last executing test programs: 5.126792975s ago: executing program 0 (id=946): r0 = getpid() syz_pidfd_open(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0xc8) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000140)=0x0) sched_setattr(r3, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffe, 0x0, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0xc6}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, 0x0, 0x0) rseq(&(0x7f0000000040), 0x7c, 0x0, 0x0) personality(0x4000000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="500100001000010028bd70000000000000000000000000001a0000000000000120010000000000000000000000000000000000004e2300000200002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffac1e010100000000320000007f000001000000000000000000000000000000000000000000000000000000000400000000000000fdffffffffffffff0800000000000000880000000000000081000000000000000000000000000000fdffffffffffffff0500000000000000cc00000000000000060000000000000000000000070000000000000000000000000000000200040b000000000000000060001200726663343130362867636d2861657b29290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000"], 0x150}}, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) 4.476025684s ago: executing program 2 (id=955): socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x400000000010, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x21, 0x2, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000000500", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002ef1c0000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 3.88100384s ago: executing program 2 (id=959): prctl$PR_MCE_KILL(0x35, 0x1, 0x8) prctl$PR_MCE_KILL(0x35, 0x0, 0x10) semctl$GETALL(0x0, 0x0, 0xd, 0x0) 3.752164007s ago: executing program 1 (id=962): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10017}, [@FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0xc3) 3.703854943s ago: executing program 2 (id=963): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x1) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0x40, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8) socket(0x30, 0xa, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000380)={r4, 0x4}, 0x8) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000900)={'wlan1\x00', @random="e80300"}) io_setup(0xffffff7f, &(0x7f0000000280)=0x0) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) io_submit(r6, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) pipe2$watch_queue(&(0x7f00000000c0), 0x80) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SOCK_DESTROY(r7, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000019d00)={0x14, 0x15, 0x1, 0x70bd2b, 0x25dfdbfe, {0x23, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x24008850}, 0x0) 3.646256405s ago: executing program 1 (id=964): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = syz_io_uring_setup(0x75d9, &(0x7f0000000040)={0x0, 0x3b35, 0x40, 0x2, 0x1f0, 0x0, r0}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r2, 0x22bb, 0xf92d, 0x8, &(0x7f0000000200)={[0x8]}, 0x8) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) preadv(r4, &(0x7f0000000000)=[{&(0x7f0000001140)=""/4097, 0x1001}], 0x1, 0x372, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)={0x15, r5, 0x10ada85e65c25349, 0x70bd29, 0x0, {{0x67}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10}]}, 0x2c}}, 0x4080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xff}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x60}}, 0x80) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000000)={0x28, 0x6, r3, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.551844631s ago: executing program 0 (id=966): socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x3, 0x0, &(0x7f0000044000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x10000, 0x2, 0x802ce}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) timer_create(0x7, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000140)={{0x77359400}, {r4, r5+60000000}}, &(0x7f0000000180)) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r7 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000003600)={0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000002400)="9c50c150c04ca567ded1cc2b0b060d34e705bd4e7ed0b3f36d75ff08ca312f6a270d9e78104411bfef75a7ca8f4471a850ca93f9692f9266e914706013edca1189cda2cd29e6a5fec4c7ff270f16227621b17af16ef0f1c5de08", 0x5a}], 0x1}, 0x800) r8 = socket$inet6(0xa, 0x803, 0x6) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r8, r6}) r9 = syz_open_procfs(0x0, &(0x7f0000001300)='net/kcm\x00') read$char_usb(r9, &(0x7f0000000040)=""/4109, 0x100d) 3.347805735s ago: executing program 1 (id=969): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x103381) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x49, &(0x7f0000000380), 0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000040a0103"], 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4000810) recvmmsg(r5, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}, 0x29}], 0x1, 0x10020, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000002000002}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@fd, @fda={0x66646185, 0x1, 0x1, 0x1d}, @fda={0x66646185, 0x5, 0x1, 0x18}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}, 