xa, 0x2, 0x73) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f00000000c0)={0x0, 0x41, 0x3, 0x2}, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x34) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000002c0)=@gcm_256={{0x304}, "e9bb07f400", "7d376431316d2e069b245c4113b4a67cde08bf5fa87e53dda73856be09fd4e45", "68faa2b5", "ffffffffffffffff"}, 0x38) 1.925824455s ago: executing program 0 (id=2592): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x9, 0x9, 0xffff}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.249828165s ago: executing program 0 (id=2593): mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%.,:', 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000003) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r5, r5, 0x0, 0x101) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) 69.730404ms ago: executing program 1 (id=2594): mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%.,:', 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000003) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r5, r5, 0x0, 0x101) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) 0s ago: executing program 2 (id=2595): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00']) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) r5 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000000680)={0x9, {"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", 0x1000}}, 0x1006) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008094}, 0x4) sendmsg$IPCTNL_MSG_CT_GET(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}, 0x8103}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/180, 0xb4}, {0x0}, {&(0x7f0000000580)=""/84, 0x54}, {&(0x7f00000016c0)=""/217, 0xd9}], 0x4}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xb0}, {{0x0, 0x0, 0x0}, 0x6}, {{&(0x7f0000000600)=@isdn, 0x80, &(0x7f0000000040)=[{&(0x7f00000017c0)=""/98, 0x62}], 0x1}, 0xc}], 0x9, 0x20, 0x0) kernel console output (not intermixed with test programs): [T13032] macvlan0: entered allmulticast mode [ 731.598511][ T5881] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 731.618737][T13032] macvlan1: entered allmulticast mode [ 731.662176][ T5881] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 731.676637][T13032] ipvlan0: entered allmulticast mode [ 731.694922][T13032] ipvlan1: entered allmulticast mode [ 731.700559][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.741015][T13032] veth0_macvtap: entered allmulticast mode [ 731.781047][T13056] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 731.792586][ T5881] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 731.849522][T13032] macvtap0: entered allmulticast mode [ 731.945095][T13032] geneve0: entered allmulticast mode [ 732.050900][T13032] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.071881][T10637] tipc: Subscription rejected, illegal request [ 732.085566][T13032] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.136653][T13032] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.153338][T13032] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.170491][T13032] geneve1: entered allmulticast mode [ 732.186361][T13032] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 732.205944][T13032] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 732.245159][T13032] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 732.284795][T13032] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 732.304876][T13032] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 732.324222][T13032] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 732.348760][T13032] bridge1: entered allmulticast mode [ 732.375559][T13032] bridge2: entered allmulticast mode [ 732.396600][T13032] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 732.405854][T13032] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 732.414808][T13032] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 732.423866][T13032] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 732.484004][T13032] vxlan0: entered allmulticast mode [ 732.506347][T13032] macvtap1: left promiscuous mode [ 732.520562][T13032] veth0_to_hsr.3: entered allmulticast mode [ 732.533950][T13032] bond1: entered allmulticast mode [ 732.542770][T13032] vcan0: entered allmulticast mode [ 732.558161][T13032] ip6gre1: entered allmulticast mode [ 733.322223][ T5881] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 733.395889][T13082] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1746'. [ 733.451859][T13071] kvm: kvm [13070]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x91 [ 733.719627][ T5881] usb 2-1: device descriptor read/64, error -71 [ 734.009527][ T5881] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 734.179528][ T5881] usb 2-1: device descriptor read/64, error -71 [ 734.199833][ T5913] usb 5-1: USB disconnect, device number 94 [ 734.359031][ T5881] usb usb2-port1: attempt power cycle [ 734.939529][ T5881] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 734.981847][ T5881] usb 2-1: device descriptor read/8, error -71 [ 735.229721][ T5881] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 735.239778][T13101] input: syz0 as /devices/virtual/input/input63 [ 735.261524][ T5881] usb 2-1: device descriptor read/8, error -71 [ 735.548714][ T30] audit: type=1326 audit(1750765133.427:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13099 comm="syz.2.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ddd58e929 code=0x7ffc0000 [ 735.554817][ T5881] usb usb2-port1: unable to enumerate USB device [ 735.694396][ T30] audit: type=1326 audit(1750765133.577:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13099 comm="syz.2.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ddd58e929 code=0x7ffc0000 [ 735.764095][ T30] audit: type=1326 audit(1750765133.577:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13099 comm="syz.2.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f4ddd58e929 code=0x7ffc0000 [ 735.950020][ T30] audit: type=1326 audit(1750765133.577:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13099 comm="syz.2.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ddd58e929 code=0x7ffc0000 [ 736.195598][ T30] audit: type=1326 audit(1750765133.577:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13099 comm="syz.2.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4ddd58e929 code=0x7ffc0000 [ 736.269789][ T30] audit: type=1326 audit(1750765133.577:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13099 comm="syz.2.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ddd58e929 code=0x7ffc0000 [ 736.359676][ T30] audit: type=1326 audit(1750765133.577:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13099 comm="syz.2.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f4ddd58e929 code=0x7ffc0000 [ 736.638822][T13111] netlink: 'syz.2.1752': attribute type 27 has an invalid length. [ 736.788258][T13112] netlink: 'syz.2.1752': attribute type 27 has an invalid length. [ 736.935021][T13111] tipc: Resetting bearer [ 736.997310][T13111] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.007055][T13111] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.027017][T13111] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.071863][T13111] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.257747][T13111] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 737.281860][T13111] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 738.291943][T13128] fuse: Unknown parameter '00000000000000000000' [ 740.055526][T13118] syz.3.1755 (13118): drop_caches: 2 [ 741.687155][T13167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1765'. [ 741.845902][T13168] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 743.849764][ T5925] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 744.087533][ T5925] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 744.097991][ T5925] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 744.148971][ T5925] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 744.236472][ T5925] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 744.269643][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.307818][ T5925] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 744.755545][T13183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.767423][T13183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.820179][ T5964] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 744.843977][ T5925] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 744.887089][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 744.935100][T13194] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1) [ 744.999592][ T5964] usb 1-1: Using ep0 maxpacket: 32 [ 745.059627][ T5964] usb 1-1: config 0 has an invalid interface number: 183 but max is 0 [ 745.088296][ T5964] usb 1-1: config 0 has no interface number 0 [ 745.112046][ T5964] usb 1-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528 [ 745.177478][ T5964] usb 1-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 745.189467][ T5925] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 745.304754][ T5964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.313249][ T5964] usb 1-1: Product: syz [ 745.317433][ T5964] usb 1-1: Manufacturer: syz [ 745.322321][ T5964] usb 1-1: SerialNumber: syz [ 745.330102][ T5964] usb 1-1: config 0 descriptor?? [ 745.336495][T13191] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 745.431434][ T5925] usb 3-1: Using ep0 maxpacket: 16 [ 745.536306][ T5925] usb 3-1: config index 0 descriptor too short (expected 1828, got 36) [ 745.550907][ T5925] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 745.559173][ T5925] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 745.585995][ T5925] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 745.672176][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 745.788671][ T5925] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 745.989094][ T5925] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 746.016471][T13202] netlink: 'syz.0.1770': attribute type 10 has an invalid length. [ 746.026091][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.080594][T13202] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1770'. [ 746.090197][ T5925] usb 3-1: Product: syz [ 746.094410][ T5925] usb 3-1: Manufacturer: syz [ 746.099070][ T5925] usb 3-1: SerialNumber: syz [ 746.186374][ T5925] usb 3-1: config 0 descriptor?? [ 746.205829][ T5925] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected [ 746.213923][ T5925] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 87 [ 746.221767][ T5925] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 746.234197][ T5925] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 746.259961][ T5925] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 746.430092][ T5925] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 746.481617][ T5925] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 746.551979][ T5925] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 746.567140][ T5925] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 746.577603][ T5925] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 746.585409][ T5925] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3 [ 746.599519][ T5925] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 746.607220][ T5925] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86 [ 746.615031][ T5924] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 746.622931][ T5925] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 746.632942][ T5925] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 746.851773][ T5924] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 747.123378][T13194] tipc: Enabled bearer , priority 22 [ 747.190352][ T5924] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 747.204610][ T5924] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 747.215635][ T5924] usb 4-1: config 0 interface 0 has no altsetting 0 [ 747.238223][ T5924] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 747.247365][ T5924] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 747.268953][ T5924] usb 4-1: config 0 interface 0 has no altsetting 0 [ 747.304716][ T5925] usb 2-1: USB disconnect, device number 107 [ 747.369850][ T5924] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 747.388314][ T5924] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 747.429589][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.435925][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.522610][ T5924] usb 4-1: config 0 interface 0 has no altsetting 0 [ 747.783735][ T5924] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 747.803336][ T5924] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 747.826180][ T5924] usb 4-1: config 0 interface 0 has no altsetting 0 [ 748.087682][ T5924] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 748.100955][ T5924] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 748.112355][ T5924] usb 4-1: config 0 interface 0 has no altsetting 0 [ 748.201099][ T5924] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 748.210535][ T5924] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 748.223436][ T5924] usb 4-1: config 0 interface 0 has no altsetting 0 [ 748.247510][ T5924] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 748.257076][ T5924] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 748.270915][ T5924] usb 4-1: config 0 interface 0 has no altsetting 0 [ 748.286234][ T5924] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 748.295774][ T5924] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 748.327319][ T5924] usb 4-1: config 0 interface 0 has no altsetting 0 [ 748.351168][ T5924] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 748.360466][ T5924] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 748.368929][ T5924] usb 4-1: Product: syz [ 748.373699][ T5924] usb 4-1: Manufacturer: syz [ 748.380693][ T5924] usb 4-1: SerialNumber: syz [ 748.488777][ T5924] usb 4-1: config 0 descriptor?? [ 748.524316][ T5924] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 748.630845][ T5924] usb 3-1: USB disconnect, device number 88 [ 748.693380][ T5924] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 748.732156][ T5925] usb 4-1: USB disconnect, device number 81 [ 748.749721][ T5925] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 748.829216][ T5924] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 748.884107][ T5924] keyspan 3-1:0.0: device disconnected [ 750.335018][ T5964] net1080 1-1:0.183: probe with driver net1080 failed with error -71 [ 750.386828][ T5964] usb 1-1: USB disconnect, device number 75 [ 750.642971][T13229] usb usb8: usbfs: process 13229 (syz.0.1778) did not claim interface 0 before use [ 751.345898][ T30] audit: type=1800 audit(1750765149.177:635): pid=13242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1781" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 753.589732][ T5893] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 753.751711][ T5893] usb 1-1: Using ep0 maxpacket: 16 [ 753.761460][ T5893] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 753.789630][ T5893] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 753.809564][ T5893] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 753.838036][ T5893] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 753.849079][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 753.869293][ T5893] usb 1-1: SerialNumber: syz [ 753.887557][T13264] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 753.959502][ T5925] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 754.125681][ T5893] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 754.143459][ T5925] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 754.169587][ T5925] usb 5-1: config 0 has no interface number 0 [ 754.173843][ T5893] usb 1-1: USB disconnect, device number 76 [ 754.175749][ T5925] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.239345][ T5925] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.325701][ T5925] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 754.365514][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.440347][ T5925] usb 5-1: config 0 descriptor?? [ 754.649767][ T5893] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 754.859605][ T5893] usb 2-1: Using ep0 maxpacket: 8 [ 754.883110][ T5893] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 754.892572][ T5893] usb 2-1: config 2 has no interface number 0 [ 754.898888][ T5893] usb 2-1: config 2 interface 31 has no altsetting 0 [ 754.917997][T13282] program syz.2.1789 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 754.939242][T13282] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 755.127828][ T5893] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 755.137214][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.146438][ T5893] usb 2-1: Product: syz [ 755.151146][ T5893] usb 2-1: Manufacturer: syz [ 755.157146][ T5893] usb 2-1: SerialNumber: syz [ 755.188393][ T5893] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22 [ 755.229718][ T5964] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 755.248606][ T5925] prodikeys 0003:041E:2801.001C: unknown main item tag 0x4 [ 755.262645][ T30] audit: type=1326 audit(1750765153.147:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13286 comm="syz.0.1790" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f578878e929 code=0x0 [ 755.289613][ T5925] prodikeys 0003:041E:2801.001C: unknown main item tag 0x3 [ 755.404005][ T5964] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 755.414342][ T5964] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 755.414824][ T5925] prodikeys 0003:041E:2801.001C: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input1 [ 755.497199][ T5925] hid_prodikeys: hid-prodikeys: failed to find output report [ 755.497199][ T5925] [ 755.554325][ T5964] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 755.563944][ T3078] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 755.599469][ T5964] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 755.633241][ T5925] usb 5-1: USB disconnect, device number 95 [ 755.674765][ T5964] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 755.735289][ T3078] usb 1-1: Using ep0 maxpacket: 16 [ 755.755243][T13289] fido_id[13289]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 755.782526][ T3078] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 755.799267][ T3078] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 755.828161][ T3078] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 755.847499][ T5964] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 755.873534][ T5964] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 755.881853][ T3078] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 755.892696][ T5964] usb 3-1: Product: syz [ 755.896872][ T5964] usb 3-1: Manufacturer: syz [ 755.910496][ T3078] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 755.943371][ T3078] usb 1-1: config 0 has no interface number 0 [ 755.953492][ T3078] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 755.966361][ T5964] cdc_wdm 3-1:1.0: skipping garbage [ 755.979257][ T5964] cdc_wdm 3-1:1.0: skipping garbage [ 755.992242][ T5964] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 755.998963][ T3078] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 756.012756][ T5964] cdc_wdm 3-1:1.0: Unknown control protocol [ 756.020574][ T3078] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 756.036899][ T3078] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 756.068175][ T3078] usb 1-1: config 0 interface 125 has no altsetting 0 [ 756.078026][ T3078] usb 1-1: config 0 interface 125 has no altsetting 2 [ 756.088083][ T3078] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 756.099278][ T3078] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.107753][ T3078] usb 1-1: Product: syz [ 756.121048][ T3078] usb 1-1: Manufacturer: syz [ 756.126647][ T3078] usb 1-1: SerialNumber: syz [ 756.149020][ T3078] usb 1-1: config 0 descriptor?? [ 756.202696][ T3078] usb 1-1: selecting invalid altsetting 2 [ 757.761638][ T3078] usb 3-1: USB disconnect, device number 89 [ 757.816488][ T5925] usb 2-1: USB disconnect, device number 108 [ 757.828629][ T1208] kworker/0:2 (1208) used greatest stack depth: 15928 bytes left [ 758.086909][T13304] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1795'. [ 758.119293][T13304] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1795'. [ 758.128581][T13304] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1795'. [ 758.148410][T13304] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1795'. [ 758.354617][ T5925] usb 1-1: USB disconnect, device number 77 [ 759.764957][T13327] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 759.979454][ T5925] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 760.379324][ T5925] usb 1-1: config 0 has no interfaces? [ 760.392953][ T5925] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 760.402059][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.410109][ T5925] usb 1-1: Product: syz [ 760.414670][ T5925] usb 1-1: Manufacturer: syz [ 760.433663][ T5925] usb 1-1: SerialNumber: syz [ 760.442100][ T5925] usb 1-1: config 0 descriptor?? [ 760.619625][ T5924] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 760.707936][T13332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.717838][T13332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.889474][ T5924] usb 2-1: Using ep0 maxpacket: 8 [ 760.908099][ T5924] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 760.919829][ T5924] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 760.943536][ T5924] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 760.975806][ T5924] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 761.392660][ T5924] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 761.414267][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.442920][ T5924] usbtmc 2-1:16.0: bulk endpoints not found [ 762.087824][T13357] pim6reg0: tun_chr_ioctl cmd 1074025680 [ 762.256776][T13359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1808'. [ 762.988168][ T5924] usb 1-1: USB disconnect, device number 78 [ 763.482107][ T5893] usb 2-1: USB disconnect, device number 109 [ 763.895951][T13376] batadv_slave_0: entered promiscuous mode [ 765.539605][ T5925] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 765.919959][ T5925] usb 5-1: config 0 has no interfaces? [ 765.941772][ T5925] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 765.961236][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.988290][ T5925] usb 5-1: Product: syz [ 765.996003][ T5925] usb 5-1: Manufacturer: syz [ 766.010242][ T5925] usb 5-1: SerialNumber: syz [ 766.024362][ T5925] usb 5-1: config 0 descriptor?? [ 766.552016][ T5924] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 766.733708][ T5924] usb 3-1: Using ep0 maxpacket: 8 [ 766.754363][ T5924] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 766.766097][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.774624][ T5924] usb 3-1: Product: syz [ 766.778937][ T5924] usb 3-1: Manufacturer: syz [ 766.793842][ T5924] usb 3-1: SerialNumber: syz [ 766.884953][ T5924] usb 3-1: config 0 descriptor?? [ 767.105512][ T5924] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 767.179522][ T5925] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 767.287482][T13406] netlink: 468 bytes leftover after parsing attributes in process `syz.1.1819'. [ 767.330389][ T5925] usb 1-1: Using ep0 maxpacket: 16 [ 767.418609][ T5925] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 767.455009][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.487654][ T5925] usb 1-1: config 0 descriptor?? [ 767.546111][ T5925] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 767.789959][ T5893] usb 5-1: USB disconnect, device number 96 [ 768.057184][ T5925] gspca_sonixj: reg_r err -32 [ 768.101701][ T5925] sonixj 1-1:0.0: probe with driver sonixj failed with error -32 [ 769.296159][T13421] usb usb8: usbfs: process 13421 (syz.3.1820) did not claim interface 0 before use [ 769.981873][ T5893] usb 1-1: USB disconnect, device number 79 [ 770.500639][T13428] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 770.833334][ T5924] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 771.007883][ T5924] usb 3-1: USB disconnect, device number 90 [ 772.929493][ T5924] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 773.374425][ T5924] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 773.577721][ T5924] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 773.669463][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.701607][ T5924] usb 5-1: Product: syz [ 773.705895][ T5924] usb 5-1: Manufacturer: syz [ 773.728676][ T5924] usb 5-1: SerialNumber: syz [ 774.076995][ T5924] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 97 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 774.145382][ T5924] usb 5-1: USB disconnect, device number 97 [ 774.199447][ T5893] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 774.265079][ T5924] usblp0: removed [ 774.304478][T13458] syz.4.1828: attempt to access beyond end of device [ 774.304478][T13458] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 774.688732][ T5893] usb 4-1: config 0 has no interfaces? [ 774.717983][ T5893] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 774.727525][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.743305][ T5893] usb 4-1: Product: syz [ 774.764632][ T5893] usb 4-1: Manufacturer: syz [ 774.991966][ T5893] usb 4-1: SerialNumber: syz [ 775.203960][ T5893] usb 4-1: config 0 descriptor?? [ 776.293778][ T5964] hid-generic 0000:0005:0009.001D: unknown main item tag 0x1 [ 776.316731][ T5964] hid-generic 0000:0005:0009.001D: unknown main item tag 0x0 [ 776.449486][ T5964] hid-generic 0000:0005:0009.001D: unknown main item tag 0x0 [ 776.470747][ T5964] hid-generic 0000:0005:0009.001D: hidraw0: HID v0.02 Device [syz0] on syz1 [ 776.716046][T13494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1837'. [ 777.259523][ T5924] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 777.309249][T13490] fido_id[13490]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 777.409538][ T5924] usb 5-1: device descriptor read/64, error -71 [ 777.464890][ T5964] usb 4-1: USB disconnect, device number 82 [ 777.664080][ T5924] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 777.799527][ T5924] usb 5-1: device descriptor read/64, error -71 [ 777.909499][ T5893] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 777.929734][ T5924] usb usb5-port1: attempt power cycle [ 778.493058][ T5893] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 778.493060][ T5924] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 778.510497][ T5924] usb 5-1: device descriptor read/8, error -71 [ 778.570492][ T5893] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 778.732478][ T5893] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 778.784909][ T5924] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 778.833035][ T5924] usb 5-1: device descriptor read/8, error -71 [ 779.068194][ T5893] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 779.078563][ T5924] usb usb5-port1: unable to enumerate USB device [ 779.110203][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.441190][ T5893] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 779.674009][ T5893] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 779.686348][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 779.770162][T13505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.779254][T13505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 780.909475][ T5924] usb 2-1: new full-speed USB device number 110 using dummy_hcd [ 781.281212][ T5924] usb 2-1: unable to get BOS descriptor or descriptor too short [ 781.301363][ T5924] usb 2-1: not running at top speed; connect to a high speed hub [ 781.327516][ T5924] usb 2-1: config 1 has an invalid interface descriptor of length 4, skipping [ 781.339883][ T5924] usb 2-1: config 1 has an invalid descriptor of length 161, skipping remainder of the config [ 781.385986][ T5924] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 781.841409][ T5924] usb 2-1: config 1 interface 0 altsetting 2 has an invalid endpoint descriptor of length 2, skipping [ 781.867772][ T5924] usb 2-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 781.939483][ T5925] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 781.978263][ T5924] usb 2-1: config 1 interface 0 has no altsetting 0 [ 782.035345][ T5924] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 782.045291][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.056774][ T5924] usb 2-1: Product: syz [ 782.061133][ T5924] usb 2-1: Manufacturer: syz [ 782.065725][ T5924] usb 2-1: SerialNumber: syz [ 782.205665][ T5925] usb 1-1: config 0 has no interfaces? [ 782.217827][ T5925] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 782.287866][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.297548][ T5925] usb 1-1: Product: syz [ 782.405183][ T5925] usb 1-1: Manufacturer: syz [ 782.472631][ T5925] usb 1-1: SerialNumber: syz [ 782.499942][ T5925] usb 1-1: config 0 descriptor?? [ 782.528772][ T5964] usb 3-1: USB disconnect, device number 91 [ 785.530970][T13582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1855'. [ 785.543314][T13582] input: syz0 as /devices/virtual/input/input64 [ 786.341408][ T5881] usb 1-1: USB disconnect, device number 80 [ 786.432761][ T5924] usb 2-1: USB disconnect, device number 110 [ 786.869624][ T5893] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 787.140494][ T5893] usb 1-1: Using ep0 maxpacket: 8 [ 787.181660][ T5893] usb 1-1: config 0 has an invalid interface number: 130 but max is 0 [ 787.621652][ T5893] usb 1-1: config 0 has no interface number 0 [ 787.676405][ T5893] usb 1-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 787.687700][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.697040][ T5893] usb 1-1: Product: syz [ 787.705028][ T5893] usb 1-1: Manufacturer: syz [ 787.726678][ T5893] usb 1-1: SerialNumber: syz [ 787.761741][ T5893] usb 1-1: config 0 descriptor?? [ 787.812950][ T5893] as10x_usb: device has been detected [ 787.845028][ T5893] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 788.395807][ T5893] usb 1-1: DVB: registering adapter 2 frontend 0 (PCTV Systems picoStick (74e))... [ 788.489492][ T5893] as10x_usb: error during firmware upload part1 [ 788.504670][ T5893] Registered device PCTV Systems picoStick (74e) [ 789.831473][ T5924] usb 1-1: USB disconnect, device number 81 [ 789.966099][ T5924] Unregistered device PCTV Systems picoStick (74e) [ 789.981093][ T5924] as10x_usb: device has been disconnected [ 799.608500][T13741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1888'. [ 800.619717][ T5924] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 801.081899][ T5924] usb 3-1: Using ep0 maxpacket: 32 [ 801.090504][ T5924] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 801.129524][ T5924] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 801.181922][ T5924] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 801.399449][ T5924] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 801.429463][ T5924] usb 3-1: config 0 interface 0 has no altsetting 0 [ 801.483648][ T5924] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 801.501571][ T5924] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 801.517779][ T5924] usb 3-1: Product: syz [ 801.522574][ T5924] usb 3-1: Manufacturer: syz [ 801.527332][ T5924] usb 3-1: SerialNumber: syz [ 801.538975][ T5924] usb 3-1: config 0 descriptor?? [ 801.548327][ T5924] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 801.563038][ T5924] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 