last executing test programs: 5m10.817278392s ago: executing program 0 (id=33): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0xc, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x20, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f0000006800)="10", 0x1) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) 5m7.261136248s ago: executing program 0 (id=62): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x800}, 0x4000010) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfdc4, 0x3e8, 0x0, 0xfffffffffffffd25) 5m6.344069703s ago: executing program 0 (id=68): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x800) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x9, 0x1, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) close_range(r0, 0xffffffffffffffff, 0x0) 5m6.210258466s ago: executing program 0 (id=69): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) unshare(0x8000000) 5m6.006424341s ago: executing program 0 (id=71): ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) 5m5.676760918s ago: executing program 0 (id=75): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r1 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 5m5.341549805s ago: executing program 32 (id=75): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r1 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 4m48.015155351s ago: executing program 2 (id=191): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 4m47.734433721s ago: executing program 2 (id=195): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x41, 0x0, 0x8001}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 4m47.249613852s ago: executing program 3 (id=198): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) listen(0xffffffffffffffff, 0x709) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000480)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7ff203fb0b3527b5b73942cfd8880f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509a9a1f8baeb1898000000000100005a", 0x55}], 0x1}, 0x0) 4m46.562710776s ago: executing program 2 (id=201): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) creat(&(0x7f0000000000)='./file0\x00', 0x108) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x28) write$tcp_congestion(r2, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r2, r0) 4m46.190896539s ago: executing program 2 (id=203): socket$netlink(0x10, 0x3, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r3) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) 4m45.824154887s ago: executing program 2 (id=205): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000000500)=0x1) 4m45.43902461s ago: executing program 3 (id=207): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) close_range(r1, 0xffffffffffffffff, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="17090010000000000000010000000500070000000000080009000000000008000a0000080000060002000000000014001f00000000000000000000000000000000001400200000000000000000000000ffffac1414bb06001b004e230000050021"], 0x6c}}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="180100002e00010000000000ffdbdf250501f2800c00180008ac0f000000000014000a0000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd0400e9000000002fcc0951b4c368822c7241299ef61548a35033454df4d60ebdbf6538643424848a9f2b787c6b011dd973055b570fc280c6790ee1963603560cd009d0abaa"], 0x118}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) 4m45.148356721s ago: executing program 3 (id=208): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r0, &(0x7f0000000440)={@val={0xa}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0xc, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x8, 0x100, @void}}}}}}}}}, 0x46) 4m44.819547824s ago: executing program 2 (id=209): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000500)="e7216f983693aa736f71d4", 0xb) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x54}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 4m44.733307815s ago: executing program 3 (id=210): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) unshare(0x20060400) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 4m44.520647002s ago: executing program 3 (id=212): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 4m42.906891802s ago: executing program 3 (id=217): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x102000, 0x0) flock(r2, 0x1) r3 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r3, 0x2) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d6, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 4m42.590838983s ago: executing program 33 (id=217): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x102000, 0x0) flock(r2, 0x1) r3 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r3, 0x2) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d6, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 4m29.743777752s ago: executing program 34 (id=209): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000500)="e7216f983693aa736f71d4", 0xb) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x54}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 35.464031532s ago: executing program 5 (id=2213): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000880)}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000980)="3d0296eb70593b74da27ad0ef43cdfacca013f61136666b092f154b82202e7f3b41215fbe3e3381a66b6abde7af0a9f608998408bae2f97394d17cd4fad43a83137abc47e294c03e1c127933e4a232eb62112ca14d3b2323af2120ec24e17f1fc1758194dc4f9774968f41354ff3b7d7f445a29938c18743b5d93c123c4a67c469d256d9f076c29593f9648b5a1bd4195a3d", 0x92}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0", 0x26}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a30312713", 0x1a}, {&(0x7f0000000a80)}], 0x6, 0x4d9e, 0x8) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 31.901726397s ago: executing program 5 (id=2235): socket$netlink(0x10, 0x3, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r9) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB, @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r8], 0x4) 31.420811488s ago: executing program 5 (id=2238): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020) 31.108371526s ago: executing program 6 (id=2241): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x18, 0x2e, 0x9, 0x70bd27, 0x80, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000680)={r4, 0x1ff, 0x0, 0x1, 0x3, [], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) socket$inet_mptcp(0x2, 0x1, 0x106) close(0x3) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x3, 0x2], [0x0, 0x0, 0x3], [0x4000000, 0xc, 0x0, 0x4]}) 30.972440119s ago: executing program 5 (id=2243): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000880)}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000980)="3d0296eb70593b74da27ad0ef43cdfacca013f61136666b092f154b82202e7f3b41215fbe3e3381a66b6abde7af0a9f608998408bae2f97394d17cd4fad43a83137abc47e294c03e1c127933e4a232eb62112ca14d3b2323af2120ec24e17f1fc1758194dc4f9774968f41354ff3b7d7f445a29938c18743b5d93c123c4a67c469d256d9f076c29593f9648b5a1bd4195a3d", 0x92}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0", 0x26}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a30312713", 0x1a}, {&(0x7f0000000a80)}], 0x6, 0x4d9e, 0x8) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 30.826602529s ago: executing program 6 (id=2245): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x13, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x60, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0a0088a8ffffffffffffaab21cb838248e6d77aaaaaaaabb86dd694f920600403a00fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x7a) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 28.769300062s ago: executing program 4 (id=2260): setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) sendmsg$sock(r0, &(0x7f0000000940)={&(0x7f0000000300)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000540)}, {&(0x7f0000001400)="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", 0xa79}, {&(0x7f0000000600)="bbc6351d5b17d69316ec14fbebe6d4f456979602ad91ae24f9a1da6834e77a49a31a836afb32294cf8453b100f60525874c6dd34f59950a10b18499cd72145cf42ccb624e5159a58257c6e1aed068f52", 0x50}, {&(0x7f0000000680)="cc18101d6bec7dadde1d231d7be01e1a3ebed2", 0x13}, {&(0x7f00000006c0)="2219a8d1a15d2cc1d9f7e487ed6138173c17bebef35e5c731961e6d1d07d4bc0a9699ac13447f29c363112c81f005fb311", 0x31}, {0x0}], 0x6}, 0x800) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 28.605641795s ago: executing program 4 (id=2261): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x11, 0xa, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x24000080) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002000)=ANY=[@ANYBLOB, @ANYBLOB], 0x5c}}, 0x404c000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20004804) r0 = socket(0x10, 0x803, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) 27.732403366s ago: executing program 1 (id=2263): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f00000011c0)={0x20, 0x14, 0x4, "0426fd98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="200004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000d80)={0x44, &(0x7f0000000ac0)={0x0, 0xc, 0x4, "ad43092f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 27.62533542s ago: executing program 4 (id=2264): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r2, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) 26.972658562s ago: executing program 5 (id=2265): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x2, 0xfc, 0xe7, 0x4}) r1 = socket(0x10, 0x80003, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='clear_refs\x00') seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f00000000c0)='2', 0x1}], 0x1) recvmsg$unix(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/99, 0x63}, {&(0x7f0000000040)=""/14, 0xe}, {&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000200)=""/130, 0x82}, {&(0x7f00000002c0)=""/134, 0x86}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000000380)=""/46, 0x2e}], 0x7, &(0x7f00000000c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x12000) socket$tipc(0x1e, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200cd4c1960b89c40ebb373", 0x39}], 0x1}, 0x4008010) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'sit0\x00'}) recvfrom$inet6(r1, 0x0, 0x0, 0x2042, 0x0, 0x0) 26.916649764s ago: executing program 6 (id=2266): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000100)={0x0, r1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, &(0x7f0000000140)=""/92, 0x4000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 26.670411649s ago: executing program 1 (id=2267): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000c000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x4, 0x0, 0x0) socket$inet6(0x2d, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) ioctl$KVM_RUN(r2, 0xae80, 0x0) 26.663620148s ago: executing program 4 (id=2268): setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) sendmsg$sock(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000540)}, {&(0x7f0000001400)}, {&(0x7f0000000600)="bbc6351d5b17d69316ec14fbebe6d4f456979602ad91ae24f9a1da6834e77a49a31a836afb32294cf8453b100f60525874c6dd34f59950a10b18499cd7", 0x3d}, {&(0x7f0000000680)="cc18101d6bec7dadde1d231d7be01e1a3ebed24c1f1b0cacbb731e37f148", 0x1e}, {&(0x7f00000006c0)}, {0x0}], 0x6}, 0x800) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 26.424496708s ago: executing program 4 (id=2269): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) r3 = dup(r0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x7, 0x1, 0xf06, 0x1, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r5, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r4, 0x0, r0, 0x0, 0xffff, 0x2) write$P9_RREAD(r3, &(0x7f0000000140)=ANY=[], 0xb) 26.245511171s ago: executing program 1 (id=2270): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000001340), 0x0, 0x4085) read$FUSE(r2, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, 0x0, 0x0) 25.935990582s ago: executing program 5 (id=2271): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x800) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd3f00100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 25.724277867s ago: executing program 6 (id=2272): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = msgget(0x1, 0x8) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) msgctl$IPC_RMID(r0, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(0xffffffffffffffff, 0x3b88, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) syz_io_uring_setup(0x3e7b, &(0x7f0000000380)={0x0, 0x2324, 0x100, 0x3, 0x314}, &(0x7f0000000080), &(0x7f0000000240)) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x20040010}, 0x8000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/anycast6\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/182, 0xb6}], 0x1, 0x17e, 0xf) 25.181566985s ago: executing program 1 (id=2273): setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) sendmsg$sock(r0, &(0x7f0000000940)={&(0x7f0000000300)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000540)}, {&(0x7f0000001400)="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", 0x9da}, {0x0}, {&(0x7f0000000680)="cc18101d6bec7dadde1d231d7be01e1a3ebed24c1f1b0cacbb731e37f14830d34d9f1234", 0x24}, {0x0}, {0x0}], 0x6}, 0x800) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 24.760479915s ago: executing program 1 (id=2274): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000880)}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000980)="3d0296eb70593b74da27ad0ef43cdfacca013f61136666b092f154b82202e7f3b41215fbe3e3381a66b6abde7af0a9f608998408bae2f97394d17cd4fad43a83137abc47e294c03e1c127933e4a232eb62112ca14d3b2323af2120ec24e17f1fc1758194dc4f9774968f41354ff3b7d7f445a29938c18743b5d93c123c4a67c469d256d9f076c29593f9648b5a1bd4195a3d", 0x92}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0", 0x26}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a30312713", 0x1a}, {&(0x7f0000000a80)}], 0x6, 0x4d9e, 0x8) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 24.500669518s ago: executing program 6 (id=2275): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) 24.500330006s ago: executing program 1 (id=2276): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) bind$phonet(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x14}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) write$RDMA_USER_CM_CMD_REJECT(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x810, r0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x9) connect$inet(r2, &(0x7f0000000280)={0x2, 0x80, @remote}, 0x10) close(r2) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_proto_private(r3, 0x89e0, 0x0) 24.355257556s ago: executing program 6 (id=2277): socket$nl_generic(0x10, 0x3, 0x10) semop(0x0, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x48800) shutdown(r3, 0x0) recvmmsg(r3, 0x0, 0x0, 0x10143, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) ioctl$SOUND_PCM_READ_RATE(0xffffffffffffffff, 0x80045002, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 17.008955737s ago: executing program 4 (id=2278): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000180)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0x34, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000440)={0x40, 0x7}, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 35 (id=2276): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) bind$phonet(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x14}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) write$RDMA_USER_CM_CMD_REJECT(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x810, r0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x9) connect$inet(r2, &(0x7f0000000280)={0x2, 0x80, @remote}, 0x10) close(r2) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_proto_private(r3, 0x89e0, 0x0) kernel console output (not intermixed with test programs): _pcr cause=ToMToU comm="syz.1.525" name="bus" dev="ramfs" ino=19459 res=1 errno=0 [ 182.724944][ T5927] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 182.940835][ T5927] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000118. ret = -EPROTO [ 182.968858][ T5927] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 182.979686][ T5927] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 183.000025][ T5927] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 183.017695][ T5927] usb 5-1: USB disconnect, device number 6 [ 183.039247][ T5828] udevd[5828]: setting owner of /dev/bus/usb/005/006 to uid=0, gid=0 failed: No such file or directory [ 183.610516][ T7912] netlink: 9 bytes leftover after parsing attributes in process `syz.4.526'. [ 183.621109][ T7912] gretap0: entered promiscuous mode [ 184.316614][ T5876] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 184.328098][ T5876] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 184.372591][ T5876] usb 6-1: USB disconnect, device number 8 [ 184.405668][ T7924] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 184.827676][ T10] gspca_stk1135: reg_w 0x2ff err -71 [ 184.834191][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 184.858721][ T10] gspca_stk1135: Sensor write failed [ 184.876491][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 184.884114][ T10] gspca_stk1135: Sensor write failed [ 184.903556][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 184.926388][ T10] gspca_stk1135: Sensor read failed [ 184.931743][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 184.943270][ T10] gspca_stk1135: Sensor read failed [ 184.953290][ T10] gspca_stk1135: Detected sensor type unknown (0x0) [ 184.966650][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 184.983235][ T10] gspca_stk1135: Sensor read failed [ 184.991475][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 185.006146][ T10] gspca_stk1135: Sensor read failed [ 185.026454][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 185.036687][ T10] gspca_stk1135: Sensor write failed [ 185.042097][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 185.078684][ T10] gspca_stk1135: Sensor write failed [ 185.084107][ T10] stk1135 7-1:0.0: probe with driver stk1135 failed with error -71 [ 185.115216][ T10] usb 7-1: USB disconnect, device number 7 [ 185.331321][ T7941] tipc: Invalid UDP bearer configuration [ 185.331381][ T7941] tipc: Enabling of bearer rejected, failed to enable media [ 185.616404][ T10] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 185.802429][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 185.837421][ T10] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 185.850060][ T10] usb 2-1: config 0 has no interface number 0 [ 185.862297][ T10] usb 2-1: config 0 interface 184 has no altsetting 0 [ 186.022714][ T10] usb 2-1: string descriptor 0 read error: -22 [ 186.067475][ T10] usb 2-1: New USB device found, idVendor=644d, idProduct=cf2f, bcdDevice=3b.94 [ 186.161472][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.330836][ T10] usb 2-1: config 0 descriptor?? [ 186.363460][ T10] usb-storage 2-1:0.184: USB Mass Storage device detected [ 186.631272][ T5896] usb 2-1: USB disconnect, device number 13 [ 188.185418][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.546'. [ 188.592683][ T7974] team_slave_0: entered promiscuous mode [ 188.598673][ T7974] team_slave_1: entered promiscuous mode [ 188.635989][ T7974] netlink: 'syz.1.550': attribute type 10 has an invalid length. [ 188.643980][ T7974] team_slave_0: left promiscuous mode [ 188.669476][ T7974] team_slave_1: left promiscuous mode [ 188.691032][ T5147] Bluetooth: hci0: Malformed Event: 0x02 [ 188.735318][ T7974] team0 (unregistering): Port device team_slave_0 removed [ 188.792722][ T7974] team0 (unregistering): Port device team_slave_1 removed [ 190.753574][ T5918] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 190.925757][ T5918] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 190.938395][ T5918] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.950368][ T5918] usb 2-1: config 0 interface 0 has no altsetting 0 [ 190.957365][ T5918] usb 2-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 190.966893][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.978711][ T5918] usb 2-1: config 0 descriptor?? [ 191.425432][ T5918] lenovo 0003:17EF:60EE.0006: hidraw0: USB HID v0.01 Device [HID 17ef:60ee] on usb-dummy_hcd.1-1/input0 [ 192.257212][ T10] usb 2-1: USB disconnect, device number 14 [ 192.600339][ T8062] kvm: pic: non byte read [ 192.613067][ T8062] kvm: pic: non byte read [ 192.617598][ T8062] kvm: pic: non byte read [ 192.622136][ T8062] kvm: pic: non byte read [ 192.643175][ T8062] kvm: pic: non byte read [ 192.647563][ T8062] kvm: pic: non byte read [ 192.652081][ T8062] kvm: pic: non byte read [ 192.657086][ T8062] kvm: pic: non byte read [ 192.661507][ T8062] kvm: pic: non byte read [ 192.667014][ T8062] kvm: pic: non byte read [ 193.920782][ T8080] syz.4.573 (8080) used greatest stack depth: 16744 bytes left [ 194.332047][ T5918] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 194.351995][ T51] Bluetooth: hci3: command 0x2016 tx timeout [ 194.392047][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 194.427991][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.436991][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.614426][ T5918] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.626631][ T5918] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 194.637377][ T5918] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 194.647071][ T5918] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 194.655530][ T5918] usb 7-1: SerialNumber: syz [ 194.684119][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.694590][ T10] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 194.712965][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.738329][ T10] usb 6-1: config 0 descriptor?? [ 194.754833][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 194.884612][ T5918] usb 7-1: 0:2 : does not exist [ 195.040819][ T5918] usb 7-1: USB disconnect, device number 8 [ 195.172157][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 195.195355][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 195.203327][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 195.233522][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 195.251296][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 195.260447][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 195.301411][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 195.323699][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 195.347383][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 195.362589][ T10] pwc: recv_control_msg error -32 req 04 val 1500 [ 195.380398][ T10] pwc: recv_control_msg error -32 req 02 val 2500 [ 195.599276][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 195.641874][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 195.671392][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 195.711355][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 195.738019][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 195.765196][ T10] pwc: Registered as video103. [ 195.791230][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input12 [ 195.867668][ T10] usb 6-1: USB disconnect, device number 9 [ 196.612385][ T51] Bluetooth: hci3: command 0x2016 tx timeout [ 201.439078][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.025054][ T8239] dvmrp1: entered allmulticast mode [ 206.043323][ T8239] dvmrp1: left allmulticast mode [ 206.379774][ T5147] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 206.526034][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 206.707177][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 206.719995][ T5147] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 206.724365][ T10] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 206.776249][ T10] usb 6-1: config 0 has no interface number 0 [ 206.790748][ T10] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 206.817301][ T10] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 206.845770][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.854501][ T10] usb 6-1: Product: syz [ 206.860650][ T10] usb 6-1: Manufacturer: syz [ 206.865376][ T10] usb 6-1: SerialNumber: syz [ 206.889111][ T10] usb 6-1: config 0 descriptor?? [ 206.902792][ T8255] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 207.131809][ T8255] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 207.844025][ T5147] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 209.979433][ T10] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 209.999784][ T8354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.670'. [ 210.024410][ T10] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 210.025593][ T8354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.670'. [ 210.052047][ T10] asix 6-1:0.188: probe with driver asix failed with error -71 [ 210.080761][ T10] usb 6-1: USB disconnect, device number 10 [ 210.532222][ T8365] netlink: 'syz.6.675': attribute type 27 has an invalid length. [ 210.790181][ T8365] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.799055][ T8365] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.935664][ T8365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.960899][ T8365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.144462][ T5977] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.163841][ T5977] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.172889][ T5977] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.199789][ T5977] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.398221][ T8386] netlink: 8 bytes leftover after parsing attributes in process `syz.5.682'. [ 211.410071][ T8386] netlink: 8 bytes leftover after parsing attributes in process `syz.5.682'. [ 211.488641][ T5147] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 211.784987][ T5147] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 211.802609][ T5147] Bluetooth: hci4: Injecting HCI hardware error event [ 211.812054][ T5147] Bluetooth: hci4: hardware error 0x00 [ 212.113172][ T10] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 212.277291][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.288446][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.300239][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 212.313120][ T10] usb 7-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 212.322174][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.334124][ T10] usb 7-1: config 0 descriptor?? [ 212.453049][ T5876] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 212.605251][ T5876] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 212.614610][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.633922][ T5876] usb 6-1: config 0 descriptor?? [ 212.678477][ T51] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 212.747779][ T10] hid-udraw 0003:20D6:CB17.0007: unknown main item tag 0x3 [ 212.784180][ T10] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:20D6:CB17.0007/input/input14 [ 212.894358][ T10] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:20D6:CB17.0007/input/input15 [ 212.976022][ T10] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:20D6:CB17.0007/input/input16 [ 213.029288][ T8400] mkiss: ax0: crc mode is auto. [ 213.068502][ T10] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:20D6:CB17.0007/input/input17 [ 213.179095][ T10] hid-udraw 0003:20D6:CB17.0007: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.6-1/input0 [ 213.232422][ T10] usb 7-1: USB disconnect, device number 9 [ 213.350054][ T8426] fido_id[8426]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 213.849736][ T8442] macsec0: entered allmulticast mode [ 213.856422][ T5147] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 213.861483][ T8442] veth1_macvtap: entered allmulticast mode [ 213.869993][ T8442] macsec0: left allmulticast mode [ 213.875329][ T8442] veth1_macvtap: left allmulticast mode [ 214.322115][ T10] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 214.474280][ T5147] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 214.496610][ T10] usb 7-1: config 0 has an invalid interface number: 104 but max is 0 [ 214.512882][ T10] usb 7-1: config 0 has no interface number 0 [ 214.519027][ T10] usb 7-1: config 0 interface 104 has no altsetting 0 [ 214.530686][ T10] usb 7-1: New USB device found, idVendor=045e, idProduct=04e2, bcdDevice=1c.4d [ 214.540217][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.548403][ T5147] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 214.556255][ T10] usb 7-1: Product: syz [ 214.560465][ T10] usb 7-1: Manufacturer: syz [ 214.565198][ T10] usb 7-1: SerialNumber: syz [ 214.573073][ T10] usb 7-1: config 0 descriptor?? [ 214.587943][ T10] ipaq 7-1:0.104: PocketPC PDA converter detected [ 214.595057][ T10] usb 7-1: active config #0 != 1 ?? [ 214.806759][ T10] usb 7-1: USB disconnect, device number 10 [ 214.880633][ T5876] pegasus 6-1:0.0: setup Pegasus II specific registers [ 215.149461][ T8471] fuse: Unknown parameter '0xffffffffffffffffÿÿÿÿ' [ 215.159587][ T8471] netlink: 'syz.4.718': attribute type 23 has an invalid length. [ 216.294393][ T5919] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 216.456617][ T5919] usb 7-1: Using ep0 maxpacket: 8 [ 216.464728][ T5919] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 216.481450][ T5919] usb 7-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 216.492806][ T5919] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.502266][ T5919] usb 7-1: Product: syz [ 216.507658][ T5919] usb 7-1: Manufacturer: syz [ 216.514957][ T5919] usb 7-1: SerialNumber: syz [ 216.525637][ T5919] usb 7-1: config 0 descriptor?? [ 216.537464][ T5919] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 216.743247][ T5147] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 216.776209][ T5876] pegasus 6-1:0.0: eth13, ELECOM USB Ethernet LD-USB20, ca:29:86:e1:d3:5d [ 216.820832][ T5876] usb 6-1: USB disconnect, device number 11 [ 216.963319][ T5147] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 218.098254][ T5147] Bluetooth: hci3: unexpected event for opcode 0x0c23 [ 219.203500][ T5147] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 219.866471][ T5147] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 219.883558][ T8627] nftables ruleset with unbound chain [ 220.128866][ T8639] netlink: 'syz.1.787': attribute type 10 has an invalid length. [ 220.369916][ T5919] gspca_zc3xx: i2c_r status error 10 [ 220.570475][ T5919] gspca_zc3xx: reg_r err -71 [ 220.575265][ T5919] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 220.581745][ T8665] netlink: 'syz.5.799': attribute type 33 has an invalid length. [ 220.593406][ T8665] netlink: 36 bytes leftover after parsing attributes in process `syz.5.799'. [ 220.596068][ T5919] usb 7-1: USB disconnect, device number 11 [ 220.875755][ T8672] netlink: 'syz.5.802': attribute type 1 has an invalid length. [ 220.883619][ T8672] netlink: 224 bytes leftover after parsing attributes in process `syz.5.802'. [ 221.105295][ T8684] deleting an unspecified loop device is not supported. [ 221.608750][ T5919] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 221.623115][ T8712] random: crng reseeded on system resumption [ 221.768397][ T5919] usb 7-1: Using ep0 maxpacket: 32 [ 221.779436][ T5919] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 221.798289][ T5919] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.806389][ T5919] usb 7-1: Product: syz [ 221.824693][ T5919] usb 7-1: Manufacturer: syz [ 221.830108][ T5919] usb 7-1: SerialNumber: syz [ 221.839668][ T5919] usb 7-1: config 0 descriptor?? [ 221.849232][ T5147] Bluetooth: hci1: command 0x0406 tx timeout [ 221.859716][ T5919] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 221.923543][ T5147] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 222.009647][ T5147] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 222.032957][ T8730] comedi comedi4: bad chanlist[0]=0x00400002 chan=2 range length=2 [ 222.212932][ T5147] Bluetooth: hci3: Malformed LE Event: 0x0b [ 222.261001][ T5919] gspca_stk1135: reg_w 0x0 err -71 [ 222.277553][ T5919] gspca_stk1135: serial bus timeout: status=0x00 [ 222.285656][ T5919] gspca_stk1135: Sensor write failed [ 222.291296][ T5919] gspca_stk1135: serial bus timeout: status=0x00 [ 222.298502][ T5919] gspca_stk1135: Sensor write failed [ 222.303930][ T5919] gspca_stk1135: serial bus timeout: status=0x00 [ 222.310975][ T5919] gspca_stk1135: Sensor read failed [ 222.316215][ T5919] gspca_stk1135: serial bus timeout: status=0x00 [ 222.327145][ T5919] gspca_stk1135: Sensor read failed [ 222.342245][ T5919] gspca_stk1135: Detected sensor type unknown (0x0) [ 222.349376][ T5919] gspca_stk1135: serial bus timeout: status=0x00 [ 222.355727][ T5919] gspca_stk1135: Sensor read failed [ 222.366232][ T5919] gspca_stk1135: serial bus timeout: status=0x00 [ 222.372935][ T5147] Bluetooth: hci3: unexpected cc 0x203d length: 9 > 1 [ 222.379897][ T5147] Bluetooth: hci3: unexpected event for opcode 0x203d [ 222.387391][ T5919] gspca_stk1135: Sensor read failed [ 222.393225][ T5919] gspca_stk1135: serial bus timeout: status=0x00 [ 222.400045][ T5919] gspca_stk1135: Sensor write failed [ 222.405368][ T5919] gspca_stk1135: serial bus timeout: status=0x00 [ 222.412396][ T5919] gspca_stk1135: Sensor write failed [ 222.417786][ T5919] stk1135 7-1:0.0: probe with driver stk1135 failed with error -71 [ 222.436382][ T5919] usb 7-1: USB disconnect, device number 12 [ 222.846612][ T5147] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 223.387178][ T8787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.683334][ T8801] netlink: 'syz.1.863': attribute type 9 has an invalid length. [ 223.692644][ T8801] netlink: 44 bytes leftover after parsing attributes in process `syz.1.863'. [ 224.234151][ T8828] netlink: 340 bytes leftover after parsing attributes in process `syz.5.876'. [ 224.265323][ T8828] netlink: 48 bytes leftover after parsing attributes in process `syz.5.876'. [ 224.427071][ T5147] Bluetooth: hci0: unexpected cc 0x203d length: 9 > 1 [ 224.838065][ T5900] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 224.997423][ T5900] usb 7-1: Using ep0 maxpacket: 16 [ 225.017465][ T5900] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 225.028141][ T5900] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 225.038249][ T5900] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 8 [ 225.052963][ T5900] usb 7-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 225.063569][ T5900] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.071940][ T5900] usb 7-1: Product: syz [ 225.076160][ T5900] usb 7-1: Manufacturer: syz [ 225.081349][ T5900] usb 7-1: SerialNumber: syz [ 225.093128][ T5900] usb 7-1: config 0 descriptor?? [ 225.098144][ T5919] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 225.102946][ T8849] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 225.140894][ T5900] mcba_usb 7-1:0.0 can0: failed tx_urb -90 [ 225.146941][ T5900] mcba_usb 7-1:0.0 can0: Failed to send cmd (169) [ 225.153538][ T5900] mcba_usb 7-1:0.0 can0: failed tx_urb -90 [ 225.159568][ T5900] mcba_usb 7-1:0.0 can0: Failed to send cmd (169) [ 225.166017][ T5900] mcba_usb 7-1:0.0: Microchip CAN BUS Analyzer connected [ 225.269307][ T5919] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 225.286251][ T51] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 225.290820][ T5919] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 225.345317][ T5876] usb 7-1: USB disconnect, device number 13 [ 225.366101][ T5876] mcba_usb 7-1:0.0 can0: device disconnected [ 225.372348][ T5919] usb 6-1: config 220 has no interface number 2 [ 225.380156][ T5919] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 225.405063][ T5919] usb 6-1: config 220 interface 0 has no altsetting 0 [ 225.415251][ T51] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 225.417832][ T5919] usb 6-1: config 220 interface 76 has no altsetting 0 [ 225.469851][ T5919] usb 6-1: config 220 interface 1 has no altsetting 0 [ 225.492857][ T5919] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 225.514776][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.534490][ T5919] usb 6-1: Product: syz [ 225.545880][ T5919] usb 6-1: Manufacturer: syz [ 225.563042][ T5919] usb 6-1: SerialNumber: syz [ 225.608309][ T8888] netlink: 220 bytes leftover after parsing attributes in process `syz.1.902'. [ 225.805766][ T5919] usb 6-1: selecting invalid altsetting 0 [ 225.821908][ T5919] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 225.837595][ T5919] uvcvideo 6-1:220.0: No valid video chain found. [ 225.882520][ T5919] usb 6-1: selecting invalid altsetting 0 [ 225.897673][ T5919] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 225.933582][ T5919] usb 6-1: USB disconnect, device number 12 [ 226.017752][ T8904] netlink: 24 bytes leftover after parsing attributes in process `syz.6.907'. [ 226.220129][ T51] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 226.319060][ T51] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 226.716411][ T8941] netlink: 28 bytes leftover after parsing attributes in process `syz.1.919'. [ 226.942445][ T8953] netlink: 'syz.1.924': attribute type 27 has an invalid length. [ 226.962216][ T8953] netlink: 'syz.1.924': attribute type 1 has an invalid length. [ 226.975830][ T8953] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.091629][ T8959] netlink: 'syz.1.926': attribute type 10 has an invalid length. [ 227.104212][ T8959] netlink: 40 bytes leftover after parsing attributes in process `syz.1.926'. [ 227.117515][ T8959] batadv0: entered promiscuous mode [ 227.122764][ T8959] batadv0: entered allmulticast mode [ 227.133343][ T8961] netlink: 16 bytes leftover after parsing attributes in process `syz.5.927'. [ 227.136603][ T8959] bridge0: port 3(batadv0) entered blocking state [ 227.150208][ T8959] bridge0: port 3(batadv0) entered disabled state [ 227.161377][ T8959] bridge0: port 3(batadv0) entered blocking state [ 227.168052][ T8959] bridge0: port 3(batadv0) entered forwarding state [ 227.218798][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 227.496140][ T5977] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 227.507390][ T5977] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 227.795570][ T5919] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 227.947000][ T5919] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.967420][ T5919] usb 6-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 227.977400][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.987214][ T5919] usb 6-1: Product: syz [ 227.992662][ T5919] usb 6-1: Manufacturer: syz [ 227.998410][ T5919] usb 6-1: SerialNumber: syz [ 228.020741][ T5919] usb 6-1: config 0 descriptor?? [ 228.247307][ T5919] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 228.286603][ T5919] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 228.298057][ T5919] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 228.312095][ T5919] usb 6-1: media controller created [ 228.334796][ T5919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 228.453410][ T5919] DVB: Unable to find symbol dib7000p_attach() [ 228.471051][ T5919] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 228.502626][ T5919] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 228.528041][ T9016] netlink: 1047 bytes leftover after parsing attributes in process `syz.6.951'. [ 228.528099][ T5919] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 228.552870][ T9016] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 228.559433][ T5919] usb 6-1: media controller created [ 228.561808][ T5919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 228.572092][ T9018] veth0_to_bond: mtu less than device minimum [ 228.613523][ T5919] dib0700: the master dib7090 has to be initialized first [ 228.630609][ T5919] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 228.641068][ T9022] netlink: 'syz.1.954': attribute type 10 has an invalid length. [ 228.774614][ T9029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.957'. [ 228.784389][ T5919] rc_core: IR keymap rc-dib0700-rc5 not found [ 228.800902][ T5919] Registered IR keymap rc-empty [ 228.825825][ T5919] dvb-usb: could not initialize remote control. [ 228.832120][ T5919] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 228.887542][ T5919] usb 6-1: USB disconnect, device number 13 [ 228.973413][ T5919] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 229.572049][ T5900] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 229.702188][ T9076] capability: warning: `syz.1.979' uses deprecated v2 capabilities in a way that may be insecure [ 229.713019][ T5147] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 229.763785][ T5900] usb 6-1: Using ep0 maxpacket: 8 [ 229.787743][ T5900] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 229.796251][ T5900] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 229.806685][ T5147] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 229.824330][ T5900] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 229.844244][ T5900] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 229.861467][ T5900] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 229.875000][ T5900] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 229.884079][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.030149][ T9092] netlink: 'syz.1.985': attribute type 10 has an invalid length. [ 230.041307][ T9092] bridge0: port 3(batadv0) entered disabled state [ 230.048761][ T9092] batadv0: left allmulticast mode [ 230.053956][ T9092] batadv0: left promiscuous mode [ 230.059645][ T9092] bridge0: port 3(batadv0) entered disabled state [ 230.072969][ T9092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.082675][ T9093] netlink: 'syz.1.985': attribute type 10 has an invalid length. [ 230.084876][ T9092] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 230.090915][ T9093] netlink: 40 bytes leftover after parsing attributes in process `syz.1.985'. [ 230.108720][ T9093] batadv0: entered promiscuous mode [ 230.116634][ T9093] batadv0: entered allmulticast mode [ 230.135544][ T9093] bond0: (slave batadv0): Releasing backup interface [ 230.155730][ T9093] bridge0: port 3(batadv0) entered blocking state [ 230.162635][ T9093] bridge0: port 3(batadv0) entered disabled state [ 230.255143][ T5918] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 230.303340][ T5147] Bluetooth: hci1: Malformed LE Event: 0x0d [ 230.415395][ T5918] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.425238][ T5918] usb 7-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 230.438148][ T5918] usb 7-1: config 0 interface 0 has no altsetting 0 [ 230.444848][ T5918] usb 7-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 230.454627][ T5918] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.474681][ T5918] usb 7-1: config 0 descriptor?? [ 230.604170][ T131] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 230.613577][ T131] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 230.915261][ T5918] gembird 0003:11FF:3331.0008: item fetching failed at offset 2/5 [ 230.925173][ T5918] gembird 0003:11FF:3331.0008: probe with driver gembird failed with error -22 [ 230.941358][ T9119] netlink: 1030 bytes leftover after parsing attributes in process `syz.1.998'. [ 230.952653][ T9119] bridge: RTM_NEWNEIGH with invalid ether address [ 231.106498][ T5919] usb 7-1: USB disconnect, device number 14 [ 231.659532][ T9139] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1008'. [ 232.283071][ T5919] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 232.334622][ T5918] usb 6-1: USB disconnect, device number 14 [ 232.433808][ T5919] usb 7-1: Using ep0 maxpacket: 32 [ 232.443273][ T5919] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 232.458133][ T5919] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 232.470106][ T5919] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 232.502081][ T5919] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 232.518762][ T5919] usb 7-1: config 0 interface 0 has no altsetting 0 [ 232.529370][ T5919] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 232.538786][ T5919] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 232.554398][ T5919] usb 7-1: Product: syz [ 232.559365][ T5919] usb 7-1: Manufacturer: syz [ 232.565663][ T5919] usb 7-1: SerialNumber: syz [ 232.579769][ T5919] usb 7-1: config 0 descriptor?? [ 232.594334][ T5919] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 232.620682][ T5919] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 232.711198][ T9172] netlink: 'syz.1.1022': attribute type 10 has an invalid length. [ 232.723990][ T9172] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1022'. [ 232.813025][ T5876] usb 7-1: USB disconnect, device number 15 [ 232.833730][ T5876] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 232.872746][ T5918] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 233.043855][ T5918] usb 6-1: Using ep0 maxpacket: 32 [ 233.051491][ T5918] usb 6-1: config 0 has no interfaces? [ 233.059852][ T5918] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 233.069128][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.077232][ T5918] usb 6-1: Product: syz [ 233.081496][ T5918] usb 6-1: Manufacturer: syz [ 233.086188][ T5918] usb 6-1: SerialNumber: syz [ 233.093075][ T5918] usb 6-1: config 0 descriptor?? [ 233.303454][ T5876] usb 6-1: USB disconnect, device number 15 [ 233.524772][ T51] Bluetooth: hci3: command 0x2016 tx timeout [ 234.521915][ T5876] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 234.674033][ T5876] usb 7-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 234.683506][ T5876] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.697529][ T5876] usb 7-1: config 0 descriptor?? [ 235.130016][ T5876] lenovo 0003:17EF:60B5.0009: hidraw0: USB HID v1.01 Device [HID 17ef:60b5] on usb-dummy_hcd.6-1/input0 [ 235.319454][ T5927] usb 7-1: USB disconnect, device number 16 [ 235.401604][ T5876] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 235.551413][ T5876] usb 6-1: Using ep0 maxpacket: 32 [ 235.558822][ T5876] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 235.572626][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 235.584144][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8960, setting to 1024 [ 235.600386][ T5876] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 235.611234][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.622006][ T5876] usb 6-1: Product: syz [ 235.626557][ T5876] usb 6-1: Manufacturer: syz [ 235.631728][ T5876] usb 6-1: SerialNumber: syz [ 235.638579][ T5876] usb 6-1: config 0 descriptor?? [ 235.857836][ T5918] usb 6-1: USB disconnect, device number 16 [ 238.310087][ T5918] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 238.471749][ T5918] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 238.484451][ T5918] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 238.493633][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.501712][ T5918] usb 6-1: Product: syz [ 238.505868][ T5918] usb 6-1: Manufacturer: syz [ 238.510509][ T5918] usb 6-1: SerialNumber: syz [ 238.522572][ T5918] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 239.142455][ T5918] usb 6-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 239.164004][ T5918] usb 6-1: USB disconnect, device number 17 [ 239.483708][ T9381] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 239.490404][ T9381] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 239.501778][ T9381] vhci_hcd vhci_hcd.0: Device attached [ 239.739323][ T5927] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 239.749471][ T5876] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 239.902314][ T5876] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 239.923206][ T5876] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 239.932804][ T5876] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.944446][ T5876] usb 7-1: config 0 descriptor?? [ 240.153398][ T9382] usbip_core: unknown command [ 240.158814][ T9382] vhci_hcd: unknown pdu 0 [ 240.159372][ T5918] usb 7-1: USB disconnect, device number 17 [ 240.164473][ T9382] usbip_core: unknown command [ 240.184583][ T5973] vhci_hcd vhci_hcd.6: stop threads [ 240.222781][ T5973] vhci_hcd vhci_hcd.6: release socket [ 240.231344][ T5973] vhci_hcd vhci_hcd.6: disconnect device [ 240.279040][ T5927] usb 45-1: device descriptor read/64, error -71 [ 240.459130][ T5927] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 240.788785][ T5918] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 240.960750][ T5918] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.971140][ T5918] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 240.980729][ T5918] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 240.990642][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.001695][ T5918] usb 6-1: config 0 descriptor?? [ 241.015387][ T5918] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 241.022226][ T5918] dvb-usb: bulk message failed: -22 (3/0) [ 241.031416][ T5918] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 241.040987][ T5918] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 241.048093][ T5918] usb 6-1: media controller created [ 241.056052][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 241.066213][ T5900] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 241.086505][ T5918] dvb-usb: bulk message failed: -22 (6/0) [ 241.094479][ T5918] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 241.105334][ T5918] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input19 [ 241.119644][ T5918] dvb-usb: schedule remote query interval to 150 msecs. [ 241.126859][ T5918] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 241.217542][ T9424] dvb-usb: bulk message failed: -22 (2/0) [ 241.224334][ T5900] usb 7-1: Using ep0 maxpacket: 32 [ 241.229757][ T5876] usb 6-1: USB disconnect, device number 18 [ 241.231611][ T5900] usb 7-1: config 2 has an invalid interface number: 88 but max is 0 [ 241.244680][ T5900] usb 7-1: config 2 has no interface number 0 [ 241.253485][ T5900] usb 7-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 241.264917][ T5900] usb 7-1: config 2 interface 88 has no altsetting 0 [ 241.275000][ T5900] usb 7-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 241.276912][ T5876] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 241.284867][ T5900] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.307194][ T5900] usb 7-1: Product: syz [ 241.311891][ T5900] usb 7-1: Manufacturer: syz [ 241.316701][ T5900] usb 7-1: SerialNumber: syz [ 241.326280][ T9435] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 241.891238][ T9449] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 242.068695][ T5876] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 242.230363][ T5876] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.240858][ T5876] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 242.249787][ T5876] usb 6-1: config 1 has no interface number 0 [ 242.256016][ T5876] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.267175][ T5876] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 242.279041][ T5876] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 242.288360][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.296427][ T5876] usb 6-1: Product: syz [ 242.300741][ T5876] usb 6-1: Manufacturer: syz [ 242.305364][ T5876] usb 6-1: SerialNumber: syz [ 242.927114][ T5876] cdc_ncm 6-1:1.1: failed GET_NTB_PARAMETERS [ 242.936980][ T5876] cdc_ncm 6-1:1.1: bind() failure [ 242.947685][ T5876] usb 6-1: USB disconnect, device number 19 [ 243.747654][ T5876] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 243.845673][ T5900] asix 7-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 243.865134][ T5900] asix 7-1:2.88: probe with driver asix failed with error -71 [ 243.878927][ T5900] usb 7-1: USB disconnect, device number 18 [ 243.917235][ T5876] usb 6-1: Using ep0 maxpacket: 16 [ 243.927913][ T5876] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 243.947239][ T5876] usb 6-1: config 0 has no interface number 0 [ 243.966483][ T5876] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 243.981104][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.008429][ T5876] usb 6-1: Product: syz [ 244.017328][ T5876] usb 6-1: Manufacturer: syz [ 244.021975][ T5876] usb 6-1: SerialNumber: syz [ 244.031571][ T5876] usb 6-1: config 0 descriptor?? [ 244.049243][ T5876] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 244.500875][ T9524] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 244.646963][ T5876] gspca_spca1528: reg_w err -71 [ 244.676905][ T5876] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 244.706082][ T5876] usb 6-1: USB disconnect, device number 20 [ 244.992822][ T9554] xt_HMARK: proto mask must be zero with L3 mode [ 245.109194][ T9] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 245.268150][ T9] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 245.277577][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.289926][ T9] usb 7-1: config 0 descriptor?? [ 245.503814][ T9] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 245.704393][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 245.729361][ T9] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 245.736310][ T9] [drm] Initialized udl on minor 2 [ 245.744101][ T9] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 245.759149][ T9] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 245.770850][ T5900] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 245.781972][ T9] usb 7-1: USB disconnect, device number 19 [ 245.788732][ T5900] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 246.296039][ T5900] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 246.455984][ T5900] usb 6-1: Using ep0 maxpacket: 16 [ 246.463377][ T5900] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.474433][ T5900] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.484377][ T5900] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 246.497301][ T5900] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 246.506461][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.516396][ T5876] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 246.525370][ T5900] usb 6-1: config 0 descriptor?? [ 246.669371][ T5876] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.679634][ T5876] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 246.688883][ T5876] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 246.698368][ T5876] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.709730][ T5876] usb 7-1: config 0 descriptor?? [ 246.728850][ T5876] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 246.735539][ T5876] dvb-usb: bulk message failed: -22 (3/0) [ 246.764651][ T5876] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 246.774200][ T5876] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 246.783140][ T5876] usb 7-1: media controller created [ 246.791294][ T5876] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 246.816184][ T5876] dvb-usb: bulk message failed: -22 (6/0) [ 246.822992][ T5876] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 246.858202][ T9590] xt_l2tp: missing protocol rule (udp|l2tpip) [ 246.866604][ T5876] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input20 [ 246.897255][ T5876] dvb-usb: schedule remote query interval to 150 msecs. [ 246.907362][ T5876] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 246.963886][ T9588] dvb-usb: bulk message failed: -22 (2/0) [ 246.990035][ T5900] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 246.996777][ T5876] usb 7-1: USB disconnect, device number 20 [ 247.020286][ T5900] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 247.037039][ T5900] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 247.048046][ T5876] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 247.065909][ T5900] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 247.095498][ T5900] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 247.103346][ T5900] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 247.124389][ T5900] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 247.145626][ T5900] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 247.152908][ T5900] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 247.160222][ T5900] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 247.178267][ T5900] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.000A/input/input21 [ 247.351948][ T5900] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 247.387081][ T5900] usb 6-1: USB disconnect, device number 21 [ 247.490527][ T9607] fido_id[9607]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 247.700150][ T9619] xt_l2tp: invalid flags combination: 8 [ 248.499662][ T9670] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1240'. [ 248.731982][ T5147] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 248.907846][ T9686] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv_slave_1, syncid = 0, id = 0 [ 249.186548][ T9702] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 249.274795][ T5900] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 249.425082][ T5900] usb 6-1: Using ep0 maxpacket: 8 [ 249.432372][ T5900] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 249.445965][ T5900] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 249.455116][ T5900] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 249.463242][ T5900] usb 6-1: Product: syz [ 249.468305][ T5900] usb 6-1: Manufacturer: syz [ 249.472949][ T5900] usb 6-1: SerialNumber: syz [ 249.477906][ T9] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 249.634867][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 249.669854][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.705964][ T9] usb 7-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 249.715359][ T5900] usb 6-1: Handspring Visor / Palm OS: No valid connect info available [ 249.723644][ T5900] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 249.741922][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.751660][ T5900] usb 6-1: Handspring Visor / Palm OS: port 0, is for Debugger use [ 249.762228][ T5900] usb 6-1: Handspring Visor / Palm OS: Number of ports: 2 [ 249.770908][ T9] usb 7-1: config 0 descriptor?? [ 249.806528][ T9718] netlink: 'syz.1.1262': attribute type 29 has an invalid length. [ 249.816973][ T9718] netlink: 'syz.1.1262': attribute type 29 has an invalid length. [ 249.915965][ T5900] usb 6-1: palm_os_3_probe - error -71 getting bytes available request [ 249.928228][ T5900] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 249.939433][ T5900] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 249.951620][ T5900] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 249.967690][ T5900] usb 6-1: USB disconnect, device number 22 [ 249.985512][ T5900] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 249.998993][ T5900] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 250.010703][ T5900] visor 6-1:1.0: device disconnected [ 250.187679][ T9] logitech-djreceiver 0003:046D:C52B.000B: reserved main item tag 0xe [ 250.390546][ T5919] usb 7-1: USB disconnect, device number 21 [ 250.537965][ T5147] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 251.243561][ T5919] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 251.393511][ T5919] usb 7-1: Using ep0 maxpacket: 8 [ 251.408956][ T5919] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 251.416622][ T5919] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 251.429018][ T5919] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 251.441035][ T5919] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 251.453453][ T5919] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 251.465162][ T5919] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 251.477302][ T5919] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 251.491333][ T5919] usb 7-1: config 168 interface 0 has no altsetting 0 [ 251.500003][ T5919] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 251.508157][ T5919] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 251.526376][ T5919] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 251.540024][ T5919] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 251.561477][ T5919] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 251.578182][ T5919] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 251.590335][ T5919] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 251.623477][ T5919] usb 7-1: config 168 interface 0 has no altsetting 0 [ 251.633208][ T5919] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 251.642662][ T5919] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 251.654394][ T5919] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 251.666299][ T5919] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 251.678902][ T5919] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 251.702405][ T5919] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 251.714891][ T5919] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 251.728788][ T5919] usb 7-1: config 168 interface 0 has no altsetting 0 [ 251.740493][ T5919] usb 7-1: string descriptor 0 read error: -22 [ 251.751436][ T5919] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 251.771318][ T5919] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.821425][ T5919] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 252.047622][ T9] usb 7-1: USB disconnect, device number 22 [ 252.258392][ T9756] adutux: No device or device unplugged -19 [ 252.303164][ T5900] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 252.452917][ T5900] usb 6-1: Using ep0 maxpacket: 16 [ 252.459795][ T5900] usb 6-1: config 0 interface 0 has no altsetting 0 [ 252.466588][ T5900] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 252.475669][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.486006][ T5900] usb 6-1: config 0 descriptor?? [ 252.606081][ T9784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1291'. [ 252.615450][ T9784] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1291'. [ 252.667703][ T51] Bluetooth: hci0: unexpected event for opcode 0x0c7b [ 252.794991][ T51] Bluetooth: hci3: command 0x2016 tx timeout [ 252.897977][ T9798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1298'. [ 252.917957][ T5900] hid (null): unknown global tag 0xd [ 252.926095][ T5900] hid (null): unknown global tag 0xc [ 252.931619][ T5900] hid (null): global environment stack underflow [ 253.116303][ T5900] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 253.131218][ T5918] usb 6-1: USB disconnect, device number 23 [ 253.284295][ T5900] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 253.295929][ T5900] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 253.307611][ T5900] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 253.317495][ T5900] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 253.330797][ T5900] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 253.340082][ T5900] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.350864][ T5900] usb 7-1: config 0 descriptor?? [ 253.714166][ T5147] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 253.772331][ T5900] hid_parser_main: 5 callbacks suppressed [ 253.772359][ T5900] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 253.801138][ T5900] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 253.809371][ T5900] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 253.817322][ T5900] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 253.827498][ T5900] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 253.841324][ T5900] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 253.849670][ T5900] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 253.857992][ T5900] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 253.867015][ T5900] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 253.875262][ T5900] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 253.907643][ T5900] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 254.025710][ T5900] usb 7-1: USB disconnect, device number 23 [ 254.622986][ T5147] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 254.687541][ T5147] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 254.950652][ T9860] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1324'. [ 255.113511][ T5900] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 255.273909][ T5900] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.284421][ T5900] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 255.305773][ T5900] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 255.315726][ T5900] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.324725][ T5900] usb 7-1: Product: syz [ 255.329230][ T5900] usb 7-1: Manufacturer: syz [ 255.334019][ T5900] usb 7-1: SerialNumber: syz [ 255.553828][ T9858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.566886][ T9858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.588235][ T5900] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 255.611701][ T5900] usb 7-1: USB disconnect, device number 24 [ 255.846177][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.852797][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.091120][ T5900] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 256.252448][ T5900] usb 7-1: config index 0 descriptor too short (expected 301, got 72) [ 256.276719][ T5900] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 256.317750][ T5900] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 256.348279][ T5900] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64 [ 256.373886][ T5147] Bluetooth: hci3: ISO packet too small [ 256.384599][ T5900] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 