0x40}], 0x0, 0x0, 0x0}) r8 = fsmount(r4, 0x0, 0x0) fchdir(r8) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000440)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r9 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r9, 0x2007ffb) 2.638545481s ago: executing program 0 (id=970): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x34000) 2.489228058s ago: executing program 0 (id=971): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f00000001c0)={0x40, 0x15, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$cdc_ecm(0x6, 0x5d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4b, 0x1, 0x1, 0x9, 0x10, 0x2, [{{0x9, 0x4, 0x0, 0x2e, 0x2, 0x2, 0x6, 0x0, 0x3, {{0x7, 0x24, 0x6, 0x0, 0x0, "1c7e"}, {0x5, 0x24, 0x0, 0x48}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x8, 0x2, 0xd7}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x7, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x6, 0x9, 0xa}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x7f, 0x3, 0x2}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x3, 0xfe, 0x1f, 0x20, 0x6c}, 0x58, &(0x7f00000000c0)={0x5, 0xf, 0x58, 0x4, [@ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0x0, 0xf00f, 0x5, [0x0, 0xff00, 0xff3fcf, 0x0, 0xff00f0]}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "b26e01afd090d8e2679737e00f6037c0"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "1082482f0602304530dd6b7002b4c50c"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0xf, 0x2, 0x9, 0x4}]}, 0x4, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1409}}, {0xa0, &(0x7f0000000200)=@string={0xa0, 0x3, "b3843e11067b79dccef14892d832a71d469be13a6ec2ed9e72b828e62ade33934695fd1a99399ff06ed607861d3e6d640fa5d30b27430ebe3c2f370566d533ffc0de9035e81003f84b59818eb559f22165e3adfd73cf8b8864d1179ab2f173bee2590a71e0e748d696c8dfc416a6d06845f185a0babbdc76b63cab18fd15417ad6d37e4f1ac6278552a4de5c8f1a8d8a30809e8e069027c73b0729d9c5ba"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xd0f5}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x426}}]}) 2.488836957s ago: executing program 3 (id=972): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 2.287908604s ago: executing program 3 (id=973): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0xbe, &(0x7f0000000140)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x67, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010102, {[@cipso={0x86, 0x77, 0x0, [{0x5, 0xc, "e256b28c59881681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x12, "e706d30bd224010000000000000038c2"}, {0x0, 0x7, "cfa1e7ab1a"}, {0x0, 0xf, "c6000000000000400000000000"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x10, "73bc2300ad9d19a3000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0x6}]}}}}}}}, 0x0) 2.254166935s ago: executing program 3 (id=974): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000380)={0x36a, 0x78, 0x300, 0x0, 0xa, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x7ffffbff}, {}, {}, 0x0, 0x0, 0x0, 0x1, 0x1, 0x4, 0x9f6, 0x3, 0x1ff, 0x803d, 0x1, 0x7, 0x5f, 0x202, 0x1, 0xc}) 2.141894901s ago: executing program 3 (id=975): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c0000001000010025bd7000faf01f2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201004c00128009000100626f6e64000000003c00028008001200"], 0x6c}, 0x1, 0xf3ff, 0x0, 0x40000}, 0x4000) 2.045539683s ago: executing program 2 (id=976): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880), 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c010000", @ANYRES16, @ANYBLOB="000826bd7000fbdbdf25120000004c0002803400038008000200070000000800010001000000080002000000000008000100070000000800010007000000080002000200000008000200e50b00000c0003"], 0x14c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x84}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r3, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) 1.928013862s ago: executing program 3 (id=977): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ae4000000060a0b0400000000000000000200fffeb80004802800018007000100637400001c0002800800014000000014080002400000000705000300000000008c0001800c000100636f756e746572007c0002800c00014000000000000000020c00024000000000000000090c000140fffffffffffffbff0c00024000000000000000010c00024000000000000006920c00014000000000000000020c00024000000000000000010c00024000000000000000070c00014000000000000088770c00024000000000000000060900010073797a30000000000900020073797a32"], 0x10c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1.759853015s ago: executing program 3 (id=978): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000647f215f4557e01c504e629500080045000044000000000021907800000000ffffffff050090780a0101024a0000000000000000000000ac1e0001ac141401071300e000000200000000ffffffffac14140c00"], 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="d1", 0x1, 0x24004000, &(0x7f0000000100)={0xa, 0x4e24, 0x7f, @remote, 0x7}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000200), 0x8) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) unlink(&(0x7f0000000040)='./file0\x00') 1.584999002s ago: executing program 4 (id=979): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000024000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003000a000000010000004d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 