802.445451][T13758] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 802.472412][ T5924] usb 3-1: USB disconnect, device number 92 [ 802.478428][ C0] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 802.520383][ T5924] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 802.862328][T13776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1895'. [ 804.139474][ T5924] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 804.307084][ T5924] usb 5-1: config 0 has no interfaces? [ 804.492450][ T5924] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 804.529456][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.576237][ T5924] usb 5-1: Product: syz [ 804.613566][ T5924] usb 5-1: Manufacturer: syz [ 804.636926][ T5924] usb 5-1: SerialNumber: syz [ 804.700087][ T5924] usb 5-1: config 0 descriptor?? [ 806.239464][ T3078] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 806.527264][ T3078] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 806.554527][ T3078] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.566557][ T3078] usb 2-1: config 0 descriptor?? [ 806.599303][ T3078] gspca_main: spca508-2.14.0 probing 8086:0110 [ 806.781870][ T3078] gspca_spca508: reg_read err -32 [ 806.787915][ T3078] gspca_spca508: reg_read err -32 [ 806.844150][ T3078] gspca_spca508: reg_read err -32 [ 806.952699][ T5893] usb 5-1: USB disconnect, device number 102 [ 807.360443][ T3078] gspca_spca508: reg_read err -110 [ 807.460208][ T3078] gspca_spca508: reg write: error -32 [ 807.472445][ T3078] spca508 2-1:0.0: probe with driver spca508 failed with error -32 [ 808.479247][ T3078] usb 2-1: USB disconnect, device number 111 [ 808.859637][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.866204][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.000712][ T5881] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 810.224488][T13858] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 810.290859][ T5881] usb 1-1: Using ep0 maxpacket: 32 [ 810.307473][ T5881] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 810.319244][ T5881] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 810.395442][ T5881] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 810.408160][ T5881] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 810.423875][ T5881] usb 1-1: config 0 interface 0 has no altsetting 0 [ 810.446189][ T5881] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 810.576180][ T5881] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 810.599462][ T5881] usb 1-1: Product: syz [ 810.613222][ T5881] usb 1-1: Manufacturer: syz [ 810.619606][ T5881] usb 1-1: SerialNumber: syz [ 810.642838][ T5881] usb 1-1: config 0 descriptor?? [ 810.658839][ T5881] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 810.718584][ T5881] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 811.555761][T13870] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 811.571278][ T5881] usb 1-1: USB disconnect, device number 82 [ 811.571277][ C1] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 811.600674][ T5881] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 813.246083][T13895] netlink: 'syz.2.1924': attribute type 1 has an invalid length. [ 815.423341][T13919] block device autoloading is deprecated and will be removed. [ 815.778755][T13923] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 822.520125][ T5881] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 822.791568][ T5881] usb 1-1: Using ep0 maxpacket: 8 [ 822.811585][ T5881] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 822.821441][ T5881] usb 1-1: config 2 has no interface number 0 [ 822.833733][ T5881] usb 1-1: config 2 interface 31 has no altsetting 0 [ 822.917726][ T5881] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 822.933920][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.104050][ T5881] usb 1-1: Product: syz [ 823.160972][ T5881] usb 1-1: Manufacturer: syz [ 823.181969][ T5881] usb 1-1: SerialNumber: syz [ 823.464542][ T5881] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [ 825.022526][T14024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1958'. [ 825.113358][T14026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1959'. [ 825.446120][T14033] netlink: 'syz.4.1960': attribute type 1 has an invalid length. [ 825.754438][ T5881] usb 1-1: USB disconnect, device number 83 [ 826.370078][T14042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1962'. [ 826.421777][T14043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1961'. [ 833.132599][ T5881] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 833.300873][ T5881] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 833.337791][ T5881] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 833.378439][ T5881] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 833.392153][T14127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1982'. [ 833.562474][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.612784][T14121] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 833.625763][ T5881] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 833.948030][ T5881] usb 3-1: USB disconnect, device number 93 [ 838.355724][T14169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1992'. [ 840.964703][ T5924] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 841.228927][T14204] netlink: 'syz.1.2000': attribute type 1 has an invalid length. [ 841.680199][ T5924] usb 1-1: Using ep0 maxpacket: 16 [ 841.792267][ T5924] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 841.839529][ T5924] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 841.871941][ T5924] usb 1-1: config 0 has no interface number 0 [ 841.878072][ T5924] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 841.915945][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.956171][ T5924] usb 1-1: config 0 descriptor?? [ 843.790428][ T5913] usb 1-1: USB disconnect, device number 84 [ 846.424162][T14272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 846.867490][T14278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2021'. [ 851.449696][ T5913] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 851.629689][ T5913] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 851.660502][ T5913] usb 2-1: config 0 interface 0 has no altsetting 0 [ 851.722778][ T5913] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 851.819599][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 851.848245][ T5913] usb 2-1: Product: syz [ 851.863500][ T5913] usb 2-1: Manufacturer: syz [ 851.879068][ T5913] usb 2-1: SerialNumber: syz [ 851.913482][ T5913] usb 2-1: config 0 descriptor?? [ 851.956183][ T5913] usb 2-1: selecting invalid altsetting 0 [ 852.189689][ T5924] usb 2-1: USB disconnect, device number 112 [ 853.179832][ T5913] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 853.349454][ T5913] usb 4-1: Using ep0 maxpacket: 32 [ 853.367703][ T5913] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 853.376432][ T5913] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 853.398853][ T5913] usb 4-1: config 0 interface 0 has no altsetting 0 [ 853.515999][ T5913] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 853.535455][ T5913] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 853.574926][ T5913] usb 4-1: Product: syz [ 853.585633][ T5913] usb 4-1: Manufacturer: syz [ 853.609811][ T5913] usb 4-1: SerialNumber: syz [ 853.639028][ T5913] usb 4-1: config 0 descriptor?? [ 853.689866][ T5913] ldusb 4-1:0.0: Interrupt in endpoint not found [ 855.876581][ T3078] usb 4-1: USB disconnect, device number 83 [ 856.529521][ T3078] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 856.691075][ T3078] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 856.707984][ T3078] usb 4-1: config 0 interface 0 has no altsetting 0 [ 856.740385][ T3078] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 856.761912][ T3078] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 856.774661][ T3078] usb 4-1: Product: syz [ 856.792151][ T3078] usb 4-1: Manufacturer: syz [ 856.799211][ T3078] usb 4-1: SerialNumber: syz [ 856.844955][ T3078] usb 4-1: config 0 descriptor?? [ 856.872711][ T3078] usb 4-1: selecting invalid altsetting 0 [ 857.079257][ T3078] usb 4-1: USB disconnect, device number 84 [ 857.322830][T10087] udevd[10087]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 858.081578][T14421] bond0: option mode: unable to set because the bond device has slaves [ 858.399528][ T3078] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 858.579512][ T3078] usb 4-1: Using ep0 maxpacket: 32 [ 858.596793][ T3078] usb 4-1: config 0 interface 0 has no altsetting 0 [ 858.611670][ T3078] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 858.649410][ T3078] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.657708][ T3078] usb 4-1: Product: syz [ 858.681882][ T3078] usb 4-1: Manufacturer: syz [ 858.698045][ T3078] usb 4-1: SerialNumber: syz [ 858.738131][ T3078] usb 4-1: config 0 descriptor?? [ 859.167474][ T3078] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 859.349480][ T5913] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 859.531642][ T5913] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 859.541803][ T5913] usb 3-1: config 0 interface 0 has no altsetting 0 [ 859.551001][ T5913] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 859.560421][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 859.568644][ T5913] usb 3-1: Product: syz [ 859.573380][ T5913] usb 3-1: Manufacturer: syz [ 859.587566][ T5913] usb 3-1: SerialNumber: syz [ 859.602054][ T3078] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 859.620996][T14437] netlink: zone id is out of range [ 859.626246][T14437] netlink: zone id is out of range [ 859.642498][ T5913] usb 3-1: config 0 descriptor?? [ 859.678777][ T5913] usb 3-1: selecting invalid altsetting 0 [ 859.757855][T14437] netlink: zone id is out of range [ 859.763738][T14437] netlink: zone id is out of range [ 859.869125][T14437] netlink: set zone limit has 4 unknown bytes [ 859.908799][ T5913] usb 3-1: USB disconnect, device number 94 [ 860.342512][T14447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2067'. [ 863.863665][T14482] netlink: 'syz.1.2074': attribute type 1 has an invalid length. [ 865.068982][ T5913] usb 4-1: USB disconnect, device number 85 [ 865.312089][T14502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2079'. [ 866.674350][T14530] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 867.039442][ T5924] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 867.250104][ T5924] usb 2-1: Using ep0 maxpacket: 32 [ 867.262891][ T5924] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 867.271670][ T5924] usb 2-1: config 0 has no interface number 0 [ 867.328951][ T5924] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 867.419707][ T5924] usb 2-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 867.447107][ T5924] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 867.456471][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.467167][ T5924] usb 2-1: Product: syz [ 867.471690][ T5924] usb 2-1: Manufacturer: syz [ 867.476362][ T5924] usb 2-1: SerialNumber: syz [ 867.489124][ T5924] usb 2-1: config 0 descriptor?? [ 867.513890][ T5924] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 867.607430][ T5924] em28xx 2-1:0.132: Video interface 132 found: bulk [ 868.834087][ T5924] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 868.902497][ T5924] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 868.934437][ T5924] em28xx 2-1:0.132: board has no eeprom [ 869.054512][ T5924] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 869.109623][ T5924] em28xx 2-1:0.132: analog set to bulk mode. [ 869.140643][ T5925] em28xx 2-1:0.132: Registering V4L2 extension [ 869.313528][ T5925] em28xx 2-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 869.369662][ T5925] em28xx 2-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 869.446097][ T5925] em28xx 2-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 869.746395][ T5924] usb 2-1: USB disconnect, device number 113 [ 869.783916][ T5924] em28xx 2-1:0.132: Disconnecting em28xx [ 869.788763][T14563] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2091'. [ 869.814609][T14564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2090'. [ 869.831388][ T5925] em28xx 2-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 870.276871][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.285869][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.377812][ T5925] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 870.441189][ T5925] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 870.455246][ T5925] em28xx 2-1:0.132: No AC97 audio processor [ 870.473044][ T5925] usb 2-1: Decoder not found [ 870.483933][ T5925] em28xx 2-1:0.132: failed to create media graph [ 870.588671][T14576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2093'. [ 870.701721][ T5925] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 870.805141][ T5925] em28xx 2-1:0.132: Remote control support is not available for this card. [ 870.841012][ T5924] em28xx 2-1:0.132: Closing input extension [ 870.915153][ T5924] em28xx 2-1:0.132: Freeing device [ 870.943121][T14582] netlink: zone id is out of range [ 870.948562][T14582] netlink: zone id is out of range [ 870.973394][T14582] netlink: zone id is out of range [ 870.982624][T14582] netlink: zone id is out of range [ 870.988829][T14582] netlink: zone id is out of range [ 870.995133][T14582] netlink: zone id is out of range [ 871.001035][T14582] netlink: zone id is out of range [ 871.014384][T14582] netlink: zone id is out of range [ 871.025158][T14582] netlink: zone id is out of range [ 871.032394][T14582] netlink: zone id is out of range [ 874.790915][T14622] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 875.259462][ T3078] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 875.671360][ T3078] usb 1-1: Using ep0 maxpacket: 32 [ 875.804047][ T3078] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 875.814108][ T3078] usb 1-1: config 0 has no interface number 0 [ 875.820850][ T3078] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 875.832552][ T3078] usb 1-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 875.848219][ T3078] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 875.860747][ T3078] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.868793][ T3078] usb 1-1: Product: syz [ 875.880400][ T3078] usb 1-1: Manufacturer: syz [ 875.895234][ T3078] usb 1-1: SerialNumber: syz [ 875.961256][ T3078] usb 1-1: config 0 descriptor?? [ 875.991215][ T3078] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 876.054224][ T3078] em28xx 1-1:0.132: Video interface 132 found: bulk [ 876.799591][T14645] net_ratelimit: 46 callbacks suppressed [ 876.799650][T14645] netlink: zone id is out of range [ 876.855838][T14645] netlink: zone id is out of range [ 877.126041][T14645] netlink: zone id is out of range [ 877.132295][T14645] netlink: zone id is out of range [ 877.672391][T14645] netlink: set zone limit has 4 unknown bytes [ 877.693026][ T3078] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 877.793374][ T3078] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 877.804630][ T3078] em28xx 1-1:0.132: board has no eeprom [ 877.911803][ T3078] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 878.189584][ T3078] em28xx 1-1:0.132: analog set to bulk mode. [ 878.211989][ T5964] em28xx 1-1:0.132: Registering V4L2 extension [ 878.242280][ T3078] usb 1-1: USB disconnect, device number 85 [ 878.277449][ T3078] em28xx 1-1:0.132: Disconnecting em28xx [ 879.117639][ T5964] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 879.149470][ T5964] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 879.159443][ T5964] em28xx 1-1:0.132: No AC97 audio processor [ 879.189675][ T5964] usb 1-1: Decoder not found [ 879.204201][ T5964] em28xx 1-1:0.132: failed to create media graph [ 879.261098][ T5964] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 879.311008][ T5964] em28xx 1-1:0.132: Remote control support is not available for this card. [ 879.356560][ T3078] em28xx 1-1:0.132: Closing input extension [ 879.711313][ T3078] em28xx 1-1:0.132: Freeing device [ 879.808268][T14667] netlink: zone id is out of range [ 879.813612][T14667] netlink: zone id is out of range [ 879.835019][T14667] netlink: zone id is out of range [ 879.840416][T14667] netlink: zone id is out of range [ 879.939031][T14667] netlink: set zone limit has 4 unknown bytes [ 881.450748][T14686] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2122'. [ 883.049444][ T3078] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 883.211155][ T3078] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 883.407001][ T3078] usb 3-1: config 0 interface 0 has no altsetting 0 [ 883.425926][ T3078] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 883.443323][ T3078] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 883.452374][ T3078] usb 3-1: Product: syz [ 883.456595][ T3078] usb 3-1: Manufacturer: syz [ 883.465707][ T3078] usb 3-1: SerialNumber: syz [ 883.474064][ T3078] usb 3-1: config 0 descriptor?? [ 883.513594][ T3078] usb 3-1: selecting invalid altsetting 0 [ 883.720481][ T3078] usb 3-1: USB disconnect, device number 95 [ 884.795441][T14731] net_ratelimit: 28 callbacks suppressed [ 884.795521][T14731] netlink: zone id is out of range [ 884.806809][T14731] netlink: zone id is out of range [ 884.824685][T14731] netlink: zone id is out of range [ 884.833990][T14731] netlink: zone id is out of range [ 884.839285][T14731] netlink: zone id is out of range [ 884.847142][T14731] netlink: zone id is out of range [ 884.853003][T14731] netlink: zone id is out of range [ 884.860291][T14731] netlink: zone id is out of range [ 884.869587][T14731] netlink: zone id is out of range [ 884.876616][T14731] netlink: zone id is out of range [ 885.706495][T14738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2135'. [ 887.063862][T14756] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2140'. [ 889.905839][T14787] net_ratelimit: 44 callbacks suppressed [ 889.905863][T14787] netlink: zone id is out of range [ 889.924710][T14787] netlink: zone id is out of range [ 889.986575][T14787] netlink: zone id is out of range [ 890.008249][T14787] netlink: zone id is out of range [ 890.014070][T14787] netlink: zone id is out of range [ 890.021798][T14787] netlink: zone id is out of range [ 890.027344][T14787] netlink: zone id is out of range [ 890.033447][T14787] netlink: zone id is out of range [ 890.134870][T14787] netlink: zone id is out of range [ 890.140569][T14787] netlink: zone id is out of range [ 890.559642][ T5913] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 890.859357][ T5913] usb 5-1: Using ep0 maxpacket: 32 [ 890.874021][ T5913] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 890.882706][ T5913] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 890.916481][ T5913] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 890.953657][ T5913] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 891.013745][ T5913] usb 5-1: config 0 interface 0 has no altsetting 0 [ 891.034229][ T5913] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 891.062362][ T5913] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 891.097637][ T5913] usb 5-1: Product: syz [ 891.114487][ T5913] usb 5-1: Manufacturer: syz [ 891.129551][ T5913] usb 5-1: SerialNumber: syz [ 891.143323][ T5913] usb 5-1: config 0 descriptor?? [ 891.162543][ T5913] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 891.308707][ T5913] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 894.857352][T14836] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2158'. [ 896.468855][T14861] net_ratelimit: 72 callbacks suppressed [ 896.468876][T14861] netlink: zone id is out of range [ 896.480061][T14861] netlink: zone id is out of range [ 896.492054][T14861] netlink: zone id is out of range [ 896.498686][T14861] netlink: zone id is out of range [ 896.503977][T14861] netlink: zone id is out of range [ 896.509574][T14861] netlink: zone id is out of range [ 896.515104][T14861] netlink: zone id is out of range [ 896.520764][T14861] netlink: zone id is out of range [ 896.527037][T14861] netlink: zone id is out of range [ 896.532710][T14861] netlink: zone id is out of range [ 896.674158][T14804] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 896.715290][ T5924] usb 5-1: USB disconnect, device number 103 [ 896.738091][ T5924] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 898.497683][T14880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2167'. [ 899.309956][ T3078] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 899.572377][ T3078] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 899.582760][ T3078] usb 4-1: config 0 interface 0 has no altsetting 0 [ 899.594988][ T3078] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 899.604902][ T3078] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 899.614995][ T3078] usb 4-1: Product: syz [ 899.619247][ T3078] usb 4-1: Manufacturer: syz [ 899.626932][ T3078] usb 4-1: SerialNumber: syz [ 899.681649][ T3078] usb 4-1: config 0 descriptor?? [ 899.758388][ T3078] usb 4-1: selecting invalid altsetting 0 [ 899.962425][ T3078] usb 4-1: USB disconnect, device number 86 [ 900.063189][T10087] udevd[10087]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 901.599410][ T3078] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 902.049550][ T3078] usb 1-1: Using ep0 maxpacket: 32 [ 902.059646][ T3078] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 902.068758][ T3078] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 902.087466][ T3078] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 902.132590][ T3078] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 902.166856][T14920] net_ratelimit: 74 callbacks suppressed [ 902.166872][T14920] netlink: zone id is out of range [ 902.279435][ T3078] usb 1-1: config 0 interface 0 has no altsetting 0 [ 902.376267][ T3078] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 902.385962][ T3078] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 902.409633][ T3078] usb 1-1: Product: syz [ 902.413813][ T3078] usb 1-1: Manufacturer: syz [ 902.418400][ T3078] usb 1-1: SerialNumber: syz [ 902.426668][T14920] netlink: zone id is out of range [ 902.473399][ T3078] usb 1-1: config 0 descriptor?? [ 902.506263][T14920] netlink: zone id is out of range [ 902.531428][ T3078] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 902.570842][ T3078] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 902.712765][T14920] netlink: zone id is out of range [ 902.718419][T14920] netlink: zone id is out of range [ 902.786200][T14920] netlink: zone id is out of range [ 902.798008][T14920] netlink: zone id is out of range [ 902.806151][T14920] netlink: zone id is out of range [ 902.816297][T14920] netlink: zone id is out of range [ 902.826513][T14920] netlink: zone id is out of range [ 905.517228][T14944] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2183'. [ 905.915602][T14949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2184'. [ 908.281456][T14924] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 908.466288][ T5881] usb 1-1: USB disconnect, device number 86 [ 908.494413][ T5881] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 909.753270][T14988] net_ratelimit: 18 callbacks suppressed [ 909.753292][T14988] netlink: zone id is out of range [ 909.764231][T14988] netlink: zone id is out of range [ 909.773194][T14988] netlink: zone id is out of range [ 909.779461][T14988] netlink: zone id is out of range [ 909.784703][T14988] netlink: zone id is out of range [ 909.790371][T14988] netlink: zone id is out of range [ 909.795752][T14988] netlink: zone id is out of range [ 909.801554][T14988] netlink: zone id is out of range [ 909.807569][T14988] netlink: zone id is out of range [ 909.813169][T14988] netlink: zone id is out of range [ 911.689731][ T5881] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 911.852881][ T5881] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 911.885098][ T5881] usb 1-1: config 0 interface 0 has no altsetting 0 [ 912.245509][ T5881] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 912.268082][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 912.276855][ T5924] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 912.347472][ T5881] usb 1-1: Product: syz [ 912.361899][ T5881] usb 1-1: Manufacturer: syz [ 912.384531][ T5881] usb 1-1: SerialNumber: syz [ 912.410734][ T5881] usb 1-1: config 0 descriptor?? [ 912.424255][ T5881] usb 1-1: selecting invalid altsetting 0 [ 912.434243][ T5924] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 912.446180][ T5924] usb 5-1: config 0 interface 0 has no altsetting 0 [ 912.456171][ T5924] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 912.465815][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 912.474472][ T5924] usb 5-1: Product: syz [ 912.478876][ T5924] usb 5-1: Manufacturer: syz [ 912.486643][ T5924] usb 5-1: SerialNumber: syz [ 912.503507][ T5924] usb 5-1: config 0 descriptor?? [ 912.528550][ T5924] usb 5-1: selecting invalid altsetting 0 [ 912.824463][ T5964] usb 1-1: USB disconnect, device number 87 [ 912.933679][ T5924] usb 5-1: USB disconnect, device number 104 [ 914.547630][T15039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2206'. [ 919.102508][T15079] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2214'. [ 919.601346][T15092] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2215'. [ 919.614184][T15092] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 919.939621][ T3078] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 920.131733][ T3078] usb 1-1: Using ep0 maxpacket: 32 [ 920.147900][ T3078] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 920.160463][ T3078] usb 1-1: config 0 has no interface number 0 [ 920.174158][ T3078] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 920.203271][ T3078] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 920.282917][ T3078] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 920.297487][ T3078] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.306634][ T3078] usb 1-1: Product: syz [ 920.327616][ T3078] usb 1-1: Manufacturer: syz [ 920.469638][ T3078] usb 1-1: SerialNumber: syz [ 920.540651][ T3078] usb 1-1: config 0 descriptor?? [ 920.567224][ T3078] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 920.720459][ T3078] em28xx 1-1:0.132: Video interface 132 found: [ 921.875163][ T3078] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 922.079760][ T3078] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 922.099267][ T3078] em28xx 1-1:0.132: board has no eeprom [ 922.172500][ T3078] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 922.180593][ T3078] em28xx 1-1:0.132: analog set to bulk mode. [ 922.244492][ T5964] em28xx 1-1:0.132: Registering V4L2 extension [ 922.614784][ T3078] usb 1-1: USB disconnect, device number 88 [ 922.622248][ T3078] em28xx 1-1:0.132: Disconnecting em28xx [ 923.009874][ T5964] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 923.025988][ T5964] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 923.046276][ T5964] em28xx 1-1:0.132: No AC97 audio processor [ 923.060926][ T5964] usb 1-1: Decoder not found [ 923.076721][ T5964] em28xx 1-1:0.132: failed to create media graph [ 923.093058][ T5964] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 923.152446][ T5964] em28xx 1-1:0.132: Remote control support is not available for this card. [ 923.185214][ T3078] em28xx 1-1:0.132: Closing input extension [ 923.334083][ T3078] em28xx 1-1:0.132: Freeing device [ 923.516048][T15118] net_ratelimit: 18 callbacks suppressed [ 923.516070][T15118] netlink: zone id is out of range [ 923.528343][T15118] netlink: zone id is out of range [ 923.540861][T15118] netlink: zone id is out of range [ 923.549019][T15118] netlink: zone id is out of range [ 923.556554][T15118] netlink: zone id is out of range [ 923.572356][T15118] netlink: zone id is out of range [ 923.724600][T15118] netlink: zone id is out of range [ 923.736869][T15118] netlink: zone id is out of range [ 923.775535][T15118] netlink: zone id is out of range [ 923.836218][T15118] netlink: zone id is out of range [ 924.869608][ T5881] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 925.124817][ T5881] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 925.138739][ T5881] usb 2-1: config 0 interface 0 has no altsetting 0 [ 925.154046][ T5881] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 925.163869][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 925.178529][ T5881] usb 2-1: Product: syz [ 925.186246][ T5881] usb 2-1: Manufacturer: syz [ 925.216616][ T5881] usb 2-1: SerialNumber: syz [ 925.290595][ T5881] usb 2-1: config 0 descriptor?? [ 925.324093][ T5881] usb 2-1: selecting invalid altsetting 0 [ 925.528755][ T5881] usb 2-1: USB disconnect, device number 114 [ 927.586937][T15169] kAFS: unable to lookup cell '.,' [ 929.922563][T15183] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2237'. [ 929.944584][T15183] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 930.199832][T15190] kAFS: unable to lookup cell '.,' [ 930.243124][ T5881] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 930.364969][T15194] net_ratelimit: 46 callbacks suppressed [ 930.365030][T15194] netlink: zone id is out of range [ 930.376012][T15194] netlink: zone id is out of range [ 930.386553][T15194] netlink: zone id is out of range [ 930.394289][T15194] netlink: zone id is out of range [ 930.399523][T15194] netlink: zone id is out of range [ 930.405062][T15194] netlink: zone id is out of range [ 930.410780][T15194] netlink: zone id is out of range [ 930.416650][T15194] netlink: zone id is out of range [ 930.424041][T15194] netlink: zone id is out of range [ 930.430336][T15194] netlink: zone id is out of range [ 930.527650][ T5881] usb 4-1: Using ep0 maxpacket: 32 [ 930.537737][ T5881] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 930.562917][ T5881] usb 4-1: config 0 has no interface number 0 [ 930.608849][ T5881] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 931.342004][ T5881] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 931.762817][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.769173][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.799977][ T5881] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 931.832007][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.866854][ T5881] usb 4-1: Product: syz [ 931.882376][ T5881] usb 4-1: Manufacturer: syz [ 931.887018][ T5881] usb 4-1: SerialNumber: syz [ 931.911942][ T5881] usb 4-1: config 0 descriptor?? [ 932.010644][ T5881] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 932.059410][ T5881] em28xx 4-1:0.132: Video interface 132 found: [ 933.309596][ T5881] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 933.604028][ T5881] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 933.630590][ T5881] em28xx 4-1:0.132: board has no eeprom [ 933.817545][ T5881] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 933.942619][ T5881] em28xx 4-1:0.132: analog set to bulk mode. [ 933.972952][ T5924] em28xx 4-1:0.132: Registering V4L2 extension [ 934.007288][ T5881] usb 4-1: USB disconnect, device number 87 [ 934.259573][ T5881] em28xx 4-1:0.132: Disconnecting em28xx [ 934.844217][ T5924] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 934.861709][ T5924] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 934.914077][ T5924] em28xx 4-1:0.132: No AC97 audio processor [ 934.936019][ T5924] usb 4-1: Decoder not found [ 934.950501][ T5924] em28xx 4-1:0.132: failed to create media graph [ 934.966517][ T5924] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 935.115860][ T5924] em28xx 4-1:0.132: Remote control support is not available for this card. [ 935.125990][ T5881] em28xx 