256.425022][ T5900] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.447370][ T5900] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 256.489067][ T5900] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.700858][ T5919] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 256.711065][ T5147] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 256.717862][ T5900] usb 7-1: usb_control_msg returned -71 [ 256.719793][ T5147] Bluetooth: hci0: Injecting HCI hardware error event [ 256.734477][ T5147] Bluetooth: hci0: hardware error 0x00 [ 256.740245][ T5900] usbtmc 7-1:16.0: can't read capabilities [ 256.748442][ T5900] usbtmc 7-1:16.0: Failed to submit iin_urb [ 256.755331][ T5900] usbtmc 7-1:16.0: probe with driver usbtmc failed with error -90 [ 256.769307][ T5900] usb 7-1: USB disconnect, device number 25 [ 256.850747][ T5919] usb 6-1: Using ep0 maxpacket: 8 [ 256.864756][ T5919] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 256.876747][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.885943][ T5919] usb 6-1: Product: syz [ 256.890859][ T5919] usb 6-1: Manufacturer: syz [ 256.896423][ T5919] usb 6-1: SerialNumber: syz [ 256.905308][ T5919] usb 6-1: config 0 descriptor?? [ 256.920130][ T5919] gspca_main: se401-2.14.0 probing 047d:5003 [ 257.317249][ T5919] gspca_se401: ExtraFeatures: 20 [ 257.322397][ T5919] gspca_se401: Too many frame sizes [ 257.519221][ T5876] usb 6-1: USB disconnect, device number 24 [ 257.540516][ T5919] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 257.690367][ T5919] usb 7-1: Using ep0 maxpacket: 8 [ 257.699317][ T5919] usb 7-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 257.708996][ T5919] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.717556][ T5919] usb 7-1: Product: syz [ 257.722023][ T5919] usb 7-1: Manufacturer: syz [ 257.726670][ T5919] usb 7-1: SerialNumber: syz [ 257.736593][ T5919] usb 7-1: config 0 descriptor?? [ 257.751492][ T5919] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 258.258266][ T9929] loop5: detected capacity change from 0 to 7 [ 258.571147][ T5919] gspca_vc032x: reg_w err -71 [ 258.580270][ T5919] vc032x 7-1:0.0: probe with driver vc032x failed with error -71 [ 258.598370][ T5919] usb 7-1: USB disconnect, device number 26 [ 258.621744][ T9929] Dev loop5: unable to read RDB block 7 [ 258.629041][ C1] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 258.639291][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 258.647902][ T9929] loop5: unable to read partition table [ 258.655384][ T9929] loop5: partition table beyond EOD, truncated [ 258.662416][ T9929] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 258.769776][ T9940] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1360'. [ 258.791777][ T5147] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 259.349638][ T5876] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 259.501827][ T5876] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 259.511470][ T5876] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.526589][ T5876] usb 7-1: config 0 descriptor?? [ 259.757152][ T5876] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 259.976080][ T5876] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 259.983639][ T5876] [drm] Initialized udl on minor 2 [ 260.139718][ T5919] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 260.170404][ T5876] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 260.180859][ T5876] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 260.309160][ T5919] usb 6-1: Using ep0 maxpacket: 16 [ 260.321800][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.334525][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.347439][ T5919] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 260.356665][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.368136][ T5919] usb 6-1: config 0 descriptor?? [ 260.378235][ T5918] usb 7-1: USB disconnect, device number 27 [ 260.379098][ T5927] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 260.401352][ T5927] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 260.784513][ T5919] mcp2221 0003:04D8:00DD.000E: item fetching failed at offset 4/5 [ 260.793127][ T5919] mcp2221 0003:04D8:00DD.000E: can't parse reports [ 260.799832][ T5919] mcp2221 0003:04D8:00DD.000E: probe with driver mcp2221 failed with error -22 [ 260.984043][ T5918] usb 6-1: USB disconnect, device number 25 [ 261.178633][ T5927] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 261.330238][ T5927] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 261.340541][ T5927] usb 7-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 261.349736][ T5927] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.362844][ T5927] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 261.831020][ T5918] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 261.872484][T10017] pimreg: entered allmulticast mode [ 261.881333][T10017] pimreg: left allmulticast mode [ 261.990643][ T5918] usb 6-1: Using ep0 maxpacket: 32 [ 261.997420][ T5918] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 262.006604][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.018370][ T5918] usb 6-1: config 0 descriptor?? [ 262.228863][ T5918] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 262.240064][ T5918] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 262.250529][ T5918] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 262.257856][ T5918] usb 6-1: media controller created [ 262.272941][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 262.390543][ T5927] stv0680 7-1:4.0: Could not get descriptor 0200 [ 262.597722][ T5927] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 262.606116][ T5927] stv0680 7-1:4.0: last error: 34, command = 0x21 [ 262.615449][ T5927] usb 7-1: USB disconnect, device number 28 [ 262.838336][ T5918] az6027: usb out operation failed. (-71) [ 262.844094][ T5918] stb0899_attach: Driver disabled by Kconfig [ 262.850333][ T5918] az6027: no front-end attached [ 262.850333][ T5918] [ 262.858639][ T5918] az6027: usb out operation failed. (-71) [ 262.864461][ T5918] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 262.875267][ T5918] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input22 [ 262.894595][ T5918] dvb-usb: schedule remote query interval to 400 msecs. [ 262.902117][ T5918] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 262.923846][ T5918] usb 6-1: USB disconnect, device number 26 [ 262.966437][ T5918] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 263.477545][ T5918] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 263.654840][ T5918] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 263.678247][ T5918] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.686367][ T5918] usb 7-1: Product: syz [ 263.694714][ T5918] usb 7-1: Manufacturer: syz [ 263.700610][ T5918] usb 7-1: SerialNumber: syz [ 263.709909][ T5918] usb 7-1: config 0 descriptor?? [ 263.720073][ T5918] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 264.287072][ T5919] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 264.437053][ T5919] usb 6-1: Using ep0 maxpacket: 8 [ 264.444142][ T5919] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 264.454135][ T5919] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 264.464055][ T5919] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 264.474401][ T5919] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 264.487673][ T5919] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 264.497096][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.536329][ T5918] gspca_sunplus: reg_r err -71 [ 264.542327][ T5918] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 264.556670][ T5918] usb 7-1: USB disconnect, device number 29 [ 264.719954][ T5919] usb 6-1: GET_CAPABILITIES returned 0 [ 264.725470][ T5919] usbtmc 6-1:16.0: can't read capabilities [ 264.923471][ T5919] usb 6-1: USB disconnect, device number 27 [ 265.866888][ T5918] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 266.029160][ T5918] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 266.047126][ T5918] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 266.059386][ T5918] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 266.070726][ T5918] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 266.084275][ T5918] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 266.108556][ T5918] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 266.118292][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 266.127406][ T5918] usb 6-1: Product: syz [ 266.131770][ T5918] usb 6-1: Manufacturer: syz [ 266.157682][ T5918] cdc_wdm 6-1:1.0: skipping garbage [ 266.164555][ T5918] cdc_wdm 6-1:1.0: skipping garbage [ 266.176064][ T5918] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 266.185626][ T5918] cdc_wdm 6-1:1.0: Unknown control protocol [ 266.555913][ T5919] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 266.563756][ T5918] usb 6-1: USB disconnect, device number 28 [ 266.725797][ T5919] usb 7-1: Using ep0 maxpacket: 32 [ 266.732960][ T5919] usb 7-1: config 0 interface 0 has no altsetting 0 [ 266.741474][ T5919] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 266.750784][ T5919] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.758845][ T5919] usb 7-1: Product: syz [ 266.763019][ T5919] usb 7-1: Manufacturer: syz [ 266.768030][ T5919] usb 7-1: SerialNumber: syz [ 266.774881][ T5919] usb 7-1: config 0 descriptor?? [ 267.189968][ T5919] gs_usb 7-1:0.0: Configuring for 242 interfaces [ 267.589928][ T5919] gs_usb 7-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 267.600191][ T5919] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -71 [ 267.612408][ T5919] usb 7-1: USB disconnect, device number 30 [ 268.275466][ T5919] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 268.435133][ T5919] usb 6-1: Using ep0 maxpacket: 32 [ 268.440413][ T5927] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 268.457709][ T5919] usb 6-1: config 0 has no interfaces? [ 268.466246][ T5919] usb 6-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 268.485197][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.493318][ T5919] usb 6-1: Product: syz [ 268.497677][ T5919] usb 6-1: Manufacturer: syz [ 268.502300][ T5919] usb 6-1: SerialNumber: syz [ 268.518458][ T5919] usb 6-1: config 0 descriptor?? [ 268.619218][ T5927] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 268.628675][ T5927] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.644964][ T5927] usb 7-1: Product: syz [ 268.649196][ T5927] usb 7-1: Manufacturer: syz [ 268.653824][ T5927] usb 7-1: SerialNumber: syz [ 268.661815][ T5927] usb 7-1: config 0 descriptor?? [ 268.731759][ T5919] usb 6-1: USB disconnect, device number 29 [ 269.075368][ T5927] airspy 7-1:0.0: Board ID: 00 [ 269.080296][ T5927] airspy 7-1:0.0: Firmware version: [ 269.476613][ T5927] airspy 7-1:0.0: usb_control_msg() failed -71 request 0e [ 269.503551][ T5927] airspy 7-1:0.0: Registered as swradio24 [ 269.520942][ T5927] airspy 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 269.556634][ T5927] usb 7-1: USB disconnect, device number 31 [ 270.007599][T10178] syzkaller1: entered promiscuous mode [ 270.013144][T10178] syzkaller1: entered allmulticast mode [ 270.198601][ T29] audit: type=1326 audit(1771649025.735:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10181 comm="syz.6.1466" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f284ad9c629 code=0x0 [ 270.248570][ T5147] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 270.763829][ T5927] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 270.928829][ T5927] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.940399][ T5927] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 270.957143][ T5927] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 270.966952][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.975159][ T5927] usb 6-1: Product: syz [ 270.979808][ T5927] usb 6-1: Manufacturer: syz [ 270.984651][ T5927] usb 6-1: SerialNumber: syz [ 271.196001][ T5919] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 271.208728][T10196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.222986][T10196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.238957][ T5927] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 271.255752][ T5927] usb 6-1: USB disconnect, device number 30 [ 271.367433][ T5919] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 271.390683][ T5919] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 271.403781][ T5919] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.415324][ T5919] usb 7-1: config 0 descriptor?? [ 271.421039][T10205] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 271.683340][ T5918] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 271.843225][ T5918] usb 6-1: Using ep0 maxpacket: 8 [ 271.851630][ T5918] usb 6-1: config index 0 descriptor too short (expected 301, got 72) [ 271.860161][ T5918] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 271.865235][ T5919] hid_parser_main: 5 callbacks suppressed [ 271.865257][ T5919] elan 0003:04F3:0755.000F: unknown main item tag 0x1 [ 271.871470][ T5918] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 271.895673][ T5918] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 271.896842][ T5919] elan 0003:04F3:0755.000F: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.6-1/input0 [ 271.907913][ T5918] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 271.931639][ T5918] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.945232][ T5918] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 271.954773][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.172149][ T5918] usb 6-1: usb_control_msg returned -32 [ 272.194745][ T5918] usbtmc 6-1:16.0: can't read capabilities [ 272.231738][ T5918] usb 6-1: USB disconnect, device number 31 [ 273.750201][ T5927] usb 7-1: USB disconnect, device number 32 [ 273.851240][T10264] kvm: MWAIT instruction emulated as NOP! [ 273.857238][ T803] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 274.023748][ T803] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 274.032121][ T803] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.043084][ T803] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.053462][ T803] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 274.066447][ T803] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 274.075719][ T803] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.091034][ T803] usb 6-1: config 0 descriptor?? [ 274.232155][ T5927] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 274.387286][ T5927] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.402717][ T5927] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.413155][ T5927] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 274.428212][ T5927] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 274.443104][ T5927] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.457873][ T5927] usb 7-1: config 0 descriptor?? [ 274.508154][ T803] plantronics 0003:047F:FFFF.0010: reserved main item tag 0xd [ 274.536627][ T803] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 274.765834][ T803] usb 6-1: USB disconnect, device number 32 [ 274.910398][ T5927] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 275.563100][ T803] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 275.721398][ T803] usb 6-1: Using ep0 maxpacket: 32 [ 275.728279][ T803] usb 6-1: config 0 has no interfaces? [ 275.736237][ T803] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 275.745635][ T803] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.753754][ T803] usb 6-1: Product: syz [ 275.757951][ T803] usb 6-1: Manufacturer: syz [ 275.762636][ T803] usb 6-1: SerialNumber: syz [ 275.771812][ T803] usb 6-1: config 0 descriptor?? [ 275.983759][ T5918] usb 6-1: USB disconnect, device number 33 [ 276.781079][ T5840] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 276.940791][ T5840] usb 6-1: Using ep0 maxpacket: 32 [ 276.947624][ T5840] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 276.958779][ T5840] usb 6-1: config 0 interface 0 has no altsetting 0 [ 276.965622][ T5840] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 276.975253][ T5840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.986880][ T5840] usb 6-1: config 0 descriptor?? [ 277.241557][ T803] usb 7-1: reset high-speed USB device number 33 using dummy_hcd [ 277.254224][ T803] usb 7-1: device reset changed