1.256052525s ago: executing program 4 (id=980): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=ANY=[@ANYBLOB="020300000a0000000000000000000000030006000000000002000100e0000009000000000000000002000100000000000040050700000000030005000000000902"], 0x50}}, 0x0) 1.255558609s ago: executing program 1 (id=981): socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x3, 0x0, &(0x7f0000044000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x10000, 0x2, 0x802ce}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) timer_create(0x7, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000140)={{0x77359400}, {r4, r5+60000000}}, &(0x7f0000000180)) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r7 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000003600)={0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000002400)="9c50c150c04ca567ded1cc2b0b060d34e705bd4e7ed0b3f36d75ff08ca312f6a270d9e78104411bfef75a7ca8f4471a850ca93f9692f9266e914706013edca1189cda2cd29e6a5fec4c7ff270f16227621b17af16ef0f1c5de08", 0x5a}], 0x1}, 0x800) r8 = socket$inet6(0xa, 0x803, 0x6) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r8, r6}) r9 = syz_open_procfs(0x0, &(0x7f0000001300)='net/kcm\x00') read$char_usb(r9, &(0x7f0000000040)=""/4109, 0x100d) 1.166355856s ago: executing program 4 (id=982): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x6000000}, 0x8000) 1.063489947s ago: executing program 4 (id=983): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xafcc, 0x7, 0xffffffffffffffff, 0x8, 0x8001}, 0x7, 0x1}, [{0xe205, 0x2, 0x9, 0x1842, 0x1, 0x8000}, {0xfffffff9, 0x8, 0x7, 0xb145, 0x4, 0x8}, {0x0, 0xf8d5, 0x1ff, 0x87, 0xa, 0x5}, {0xf, 0x7e7, 0x9, 0x7, 0x0, 0xa}, {0x1, 0x101, 0x5c78, 0xffffff56, 0xee, 0x8}, {0x3, 0x73, 0xb, 0x7, 0x2, 0x6}, {0x8, 0x5, 0x4, 0x4, 0x2, 0x8}, {0x1ff, 0x1, 0x2f, 0x7, 0x533f, 0x200}, {0x8, 0x4bd5, 0x5, 0x2, 0x2, 0xf8}, {0x2, 0x8, 0x4, 0x7, 0x32, 0x1000}, {0x6, 0x9, 0x0, 0x20000008, 0x6, 0x5}, {0x5, 0x9, 0x1, 0x10, 0x8, 0x4}, {0x4, 0x0, 0x3, 0x80000000, 0x2, 0x1}, {0x6, 0xfffff800, 0xbf, 0x1, 0xffffffff, 0x8}, {0x48a3, 0x3ff, 0x9, 0x6e, 0x3, 0x8}, {0x4, 0x200000, 0xaeb, 0x360, 0x2, 0x400}, {0x0, 0xffffffff, 0xbe, 0x1, 0x7, 0x8}, {0x5ad, 0xfaec, 0x401, 0x9, 0x8, 0x45}, {0x3, 0x9, 0x400, 0x3, 0x6, 0x5}, {0xde, 0x0, 0x5, 0x8000, 0x2, 0xffff}, {0x80, 0x3491, 0x83, 0x8001, 0x3, 0x165c}, {0x6d, 0x5, 0xf, 0xe, 0x8, 0xec}, {0x6, 0x1, 0xfffffffc, 0x5, 0xfffffffc, 0x81}, {0xcd0, 0x9, 0x6, 0x7fffffff, 0x80, 0xfffffff8}, {0x7, 0x3, 0x2b0, 0x5, 0x2, 0xd6}, {0x6, 0x3, 0x0, 0x2, 0xc4}, {0x0, 0x99, 0x200, 0x1b8, 0x4, 0x1}, {0x1cff, 0xc7a9, 0x25, 0xffffffff, 0x7, 0x2}, {0xff, 0x4, 0x7fff, 0x7, 0xfffffff9, 0xd46}, {0x7, 0x2, 0xec, 0x0, 0x8}, {0x3, 0x8, 0x0, 0x6, 0xebc, 0x8}, {0x3, 0xfe9, 0x1, 0x4, 0x0, 0x401}, {0x4, 0x8, 0xd, 0x7fff, 0xb, 0x87c}, {0x4a, 0x1000, 0x1, 0x81, 0x6063, 0x1}, {0xfffffe00, 0xe392, 0x0, 0x9, 0x3, 0x9}, {0x8, 0xff, 0x1, 0x101, 0x10000000, 0x4ac9}, {0x8, 0xffffffdb, 0x3, 0xe4c, 0x3, 0x2ca759d6}, {0x5, 0x4, 0x9, 0x2, 0x2, 0xfffffffa}, {0x0, 0x3, 0x4, 0x1, 0x10001, 0x9}, {0x5f21eb86, 0x1, 0x9, 0x40, 0x4, 0x9}, {0x55f, 0x8, 0x401, 0x5, 0x3, 0x40}, {0x7, 0x6, 0x7, 0x8000, 0x81}, {0x4, 0x9, 0x5, 0x6, 0x3, 0x2}, {0x100, 0x4, 0x7, 0x8, 0x66, 0x9}, {0x5, 0x5, 0x3, 0x7ff, 0x2, 0x80000001}, {0x8, 0x6, 0x88, 0x9, 0x6, 0x1}, {0x7b, 0x74, 0x2, 0xd, 0x8, 0x1}, {0x69, 0xcd, 0x7f, 0xd, 0x200006, 0xf}, {0x9, 0x0, 0xe0e, 0x4, 0x3, 0x6}, {0x1, 0x2, 0x4, 0xc9, 0x6, 0xfffffff7}, {0xb, 0x2, 0x5, 0x7fde, 0x101, 0x1}, {0x3, 0x392, 0xb19, 0x1, 0x8d, 0x9}, {0xff, 0x5, 0xffff, 0x6972, 0x1, 0xfffffff9}, {0x6, 0x200, 0xb1, 0x1, 0x1000, 0x401}, {0x8, 0x54a0ee99, 0xfffffffa, 0x2, 0x99, 0x4}, {0x4, 0x2, 0xc979, 0x2, 0x4, 0x7ff}, {0xffffffff, 0x8, 0x7, 0x8, 0x7fffffff, 0x2b25}, {0x85, 0x4, 0xd55, 0xff, 0xf, 0x2}, {0x5, 0x2cfd091, 0x8, 0x9, 0x4, 0x103d}, {0x0, 0x8, 0x1b89, 0x7, 0x5, 0x6}, {0x2887b03a, 0xc54, 0x3, 0x0, 0x5, 0x7}, {0x2ee, 0x2, 0x8, 0x7, 0x10001, 0x5}, {0x3, 0x6, 0xe, 0x8, 0x5}, {0x1000, 0x9, 0x6, 0x1, 0x40, 0x7}, {0x9, 0x7fff, 0x4, 0xe4ffffff, 0x4, 0x10}, {0xffff0000, 0x7, 0x8, 0xe, 0x400, 0xfffff521}, {0x7, 0x6, 0xd65a, 0x2, 0x3, 0xffffff93}, {0x6, 0x7, 0xffffff7d, 0x5, 0x80000000, 0xfffffffc}, {0x7, 0x800, 0xc, 0x7fff, 0x2, 0x4}, {0x0, 0x6c0, 0x2, 0x3ff, 0x8, 0x7fd7}, {0x0, 0x8000010, 0xa52, 0x3, 0x4, 0xd91}, {0x0, 0x80000000, 0x400, 0x2, 0x6, 0x7}, {0x1, 0xad3, 0x9, 0x12000000, 0x7, 0x6}, {0x7, 0x6, 0x4, 0x9, 0x9, 0x9}, {0x9e2, 0x8, 0x5, 0x1, 0x400, 0x2}, {0x74863fbb, 0x5, 0xffc000, 0x401, 0xffffff8e, 0xfffffff8}, {0xa99b, 0x4, 0x4, 0x5, 0x4, 0xfffffffa}, {0x8001, 0x0, 0xfffffffe, 0x2, 0x0, 0x7}, {0x6, 0x7, 0x0, 0x7, 0x80000000, 0x50}, {0x0, 0x0, 0xc, 0x2, 0x3, 0x4}, {0x1ff, 0x4, 0xb5, 0x7, 0x1cec, 0x8}, {0x5, 0x7, 0x9, 0x1, 0x7, 0x7}, {0x7, 0x2, 0x71e892ab, 0xe8, 0xfffffff8, 0x4}, {0x80000000, 0xb07, 0x1, 0x8, 0x6, 0x3}, {0x9, 0x2, 0x5, 0x2, 0x9, 0xe}, {0xfffffff5, 0x2, 0x0, 0x5, 0x4a3, 0x8}, {0x5, 0x9, 0x4, 0x10000, 0x3, 0x6}, {0x4, 0x3, 0xfff, 0x6, 0x4, 0x1}, {0x1, 0x6, 0x8, 0x4, 0x7, 0x40}, {0x80000001, 0x389, 0x6, 0x400, 0x5, 0x7fffffff}, {0x65, 0x7fffffff, 0x6, 0x206, 0xea8, 0x8}, {0xb, 0x0, 0x1, 0x33, 0xb, 0x7}, {0x4, 0x1, 0x3, 0x1, 0x8, 