4-1:0.132: Closing input extension [ 935.147149][ T5881] em28xx 4-1:0.132: Freeing device [ 936.069752][T15237] net_ratelimit: 18 callbacks suppressed [ 936.069767][T15237] netlink: zone id is out of range [ 936.120377][T15237] netlink: zone id is out of range [ 936.135031][T15237] netlink: zone id is out of range [ 936.142836][T15237] netlink: zone id is out of range [ 936.148214][T15237] netlink: zone id is out of range [ 936.179198][T15237] netlink: zone id is out of range [ 936.184865][T15237] netlink: zone id is out of range [ 936.190747][T15237] netlink: zone id is out of range [ 936.196791][T15237] netlink: zone id is out of range [ 936.202828][T15237] netlink: zone id is out of range [ 936.633822][T15246] netlink: 'syz.2.2248': attribute type 1 has an invalid length. [ 942.357049][T15304] kAFS: unable to lookup cell '.,' [ 943.577984][T15315] net_ratelimit: 18 callbacks suppressed [ 943.578004][T15315] netlink: zone id is out of range [ 943.669475][T15315] netlink: zone id is out of range [ 943.681177][T15315] netlink: zone id is out of range [ 943.692384][T15315] netlink: zone id is out of range [ 943.706556][T15315] netlink: zone id is out of range [ 943.717401][T15315] netlink: zone id is out of range [ 943.732572][T15315] netlink: zone id is out of range [ 943.743401][T15315] netlink: zone id is out of range [ 943.758538][T15315] netlink: zone id is out of range [ 943.773284][T15315] netlink: zone id is out of range [ 944.780667][T15327] kAFS: unable to lookup cell '.,' [ 945.129784][T15332] kAFS: unable to lookup cell '.,' [ 946.255281][T15341] kAFS: unable to lookup cell '.,' [ 949.389945][T15368] net_ratelimit: 18 callbacks suppressed [ 949.389960][T15368] netlink: zone id is out of range [ 949.401372][T15368] netlink: zone id is out of range [ 949.412443][T15368] netlink: zone id is out of range [ 949.443267][T15368] netlink: zone id is out of range [ 949.472648][T15368] netlink: zone id is out of range [ 949.498152][T15368] netlink: zone id is out of range [ 949.517919][T15368] netlink: zone id is out of range [ 949.554399][T15368] netlink: zone id is out of range [ 949.583052][T15368] netlink: zone id is out of range [ 949.606362][T15368] netlink: zone id is out of range [ 951.931883][ T5964] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 952.145152][ T5964] usb 5-1: config 0 has no interfaces? [ 952.155739][ T5964] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 952.165877][ T5964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.177234][T15393] kAFS: unable to lookup cell '.,' [ 952.183922][ T5964] usb 5-1: Product: syz [ 952.192613][ T5964] usb 5-1: Manufacturer: syz [ 952.208632][ T5964] usb 5-1: SerialNumber: syz [ 952.238265][ T5964] usb 5-1: config 0 descriptor?? [ 954.401355][T15401] net_ratelimit: 18 callbacks suppressed [ 954.401372][T15401] netlink: zone id is out of range [ 954.430776][T15401] netlink: zone id is out of range [ 954.437423][T15401] netlink: zone id is out of range [ 954.452954][T15401] netlink: zone id is out of range [ 954.458256][T15401] netlink: zone id is out of range [ 954.463777][T15401] netlink: zone id is out of range [ 954.469189][T15401] netlink: zone id is out of range [ 954.474989][T15401] netlink: zone id is out of range [ 954.481755][T15401] netlink: zone id is out of range [ 954.487499][T15401] netlink: zone id is out of range [ 955.590817][ T30] audit: type=1804 audit(1750765353.467:637): pid=15409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2284" name="file0" dev="ramfs" ino=55014 res=1 errno=0 [ 955.934202][ T5964] usb 5-1: USB disconnect, device number 105 [ 956.004171][T15414] kAFS: unable to lookup cell '.,' [ 956.385180][T15420] kAFS: unable to lookup cell '.,' [ 958.137362][T15433] kAFS: unable to lookup cell '.,' [ 958.302274][T15440] kAFS: unable to lookup cell '.,' [ 958.372802][T15441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 958.687066][T15442] kAFS: unable to lookup cell '.,' [ 959.283643][T15450] kAFS: unable to lookup cell '.,' [ 959.580784][T15454] kAFS: unable to lookup cell '.,' [ 961.189455][ T5925] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 961.353097][ T5925] usb 1-1: config 0 has no interfaces? [ 961.359647][ T5881] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 961.376751][ T5925] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 961.386067][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.408898][ T5925] usb 1-1: Product: syz [ 961.594787][ T5925] usb 1-1: Manufacturer: syz [ 961.604051][ T5925] usb 1-1: SerialNumber: syz [ 961.619481][ T5881] usb 4-1: config 0 has no interfaces? [ 961.640199][ T5925] usb 1-1: config 0 descriptor?? [ 961.720155][ T5881] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 961.741644][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.886373][ T5881] usb 4-1: Product: syz [ 961.931670][T15469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 961.942267][T15469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 961.975910][ T5913] usb 1-1: USB disconnect, device number 89 [ 962.003166][ T5881] usb 4-1: Manufacturer: syz [ 962.051369][ T5881] usb 4-1: SerialNumber: syz [ 962.095788][ T5881] usb 4-1: config 0 descriptor?? [ 962.609379][T15485] kAFS: unable to lookup cell '.,' [ 964.356063][ T5881] usb 4-1: USB disconnect, device number 88 [ 964.752684][T15499] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2306'. [ 964.869489][ T5964] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 965.063318][ T5964] usb 2-1: config 0 has no interfaces? [ 965.191320][ T5964] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 965.290161][ T5964] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.392284][ T5964] usb 2-1: Product: syz [ 965.418593][ T5964] usb 2-1: Manufacturer: syz [ 965.540579][ T5964] usb 2-1: SerialNumber: syz [ 965.579168][ T5964] usb 2-1: config 0 descriptor?? [ 965.819876][ T5881] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 966.161272][ T5881] usb 3-1: no configurations [ 966.166355][ T5881] usb 3-1: can't read configurations, error -22 [ 966.439644][ T5881] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 966.600994][ T5881] usb 3-1: no configurations [ 966.605737][ T5881] usb 3-1: can't read configurations, error -22 [ 966.613345][ T5881] usb usb3-port1: attempt power cycle [ 967.150748][ T5881] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 967.176154][ T5881] usb 3-1: no configurations [ 967.183567][ T5881] usb 3-1: can't read configurations, error -22 [ 967.332968][ T5881] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 967.502321][ T5881] usb 3-1: no configurations [ 967.513059][ T5881] usb 3-1: can't read configurations, error -22 [ 967.696366][ T5881] usb usb3-port1: unable to enumerate USB device [ 968.856641][ T5881] usb 2-1: USB disconnect, device number 115 [ 969.541215][T15538] kAFS: unable to lookup cell '.,' [ 969.780523][T15544] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2316'. [ 971.489662][ T5964] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 971.718349][ T5964] usb 5-1: config 0 has no interfaces? [ 971.803308][ T5964] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 971.919619][ T5964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.927775][ T5964] usb 5-1: Product: syz [ 972.096547][ T5964] usb 5-1: Manufacturer: syz [ 972.113746][ T5964] usb 5-1: SerialNumber: syz [ 972.127867][ T5964] usb 5-1: config 0 descriptor?? [ 972.373208][T15559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 972.384638][T15559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 972.422333][ T5964] usb 5-1: USB disconnect, device number 106 [ 972.849394][ T5924] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 973.095538][ T5924] usb 1-1: config 0 has no interfaces? [ 973.107093][ T5924] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 973.118653][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.133131][ T5924] usb 1-1: Product: syz [ 973.138344][ T5924] usb 1-1: Manufacturer: syz [ 973.155132][ T5924] usb 1-1: SerialNumber: syz [ 973.173247][ T5924] usb 1-1: config 0 descriptor?? [ 973.190079][ T5913] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 973.581083][ T5913] usb 4-1: no configurations [ 973.586119][ T5913] usb 4-1: can't read configurations, error -22 [ 973.729494][ T5913] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 974.114825][ T5913] usb 4-1: no configurations [ 974.119580][ T5913] usb 4-1: can't read configurations, error -22 [ 974.127316][ T5913] usb usb4-port1: attempt power cycle [ 974.469628][ T5913] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 974.492187][ T5913] usb 4-1: no configurations [ 974.496895][ T5913] usb 4-1: can't read configurations, error -22 [ 974.638168][ T5913] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 974.684397][ T5913] usb 4-1: no configurations [ 974.691173][ T5913] usb 4-1: can't read configurations, error -22 [ 974.698323][ T5913] usb usb4-port1: unable to enumerate USB device [ 975.626843][ T5925] usb 1-1: USB disconnect, device number 90 [ 975.666102][T15592] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2327'. [ 975.818731][T15594] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2328'. [ 976.108535][T15605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 978.629996][T15639] kAFS: unable to lookup cell '.,' [ 978.733652][T15641] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2339'. [ 978.773408][T15641] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 979.049379][ T3078] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 979.219583][ T3078] usb 5-1: Using ep0 maxpacket: 32 [ 979.234565][ T3078] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 979.243135][ T3078] usb 5-1: config 0 has no interface number 0 [ 979.357575][ T3078] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 979.374334][ T3078] usb 5-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 979.392657][ T3078] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 979.403189][ T3078] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.413220][ T3078] usb 5-1: Product: syz [ 979.417528][ T3078] usb 5-1: Manufacturer: syz [ 979.423152][ T3078] usb 5-1: SerialNumber: syz [ 979.614334][ T3078] usb 5-1: config 0 descriptor?? [ 979.719461][ T5964] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 979.759370][ T3078] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 979.772689][ T3078] em28xx 5-1:0.132: Video interface 132 found: bulk [ 979.992928][ T5964] usb 2-1: no configurations [ 980.042021][ T5964] usb 2-1: can't read configurations, error -22 [ 980.241289][ T5964] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 981.063692][ T5964] usb 2-1: no configurations [ 981.068578][ T5964] usb 2-1: can't read configurations, error -22 [ 981.077000][ T5964] usb usb2-port1: attempt power cycle [ 981.155648][ T3078] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 981.409543][ T3078] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 981.424537][ T3078] em28xx 5-1:0.132: board has no eeprom [ 981.479368][ T5964] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 981.499666][ T3078] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 981.507530][ T3078] em28xx 5-1:0.132: analog set to bulk mode. [ 981.531826][ T5893] em28xx 5-1:0.132: Registering V4L2 extension [ 981.547830][ T3078] usb 5-1: USB disconnect, device number 107 [ 981.580782][ T5964] usb 2-1: no configurations [ 981.585582][ T5964] usb 2-1: can't read configurations, error -22 [ 981.615640][ T3078] em28xx 5-1:0.132: Disconnecting em28xx [ 981.759601][ T5964] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 981.790788][ T5964] usb 2-1: no configurations [ 981.795764][ T5964] usb 2-1: can't read configurations, error -22 [ 981.802978][ T5964] usb usb2-port1: unable to enumerate USB device [ 981.985863][ T5893] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 981.998506][ T5893] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 982.039719][ T5893] em28xx 5-1:0.132: No AC97 audio processor [ 982.067144][ T5893] usb 5-1: Decoder not found [ 982.079428][ T5893] em28xx 5-1:0.132: failed to create media graph [ 982.085971][ T5893] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 982.186795][ T5893] em28xx 5-1:0.132: Remote control support is not available for this card. [ 982.289366][ T3078] em28xx 5-1:0.132: Closing input extension [ 982.508454][ T3078] em28xx 5-1:0.132: Freeing device [ 982.839576][ T3078] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 982.995528][T15671] netlink: 'syz.3.2345': attribute type 1 has an invalid length. [ 983.170309][ T3078] usb 5-1: config 0 has no interfaces? [ 983.179063][ T3078] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 983.218414][ T3078] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.264575][ T3078] usb 5-1: Product: syz [ 983.274976][ T3078] usb 5-1: Manufacturer: syz [ 983.286295][ T3078] usb 5-1: SerialNumber: syz [ 983.312619][ T3078] usb 5-1: config 0 descriptor?? [ 983.522087][T15676] kAFS: unable to lookup cell '.,' [ 983.802053][T15662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 983.812487][T15662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 983.843912][ T5893] usb 5-1: USB disconnect, device number 108 [ 984.210660][T15680] kAFS: unable to lookup cell '.,' [ 984.971663][T15686] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2349'. [ 986.999504][ T5924] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 987.149378][ T3078] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 987.284942][ T5924] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 987.307614][ T3078] usb 4-1: config 0 has no interfaces? [ 987.321165][ T3078] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 987.330824][ T3078] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.338949][ T3078] usb 4-1: Product: syz [ 987.343743][ T3078] usb 4-1: Manufacturer: syz [ 987.348424][ T3078] usb 4-1: SerialNumber: syz [ 987.363395][ T5924] usb 1-1: config 0 interface 0 has no altsetting 0 [ 987.373133][ T3078] usb 4-1: config 0 descriptor?? [ 987.416269][ T5924] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 987.449592][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 987.488685][ T5924] usb 1-1: Product: syz [ 987.498469][ T5924] usb 1-1: Manufacturer: syz [ 987.514572][ T5924] usb 1-1: SerialNumber: syz [ 987.575271][T15727] kAFS: unable to lookup cell '.,' [ 987.583080][ T5893] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 987.670314][ T5924] usb 1-1: config 0 descriptor?? [ 987.687779][ T5924] usb 1-1: selecting invalid altsetting 0 [ 987.743056][ T5893] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 987.760351][ T5893] usb 2-1: config 0 interface 0 has no altsetting 0 [ 987.858498][ T5893] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 987.872614][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 987.914797][ T5893] usb 2-1: Product: syz [ 987.921922][ T5924] usb 1-1: USB disconnect, device number 91 [ 987.989639][ T5893] usb 2-1: Manufacturer: syz [ 988.009895][ T5893] usb 2-1: SerialNumber: syz [ 988.095208][ T5893] usb 2-1: config 0 descriptor?? [ 988.130343][ T5893] usb 2-1: selecting invalid altsetting 0 [ 988.351945][ T5893] usb 2-1: USB disconnect, device number 120 [ 988.471258][T10087] udevd[10087]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 989.473907][T15741] net_ratelimit: 18 callbacks suppressed [ 989.473927][T15741] netlink: zone id is out of range [ 989.485520][T15741] netlink: zone id is out of range [ 989.497021][T15741] netlink: zone id is out of range [ 989.504420][T15741] netlink: zone id is out of range [ 989.509659][T15741] netlink: zone id is out of range [ 989.518833][T15741] netlink: zone id is out of range [ 989.524652][T15741] netlink: zone id is out of range [ 989.530633][T15741] netlink: zone id is out of range [ 989.537762][T15741] netlink: zone id is out of range [ 989.543914][T15741] netlink: zone id is out of range [ 991.324457][ T5925] usb 4-1: USB disconnect, device number 93 [ 991.958568][ T5925] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 992.139473][ T3078] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 992.149322][ T5925] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 992.207998][ T5925] usb 4-1: config 0 interface 0 has no altsetting 0 [ 992.278143][ T5925] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 992.398386][ T3078] usb 1-1: config 0 has no interfaces? [ 992.411934][ T3078] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 992.444715][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 992.469552][ T3078] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.481591][ T5925] usb 4-1: Product: syz [ 992.485936][ T5925] usb 4-1: Manufacturer: syz [ 992.492950][ T3078] usb 1-1: Product: syz [ 992.497165][ T3078] usb 1-1: Manufacturer: syz [ 992.588525][ T3078] usb 1-1: SerialNumber: syz [ 992.598731][ T5925] usb 4-1: SerialNumber: syz [ 992.604802][ T3078] usb 1-1: config 0 descriptor?? [ 992.766573][ T5925] usb 4-1: config 0 descriptor?? [ 992.911042][ T5925] usb 4-1: selecting invalid altsetting 0 [ 992.998631][T15764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.007969][T15764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 993.045577][ T5925] usb 1-1: USB disconnect, device number 92 [ 993.059543][ T5924] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 993.109499][ T5881] usb 4-1: USB disconnect, device number 94 [ 993.156705][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.167934][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.292458][ T5924] usb 5-1: config 0 has no interfaces? [ 993.308507][ T5924] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 993.360805][T10087] udevd[10087]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 993.608488][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.691357][ T5924] usb 5-1: Product: syz [ 993.695598][ T5924] usb 5-1: Manufacturer: syz [ 993.761022][ T5924] usb 5-1: SerialNumber: syz [ 993.980586][ T5924] usb 5-1: config 0 descriptor?? [ 994.885634][T15792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 994.896338][T15792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 994.977859][ T5924] usb 5-1: USB disconnect, device number 109 [ 994.986826][ T3078] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 995.267830][ T3078] usb 4-1: config 0 has no interfaces? [ 995.277987][ T3078] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 995.297253][ T3078] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.325288][ T3078] usb 4-1: Product: syz [ 995.339153][ T3078] usb 4-1: Manufacturer: syz [ 995.348444][ T3078] usb 4-1: SerialNumber: syz [ 995.364251][ T3078] usb 4-1: config 0 descriptor?? [ 995.608112][T15788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 995.627957][T15788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 995.645111][ T3078] usb 4-1: USB disconnect, device number 95 [ 996.118242][T15806] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2381'. [ 999.111450][T15837] kAFS: unable to lookup cell '.,' [ 999.983327][T15848] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2392'. [ 1004.723057][T15890] program syz.0.2401 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1006.579392][ T5924] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1006.761852][ T5924] usb 2-1: config 0 has no interfaces? [ 1006.803289][ T5924] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1006.814329][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.830461][ T5924] usb 2-1: Product: syz [ 1006.844401][ T5924] usb 2-1: Manufacturer: syz [ 1006.860565][ T5924] usb 2-1: SerialNumber: syz [ 1006.889973][ T5924] usb 2-1: config 0 descriptor?? [ 1007.138739][T15907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1007.183352][T15907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1007.274681][T15917] kAFS: unable to lookup cell '.,' [ 1007.331453][ T5924] usb 2-1: USB disconnect, device number 121 [ 1007.377779][T15920] program syz.0.2408 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1007.958125][ T5881] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1008.496936][ T5881] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1008.507326][ T5881] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1008.528357][ T5881] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1008.538032][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1008.558142][ T5881] usb 3-1: Product: syz [ 1008.636957][ T5881] usb 3-1: Manufacturer: syz [ 1008.645215][ T5881] usb 3-1: SerialNumber: syz [ 1008.662706][ T5881] usb 3-1: config 0 descriptor?? [ 1008.681580][ T5881] usb 3-1: selecting invalid altsetting 0 [ 1008.978227][ T5881] usb 3-1: USB disconnect, device number 100 [ 1009.944580][T15942] net_ratelimit: 46 callbacks suppressed [ 1009.944605][T15942] netlink: zone id is out of range [ 1009.960333][T15942] netlink: zone id is out of range [ 1009.969864][T15942] netlink: zone id is out of range [ 1009.976060][T15942] netlink: zone id is out of range [ 1009.994282][T15942] netlink: zone id is out of range [ 1010.149674][T15942] netlink: zone id is out of range [ 1010.155149][T15942] netlink: zone id is out of range [ 1010.160821][T15942] netlink: zone id is out of range [ 1010.171275][T15942] netlink: zone id is out of range [ 1010.179417][T15942] netlink: zone id is out of range [ 1011.947501][ T5964] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1012.189909][ T5964] usb 5-1: config 0 has no interfaces? [ 1012.232773][ T5925] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1012.257847][ T5964] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1012.277019][ T5964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.298443][ T5964] usb 5-1: Product: syz [ 1012.305902][ T5964] usb 5-1: Manufacturer: syz [ 1012.314582][ T5964] usb 5-1: SerialNumber: syz [ 1012.344987][ T5964] usb 5-1: config 0 descriptor?? [ 1012.595789][T15953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1012.605757][T15953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1012.644727][ T5964] usb 5-1: USB disconnect, device number 110 [ 1012.719386][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 1013.224487][ T5925] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 1013.274971][ T5925] usb 4-1: config 0 has no interface number 0 [ 1013.485381][T15973] program syz.1.2420 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1013.539348][ T5925] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1013.704646][ T5925] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1013.735921][ T5925] usb 4-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=f9.c2 [ 1013.830847][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.899382][ T5925] usb 4-1: Product: syz [ 1013.911249][ T5925] usb 4-1: Manufacturer: syz [ 1013.929302][ T5925] usb 4-1: SerialNumber: syz [ 1013.954883][ T5925] usb 4-1: config 0 descriptor?? [ 1013.983383][ T5925] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.69/input/input66 [ 1014.311670][ T5183] bcm5974 4-1:0.69: could not read from device [ 1014.459337][ T5183] bcm5974 4-1:0.69: could not read from device [ 1014.672255][ T5183] bcm5974 4-1:0.69: could not read from device [ 1014.714726][ T5183] bcm5974 4-1:0.69: could not read from device [ 1014.725994][ T5925] usb 4-1: USB disconnect, device number 96 [ 1014.810307][ T5183] bcm5974 4-1:0.69: could not read from device [ 1014.856518][T10089] bcm5974 4-1:0.69: could not read from device [ 1015.906126][T15990] net_ratelimit: 18 callbacks suppressed [ 1015.906149][T15990] netlink: zone id is out of range [ 1015.918018][T15990] netlink: zone id is out of range [ 1015.931717][T15990] netlink: zone id is out of range [ 1015.942051][T15990] netlink: zone id is out of range [ 1015.947934][T15990] netlink: zone id is out of range [ 1015.954074][T15990] netlink: zone id is out of range [ 1015.959942][T15990] netlink: zone id is out of range [ 1015.965930][T15990] netlink: zone id is out of range [ 1015.973234][T15990] netlink: zone id is out of range [ 1015.979722][T15990] netlink: zone id is out of range [ 1017.379300][ T30] audit: type=1804 audit(1750765415.117:638): pid=15999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2425" name="file0" dev="ramfs" ino=58076 res=1 errno=0 [ 1018.123631][T16007] kAFS: unable to lookup cell '.,' [ 1018.749510][ T5881] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1018.927216][ T5881] usb 5-1: config 0 has no interfaces? [ 1018.937232][ T5881] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1018.946851][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.066072][ T5881] usb 5-1: Product: syz [ 1019.097239][ T5881] usb 5-1: Manufacturer: syz [ 1019.106910][ T5881] usb 5-1: SerialNumber: syz [ 1019.143710][ T5881] usb 5-1: config 0 descriptor?? [ 1019.286018][T16017] program syz.1.2429 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1019.441182][T16009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1019.454668][T16009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1019.562083][ T5924] usb 5-1: USB disconnect, device number 111 [ 1023.860756][ T5924] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1024.157193][ T5924] usb 3-1: config 0 has no interfaces? [ 1024.238402][ T5924] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1024.272446][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.297399][ T5924] usb 3-1: Product: syz [ 1024.311918][ T5924] usb 3-1: Manufacturer: syz [ 1024.330251][ T5924] usb 3-1: SerialNumber: syz [ 1024.351434][ T5924] usb 3-1: config 0 descriptor?? [ 1024.581447][T16072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1024.590912][T16072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1024.618954][ T5924] usb 3-1: USB disconnect, device number 101 [ 1025.435934][T16096] net_ratelimit: 18 callbacks suppressed [ 1025.435989][T16096] netlink: zone id is out of range [ 1025.446986][T16096] netlink: zone id is out of range [ 1025.458524][T16096] netlink: zone id is out of range [ 1025.466186][T16096] netlink: zone id is out of range [ 1025.471422][T16096] netlink: zone id is out of range [ 1025.477311][T16096] netlink: zone id is out of range [ 1025.483243][T16096] netlink: zone id is out of range [ 1025.489280][T16096] netlink: zone id is out of range [ 1025.496485][T16096] netlink: zone id is out of range [ 1025.502666][T16096] netlink: zone id is out of range [ 1027.929357][ T5964] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1028.304875][ T5964] usb 2-1: config 0 has no interfaces? [ 1028.666466][ T5964] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1028.683780][ T5964] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.697881][ T5964] usb 2-1: Product: syz [ 1029.349117][ T5964] usb 2-1: Manufacturer: syz [ 1029.354124][ T5964] usb 2-1: SerialNumber: syz [ 1029.365822][ T5964] usb 2-1: config 0 descriptor?? [ 1029.599623][T16124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2450'. [ 1030.169727][ T5964] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1030.431316][ T5964] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.449102][ T5964] usb 5-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1030.524297][ T5964] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1030.541946][ T5964] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1030.555732][ T5964] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1030.619517][ T5964] usb 5-1: Product: syz [ 1030.642970][ T5964] usb 5-1: Manufacturer: syz [ 1030.656682][ T5964] usb 5-1: SerialNumber: syz [ 1030.721803][ T5964] usb 5-1: config 0 descriptor?? [ 1030.837944][T16157] kAFS: unable to lookup cell '.,' [ 1031.008630][T16159] program syz.3.2459 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1031.028794][ T5964] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1031.057864][ T5964] usb 5-1: USB disconnect, device number 112 [ 1031.097056][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1031.879932][ T3078] usb 2-1: USB disconnect, device number 122 [ 1031.899846][T16164] program syz.4.2460 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1033.887090][T16200] program syz.2.2469 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1034.072869][T16203] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2470'. [ 1035.024614][T16210] program syz.3.2471 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1035.147841][T16212] kAFS: unable to lookup cell '.,' [ 1036.352625][T16219] program syz.2.2474 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1036.729474][ T5964] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1036.902628][ T5964] usb 2-1: config 0 has no interfaces? [ 1036.911698][ T5964] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1036.924834][ T5964] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.933564][ T5964] usb 2-1: Product: syz [ 1036.937812][ T5964] usb 2-1: Manufacturer: syz [ 1036.951272][ T5964] usb 2-1: SerialNumber: syz [ 1036.977291][ T5964] usb 2-1: config 0 descriptor?? [ 1037.294159][T16231] kAFS: unable to lookup cell '.,' [ 1037.325828][T16222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1037.336998][T16222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1037.369597][ T5924] usb 2-1: USB disconnect, device number 123 [ 1038.445402][T16237] kAFS: unable to lookup cell '.,' [ 1039.113422][T16244] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2482'. [ 1039.345919][T16253] program syz.3.2484 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1040.739675][T16269] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2486'. [ 1041.302019][T16279] kAFS: unable to lookup cell '.,' [ 1043.150279][T16298] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2494'. [ 1043.711934][T16311] net_ratelimit: 74 callbacks suppressed [ 1043.711994][T16311] netlink: zone id is out of range [ 1043.730702][T16311] netlink: zone id is out of range [ 1043.736010][T16311] netlink: zone id is out of range [ 1043.742067][T16311] netlink: zone id is out of range [ 1043.749202][T16311] netlink: zone id is out of range [ 1043.756335][T16311] netlink: zone id is out of range [ 1043.766655][T16311] netlink: zone id is out of range [ 1043.775669][T16311] netlink: zone id is out of range [ 1043.782452][T16311] netlink: zone id is out of range [ 1043.791363][T16311] netlink: zone id is out of range [ 1045.087316][T16318] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2499'. [ 1046.249897][ T5964] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1046.431317][ T5964] usb 5-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 1046.442484][ T5964] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1046.464752][ T5964] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1046.474076][ T5964] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1046.482327][ T5964] usb 5-1: Product: syz [ 1046.486969][ T5964] usb 5-1: Manufacturer: syz [ 1046.495918][ T5964] usb 5-1: SerialNumber: syz [ 1046.572678][ T5964] usb 5-1: config 0 descriptor?? [ 1046.648533][ T5964] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1046.856579][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1046.885277][ T5924] usb 5-1: USB disconnect, device number 113 [ 1048.036425][T16349] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2507'. [ 1048.139342][ T5893] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1048.311972][ T5893] usb 4-1: config 0 has no interfaces? [ 1048.336411][ T5893] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1048.346016][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.400826][ T5893] usb 4-1: Product: syz [ 1048.427465][ T5893] usb 4-1: Manufacturer: syz [ 1048.451028][ T5893] usb 4-1: SerialNumber: syz [ 1048.783240][ T5893] usb 4-1: config 0 descriptor?? [ 1049.026444][T16345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1049.039921][T16345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1049.068802][ T5893] usb 4-1: USB disconnect, device number 97 [ 1049.229461][ T5881] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1049.389378][ T5881] usb 2-1: Using ep0 maxpacket: 32 [ 1049.406608][ T5881] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 1049.432440][ T5881] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1049.449375][ T5881] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1049.476279][ T5881] usb 2-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 1049.564555][ T5881] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1049.594116][ T5881] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1049.605562][ T5881] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1049.627088][ T5881] usb 2-1: Product: syz [ 1049.631746][ T5881] usb 2-1: Manufacturer: syz [ 1049.636430][ T5881] usb 2-1: SerialNumber: syz [ 1049.650085][ T5881] usb 2-1: config 0 descriptor?? [ 1049.676033][ T5881] ldusb 2-1:0.0: Interrupt in endpoint not found [ 1049.701449][T16372] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2513'. [ 1049.777638][T16371] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1050.257606][ T5893] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1050.309337][ T5881] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1050.476750][ T5881] usb 4-1: config 0 has no interfaces? [ 1050.489522][ T5881] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1050.498870][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.523355][ T5881] usb 4-1: Product: syz [ 1050.527608][ T5881] usb 4-1: Manufacturer: syz [ 1050.551384][ T5881] usb 4-1: SerialNumber: syz [ 1050.598032][ T5881] usb 4-1: config 0 descriptor?? [ 1050.609352][ T5893] usb 3-1: Using ep0 maxpacket: 32 [ 1050.621903][ T5893] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1050.677150][ T5893] usb 3-1: config 0 has no interface number 0 [ 1050.838501][ T5893] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1050.855977][T16376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1050.866533][T16376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1050.897886][ T5881] usb 4-1: USB disconnect, device number 98 [ 1051.031717][ T5893] usb 3-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1051.172923][ T5893] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1051.182511][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.257845][ T5893] usb 3-1: Product: syz [ 1051.266366][ T5893] usb 3-1: Manufacturer: syz [ 1051.295356][ T5893] usb 3-1: SerialNumber: syz [ 1051.480838][ T5893] usb 3-1: config 0 descriptor?? [ 1051.731032][ T5893] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1051.753419][ T5893] em28xx 3-1:0.132: Video interface 132 found: bulk [ 1051.791845][ T3078] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1052.055463][ T3078] usb 1-1: Using ep0 maxpacket: 16 [ 1052.281673][ T5925] usb 2-1: USB disconnect, device number 124 [ 1052.296506][ T3078] usb 1-1: config 0 has no interfaces? [ 1052.346875][ T3078] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1052.458090][ T3078] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.527876][ T3078] usb 1-1: config 0 descriptor?? [ 1052.909702][ T5893] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 1053.042431][ T5893] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1053.087640][ T5893] em28xx 3-1:0.132: board has no eeprom [ 1053.104398][T16396] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2519'. [ 1053.219388][ T5893] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1053.252915][ T5893] em28xx 3-1:0.132: analog set to bulk mode. [ 1053.281923][T15656] em28xx 3-1:0.132: Registering V4L2 extension [ 1053.438336][T15656] em28xx 3-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1053.495828][ T5881] usb 3-1: USB disconnect, device number 102 [ 1053.505091][ T5881] em28xx 3-1:0.132: Disconnecting em28xx [ 1053.769340][T15656] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 1053.839849][ T5893] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1053.896061][T15656] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 1054.285938][T15656] em28xx 3-1:0.132: No AC97 audio processor [ 1054.323981][T15656] usb 3-1: Decoder not found [ 1054.339316][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 1054.348450][T15656] em28xx 3-1:0.132: failed to create media graph [ 1054.464339][ T5893] usb 2-1: config 0 has no interfaces? [ 1054.471587][T15656] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 1054.482220][ T5893] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1054.503909][T15656] em28xx 3-1:0.132: Remote control support is not available for this card. [ 1054.519367][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.555204][ T5893] usb 2-1: config 0 descriptor?? [ 1054.571002][ T5881] em28xx 3-1:0.132: Closing input extension [ 1054.592590][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.598980][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.677112][T16417] net_ratelimit: 44 callbacks suppressed [ 1054.677200][T16417] netlink: zone id is out of range [ 1054.709742][T16417] netlink: zone id is out of range [ 1054.738523][T16417] netlink: zone id is out of range [ 1054.744087][T16417] netlink: zone id is out of range [ 1054.896240][T16417] netlink: set zone limit has 4 unknown bytes [ 1054.947192][ T5881] em28xx 3-1:0.132: Freeing device [ 1055.346596][ T5881] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1055.421621][ T10] usb 1-1: USB disconnect, device number 93 [ 1055.513595][ T5881] usb 3-1: Using ep0 maxpacket: 16 [ 1055.547381][ T5881] usb 3-1: config 0 has no interfaces? [ 1055.594042][ T5881] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1055.785354][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.927288][ T5881] usb 3-1: config 0 descriptor?? [ 1056.957399][ T10] usb 2-1: USB disconnect, device number 125 [ 1057.315477][T16441] kAFS: unable to lookup cell '.,' [ 1057.447538][T16443] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2531'. [ 1058.279662][ T5893] usb 3-1: USB disconnect, device number 103 [ 1058.438963][T16458] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2533'. [ 1058.488798][T16458] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1058.882973][ T5893] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1058.950846][ T10] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1059.092799][ T5893] usb 3-1: config 0 has no interfaces? [ 1059.102745][ T5893] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1059.113406][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.122974][ T5893] usb 3-1: Product: syz [ 1059.127148][ T5893] usb 3-1: Manufacturer: syz [ 1059.139473][ T5893] usb 3-1: SerialNumber: syz [ 1059.151343][ T5893] usb 3-1: config 0 descriptor?? [ 1059.278060][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1059.293596][ T10] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1059.365425][ T10] usb 2-1: config 0 has no interface number 0 [ 1059.421838][ T10] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1059.446221][T16460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1059.457112][T16460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1059.514422][ T5893] usb 3-1: USB disconnect, device number 104 [ 1059.650901][ T10] usb 2-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1059.926872][ T10] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1059.929422][ T30] audit: type=1804 audit(1750765457.767:639): pid=16473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2538" name="file0" dev="ramfs" ino=60994 res=1 errno=0 [ 1060.026554][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.060689][ T10] usb 2-1: Product: syz [ 1060.085692][ T10] usb 2-1: Manufacturer: syz [ 1060.104061][ T10] usb 2-1: SerialNumber: syz [ 1060.391710][T16480] kAFS: unable to lookup cell '.,' [ 1060.424593][ T10] usb 2-1: config 0 descriptor?? [ 1060.572312][ T10] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1060.590102][ T10] em28xx 2-1:0.132: Video interface 132 found: bulk [ 1061.790035][ T10] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 1061.855032][ T10] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1061.865220][ T10] em28xx 2-1:0.132: board has no eeprom [ 1061.879408][ T5881] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1061.951109][ T10] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1062.005945][ T10] em28xx 2-1:0.132: analog set to bulk mode. [ 1062.054286][ T5925] em28xx 2-1:0.132: Registering V4L2 extension [ 1062.097055][ T5881] usb 4-1: config 0 has no interfaces? [ 1062.114536][ T10] usb 2-1: USB disconnect, device number 126 [ 1062.125067][ T5881] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1062.139341][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.165693][ T10] em28xx 2-1:0.132: Disconnecting em28xx [ 1062.179717][ T5881] usb 4-1: Product: syz [ 1062.207639][ T5881] usb 4-1: Manufacturer: syz [ 1062.233989][ T5881] usb 4-1: SerialNumber: syz [ 1062.383195][ T5881] usb 4-1: config 0 descriptor?? [ 1062.567064][ T5925] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 1062.577231][ T5925] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 1062.595823][ T5925] em28xx 2-1:0.132: No AC97 audio processor [ 1062.673363][ T5925] usb 2-1: Decoder not found [ 1062.699507][ T5925] em28xx 2-1:0.132: failed to create media graph [ 1062.725101][ T5925] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 1062.873644][ T5925] em28xx 2-1:0.132: Remote control support is not available for this card. [ 1062.995142][ T10] em28xx 2-1:0.132: Closing input extension [ 1063.011622][ T10] em28xx 2-1:0.132: Freeing device [ 1065.411526][ T5893] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1065.691589][T15656] usb 4-1: USB disconnect, device number 99 [ 1065.698725][ T5893] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1065.719483][ T5893] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1065.752869][ T5893] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1065.769043][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1065.779161][ T5893] usb 3-1: Product: syz [ 1065.788507][ T5893] usb 3-1: Manufacturer: syz [ 1065.793281][ T5893] usb 3-1: SerialNumber: syz [ 1065.812779][ T5893] usb 3-1: config 0 descriptor?? [ 1065.827945][ T5893] usb 3-1: selecting invalid altsetting 0 [ 1066.348892][ T10] usb 3-1: USB disconnect, device number 105 [ 1066.375652][T10087] udevd[10087]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1067.861523][T16546] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2553'. [ 1067.879378][T16546] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1067.919624][ T30] audit: type=1804 audit(1750765465.717:640): pid=16545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2554" name="file0" dev="ramfs" ino=61910 res=1 errno=0 [ 1068.169832][T15656] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1068.201131][T16551] program syz.4.2556 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1068.342857][T15656] usb 3-1: Using ep0 maxpacket: 32 [ 1068.355587][T15656] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1068.364131][T15656] usb 3-1: config 0 has no interface number 0 [ 1068.370380][T15656] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1068.441621][T15656] usb 3-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1068.548028][T16556] program syz.0.2557 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1068.569523][T15656] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1068.580511][T15656] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.588908][T15656] usb 3-1: Product: syz [ 1068.594555][T15656] usb 3-1: Manufacturer: syz [ 1068.600888][T15656] usb 3-1: SerialNumber: syz [ 1068.771722][T15656] usb 3-1: config 0 descriptor?? [ 1069.395283][T15656] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1069.407942][T15656] em28xx 3-1:0.132: Video interface 132 found: bulk [ 1070.683659][T15656] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 1070.793535][T15656] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1070.810466][T15656] em28xx 3-1:0.132: board has no eeprom [ 1070.894199][T15656] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1070.926863][T15656] em28xx 3-1:0.132: analog set to bulk mode. [ 1070.960374][ T5964] em28xx 3-1:0.132: Registering V4L2 extension [ 1071.210204][T15656] usb 3-1: USB disconnect, device number 106 [ 1071.310562][T15656] em28xx 3-1:0.132: Disconnecting em28xx [ 1071.898617][ T5964] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 1071.914932][ T5964] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 1071.969407][ T5964] em28xx 3-1:0.132: No AC97 audio processor [ 1072.021902][ T5964] usb 3-1: Decoder not found [ 1072.026586][ T5964] em28xx 3-1:0.132: failed to create media graph [ 1072.116129][ T5964] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 1072.225181][T16588] kAFS: unable to lookup cell '.,' [ 1072.271750][ T5964] em28xx 3-1:0.132: Remote control support is not available for this card. [ 1072.281216][ T5893] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1072.394637][T15656] em28xx 3-1:0.132: Closing input extension [ 1072.745831][T15656] em28xx 3-1:0.132: Freeing device [ 1072.779106][ T5893] usb 5-1: config 0 has no interfaces? [ 1072.791079][ T5893] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1072.806903][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.843643][T16593] program syz.0.2565 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1073.005765][ T5893] usb 5-1: Product: syz [ 1073.010577][ T5893] usb 5-1: Manufacturer: syz [ 1073.015220][ T5893] usb 5-1: SerialNumber: syz [ 1073.037301][ T5893] usb 5-1: config 0 descriptor?? [ 1073.148014][ T5964] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1073.470149][ T5964] usb 2-1: Using ep0 maxpacket: 16 [ 1073.538506][ T5964] usb 2-1: config 0 has no interfaces? [ 1073.560358][ T5964] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1073.615304][ T5964] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.010022][ T5964] usb 2-1: config 0 descriptor?? [ 1075.001500][T16609] program syz.0.2569 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1076.141047][ T5964] usb 5-1: USB disconnect, device number 114 [ 1076.320290][ T5964] usb 2-1: USB disconnect, device number 127 [ 1076.860953][T16632] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2572'. [ 1076.876482][T16629] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1077.237468][ T5925] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1077.651107][ T5925] usb 2-1: Using ep0 maxpacket: 32 [ 1077.671867][ T5925] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1077.696006][ T5925] usb 2-1: config 0 has no interface number 0 [ 1077.732017][ T5925] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1077.772799][ T5925] usb 2-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1077.871070][ T5925] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1077.922586][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.979134][ T5925] usb 2-1: Product: syz [ 1078.148700][ T5925] usb 2-1: Manufacturer: syz [ 1078.211051][ T5925] usb 2-1: SerialNumber: syz [ 1078.253411][ T5925] usb 2-1: config 0 descriptor?? [ 1078.282635][ T5925] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1078.324268][ T5925] em28xx 2-1:0.132: Video interface 132 found: bulk [ 1079.709625][ T5925] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 1079.936911][ T5925] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1079.960170][ T5925] em28xx 2-1:0.132: board has no eeprom [ 1080.029442][ T5925] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1080.037398][ T5925] em28xx 2-1:0.132: analog set to bulk mode. [ 1080.050714][ T5881] em28xx 2-1:0.132: Registering V4L2 extension [ 1080.096736][ T5925] usb 2-1: USB disconnect, device number 2 [ 1080.185619][ T5925] em28xx 