ep0 maxpacket size! [ 277.265410][ T5918] usb 7-1: USB disconnect, device number 33 [ 277.450507][ T5918] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 277.613252][ T5918] usb 7-1: Using ep0 maxpacket: 16 [ 277.621655][ T5918] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.633985][ T5918] usb 7-1: config 0 has no interfaces? [ 277.639551][ T5918] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 277.648783][ T5918] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.665932][ T5918] usb 7-1: config 0 descriptor?? [ 277.763723][ T5840] corsair-cpro 0003:1B1C:0C10.0012: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.5-1/input0 [ 277.919446][ T5918] usb 7-1: USB disconnect, device number 34 [ 277.959643][ T5840] corsair-cpro 0003:1B1C:0C10.0012: probe with driver corsair-cpro failed with error -61 [ 278.102331][T10333] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1529'. [ 278.166268][ T5918] usb 6-1: USB disconnect, device number 34 [ 278.782179][ T803] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 278.949667][ T803] usb 7-1: Using ep0 maxpacket: 16 [ 278.958629][ T803] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 278.969061][ T803] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.977276][ T803] usb 7-1: Product: syz [ 278.981597][ T803] usb 7-1: Manufacturer: syz [ 278.986185][ T803] usb 7-1: SerialNumber: syz [ 278.993496][ T803] usb 7-1: config 0 descriptor?? [ 279.001016][ T803] ssu100 7-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 279.119677][ T5918] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 279.284555][ T5918] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 279.297013][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.308414][ T5918] usb 6-1: Product: syz [ 279.314617][ T5918] usb 6-1: Manufacturer: syz [ 279.319253][ T5918] usb 6-1: SerialNumber: syz [ 279.329264][ T5918] usb 6-1: config 0 descriptor?? [ 279.747507][ T5918] airspy 6-1:0.0: Board ID: 00 [ 279.752471][ T5918] airspy 6-1:0.0: Firmware version: [ 280.011371][ T803] ssu100 7-1:0.0: probe with driver ssu100 failed with error -71 [ 280.043126][ T803] usb 7-1: USB disconnect, device number 35 [ 280.351122][ T5918] airspy 6-1:0.0: usb_control_msg() failed -71 request 12 [ 280.362889][ T5918] airspy 6-1:0.0: Registered as swradio24 [ 280.368673][ T5918] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 280.385729][ T5918] usb 6-1: USB disconnect, device number 35 [ 280.547853][T10379] loop5: detected capacity change from 0 to 4096 [ 281.009260][ T803] usb 7-1: new full-speed USB device number 36 using dummy_hcd [ 281.045799][T10394] syzkaller1: entered promiscuous mode [ 281.051882][T10394] syzkaller1: entered allmulticast mode [ 281.071091][T10394] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 48 [ 281.118928][T10398] raw_sendmsg: syz.1.1559 forgot to set AF_INET. Fix it! [ 281.172323][ T803] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 281.192465][ T803] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.205793][ T803] usb 7-1: Product: syz [ 281.210830][ T803] usb 7-1: Manufacturer: syz [ 281.216021][ T803] usb 7-1: SerialNumber: syz [ 281.231482][ T803] usb 7-1: config 0 descriptor?? [ 281.448515][ T803] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 281.715385][ T803] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 281.746650][ T803] usb 7-1: USB disconnect, device number 36 [ 281.938451][ T5918] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 282.089663][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.100738][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.110549][ T5918] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 282.123509][ T5918] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 282.132892][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.143923][ T5918] usb 6-1: config 0 descriptor?? [ 282.228126][ T803] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 282.378707][ T803] usb 7-1: Using ep0 maxpacket: 32 [ 282.385729][ T803] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 282.396903][ T803] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 282.427092][ T803] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 282.449535][ T803] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 282.466291][ T803] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 282.487943][ T803] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.496045][ T803] usb 7-1: Product: syz [ 282.500662][ T803] usb 7-1: Manufacturer: syz [ 282.505311][ T803] usb 7-1: SerialNumber: syz [ 282.532369][ C1] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 282.564728][ T803] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input24 [ 282.588552][ T5918] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 282.749060][ T803] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 282.787438][ T5918] usb 6-1: USB disconnect, device number 36 [ 282.800406][ T803] (id 0x00) [ 282.921477][ T803] rc_core: IR keymap rc-imon-pad not found [ 282.937531][ T803] Registered IR keymap rc-empty [ 282.943088][ T803] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 282.966070][ T803] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 283.000041][ T803] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0 [ 283.014664][ T803] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input25 [ 283.031918][ T803] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:37> initialized [ 283.191325][T10427] imon:vfd_write: invalid payload size [ 283.202746][ T5918] usb 7-1: USB disconnect, device number 37 [ 283.647334][ T5918] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 283.810335][ T5918] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 283.823792][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 283.835096][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 283.845029][ T5918] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 283.858123][ T5918] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 283.867318][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.877730][ T5918] usb 6-1: config 0 descriptor?? [ 283.987378][ T803] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 284.147122][ T803] usb 7-1: Using ep0 maxpacket: 8 [ 284.157534][ T803] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 284.166765][ T803] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.174872][ T803] usb 7-1: Product: syz [ 284.179708][ T803] usb 7-1: Manufacturer: syz [ 284.184336][ T803] usb 7-1: SerialNumber: syz [ 284.191948][ T803] usb 7-1: config 0 descriptor?? [ 284.200382][ T803] gspca_main: se401-2.14.0 probing 047d:5003 [ 284.295392][ T5918] plantronics 0003:047F:FFFF.0014: ignoring exceeding usage max [ 284.315695][ T5918] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 284.600653][ T803] gspca_se401: ExtraFeatures: 53 [ 284.605804][ T803] gspca_se401: Frame size: 0x8719 bayer [ 284.626082][ T803] gspca_se401: Frame size: 216x0 bayer [ 284.631745][ T803] gspca_se401: Frame size: 0x0 1/16th janggu [ 284.638250][ T803] gspca_se401: Frame size: 0x0 1/16th janggu [ 284.644272][ T803] gspca_se401: Frame size: 0x0 1/16th janggu [ 284.650425][ T803] gspca_se401: Frame size: 0x0 1/16th janggu [ 284.656525][ T803] gspca_se401: Frame size: 0x0 1/16th janggu [ 284.663214][ T803] gspca_se401: Frame size: 0x0 1/16th janggu [ 284.804203][ T803] input: se401 as /devices/platform/dummy_hcd.6/usb7/7-1/input/input26 [ 285.011600][ T5918] usb 7-1: USB disconnect, device number 38 [ 285.856246][ T5919] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 286.018308][ T5919] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 286.027612][ T5919] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.035625][ T5919] usb 7-1: Product: syz [ 286.042927][ T5919] usb 7-1: Manufacturer: syz [ 286.048283][ T5919] usb 7-1: SerialNumber: syz [ 286.058364][ T5919] usb 7-1: config 0 descriptor?? [ 286.070697][ T5919] ch341 7-1:0.0: ch341-uart converter detected [ 286.335116][T10503] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1599'. [ 286.391704][ T5918] usb 6-1: USB disconnect, device number 37 [ 286.882109][ T5919] usb 7-1: failed to send control message: -71 [ 286.892108][ T5919] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 286.911853][ T5919] usb 7-1: USB disconnect, device number 39 [ 286.922359][ T5919] ch341 7-1:0.0: device disconnected [ 287.642128][T10541] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1614'. [ 287.725385][ T5918] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 287.907451][ T5918] usb 7-1: Using ep0 maxpacket: 8 [ 287.914485][ T5918] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 287.923494][ T5918] usb 7-1: config 0 has no interface number 0 [ 287.945332][ T5918] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 287.956575][ T5918] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 287.968867][ T5918] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 287.982028][ T5918] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 287.996438][ T5918] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 288.005803][ T5918] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.027066][ T5918] usb 7-1: config 0 descriptor?? [ 288.043281][ T5918] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 288.115633][ T5840] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 288.265911][ T5840] usb 6-1: too many configurations: 61, using maximum allowed: 8 [ 288.321356][ T5840] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 288.345100][ T5840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.353290][ T5840] usb 6-1: Product: syz [ 288.377542][ T5840] usb 6-1: Manufacturer: syz [ 288.382250][ T5840] usb 6-1: SerialNumber: syz [ 288.803322][ T5840] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 288.815534][ T5840] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 289.232330][ T5840] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 289.244872][ T5840] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 289.257065][ T5840] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 289.271451][ T5840] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 289.286703][ T5840] usb 6-1: USB disconnect, device number 38 [ 289.557522][T10573] team_slave_0: entered allmulticast mode [ 289.587384][T10573] team_slave_0: entered promiscuous mode [ 289.695206][T10577] netlink: 'syz.4.1630': attribute type 11 has an invalid length. [ 290.298979][ T5927] usb 7-1: USB disconnect, device number 40 [ 290.355446][ T5927] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 290.653924][ T5919] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 290.803821][ T5919] usb 6-1: Using ep0 maxpacket: 32 [ 290.810462][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.821705][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.831852][ T5919] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 290.841254][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.854798][ T5919] usb 6-1: config 0 descriptor?? [ 291.064761][T10612] "syz.4.1646" (10612) uses obsolete ecb(arc4) skcipher [ 291.127236][T10621] netlink: 'syz.4.1648': attribute type 3 has an invalid length. [ 291.298787][ T5919] savu 0003:1E7D:2D5A.0015: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 291.333978][T10628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1651'. [ 291.555984][ T5919] usb 6-1: USB disconnect, device number 39 [ 292.113177][ T5919] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 292.273273][ T5919] usb 7-1: Using ep0 maxpacket: 32 [ 292.285331][ T5919] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 292.293905][ T5919] usb 7-1: config 0 has no interface number 0 [ 292.304185][ T5919] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 292.314912][ T5919] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.328743][ T5919] usb 7-1: Product: syz [ 292.342009][ T5919] usb 7-1: Manufacturer: syz [ 292.346779][ T5919] usb 7-1: SerialNumber: syz [ 292.358971][ T5919] usb 7-1: config 0 descriptor?? [ 292.370896][ T5919] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 292.583474][ T5919] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 292.604011][ T5919] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 292.623345][ T5840] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 292.782948][ T5840] usb 6-1: Using ep0 maxpacket: 32 [ 292.808432][ T5840] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 292.819490][ T5840] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 292.835796][ T5840] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 292.847232][ T5840] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 292.864344][ T5840] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 292.873642][ T5840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.882092][ T5840] usb 6-1: Product: syz [ 292.886337][ T5840] usb 6-1: Manufacturer: syz [ 292.891043][ T5840] usb 6-1: SerialNumber: syz [ 292.909763][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 292.923125][ T5840] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input27 [ 292.940338][T10659] 9pnet_fd: p9_fd_create_tcp (10659): problem connecting socket to 127.0.0.1 [ 292.985835][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 292.994869][ T5919] usb 7-1: USB disconnect, device number 41 [ 293.009644][ T5919] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 293.033322][ T5919] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 293.048768][ T5919] quatech2 7-1:0.51: device disconnected [ 293.114095][ T29] audit: type=1800 audit(1771649048.656:39): pid=10663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1666" name="nullb0" dev="tmpfs" ino=2648 res=0 errno=0 [ 293.142797][ T5840] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 293.151394][ T5840] (id 0x00) [ 293.222570][ T5840] rc_core: IR keymap rc-imon-pad not found [ 293.228693][ T5840] Registered IR keymap rc-empty [ 293.233693][ T5840] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 293.244055][ T5840] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 293.324531][ T5840] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0 [ 293.337355][ T5840] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input28 [ 293.352091][ T5840] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:40> initialized [ 293.574256][T10651] imon:vfd_write: invalid payload size [ 293.588888][ T5919] usb 6-1: USB disconnect, device number 40 [ 294.072188][ T5840] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 294.238739][ T5840] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 294.258734][ T5840] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.267396][ T5840] usb 7-1: Product: syz [ 294.275877][ T5840] usb 7-1: Manufacturer: syz [ 294.280508][ T5840] usb 7-1: SerialNumber: syz [ 294.288494][ T5840] usb 7-1: config 0 descriptor?? [ 294.428462][T10697] netlink: 'syz.1.1678': attribute type 3 has an invalid length. [ 294.711024][ T5840] usb 7-1: Firmware version (0.0) predates our first public release. [ 294.727952][ T5840] usb 7-1: Please update to version 0.2 or newer [ 294.736208][ T5840] usb 7-1: Firmware: build [ 294.956960][ T5840] usb 7-1: USB disconnect, device number 42 [ 295.531416][ T5919] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 295.683170][ T5919] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 295.693301][ T5919] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 295.706393][ T5919] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 295.715770][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.722247][ T5840] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 295.893137][ T5840] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.904581][ T5840] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.915665][ T5840] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 295.928849][ T5840] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 295.937945][ T5840] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.937950][ T5919] usb 6-1: usb_control_msg returned -32 [ 295.951860][ T5919] usbtmc 6-1:16.0: can't read capabilities [ 295.960029][ T5840] usb 7-1: config 0 descriptor?? [ 296.382264][ T5840] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 296.394360][ T5840] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 296.404584][ T5840] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 296.412910][ T5840] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 296.420483][ T5840] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 296.427968][ T5840] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 296.451351][ T5840] plantronics 0003:047F:FFFF.0016: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 296.512290][ T5919] usb 6-1: USB disconnect, device number 41 [ 296.580242][ T5876] usb 7-1: USB disconnect, device number 43 [ 297.370498][ T5876] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 297.540362][ T5876] usb 6-1: Using ep0 maxpacket: 16 [ 297.556569][ T5876] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 297.575334][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.590539][ T5876] usb 6-1: Product: syz [ 297.594750][ T5876] usb 6-1: Manufacturer: syz [ 297.611406][ T5876] usb 6-1: SerialNumber: syz [ 297.631057][ T5876] usb 6-1: config 0 descriptor?? [ 298.045891][ T5876] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 298.075564][ T5876] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 298.131627][ T5876] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 298.139631][ T5876] usb 6-1: media controller created [ 298.211075][ T5876] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 298.251635][T10765] dtv5100: wlen = 66, aborting. [ 298.275964][ T5876] zl10353_read_register: readreg error (reg=127, ret==0) [ 298.292835][ T5876] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 298.310692][ T5876] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 298.333685][ T5876] usb 6-1: USB disconnect, device number 42 [ 298.416857][ T5876] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 299.728992][T10821] 9pnet_fd: p9_fd_create_tcp (10821): problem connecting socket to 127.0.0.1 [ 300.001530][T10851] "syz.1.1728" (10851) uses obsolete ecb(arc4) skcipher [ 300.229913][ T5840] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 300.388976][ T5840] usb 7-1: Using ep0 maxpacket: 32 [ 300.396779][ T5840] usb 7-1: config 0 has an invalid interface number: 182 but max is 0 [ 300.409016][ T5840] usb 7-1: config 0 has no interface number 0 [ 300.415164][ T5840] usb 7-1: config 0 interface 182 has no altsetting 0 [ 300.436262][ T5840] usb 7-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 300.446056][ T5840] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.478871][ T5840] usb 7-1: Product: syz [ 300.483084][ T5840] usb 7-1: Manufacturer: syz [ 300.487688][ T5840] usb 7-1: SerialNumber: syz [ 300.543179][ T5840] usb 7-1: config 0 descriptor?? [ 300.570124][ T5840] hub 7-1:0.182: bad descriptor, ignoring hub [ 300.576269][ T5840] hub 7-1:0.182: probe with driver hub failed with error -5 [ 300.785622][ T5840] kaweth 7-1:0.182: Firmware present in device. [ 300.816362][T10881] kvm: Disabled LAPIC found during irq injection [ 300.897074][T10887] fuse: Bad value for 'fd' [ 300.972607][ T5840] kaweth 7-1:0.182: Statistics collection: 0 [ 301.001427][ T5840] kaweth 7-1:0.182: Multicast filter limit: 0 [ 301.008063][ T5840] kaweth 7-1:0.182: MTU: 0 [ 301.018391][ T5840] kaweth 7-1:0.182: Read MAC address 00:00:00:00:00:00 [ 301.585545][ T5840] kaweth 7-1:0.182: kaweth interface created at eth13 [ 301.935205][ T5840] usb 7-1: USB disconnect, device number 44 [ 301.987618][T10932] loop7: detected capacity change from 0 to 16384 [ 302.223060][ C0] I/O error, dev loop7, sector 2304 op 0x0:(READ) flags 0x80700 phys_seg 16 prio class 2 [ 302.233688][T10937] loop7: detected capacity change from 16384 to 0 [ 302.238258][ C1] I/O error, dev loop7, sector 2304 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 302.250042][ C1] Buffer I/O error on dev loop7, logical block 288, async page read [ 302.469811][T10948] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 302.496494][T10948] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 302.535052][T10948] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 302.547164][T10948] overlayfs: failed to look up (tracing) for ino (-66) [ 302.724225][ T5840] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 302.897816][ T5840] usb 7-1: Using ep0 maxpacket: 16 [ 302.907230][ T5840] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.927837][ T5840] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 302.949675][ T5840] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 302.988660][ T5840] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.045163][ T5840] usb 7-1: Product: syz [ 303.069982][ T5840] usb 7-1: Manufacturer: syz [ 303.076057][ T5840] usb 7-1: SerialNumber: syz [ 303.311426][ T5840] usb 7-1: 0:2 : does not exist [ 303.327864][ T5840] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 303.389098][ T5840] usb 7-1: USB disconnect, device number 45 [ 303.441413][ T9616] udevd[9616]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 303.945681][T10984] netlink: 'syz.4.1771': attribute type 4 has an invalid length. [ 303.980951][T10984] netlink: 'syz.4.1771': attribute type 4 has an invalid length. [ 304.137623][ T5840] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 304.318517][ T5840] usb 6-1: not running at top speed; connect to a high speed hub [ 304.337762][ T5840] usb 6-1: config 3 has an invalid interface number: 47 but max is 1 [ 304.346316][ T5840] usb 6-1: config 3 has no interface number 0 [ 304.356966][ T5840] usb 6-1: config 3 interface 1 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 304.367286][ T5840] usb 6-1: config 3 interface 1 has no altsetting 0 [ 304.373990][ T5840] usb 6-1: config 3 interface 47 has no altsetting 0 [ 304.392818][ T5840] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=43.bd [ 304.487943][ T5840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.496000][ T5840] usb 6-1: Product: syz [ 304.504795][ T5840] usb 6-1: Manufacturer: syz [ 304.509724][ T5840] usb 6-1: SerialNumber: syz [ 304.669967][T11007] netlink: 'syz.1.1783': attribute type 4 has an invalid length. [ 304.704946][T11007] netlink: 'syz.1.1783': attribute type 4 has an invalid length. [ 304.814867][ T5840] usb 6-1: selecting invalid altsetting 0 [ 304.890232][ T5840] usb 6-1: USB disconnect, device number 43 [ 305.722971][T11042] netlink: 'syz.6.1794': attribute type 4 has an invalid length. [ 305.777104][T11047] netlink: 'syz.6.1794': attribute type 4 has an invalid length. [ 307.598055][T11111] overlayfs: failed to clone lowerpath [ 307.618392][T11111] overlayfs: failed to clone lowerpath [ 308.205199][ T51] Bluetooth: hci2: command 0x1003 tx timeout [ 308.205192][ T5147] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 308.791988][T11129] syzkaller1: entered allmulticast mode [ 309.135270][T11074] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 309.215932][T11137] netlink: 'syz.5.1833': attribute type 3 has an invalid length. [ 309.557661][T11155] "syz.4.1840" (11155) uses obsolete ecb(arc4) skcipher [ 311.237074][ T5900] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 311.412262][ T5900] usb 6-1: config 1 interface 0 has no altsetting 0 [ 311.431127][ T5900] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 311.441212][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.450271][ T5900] usb 6-1: Product: syz [ 311.459837][ T5900] usb 6-1: Manufacturer: syz [ 311.465712][ T5900] usb 6-1: SerialNumber: syz [ 311.917046][ T5900] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 44 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 311.952073][ T5900] usb 6-1: USB disconnect, device number 44 [ 311.980127][ T5900] usblp0: removed [ 312.350644][T11145] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 312.911398][T11219] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 312.979171][T11221] netlink: 'syz.1.1861': attribute type 11 has an invalid length. [ 313.045328][T11224] fuse: Bad value for 'fd' [ 313.164359][T11234] overlayfs: failed to clone upperpath [ 316.022561][T11225] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 316.171783][T11262] fuse: Bad value for 'fd' [ 316.421176][ T5919] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 316.581108][ T5919] usb 7-1: Using ep0 maxpacket: 8 [ 316.590650][ T5919] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 316.600343][ T5919] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.608647][ T5919] usb 7-1: Product: syz [ 316.613461][ T5919] usb 7-1: Manufacturer: syz [ 316.620834][ T5919] usb 7-1: SerialNumber: syz [ 316.628973][ T5919] usb 7-1: config 0 descriptor?? [ 316.858938][ T5919] usb 7-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 317.246889][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.253553][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.283725][ T5919] usb write operation failed. (-71) [ 318.293870][ T5919] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 318.304722][ T5919] dvbdev: DVB: registering new adapter (Terratec H7) [ 318.311754][ T5919] usb 7-1: media controller created [ 318.317320][ T5919] usb read operation failed. (-71) [ 318.323126][ T5919] usb write operation failed. (-71) [ 318.331284][ T5919] dvb_usb_az6007 7-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 318.343437][ T5919] usb 7-1: USB disconnect, device number 46 [ 318.876330][T11317] overlayfs: failed to clone upperpath [ 318.884840][T11320] overlayfs: failed to clone upperpath [ 319.519876][T11345] overlayfs: failed to clone upperpath [ 319.812046][T11358] netlink: 'syz.1.1917': attribute type 29 has an invalid length. [ 319.823459][T11358] netlink: 'syz.1.1917': attribute type 29 has an invalid length. [ 319.837294][T11358] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1917'. [ 319.959482][ T5900] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 320.151198][ T5900] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 320.165053][ T5900] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 320.183024][ T5900] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 320.192410][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.318994][ T5147] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 320.429004][ T5900] usb 6-1: usb_control_msg returned -32 [ 320.434704][ T5900] usbtmc 6-1:16.0: can't read capabilities [ 320.455207][ T5900] usb 6-1: USB disconnect, device number 45 [ 324.317160][T11481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.676371][ T5919] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 325.904638][ T5919] usb 6-1: Using ep0 maxpacket: 32 [ 325.975518][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.988452][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.006373][ T5919] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 326.015451][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.034258][ T5919] usb 6-1: config 0 descriptor?? [ 326.044413][ T5919] hub 6-1:0.0: USB hub found [ 326.259276][ T5919] hub 6-1:0.0: 1 port detected [ 327.500602][ T5919] hub 6-1:0.0: hub_hub_status failed (err = -32) [ 327.507922][ T5919] hub 6-1:0.0: config failed, can't get hub status (err -32) [ 327.571233][ T5919] usbhid 6-1:0.0: can't add hid device: -32 [ 327.580982][ T5919] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 327.689175][ T5919] usb 6-1: USB disconnect, device number 46 [ 330.409416][ T5876] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 330.613856][ T5876] usb 7-1: Using ep0 maxpacket: 32 [ 330.622615][ T5876] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 330.650580][ T5876] usb 7-1: config 0 has no interface number 0 [ 330.667210][ T5876] usb 7-1: config 0 interface 184 has no altsetting 0 [ 330.687129][ T5876] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 330.703154][ T5876] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.722747][T11458] Set syz1 is full, maxelem 65536 reached [ 330.730291][ T5876] usb 7-1: Product: syz [ 330.740273][ T5876] usb 7-1: Manufacturer: syz [ 330.757031][ T5876] usb 7-1: SerialNumber: syz [ 330.786917][ T5876] usb 7-1: config 0 descriptor?? [ 332.305941][ T5876] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 332.343352][ T5876] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 332.370488][ T5876] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 332.381784][ T5876] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 332.392049][ T5876] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 332.402951][ T5876] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 332.413434][ T5876] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 332.430401][ T5876] usb 7-1: USB disconnect, device number 47 [ 333.134062][T11592] overlayfs: failed to clone upperpath [ 340.661095][ T5876] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 340.864188][ T5876] usb 6-1: Using ep0 maxpacket: 16 [ 340.884706][ T5876] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 340.923481][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 340.957680][ T5876] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 340.968695][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.976805][ T5876] usb 6-1: Product: syz [ 341.000256][ T5876] usb 6-1: Manufacturer: syz [ 341.012625][ T5876] usb 6-1: SerialNumber: syz [ 341.031209][ T5876] usb 6-1: config 0 descriptor?? [ 341.058755][ T5876] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 341.088067][ T5876] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 341.696864][ T5876] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 341.712470][ T5876] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 341.937735][ T5876] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 341.967401][ T5876] em28xx 6-1:0.0: No AC97 audio processor [ 342.018855][ T5876] usb 6-1: USB disconnect, device number 47 [ 342.051272][ T5876] em28xx 6-1:0.0: Disconnecting em28xx [ 342.093808][ T5876] em28xx 6-1:0.0: Freeing device [ 345.756392][ T5927] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 345.916870][ T5927] usb 7-1: Using ep0 maxpacket: 32 [ 345.931407][ T5927] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 345.967031][ T5927] usb 7-1: config 0 has no interface number 0 [ 345.985544][ T5927] usb 7-1: config 0 interface 12 has no altsetting 0 [ 346.013259][ T5927] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 346.056353][ T5927] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.101977][ T5927] usb 7-1: Product: syz [ 346.124555][ T5927] usb 7-1: Manufacturer: syz [ 346.140865][ T5927] usb 7-1: SerialNumber: syz [ 346.176687][ T5927] usb 7-1: config 0 descriptor?? [ 347.925240][ T5919] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 348.062359][ T5927] f81534 7-1:0.12: f81534_set_register: reg: 1003 data: 20 failed: -71 [ 348.100774][ T5927] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 348.116530][ T5927] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 348.137653][ T5919] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 348.155146][ T5927] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 348.163867][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.187448][ T5919] usb 6-1: Product: syz [ 348.191663][ T5919] usb 6-1: Manufacturer: syz [ 348.212023][ T5927] usb 7-1: USB disconnect, device number 48 [ 348.223760][ T5919] usb 6-1: SerialNumber: syz [ 348.246950][ T5919] usb 6-1: config 0 descriptor?? [ 348.275732][ T5919] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 349.494328][ T5919] gspca_stk1135: reg_w 0xd err -71 [ 349.511164][ T5919] gspca_stk1135: serial bus timeout: status=0x00 [ 349.524332][ T5919] gspca_stk1135: Sensor write failed [ 349.529682][ T5919] gspca_stk1135: serial bus timeout: status=0x00 [ 349.551380][ T5919] gspca_stk1135: Sensor write failed [ 349.579791][ T5919] gspca_stk1135: serial bus timeout: status=0x00 [ 349.604382][ T5919] gspca_stk1135: Sensor read failed [ 349.617687][ T5919] gspca_stk1135: serial bus timeout: status=0x00 [ 349.643681][ T5919] gspca_stk1135: Sensor read failed [ 349.665873][ T5919] gspca_stk1135: Detected sensor type unknown (0x0) [ 349.701823][ T5919] gspca_stk1135: serial bus timeout: status=0x00 [ 349.716429][ T5919] gspca_stk1135: Sensor read failed [ 349.721837][ T5919] gspca_stk1135: serial bus timeout: status=0x00 [ 349.730261][ T5919] gspca_stk1135: Sensor read failed [ 349.736314][ T5919] gspca_stk1135: serial bus timeout: status=0x00 [ 349.742813][ T5919] gspca_stk1135: Sensor write failed [ 349.748679][ T5919] gspca_stk1135: serial bus timeout: status=0x00 [ 349.755476][ T5919] gspca_stk1135: Sensor write failed [ 349.761034][ T5919] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71 [ 349.791710][ T5919] usb 6-1: USB disconnect, device number 48 [ 351.177173][T11811] openvswitch: netlink: Message has 4 unknown bytes. [ 351.251085][T11811] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.294516][T11811] openvswitch: netlink: Message has 4 unknown bytes. [ 351.328206][T11811] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.352958][T11811] openvswitch: netlink: Message has 4 unknown bytes. [ 351.378991][T11811] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.420419][T11811] openvswitch: netlink: Message has 4 unknown bytes. [ 351.445883][T11811] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.485099][T11811] openvswitch: netlink: Message has 4 unknown bytes. [ 351.503611][T11811] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.921530][T11828] netlink: 1276 bytes leftover after parsing attributes in process `syz.6.2102'. [ 352.229783][ T29] audit: type=1800 audit(1771649107.796:40): pid=11818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2097" name="/" dev="fuse" ino=4 res=0 errno=0 [ 353.223736][ T5876] usb 7-1: new full-speed USB device number 49 using dummy_hcd [ 353.673759][ T5927] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 353.865494][ T5927] usb 6-1: Using ep0 maxpacket: 8 [ 353.876340][ T5927] usb 6-1: config 162 has an invalid interface number: 79 but max is 0 [ 353.893351][ T5927] usb 6-1: config 162 has no interface number 0 [ 353.911180][ T5927] usb 6-1: config 162 interface 79 has no altsetting 0 [ 353.958059][ T5927] usb 6-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 353.992422][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.015601][T11854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.032106][ T5927] usb 6-1: Product: syz [ 354.049570][ T5927] usb 6-1: Manufacturer: syz [ 354.070866][ T5927] usb 6-1: SerialNumber: syz [ 354.137200][T11854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.243921][T11854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.316719][T11847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.350459][T11847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.429447][ T5927] pl2303 6-1:162.79: required endpoints missing [ 354.474234][ T5927] usb 6-1: USB disconnect, device number 49 [ 355.472608][ T5927] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 355.661332][ T5927] usb 6-1: Using ep0 maxpacket: 32 [ 355.671134][ T5927] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 355.680342][ T5927] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 355.691203][ T5927] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 355.700413][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 355.711271][ T5927] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 355.724630][ T5927] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 355.738611][ T5927] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 355.752736][ T5927] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.779981][ T5927] usb 6-1: config 0 descriptor?? [ 356.015236][ T5927] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 50 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 356.080269][ T5927] usb 6-1: USB disconnect, device number 50 [ 356.103698][ T5927] usblp0: removed [ 356.600971][ T5927] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 356.761034][ T5927] usb 6-1: Using ep0 maxpacket: 32 [ 356.783458][ T5927] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 356.813125][ T5927] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 356.839822][ T5927] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 356.859255][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 356.879472][ T5927] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 356.899788][ T5927] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 356.930780][ T5927] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 356.968576][ T5927] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.008653][ T5927] usb 6-1: config 0 descriptor?? [ 357.126738][ T5876] usb 7-1: unable to get BOS descriptor or descriptor too short [ 357.142635][ T5876] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 357.179508][ T5876] usb 7-1: can't read configurations, error -71 [ 357.259158][ T5927] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 51 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 357.427818][T11878] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 357.435682][T11878] overlayfs: failed to set xattr on upper [ 357.458184][T11878] overlayfs: ...falling back to redirect_dir=nofollow. [ 357.474700][ T5927] usb 6-1: USB disconnect, device number 51 [ 357.491955][T11878] overlayfs: ...falling back to index=off. [ 357.503433][ T5927] usblp0: removed [ 357.512455][T11879] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 357.559124][T11878] overlayfs: ...falling back to uuid=null. [ 358.679765][ T29] audit: type=1800 audit(1771649114.249:41): pid=11882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2124" name="/" dev="fuse" ino=4 res=0 errno=0 [ 358.783859][T11897] tipc: Started in network mode [ 358.799881][T11897] tipc: Node identity 080211000001, cluster identity 4711 [ 358.810191][T11897] tipc: Enabled bearer , priority 0 [ 358.832888][T11897] mac80211_hwsim hwsim13 syzkaller0: entered promiscuous mode [ 358.858046][T11897] mac80211_hwsim hwsim13 syzkaller0: entered allmulticast mode [ 359.154620][T11905] tipc: Failed to remove unknown binding: 66,0,0/0:2566758285/2566758286 [ 359.188606][T11905] tipc: Failed to remove unknown binding: 66,0,0/0:2566758285/2566758286 [ 359.681346][T11912] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 359.768174][T11911] kvm: pic: level sensitive irq not supported [ 359.768328][T11911] picdev_read: 249 callbacks suppressed [ 359.768347][T11911] kvm: pic: non byte read [ 359.812962][ T5927] tipc: Node number set to 134418688 [ 359.826824][T11911] kvm: pic: level sensitive irq not supported [ 359.827263][T11911] kvm: pic: non byte read [ 359.885836][T11911] kvm: pic: level sensitive irq not supported [ 359.886376][T11911] kvm: pic: non byte read [ 361.285102][T11944] tipc: Enabling of bearer rejected, failed to enable media [ 361.526066][T11948] netlink: 'syz.1.2143': attribute type 4 has an invalid length. [ 361.606735][T11949] netlink: 'syz.1.2143': attribute type 4 has an invalid length. [ 364.067289][ T803] usb 7-1: new full-speed USB device number 51 using dummy_hcd [ 364.231454][ T803] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 364.247291][ T803] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.274314][ T803] usb 7-1: Product: syz [ 364.286726][ T803] usb 7-1: Manufacturer: syz [ 364.298478][ T803] usb 7-1: SerialNumber: syz [ 364.335223][ T803] usb 7-1: config 0 descriptor?? [ 364.564124][ T803] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 366.002691][ T803] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 366.063332][ T803] usb 7-1: USB disconnect, device number 51 [ 366.609611][ T5977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.631023][ T5977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.897807][ T803] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 367.068380][ T803] usb 7-1: Using ep0 maxpacket: 8 [ 367.096762][ T803] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 367.116069][ T803] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 367.152125][ T803] usb 7-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 367.177641][ T803] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.207367][ T803] usb 7-1: Product: syz [ 367.222358][ T803] usb 7-1: Manufacturer: syz [ 367.238052][ T803] usb 7-1: SerialNumber: syz [ 367.266511][ T803] usb 7-1: config 0 descriptor?? [ 367.612789][ T803] usb 7-1: USB disconnect, device number 52 [ 367.690297][T12048] tipc: Enabling of bearer rejected, failed to enable media [ 369.966042][T12084] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2203'. [ 374.332175][ T5876] usb 7-1: new full-speed USB device number 53 using dummy_hcd [ 374.526742][ T5876] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 374.540124][ T5876] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.548844][ T5876] usb 7-1: Product: syz [ 374.553485][ T5876] usb 7-1: Manufacturer: syz [ 374.572920][ T5876] usb 7-1: SerialNumber: syz [ 374.611101][ T5876] usb 7-1: config 0 descriptor?? [ 374.638928][ T5876] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 375.223493][T12149] syz.4.2223 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 375.679706][T12158] overlayfs: failed to clone upperpath [ 376.111462][T12161] netlink: 'syz.4.2227': attribute type 4 has an invalid length. [ 377.050747][ T5876] gspca_stk1135: reg_w 0x300 err -71 [ 377.069407][ T5876] gspca_stk1135: serial bus timeout: status=0x00 [ 377.094336][ T5876] gspca_stk1135: Sensor write failed [ 377.120288][ T5876] gspca_stk1135: serial bus timeout: status=0x00 [ 377.147593][ T5876] gspca_stk1135: Sensor write failed [ 377.166352][ T5876] gspca_stk1135: serial bus timeout: status=0x00 [ 377.190518][ T5876] gspca_stk1135: Sensor read failed [ 377.217318][ T5876] gspca_stk1135: serial bus timeout: status=0x00 [ 377.238034][ T5876] gspca_stk1135: Sensor read failed [ 377.254398][ T5876] gspca_stk1135: Detected sensor type unknown (0x0) [ 377.272426][ T5876] gspca_stk1135: serial bus timeout: status=0x00 [ 377.278810][ T5876] gspca_stk1135: Sensor read failed [ 377.298257][ T5876] gspca_stk1135: serial bus timeout: status=0x00 [ 377.328768][ T5876] gspca_stk1135: Sensor read failed [ 377.335569][ T5876] gspca_stk1135: serial bus timeout: status=0x00 [ 377.342284][ T5876] gspca_stk1135: Sensor write failed [ 377.347625][ T5876] gspca_stk1135: serial bus timeout: status=0x00 [ 377.354909][ T5876] gspca_stk1135: Sensor write failed [ 377.366694][ T5876] stk1135 7-1:0.0: probe with driver stk1135 failed with error -71 [ 377.397897][ T5876] usb 7-1: USB disconnect, device number 53 [ 378.678739][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.687739][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.930978][ T131] wlan1: Trigger new scan to find an IBSS to join [ 382.222913][ T29] audit: type=1326 audit(1771649137.811:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12257 comm="syz.5.2265" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fea7cd9c629 code=0x0 [ 382.664797][T12270] netlink: 'syz.4.2269': attribute type 10 has an invalid length. [ 382.684572][T12270] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2269'. [ 386.065659][ T5973] wlan1: Trigger new scan to find an IBSS to join [ 407.328263][ C0] sched: DL replenish lagged too much [ 441.972274][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.987222][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 499.529196][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 499.536197][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P12236/1:b..l [ 499.544725][ C1] rcu: (detected by 1, t=10503 jiffies, g=59589, q=80457 ncpus=2) [ 499.552636][ C1] task:syz.1.2256 state:R running task stack:20928 pid:12236 tgid:12236 ppid:5831 task_flags:0x40064c flags:0x00080001 [ 499.567397][ C1] Call Trace: [ 499.570706][ C1] [ 499.573755][ C1] __schedule+0x1585/0x5340 [ 499.578312][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 499.583465][ C1] ? __pfx___schedule+0x10/0x10 [ 499.588362][ C1] preempt_schedule_irq+0x4d/0xa0 [ 499.593423][ C1] irqentry_exit+0x599/0x620 [ 499.598039][ C1] ? trace_irq_disable+0x3b/0x150 [ 499.603102][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 499.609118][ C1] RIP: 0010:lock_acquire+0x20b/0x2e0 [ 499.614422][ C1] Code: e9 30 ff ff ff e8 05 03 19 0a f7 c3 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 81 30 a0 11 48 3b 44 24 30 75 33 fb 48 83 c4 38 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 3e 3e 95 [ 499.634096][ C1] RSP: 0018:ffffc90004a9ed58 EFLAGS: 00000282 [ 499.640165][ C1] RAX: 9e4cf22a622c1d00 RBX: 0000000000000246 RCX: 0000000000000046 [ 499.648127][ C1] RDX: 000000005a44979c RSI: ffffffff8e287f97 RDI: ffffffff8c2a0b00 [ 499.656171][ C1] RBP: 0000000000000000 R08: ffffffff8176da45 R09: ffffffff8e9602e0 [ 499.664129][ C1] R10: ffffc90004a9eeb8 R11: ffffffff81b11670 R12: 0000000000000002 [ 499.672087][ C1] R13: ffffffff8e9602e0 R14: 0000000000000000 R15: 0000000000000000 [ 499.680052][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 499.686201][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 499.691312][ C1] ? irqentry_exit+0x176/0x620 [ 499.696062][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 499.701175][ C1] unwind_next_frame+0xc2/0x23c0 [ 499.706103][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 499.711207][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 499.716304][ C1] ? arch_do_signal_or_restart+0xbc/0x830 [ 499.722009][ C1] ? irqentry_exit+0x176/0x620 [ 499.726759][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 499.732895][ C1] arch_stack_walk+0x11b/0x150 [ 499.737658][ C1] ? irqentry_exit+0x176/0x620 [ 499.742408][ C1] stack_trace_save+0xa9/0x100 [ 499.747159][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 499.752520][ C1] save_stack+0x122/0x230 [ 499.756842][ C1] ? __mem_cgroup_threshold+0x1f/0x7c0 [ 499.762291][ C1] ? __pfx_save_stack+0x10/0x10 [ 499.767125][ C1] ? free_unref_folios+0xed5/0x16d0 [ 499.772310][ C1] ? folios_put_refs+0x789/0x8d0 [ 499.777239][ C1] ? shmem_undo_range+0x52c/0x1660 [ 499.782364][ C1] ? shmem_evict_inode+0x240/0x9e0 [ 499.787463][ C1] ? evict+0x61e/0xb10 [ 499.791523][ C1] ? __dentry_kill+0x1a2/0x5e0 [ 499.796718][ C1] ? finish_dput+0xc9/0x480 [ 499.801208][ C1] ? __fput+0x691/0xa70 [ 499.805352][ C1] ? task_work_run+0x1d9/0x270 [ 499.810097][ C1] ? do_exit+0x69b/0x2320 [ 499.814408][ C1] ? do_group_exit+0x21b/0x2d0 [ 499.819156][ C1] ? get_signal+0x1284/0x1330 [ 499.823819][ C1] ? arch_do_signal_or_restart+0xbc/0x830 [ 499.829524][ C1] ? irqentry_exit+0x176/0x620 [ 499.834273][ C1] ? page_ext_put+0x97/0xc0 [ 499.838764][ C1] __reset_page_owner+0x71/0x1f0 [ 499.843689][ C1] free_unref_folios+0xed5/0x16d0 [ 499.848710][ C1] folios_put_refs+0x789/0x8d0 [ 499.853476][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 499.858750][ C1] ? folio_batch_remove_exceptionals+0x18c/0x1f0 [ 499.865068][ C1] shmem_undo_range+0x52c/0x1660 [ 499.870001][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 499.874932][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 499.880325][ C1] ? arch_stack_walk+0xfb/0x150 [ 499.885170][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 499.890101][ C1] shmem_evict_inode+0x240/0x9e0 [ 499.895027][ C1] ? inode_wait_for_writeback+0x16d/0x3b0 [ 499.900731][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 499.906178][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 499.912235][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 499.917254][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 499.922351][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 499.927797][ C1] evict+0x61e/0xb10 [ 499.931682][ C1] ? __pfx_evict+0x10/0x10 [ 499.936084][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 499.941182][ C1] ? _raw_spin_unlock+0x28/0x50 [ 499.946022][ C1] ? iput+0xb25/0xe80 [ 499.949999][ C1] __dentry_kill+0x1a2/0x5e0 [ 499.954577][ C1] ? finish_dput+0xad/0x480 [ 499.959067][ C1] finish_dput+0xc9/0x480 [ 499.963387][ C1] __fput+0x691/0xa70 [ 499.967366][ C1] task_work_run+0x1d9/0x270 [ 499.971946][ C1] ? __pfx_task_work_run+0x10/0x10 [ 499.977043][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 499.982153][ C1] do_exit+0x69b/0x2320 [ 499.986299][ C1] ? __pfx_do_exit+0x10/0x10 [ 499.990910][ C1] do_group_exit+0x21b/0x2d0 [ 499.995490][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 500.000696][ C1] get_signal+0x1284/0x1330 [ 500.005198][ C1] arch_do_signal_or_restart+0xbc/0x830 [ 500.010733][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 500.016880][ C1] irqentry_exit+0x176/0x620 [ 500.021454][ C1] ? trace_irq_disable+0x3b/0x150 [ 500.026471][ C1] asm_exc_page_fault+0x26/0x30 [ 500.031306][ C1] RIP: 0033:0x7febe339c631 [ 500.035711][ C1] RSP: 002b:00000000fffffd10 EFLAGS: 00010217 [ 500.041764][ C1] RAX: 0000000000000000 RBX: 00007febe3615fa0 RCX: 00007febe339c629 [ 500.049718][ C1] RDX: 0000000000000000 RSI: 00000000fffffd10 RDI: 0000000001000000 [ 500.057672][ C1] RBP: 00007febe3432b39 R08: 0000000000000000 R09: 0000000000000000 [ 500.065630][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 500.073586][ C1] R13: 00007febe3616038 R14: 00007febe3615fa0 R15: 00007fffc9013918 [ 500.081551][ C1]