0xb49}, {0x1, 0xd, 0x1ff, 0x7, 0x9, 0x9}, {0xc98f, 0x2, 0x10004, 0x8, 0x6, 0xc2f}, {0x4, 0x80000000, 0xc, 0x100, 0xe961, 0xffffffff}, {0x1, 0x5, 0x8, 0x9, 0xff, 0x800}, {0x5, 0x6, 0x5, 0x77, 0x0, 0x8}, {0x5, 0x10000, 0x81, 0x0, 0x1ff, 0x5}, {0x1, 0x0, 0xfffffff8, 0xc0c, 0x6fa, 0x8c1}, {0x8, 0x80000000, 0x9, 0x8, 0x0, 0x7}, {0x4, 0x0, 0x2, 0x0, 0x100, 0x5}, {0x2, 0x10001, 0x1, 0x53da, 0x2, 0x8001}, {0x401, 0x68c, 0x9, 0x2, 0x8, 0x7}, {0x5, 0x80000001, 0x7f, 0x3, 0xb0e, 0xeb}, {0x6, 0xad2b, 0x1, 0x85, 0x101, 0x3ff}, {0x93, 0x7, 0x4, 0x99b, 0x5, 0x11aa729f}, {0x8, 0x3, 0x3, 0x4, 0x32a, 0x10001}, {0x5, 0x80000000, 0x6, 0x1000, 0xffffff81, 0x200}, {0xd4, 0x91000, 0x9, 0xc, 0x4, 0x2}, {0x10000, 0xfffffff4, 0x0, 0x1, 0x6, 0xe5}, {0x3, 0x4a, 0x6, 0x2, 0x8, 0x1}, {0x1, 0xffff, 0x10001, 0x1ff, 0x3, 0xfffffff5}, {0x4, 0x7, 0xfffffffc, 0x6, 0x6, 0x2}, {0xf74f, 0xd, 0x0, 0x0, 0x3ff, 0x6}, {0xfff, 0xff, 0x3, 0x2, 0x8, 0xc}, {0x5, 0x9, 0x45, 0x1, 0x6, 0x1000}, {0x4, 0x0, 0x1ff, 0xb, 0xa, 0x1}, {0x5, 0x6, 0x6a5, 0x0, 0x7}, {0x0, 0x5, 0x7fffffff, 0x6, 0x9, 0x9}, {0x18152e2c, 0x5, 0x0, 0xff, 0x2, 0xffffffff}, {0x7554, 0xffffffff, 0x5, 0x1, 0xfffffffe, 0x6}, {0xef6, 0x7, 0x61a, 0x0, 0x4, 0x9}, {0x19, 0x10001, 0x3, 0x3, 0x0, 0xfff}, {0x7, 0x4000, 0x100, 0x10000}, {0x57b, 0x2, 0x10e, 0x80, 0x7, 0x5}, {0x9a, 0x5, 0x3, 0x0, 0x3, 0x7fff}, {0x2000000, 0x9, 0x7, 0x0, 0x2, 0x101}], [{0x3}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {}, {0x4}, {}, {0x3}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x4}, {0x4}, {0x5}, {0x5}, {0x6}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x2}, {0x1}, {0x3}, {0x0, 0x1}, {}, {0x5, 0x3}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0xe, 0x1}, {0x3}, {0x1}, {0x5}, {0x3}, {0x6, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x3}, {0x5}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x2}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0xdcdcfc412ebb7d41}, {0x1, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x2}, {0x3}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x3}, {0x1}, {}, {0x5}, {0x4}, {0xbe9e5652533709fb}, {0x4}, {}, {0x0, 0x1}, {0x3}, {0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x4800) 703.965026ms ago: executing program 0 (id=984): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) r3 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000)=0x639) (async) r4 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0xc2d3, 0x10100, 0x2, 0x3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) io_uring_enter(r4, 0x79a5, 0x2, 0x46, 0x0, 0x0) (async) readv(r3, &(0x7f0000000180)=[{&(0x7f0000000200)=""/147, 0x93}], 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r7, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010026bd7000fedbdf250c000000080003003498494928b4bbee5d562449eab772fa81ad56a5df8deaec63326dc7a1767eb520ff26478f93b418c786863a3391afec813c3f1c36b844e34f7fc11e04856442f5671fd9d52e5cbd57968afe8d03f33055a44a286aaedb86e5d4a9e83b58c0fe57be4e00f14cddd529bd955cd1bd4f3a21f8a7861945d899986a11b9a52a7b5f65fe6faaf1a2184b6f72dd7974656fda14b4a8c66f", @ANYRES32=r8, @ANYBLOB="0a00060008021100000100000c0050800800070000000000"], 0x34}, 0x1, 0x0, 0x0, 0x818}, 0x4000) 683.849271ms ago: executing program 4 (id=985): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="85000000050000009c000000008004009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) 580.47967ms ago: executing program 1 (id=986): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000015204f089b96478db1d8a5f756509e977fb1a0300000000020001000000000000000a161600003f030006000000000002004e21000000800000000000200000030005003200000002"], 0x70}, 0x1, 0x7}, 0x0) 397.511007ms ago: executing program 1 (id=987): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_recovery\x00', 0x1, 0x0) (async) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_recovery\x00', 0x1, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x1, 0x2, 0x1}) (async) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x1, 0x2, 0x1}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_recovery\x00'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_recovery\x00'}, 0x30) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) fsetxattr$security_evm(r1, &(0x7f0000000180), &(0x7f00000001c0)=@ng={0x4, 0x4, "2a9e8c0de33be848"}, 0xa, 0x3) (async) fsetxattr$security_evm(r1, &(0x7f0000000180), &(0x7f00000001c0)=@ng={0x4, 0x4, "2a9e8c0de33be848"}, 0xa, 0x3) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000240), 0x2, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f0000000280)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = syz_usb_connect(0x2, 0xc5d, &(0x7f0000000300)={{0x12, 0x1, 0x89fae65799cf0ebb, 0xe4, 0xbd, 0x65, 0x8, 0x10fd, 0x513, 0x8127, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc4b, 0x3, 0x65, 0x9, 0x40, 0x5, [{{0x9, 0x4, 0x10, 0x2, 0x2, 0xd0, 0xdf, 0x74, 0xde, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "afd8"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x59, 0x3, 0x1c}, {0x6, 0x24, 0x1a, 0xd04, 0x1}, [@mbim={0xc, 0x24, 0x1b, 0x1, 0x0, 0x8, 0x40, 0x5, 0x3}]}], [{{0x9, 0x5, 0x7, 0x0, 0x10, 0x1, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x5, 0xe}]}}, {{0x9, 0x5, 0x3, 0x3, 0x20, 