2-1:0.132: Disconnecting em28xx [ 1080.810309][ T5881] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 1080.817520][ T5881] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 1080.828013][ T5881] em28xx 2-1:0.132: No AC97 audio processor [ 1080.881604][ T5881] usb 2-1: Decoder not found [ 1080.892726][ T5881] em28xx 2-1:0.132: failed to create media graph [ 1080.908599][ T5881] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 1081.165169][ T5881] em28xx 2-1:0.132: Remote control support is not available for this card. [ 1081.269210][ T5925] em28xx 2-1:0.132: Closing input extension [ 1081.626924][ T5925] em28xx 2-1:0.132: Freeing device [ 1082.009337][ T5881] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1082.389451][ T5881] usb 4-1: Using ep0 maxpacket: 16 [ 1082.480988][ T5881] usb 4-1: config 0 has no interfaces? [ 1082.514080][ T5881] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1082.534332][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.598021][ T5881] usb 4-1: config 0 descriptor?? [ 1083.892723][T16710] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2588'. [ 1083.909053][T16710] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1084.159357][ T5964] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1084.519503][ T5964] usb 5-1: Using ep0 maxpacket: 32 [ 1084.577770][ T5964] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1084.588680][ T5964] usb 5-1: config 0 has no interface number 0 [ 1084.607982][ T5964] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1084.638123][ T5964] usb 5-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1084.665814][ T5964] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1084.688885][ T5964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.703476][ T5964] usb 5-1: Product: syz [ 1084.711151][ T5964] usb 5-1: Manufacturer: syz [ 1084.717124][ T5964] usb 5-1: SerialNumber: syz [ 1084.745129][ T5964] usb 5-1: config 0 descriptor?? [ 1084.773191][ T5964] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1084.793241][ T5964] em28xx 5-1:0.132: Video interface 132 found: bulk [ 1085.060294][ T5881] usb 4-1: USB disconnect, device number 100 [ 1085.136378][T16714] kAFS: unable to lookup cell '.,' [ 1086.159403][ T5964] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 1086.239373][ T5881] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1086.303685][ T5964] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1086.314575][ T5964] em28xx 5-1:0.132: board has no eeprom [ 1086.379389][ T5964] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1086.393737][ T5964] em28xx 5-1:0.132: analog set to bulk mode. [ 1086.415772][ T5920] em28xx 5-1:0.132: Registering V4L2 extension [ 1086.592449][T16730] kAFS: unable to lookup cell '.,' [ 1086.646821][ T5881] usb 4-1: config 0 has no interfaces? [ 1086.694646][ T5920] em28xx 5-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1086.707533][ T5920] em28xx 5-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 1086.724792][ T5964] usb 5-1: USB disconnect, device number 115 [ 1086.734733][ T5964] em28xx 5-1:0.132: Disconnecting em28xx [ 1086.797535][ T5881] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1086.825498][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.881815][ T5881] usb 4-1: Product: syz [ 1086.910093][ T5881] usb 4-1: Manufacturer: syz [ 1086.938396][ T5881] usb 4-1: SerialNumber: syz [ 1086.964222][ T5881] usb 4-1: config 0 descriptor?? [ 1087.230656][ T5920] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 1087.237737][ T5920] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 1087.249410][ T5920] em28xx 5-1:0.132: No AC97 audio processor [ 1087.263103][ T5920] usb 5-1: Decoder not found [ 1087.439593][ T5920] em28xx 5-1:0.132: failed to create media graph [ 1087.565527][ T5920] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 1087.608882][T16739] kAFS: unable to lookup cell '.,' [ 1087.733743][ T5920] em28xx 5-1:0.132: Remote control support is not available for this card. [ 1087.748333][ T5964] em28xx 5-1:0.132: Closing input extension [ 1087.754490][ T5964] ================================================================== [ 1087.762580][ T5964] BUG: KASAN: slab-use-after-free in media_device_unregister+0x141/0x400 [ 1087.771020][ T5964] Read of size 8 at addr ffff88807a1c0210 by task kworker/1:6/5964 [ 1087.778924][ T5964] [ 1087.781295][ T5964] CPU: 1 UID: 0 PID: 5964 Comm: kworker/1:6 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 1087.781316][ T5964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1087.781329][ T5964] Workqueue: usb_hub_wq hub_event [ 1087.781362][ T5964] Call Trace: [ 1087.781370][ T5964] [ 1087.781378][ T5964] dump_stack_lvl+0x189/0x250 [ 1087.781406][ T5964] ? __virt_addr_valid+0x1c8/0x5c0 [ 1087.781423][ T5964] ? rcu_is_watching+0x15/0xb0 [ 1087.781446][ T5964] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1087.781469][ T5964] ? rcu_is_watching+0x15/0xb0 [ 1087.781491][ T5964] ? lock_release+0x4b/0x3e0 [ 1087.781515][ T5964] ? __virt_addr_valid+0x1c8/0x5c0 [ 1087.781529][ T5964] ? __virt_addr_valid+0x4a5/0x5c0 [ 1087.781544][ T5964] print_report+0xd2/0x2b0 [ 1087.781564][ T5964] ? media_device_unregister+0x141/0x400 [ 1087.781581][ T5964] kasan_report+0x118/0x150 [ 1087.781598][ T5964] ? media_device_unregister+0x141/0x400 [ 1087.781618][ T5964] media_device_unregister+0x141/0x400 [ 1087.781639][ T5964] em28xx_release_resources+0xac/0x240 [ 1087.781661][ T5964] em28xx_usb_disconnect+0x19f/0x2f0 [ 1087.781682][ T5964] usb_unbind_interface+0x26b/0x8f0 [ 1087.781700][ T5964] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1087.781715][ T5964] device_release_driver_internal+0x4d6/0x7c0 [ 1087.781736][ T5964] bus_remove_device+0x34d/0x410 [ 1087.781760][ T5964] device_del+0x511/0x8e0 [ 1087.781776][ T5964] ? kfree+0x18e/0x440 [ 1087.781802][ T5964] ? __pfx_device_del+0x10/0x10 [ 1087.781815][ T5964] ? kobject_put+0x446/0x480 [ 1087.781833][ T5964] usb_disable_device+0x3e9/0x8a0 [ 1087.781858][ T5964] usb_disconnect+0x330/0x910 [ 1087.781880][ T5964] hub_event+0x1cdb/0x4a00 [ 1087.781913][ T5964] ? do_raw_spin_lock+0x121/0x290 [ 1087.781931][ T5964] ? register_lock_class+0x51/0x320 [ 1087.781956][ T5964] ? __pfx_hub_event+0x10/0x10 [ 1087.781977][ T5964] ? process_scheduled_works+0x9ef/0x17b0 [ 1087.782001][ T5964] ? _raw_spin_unlock_irq+0x23/0x50 [ 1087.782020][ T5964] ? process_scheduled_works+0x9ef/0x17b0 [ 1087.782041][ T5964] ? process_scheduled_works+0x9ef/0x17b0 [ 1087.782062][ T5964] process_scheduled_works+0xae1/0x17b0 [ 1087.782094][ T5964] ? __pfx_process_scheduled_works+0x10/0x10 [ 1087.782122][ T5964] worker_thread+0x8a0/0xda0 [ 1087.782150][ T5964] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1087.782174][ T5964] ? __kthread_parkme+0x7b/0x200 [ 1087.782192][ T5964] kthread+0x70e/0x8a0 [ 1087.782210][ T5964] ? __pfx_worker_thread+0x10/0x10 [ 1087.782233][ T5964] ? __pfx_kthread+0x10/0x10 [ 1087.782250][ T5964] ? _raw_spin_unlock_irq+0x23/0x50 [ 1087.782269][ T5964] ? lockdep_hardirqs_on+0x9c/0x150 [ 1087.782289][ T5964] ? __pfx_kthread+0x10/0x10 [ 1087.782305][ T5964] ret_from_fork+0x3fc/0x770 [ 1087.782326][ T5964] ? __pfx_ret_from_fork+0x10/0x10 [ 1087.782348][ T5964] ? __switch_to_asm+0x39/0x70 [ 1087.782363][ T5964] ? __switch_to_asm+0x33/0x70 [ 1087.782377][ T5964] ? __pfx_kthread+0x10/0x10 [ 1087.782393][ T5964] ret_from_fork_asm+0x1a/0x30 [ 1087.782414][ T5964] [ 1087.782420][ T5964] [ 1088.072429][ T5964] Allocated by task 5920: [ 1088.076760][ T5964] kasan_save_track+0x3e/0x80 [ 1088.081450][ T5964] __kasan_kmalloc+0x93/0xb0 [ 1088.086043][ T5964] __kmalloc_cache_noprof+0x230/0x3d0 [ 1088.091414][ T5964] em28xx_v4l2_init+0x10b/0x2e70 [ 1088.096374][ T5964] em28xx_init_extension+0x11d/0x1c0 [ 1088.101667][ T5964] process_scheduled_works+0xae1/0x17b0 [ 1088.107223][ T5964] worker_thread+0x8a0/0xda0 [ 1088.111837][ T5964] kthread+0x70e/0x8a0 [ 1088.115913][ T5964] ret_from_fork+0x3fc/0x770 [ 1088.120514][ T5964] ret_from_fork_asm+0x1a/0x30 [ 1088.125291][ T5964] [ 1088.127618][ T5964] Freed by task 5920: [ 1088.131596][ T5964] kasan_save_track+0x3e/0x80 [ 1088.136288][ T5964] kasan_save_free_info+0x46/0x50 [ 1088.141328][ T5964] __kasan_slab_free+0x62/0x70 [ 1088.146096][ T5964] kfree+0x18e/0x440 [ 1088.150007][ T5964] em28xx_v4l2_init+0x1683/0x2e70 [ 1088.155055][ T5964] em28xx_init_extension+0x11d/0x1c0 [ 1088.160353][ T5964] process_scheduled_works+0xae1/0x17b0 [ 1088.165913][ T5964] worker_thread+0x8a0/0xda0 [ 1088.170517][ T5964] kthread+0x70e/0x8a0 [ 1088.174593][ T5964] ret_from_fork+0x3fc/0x770 [ 1088.179185][ T5964] ret_from_fork_asm+0x1a/0x30 [ 1088.183952][ T5964] [ 1088.186292][ T5964] The buggy address belongs to the object at ffff88807a1c0000 [ 1088.186292][ T5964] which belongs to the cache kmalloc-8k of size 8192 [ 1088.200353][ T5964] The buggy address is located 528 bytes inside of [ 1088.200353][ T5964] freed 8192-byte region [ffff88807a1c0000, ffff88807a1c2000) [ 1088.214245][ T5964] [ 1088.216571][ T5964] The buggy address belongs to the physical page: [ 1088.222994][ T5964] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7a1c0 [ 1088.231764][ T5964] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1088.240294][ T5964] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1088.248287][ T5964] page_type: f5(slab) [ 1088.252275][ T5964] raw: 00fff00000000040 ffff88801a442280 0000000000000000 dead000000000001 [ 1088.260865][ T5964] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 1088.269455][ T5964] head: 00fff00000000040 ffff88801a442280 0000000000000000 dead000000000001 [ 1088.278133][ T5964] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 1088.286811][ T5964] head: 00fff00000000003 ffffea0001e87001 00000000ffffffff 00000000ffffffff [ 1088.295484][ T5964] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1088.304151][ T5964] page dumped because: kasan: bad access detected [ 1088.310577][ T5964] page_owner tracks the page as allocated [ 1088.316296][ T5964] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5490, tgid 5490 (S41dhcpcd), ts 54979266043, free_ts 54969418697 [ 1088.336671][ T5964] post_alloc_hook+0x240/0x2a0 [ 1088.341477][ T5964] get_page_from_freelist+0x21e4/0x22c0 [ 1088.347086][ T5964] __alloc_frozen_pages_noprof+0x181/0x370 [ 1088.352961][ T5964] alloc_pages_mpol+0x232/0x4a0 [ 1088.357862][ T5964] allocate_slab+0x8a/0x3b0 [ 1088.362425][ T5964] ___slab_alloc+0xbfc/0x1480 [ 1088.367160][ T5964] __kmalloc_cache_noprof+0x296/0x3d0 [ 1088.372583][ T5964] tomoyo_init_log+0x111f/0x1f70 [ 1088.377581][ T5964] tomoyo_supervisor+0x340/0x1480 [ 1088.382678][ T5964] tomoyo_env_perm+0x149/0x1e0 [ 1088.387482][ T5964] tomoyo_find_next_domain+0x15cf/0x1aa0 [ 1088.393173][ T5964] tomoyo_bprm_check_security+0x11c/0x180 [ 1088.398967][ T5964] security_bprm_check+0x89/0x270 [ 1088.404059][ T5964] bprm_execve+0x8ee/0x1450 [ 1088.408615][ T5964] do_execveat_common+0x510/0x6a0 [ 1088.413676][ T5964] __x64_sys_execve+0x94/0xb0 [ 1088.418431][ T5964] page last free pid 5489 tgid 5489 stack trace: [ 1088.424842][ T5964] __free_frozen_pages+0xc71/0xe70 [ 1088.430047][ T5964] __put_partials+0x161/0x1c0 [ 1088.434784][ T5964] put_cpu_partial+0x17c/0x250 [ 1088.439646][ T5964] __slab_free+0x2f7/0x400 [ 1088.444113][ T5964] qlist_free_all+0x97/0x140 [ 1088.448771][ T5964] kasan_quarantine_reduce+0x148/0x160 [ 1088.454294][ T5964] __kasan_slab_alloc+0x22/0x80 [ 1088.459207][ T5964] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1088.464796][ T5964] getname_flags+0xb8/0x540 [ 1088.469352][ T5964] vfs_fstatat+0x43/0x170 [ 1088.473728][ T5964] __x64_sys_newfstatat+0x116/0x190 [ 1088.479131][ T5964] do_syscall_64+0xfa/0x3b0 [ 1088.483671][ T5964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.489617][ T5964] [ 1088.491972][ T5964] Memory state around the buggy address: [ 1088.497627][ T5964] ffff88807a1c0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1088.505733][ T5964] ffff88807a1c0180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1088.513851][ T5964] >ffff88807a1c0200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1088.521949][ T5964] ^ [ 1088.526568][ T5964] ffff88807a1c0280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1088.534650][ T5964] ffff88807a1c0300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1088.542719][ T5964] ================================================================== [ 1088.568130][T16741] program syz.2.2595 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1088.790059][ T5964] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1088.797359][ T5964] CPU: 1 UID: 0 PID: 5964 Comm: kworker/1:6 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 1088.809476][ T5964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1088.819588][ T5964] Workqueue: usb_hub_wq hub_event [ 1088.824696][ T5964] Call Trace: [ 1088.828015][ T5964] [ 1088.830990][ T5964] dump_stack_lvl+0x99/0x250 [ 1088.835648][ T5964] ? __asan_memcpy+0x40/0x70 [ 1088.840285][ T5964] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1088.845528][ T5964] ? __pfx__printk+0x10/0x10 [ 1088.850157][ T5964] panic+0x2db/0x790 [ 1088.854108][ T5964] ? __pfx_panic+0x10/0x10 [ 1088.858590][ T5964] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1088.864531][ T5964] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1088.870902][ T5964] ? print_memory_metadata+0x314/0x400 [ 1088.876408][ T5964] ? media_device_unregister+0x141/0x400 [ 1088.882074][ T5964] check_panic_on_warn+0x89/0xb0 [ 1088.887051][ T5964] ? media_device_unregister+0x141/0x400 [ 1088.892719][ T5964] end_report+0x78/0x160 [ 1088.896986][ T5964] kasan_report+0x129/0x150 [ 1088.901542][ T5964] ? media_device_unregister+0x141/0x400 [ 1088.907204][ T5964] media_device_unregister+0x141/0x400 [ 1088.912727][ T5964] em28xx_release_resources+0xac/0x240 [ 1088.918213][ T5964] em28xx_usb_disconnect+0x19f/0x2f0 [ 1088.923515][ T5964] usb_unbind_interface+0x26b/0x8f0 [ 1088.928726][ T5964] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1088.934452][ T5964] device_release_driver_internal+0x4d6/0x7c0 [ 1088.940533][ T5964] bus_remove_device+0x34d/0x410 [ 1088.945488][ T5964] device_del+0x511/0x8e0 [ 1088.949825][ T5964] ? kfree+0x18e/0x440 [ 1088.953905][ T5964] ? __pfx_device_del+0x10/0x10 [ 1088.958757][ T5964] ? kobject_put+0x446/0x480 [ 1088.963365][ T5964] usb_disable_device+0x3e9/0x8a0 [ 1088.968408][ T5964] usb_disconnect+0x330/0x910 [ 1088.973099][ T5964] hub_event+0x1cdb/0x4a00 [ 1088.977536][ T5964] ? do_raw_spin_lock+0x121/0x290 [ 1088.982570][ T5964] ? register_lock_class+0x51/0x320 [ 1088.987786][ T5964] ? __pfx_hub_event+0x10/0x10 [ 1088.992560][ T5964] ? process_scheduled_works+0x9ef/0x17b0 [ 1088.998291][ T5964] ? _raw_spin_unlock_irq+0x23/0x50 [ 1089.003498][ T5964] ? process_scheduled_works+0x9ef/0x17b0 [ 1089.009235][ T5964] ? process_scheduled_works+0x9ef/0x17b0 [ 1089.014991][ T5964] process_scheduled_works+0xae1/0x17b0 [ 1089.020571][ T5964] ? __pfx_process_scheduled_works+0x10/0x10 [ 1089.026575][ T5964] worker_thread+0x8a0/0xda0 [ 1089.031191][ T5964] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1089.037586][ T5964] ? __kthread_parkme+0x7b/0x200 [ 1089.042532][ T5964] kthread+0x70e/0x8a0 [ 1089.046610][ T5964] ? __pfx_worker_thread+0x10/0x10 [ 1089.051731][ T5964] ? __pfx_kthread+0x10/0x10 [ 1089.056329][ T5964] ? _raw_spin_unlock_irq+0x23/0x50 [ 1089.061536][ T5964] ? lockdep_hardirqs_on+0x9c/0x150 [ 1089.066747][ T5964] ? __pfx_kthread+0x10/0x10 [ 1089.071347][ T5964] ret_from_fork+0x3fc/0x770 [ 1089.075960][ T5964] ? __pfx_ret_from_fork+0x10/0x10 [ 1089.081097][ T5964] ? __switch_to_asm+0x39/0x70 [ 1089.085868][ T5964] ? __switch_to_asm+0x33/0x70 [ 1089.090636][ T5964] ? __pfx_kthread+0x10/0x10 [ 1089.095241][ T5964] ret_from_fork_asm+0x1a/0x30 [ 1089.100057][ T5964] [ 1089.103399][ T5964] Kernel Offset: disabled [ 1089.107734][ T5964] Rebooting in 86400 seconds..