0x1, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf, 0xd2}]}}]}}, {{0x9, 0x4, 0x9, 0x4, 0x8, 0xc9, 0x96, 0x31, 0x22, [@uac_control={{0xa, 0x24, 0x1, 0x90, 0x9d}, [@feature_unit={0xb, 0x24, 0x6, 0x2, 0x5, 0x2, [0x3, 0x8], 0x9}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x1ff, 0x4, 0x9, 0x5, 0x2, 0x1}, @mixer_unit={0xb, 0x24, 0x4, 0x2, 0x1, "6dedcda8b660"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x303, 0x5, 0x1, 0x76}]}], [{{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x6, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf, 0x5}]}}, {{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x0, 0x9, 0x0, [@generic={0x50, 0x9, "5387d6ec913110c1c45d03ed379822cb68028b4139c467e165d38209e0758f77e3a3ffef418a9f10fd55837e2ac03b2d495c4265a108355d3e6c8ccc717c8c0fa59633c74425b24fcf6a3c58c4e8"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0x3, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0xed}, @generic={0x6a, 0xc, "10203df676c6ab426955fc7a5aebefa7ab2742016aa2ec109db22d4eb16d7865e2bb7612287e94d811778ee5053da6ced2f4597f339eeb9e5e302b9257407ea94b6611e9835b4b72cfe645f2c7a318035b7927e384ff91db6eb9f9d8ddfe59cfc636ec59cb7c775b"}]}}, {{0x9, 0x5, 0x5, 0x4, 0x3ff, 0x2, 0xe0, 0x3, [@generic={0xdf, 0xc, "e2978d4d8d4d61794b9dbe7b0d7a520b139eebd319a77655fe98cc146a5ee78242493165e86739f20464b42e42340e6061e75b777f0b00deddaef57945a2447a5a35c56fcbe6308be030957151b2ef33a62a388a0a9aa422ff428d93238e1ec8833a0b10102462bd5c00209015290133f93f47db5e7dd785a2f87c6d30ea9305155e88bcb28fdd849c4c398f6959990dad1de10b30ed300d8f5e3495a63f5c3ce0d61da371ca17d8a43e40fff8cd0d6e1c3f3cb2bcb7f33d3be8e69735adc29b0094ac584dc00ff149181a864755a8a7e5caa4b25907b1b46c224b4d86"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0xbb, 0x2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0xff2a}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x8}]}}, {{0x9, 0x5, 0x3, 0x1, 0x20, 0x7, 0x7f, 0xe9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x2}, @generic={0xf3, 0x5, "991d95ab2739fa529bc373bab2849fbbd6642e7d5681ac7d67b334c30e8448dfac76a3abab925001d7422d5306899153526c8113cc37e089adee3bd2918186ee5593f6f3585ed0d2fddfeba4a81f3cb61d5352e8533677e88b6035835d1a8bf1b4e590fd11b5ea4ec486bb34b26e1600a140974e91f2e6b3c3a99ec509d5799b388f6b7970c6c23baeb9b0850fccd071a6c70489a67e3376a51bbffb945ef4db79e5409b0fc3e27bf639ed60a54fe7d1cd0bb57565eeff450f19bcbe83e38f3a79c06c7d375387bffb19a45d2956340b6fb7599bff10b3b2aa556a1e32bb7bb21dfc668ec250d66f42cc4ff15e2a90edea"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x20, 0x8, 0x7f, 0x6, [@generic={0x4e, 0x11, "dd8d22628b8dc7d76fe0c6d3c936c615d8cd00b87d4690e3b988c9ea2327d1d8701a5e373163225ee977da44438512ac4c56417a2ecfed7e5f25a5140c1d1731fe686ef435ba3cecc4383566"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0xff, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x8}]}}]}}, {{0x9, 0x4, 0x0, 0x5, 0x10, 0xe2, 0xb2, 0x37, 0x8, [@hid_hid={0x9, 0x21, 0x3, 0x56, 0x1, {0x22, 0xa3b}}], [{{0x9, 0x5, 0xe, 0xc, 0x200, 0x1, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4d, 0xfff9}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x8}]}}, {{0x9, 0x5, 0x80, 0x2, 0x400, 0xc, 0xc, 0x7, [@generic={0x6f, 0xc, "f4eeac6c4e3bab5c76adf3f65604f02f8ab8123ab427264854d448247845160c211b8955a7103eff93974107a4b6f5b3e4221a5b2e23b460926d20c31afe21bb62c51b0f7cb357c044f6993f31a2c93e6bf9ba09b8a875ee7064f30bcbe6cea313dcacfca8f4d412b147aaf7ed"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0xf, 0x3, 0xe0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5b, 0x10}]}}, {{0x9, 0x5, 0xc, 0x1, 0x0, 0xd, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x1}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x9e, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0x6}]}}, {{0x9, 0x5, 0x6, 0xc, 0x200, 0x40, 0x4, 0xa1, [@generic={0x93, 0xf, "5df88bcc22f6019d2923842bbe40e04fe37d227dd271b2c41ad46a1bb90357a93832e655347bd2aca875ecf55a9181a7cb8e5b46977f80e4ce3738bd4191fba6711495294338d88e9b7b32ce1fbe01d6c0e00d00a4dfb786a16a44d8afefc80e112e8c55a0b19e02ef24939aef632067300f5c1af0a92af03e43697d323d632c67103302d64fcd64800de3a103811d99c5"}, @generic={0xfb, 0x39, "761aef10da7af2368a0ba6b16ab27c8c9c93d70aa3eee4498a7cf56ced8af23699e45ca171060c75a0b78974f5beec3c480af98d53c80de2ba64d95d12f4f200343e894f9cec378aaa69218e3a9315e5c26ef0c419b72dd5e2f0fc75e0a2332d20ac9dfdc5af95db5a1c0e877f52e30c9d314ec25fdfd63670d87cc520094b97e59e3591dfd848599b6b42fa4bc00b5fdec8106dbdc8d4b9175bb002589e1dc2fb693c3a82386b25dc83d6841472e6f8db3b3c2358404af3c12e5fd6d0ab2ad32c3e0808f871e3f98963c53cb9a18b60eb1914c365979b54324f346400e17609130ddbf7ab617eac2a05d0ca68279f709433683cbb75de8a0b"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x0, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x7}]}}, {{0x9, 0x5, 0x9, 0x8, 0x40, 0xe, 0x7, 0x87, [@generic={0x9b, 0xb, "7f9cbdba157bc3b2a5b147ef90436df5be52eab936c738ad082d3af7b11fb02a75feda9a9d8f0db80fea59204c59a452e60e67ff36c5702f89e23f9cf9ecc064c7458c23282ab48bf312fe19f29a3a0049ca9b572fb316cda4407d7c8ed631fb154ec78c323c1f628faa074117646455641b580eadd51c5a1e5edde8622e79e35cba827284daa41a58e67fbe57be606d1abc31b194434a66d2"}, @generic={0xb5, 0x2, "9e3d5014cf3afdfadef8258fcc3fe8807d95d747f4411649cee325cfabb737e3919b05496d82a5379557f2ea75e7a98b63d29c30592b1fcc5e7a9e3adcdb0a3dedd1392f44d5d8be3507d5854219ab08d0cf8c5af0481cc7a069bfa1632c98c4c2b630a6229912b0ccb574554e03a2a99a8ccd95906efa3db158f95942c0fa91522af55c25ac82378423a7e43c11e6c35a5a7b0ca49b8258c774cd160a45e19af008f553ffd353eaeebc9cafeedec09805cfdb"}]}}, {{0x9, 0x5, 0x3, 0x1, 0x200, 0xb9, 0x3, 0x8, [@generic={0x4e, 0x6, "694870f396691a6e8cab52cbf7daa3086c7a11c8fbef14515c23feb5c428790918cac04be2cc9f6e5d18047d2e3cf2ea647c6a4df4db78d24d3a5fd97db57d3902b238c3bcb9b92f873e35d8"}, @generic={0x1d, 0x3, "219aa4fdbb517c2e9b5b93ab8c014795a5789502c8f480521c92de"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x0, 0x7, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xa, 0x46e}, @generic={0x3e, 0x22, "761863f6a9aed1a8fc707ac9f332a166b5d6fee80a874727ca5136d33268fd39b21f392531fc10068e3b33e9efac970c367d63a347932e0180215e5d"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x4, 0x9, 0xd3, [@generic={0xb6, 0xe, "cc05e965bc2e7f5a95a0e0dfbc35350a93d490c9d04156551e183e05e81711b4de1b134419138ae73afb53852abc45fbabcbc81b6092b815800eb5f1afca0ae0bfcce29d5716531bca678e4ce25d94b66090e86f5e3346e7931e7fa1d6aa62ad59b2520cf91b03c6560dd94d2ec60c41ad593e476ddd835c9bdd981e8ebd60fce9969d7d956207d51280008ae619a00b624ff81ffffbc47a2fa5f233016c3126a63e80db77566e2df252133495e5c27048e8ad83"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x400, 0x9, 0x8, 0x81, [@generic={0xbf, 0xe, "baa5492d2f59bce87d0523caf8e9235575c67e04b94876a60791bc0cbf9da3ce17d42ccc6d3c91702a23f41fdab872692df0e1f3a85ae5e2102f47571e874fe99fb432a623f1a643c36e8969462631df2da0441e74454233a1c264dccb4548abe23371d95082ed08fdd27b7d54a4dbd2f087ec6d76c2707f362a0e4bacbd3639f43a9fad546f5a69fd6280272e36fbe57ba3a08c6e8b2763cb1ccc45fed065c56af151acf5493397bebbb1bbd25ed56e2bd37e673b1579239850b5591e"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x6, 0x7f, 0x9, [@generic={0x14, 0x24, "1b07b4e801554fe703006825f9316411f2a9"}, @generic={0x1e, 0xc, "cab5953fb00691be53f7245adb58658d6506295125d0aff04118e083"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x5, 0x12, 0x2, [@generic={0xd8, 0x11, "c85142b6ac1b4d290724a56beb714b623046cb1f5b201c17d5eeb61fa8c4e4cde7bf060b8963f5a8349bc00a13f51c30d68a3c377155771c8ac3dc70ff165953d974b02e2f318b69d28442c759e5f3588da5425d1618b170d4b7e843ea32cea3d77d4c4e3aea64bab1404da63aa7e430572d38ccb84a94ad96a8a015fcb31f4d6ad1536c8a5fdb9d8848fae25bc0f0660974e9281d8ee99c5475f15fadc72901f04bb07d9fce37ee12de613f0d5ec49d26d352f49d424acec129aeae8d2e71deeb82940ffc3080671e8d42d05f9d50ced28aa7c0b091"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x400, 0x9, 0x2, 0x3, [@generic={0x96, 0xd, "74222d53254511820604b8020df9afd6616c1004a42deb3404961543e01e994b58d0661eda01694a472faa9f9dade7afc5d0e35b814fe1fa617c126611a5b128f0732d0b4e4582448ac6554d9b230b792d92e6195c1f137f122c6925d7882c4a7714f42cfdca4b5793c55e2b0659bc38eafeae2b7cda2e822ff7838047fd0bc0fb9d76e4aeecbc6dfe1895a912cf2e9ca10eac25"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x0, 0x81, 0x1, [@generic={0x87, 0x4, "c35c9d05c50a292b0a9bf639175e8e93f7c30b5d466c48e02db04a57023acfafe8a234066668af53a9ec9319eac7ef503768c3c8df74a222c9a589a185575cb3e165fefad98c66af3b9a666e0988be1649744134de54c60ad01fa5863e45cf04a2db40c5d7bd79c4656ba01c17966281e3595e726da86d849f75a9f536ceca42822acb935b"}]}}]}}]}}]}}, &(0x7f00000010c0)={0xa, &(0x7f0000000f80)={0xa, 0x6, 0x110, 0x1, 0x9, 0x6, 0x20, 0xd3}, 0x20, &(0x7f0000000fc0)={0x5, 0xf, 0x20, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xff, "4ae506efeb26a3f8f109388f7183621e"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x7, 0x9, 0x7}]}, 0x1, [{0x82, &(0x7f0000001000)=@string={0x82, 0x3, "13115f0cde5ce05624c13bcec7024ed807ba8c2cb320ce7c75817f5efd2004aa433f6dee5a8337d4c2f262f33c299f64205afa8b964aff04b6e162156d38309c16622658165c1ed6bc3679b18ca4ad592375a79ea31315550740548f4ac6c0c63e07385004d60eec5a0b4bd28dd87323efc20dc5a5f652b4b5836fc63622301e"}}]}) syz_usb_control_io$hid(r4, &(0x7f00000012c0)={0x24, &(0x7f0000001100)={0x0, 0x1, 0x13, {0x13, 0x23, "e50ef5ae20ce9f0d3b8027b5c2b28d77e7"}}, &(0x7f0000001140)={0x0, 0x3, 0xc6, @string={0xc6, 0x3, "4c2b728883653b9e1a5dd4b4b0255a5635d87da0be1f9ad383580738eede3fdc74edc021dd4db0b9fa7873306e422ef7620e51b6642a50f0e982b3d79bec74dc4d8b87706be5df3156133c278c1d567843232dbc6a940e862924b8cbe54f9bf76c98fc69688d4b367bea998c575671d582218c87265bc8ad040e1349649e1e7da8f15caee02d17872b8a3d78af5620aeb971de1e613b42340d332928273759ab2913f3af5d8183e91630e8f6942923c9f9d98ea7497c687db38185f0eed33a5dea0183c2"}}, &(0x7f0000001240)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0x8, "4703b99a"}, @main=@item_4={0x3, 0x0, 0xa, "f35540a9"}, @main=@item_4={0x3, 0x0, 0x8, "7ad4c8b7"}]}}, &(0x7f0000001280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x54c7, 0xe5, 0x1, {0x22, 0x194}}}}, &(0x7f00000015c0)={0x2c, &(0x7f0000001300)={0x20, 0x14, 0xc4, "ea89d1f8a6707d6e24de84cfcbe1947ba7814399605fab40d1cc9d5a7f5cf30b50420436ac2226a3e5f7cfe3eb232e31d994388ff6e34c3f67703d6bcbe9ed749a01c614af7663609dee5fb5ff09afd260465286145894b13c369eb1bfe489a14246830c45e38b130e84e9e89aa525ce3b6fa96ca5aeb3f4f93aec5c8f28b53762df11ff1c191ea0ee6a5bfa8ff595f398e8669217cbcacd9f4b313889958880fc6fcd2ad796fb763dc652747f488b35a856aa97556f3740ad3910bd4fafde6a5f81e356"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001440)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001480)={0x20, 0x1, 0xc6, "b5042b64e6a038f259f68b1904c056df756e99abd2ea25d50be64077da499ef3fb5e25681b8c1aedf03f02a887b4b52253f2c4c46ae16dce09fd8c39a77761451c96328a34c9d5d68480640441dda473b87184204e1a628d6ee02a9c1a8ab9eb17b4680bb1daa6f0b28b3169b10149fb41835b34c4eaad4e5018155ffc1d6702b3c9d337144e14ba0b35e12d721e65ed5997b09ce92b14de8d34d14ac21f9434c5405bfe437cc617dffcb47784a09afa5d8f3067cb94266138ddb33da8cec4f131732d5bc87a"}, &(0x7f0000001580)={0x20, 0x3, 0x1, 0x5b}}) (async) syz_usb_control_io$hid(r4, &(0x7f00000012c0)={0x24, &(0x7f0000001100)={0x0, 0x1, 0x13, {0x13, 0x23, "e50ef5ae20ce9f0d3b8027b5c2b28d77e7"}}, &(0x7f0000001140)={0x0, 0x3, 0xc6, @string={0xc6, 0x3, "4c2b728883653b9e1a5dd4b4b0255a5635d87da0be1f9ad383580738eede3fdc74edc021dd4db0b9fa7873306e422ef7620e51b6642a50f0e982b3d79bec74dc4d8b87706be5df3156133c278c1d567843232dbc6a940e862924b8cbe54f9bf76c98fc69688d4b367bea998c575671d582218c87265bc8ad040e1349649e1e7da8f15caee02d17872b8a3d78af5620aeb971de1e613b42340d332928273759ab2913f3af5d8183e91630e8f6942923c9f9d98ea7497c687db38185f0eed33a5dea0183c2"}}, &(0x7f0000001240)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0x8, "4703b99a"}, @main=@item_4={0x3, 0x0, 0xa, "f35540a9"}, @main=@item_4={0x3, 0x0, 0x8, "7ad4c8b7"}]}}, &(0x7f0000001280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x54c7, 0xe5, 0x1, {0x22, 0x194}}}}, &(0x7f00000015c0)={0x2c, &(0x7f0000001300)={0x20, 0x14, 0xc4, "ea89d1f8a6707d6e24de84cfcbe1947ba7814399605fab40d1cc9d5a7f5cf30b50420436ac2226a3e5f7cfe3eb232e31d994388ff6e34c3f67703d6bcbe9ed749a01c614af7663609dee5fb5ff09afd260465286145894b13c369eb1bfe489a14246830c45e38b130e84e9e89aa525ce3b6fa96ca5aeb3f4f93aec5c8f28b53762df11ff1c191ea0ee6a5bfa8ff595f398e8669217cbcacd9f4b313889958880fc6fcd2ad796fb763dc652747f488b35a856aa97556f3740ad3910bd4fafde6a5f81e356"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001440)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001480)={0x20, 0x1, 0xc6, "b5042b64e6a038f259f68b1904c056df756e99abd2ea25d50be64077da499ef3fb5e25681b8c1aedf03f02a887b4b52253f2c4c46ae16dce09fd8c39a77761451c96328a34c9d5d68480640441dda473b87184204e1a628d6ee02a9c1a8ab9eb17b4680bb1daa6f0b28b3169b10149fb41835b34c4eaad4e5018155ffc1d6702b3c9d337144e14ba0b35e12d721e65ed5997b09ce92b14de8d34d14ac21f9434c5405bfe437cc617dffcb47784a09afa5d8f3067cb94266138ddb33da8cec4f131732d5bc87a"}, &(0x7f0000001580)={0x20, 0x3, 0x1, 0x5b}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1c) (async) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1c) ioctl$KVM_SIGNAL_MSI(r5, 0x4020aea5, &(0x7f0000001600)={0x3000, 0xd000, 0x2, 0x1, 0x2}) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r6, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x10, 0x3fb, 0x20, 0x70bd25, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x4040811) openat$fuse(0xffffffffffffff9c, &(0x7f0000001740), 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000017c0), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000017c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001940)={&(0x7f0000001800)={0x104, r7, 0x8a, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x104}, 0x1, 0x0, 0x0, 0x4024005}, 0xc001) (async) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001940)={&(0x7f0000001800)={0x104, r7, 0x8a, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x104}, 0x1, 0x0, 0x0, 0x4024005}, 0xc001) preadv(r2, &(0x7f0000003d80)=[{&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f00000039c0)=""/238, 0xee}, {&(0x7f0000003ac0)=""/24, 0x18}, {&(0x7f0000003b00)=""/2, 0x2}, {&(0x7f0000003b40)=""/243, 0xf3}, {&(0x7f0000003c40)=""/145, 0x91}, {&(0x7f0000003d00)=""/105, 0x69}], 0x8, 0xff, 0xc7) recvmsg(r1, &(0x7f0000005300)={&(0x7f0000003e00)=@nfc, 0x80, &(0x7f0000005240)=[{&(0x7f0000003e80)=""/34, 0x22}, {&(0x7f0000003ec0)=""/4096, 0x1000}, {&(0x7f0000004ec0)=""/216, 0xd8}, {&(0x7f0000004fc0)=""/25, 0x19}, {&(0x7f0000005000)=""/10, 0xa}, {&(0x7f0000005040)=""/119, 0x77}, {&(0x7f00000050c0)=""/43, 0x2b}, {&(0x7f0000005100)=""/231, 0xe7}, {&(0x7f0000005200)=""/15, 0xf}], 0x9}, 0x40002142) (async) recvmsg(r1, &(0x7f0000005300)={&(0x7f0000003e00)=@nfc, 0x80, &(0x7f0000005240)=[{&(0x7f0000003e80)=""/34, 0x22}, {&(0x7f0000003ec0)=""/4096, 0x1000}, {&(0x7f0000004ec0)=""/216, 0xd8}, {&(0x7f0000004fc0)=""/25, 0x19}, {&(0x7f0000005000)=""/10, 0xa}, {&(0x7f0000005040)=""/119, 0x77}, {&(0x7f00000050c0)=""/43, 0x2b}, {&(0x7f0000005100)=""/231, 0xe7}, {&(0x7f0000005200)=""/15, 0xf}], 0x9}, 0x40002142) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000005340), 0x402042, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000005380)={0x0, 0x0}) lstat(&(0x7f00000053c0)='./file0\x00', &(0x7f0000005400)) (async) lstat(&(0x7f00000053c0)='./file0\x00', &(0x7f0000005400)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r8, 0xc0286405, &(0x7f0000005480)={0x5, 0x187, {r9}, {r10}, 0x1, 0xc}) syz_genetlink_get_family_id$l2tp(&(0x7f00000054c0), r1) r11 = openat$vsock(0xffffffffffffff9c, &(0x7f0000005500), 0xc0000, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r11, 0x6430) connect$inet(r11, &(0x7f0000005540)={0x2, 0x4e20, @local}, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000005580), 0x2, 0x0) 311.716046ms ago: executing program 0 (id=988): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000001811000000000000000000000000000064fd0ed51e7a0d7aa62f5b1add52e65b4e5708324c3336e164f824bc93c110099e2e10967a98a341a861bf7c339722d609a93dc1a47c36f82627646c8b02840287578169f80972bfccb18e08bf3721e292e24c595e5ffda35bb3dea2b18653a51b4a6c9bd45b1762b8cd0000000000000057ee66d931a9200e2326db21f12ad2cd798d252112ce2f7bb0bcfb9628b0caa9315383f3a1c49bcdf026c81bbd36783018e5119c151af7870b3aa03a7dddb666981fd3d361ceeabb6cccacee70da96ad3cc77bf938d28967590cf830f566607481b4586ddb8d38931bf211d0d48ea426", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) io_setup(0x10000, &(0x7f0000000800)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x4f, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1f, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = syz_io_uring_setup(0x5fce, &(0x7f0000000940)={0x0, 0x939e, 0x1, 0xfffffffe, 0x35}, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, &(0x7f0000000800)={0x0}, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, &(0x7f0000000900)={&(0x7f0000003000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x3}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r8, 0x17, &(0x7f0000000f40)={0x0, 0x0, 0x3}, 0x1) io_setup(0x9, &(0x7f0000002e40)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 311.156172ms ago: executing program 4 (id=989): socket$inet_udp(0x2, 0x2, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fgetxattr(r2, 0x0, &(0x7f0000000040)=""/111, 0x6f) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x22000, 0x0) io_uring_setup(0x5bdd, &(0x7f00000005c0)={0x0, 0x3428, 0x200, 0x3, 0x40000}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f00000001c0)) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x140, 0x800, 0x3ff, 0x0, 0x0, 0x0, {0x4, 0x4}, {0xfffffffd}, {0x0, 0x4}, {0x0, 0x4, 0x8}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0x69, 0x0, 0x100, 0x2, 0xc}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000200), &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000480)=ANY=[], 0x48, 0xfffffffffffffffa) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x60}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a00000000"], 0xfc}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x2c, 0x0, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8a}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x4004090) 175.545216ms ago: executing program 2 (id=990): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 0s ago: executing program 2 (id=991): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xec}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x40000) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0xc0844123, &(0x7f0000000500)=0x4) semctl$GETALL(0x0, 0x0, 0xd, 0x0) kernel console output (not intermixed with test programs): _ep_enable returned -22 [ 119.675662][ T5897] usb 2-1: Product: syz [ 119.689313][ T5897] usb 2-1: Manufacturer: syz [ 119.766100][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 119.817828][ T6658] pim6reg: left allmulticast mode [ 119.826209][ T6564] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 119.835259][ T5897] usb 2-1: SerialNumber: syz [ 119.852539][ T6564] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 119.870541][ T5897] usb 2-1: config 0 descriptor?? [ 120.057260][ T6564] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 120.071294][ T6564] usb 3-1: USB disconnect, device number 9 [ 120.151173][ T6674] udevd[6674]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.785349][ T6694] netlink: 172 bytes leftover after parsing attributes in process `syz.3.198'. [ 120.856072][ T5944] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 120.878946][ T6696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.196'. [ 120.960061][ T6697] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 121.032567][ T5944] usb 1-1: Using ep0 maxpacket: 8 [ 121.040634][ T6696] process 'syz.2.196' launched './file0' with NULL argv: empty string added [ 121.093895][ T5944] usb 1-1: unable to get BOS descriptor or descriptor too short [ 121.135268][ T5944] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 121.191329][ T5944] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 121.294379][ T5944] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 121.409177][ T5944] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 121.419311][ T5944] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 121.436355][ T5944] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 121.452352][ T5944] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 121.503852][ T5944] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 121.576290][ T5944] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 9060, setting to 1024 [ 121.790742][ T5944] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 121.918647][ T6581] usb 2-1: USB disconnect, device number 14 [ 121.941905][ T5944] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 121.951449][ T5944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.983003][ T5944] usb 1-1: Product: syz [ 122.004211][ T5944] usb 1-1: Manufacturer: syz [ 122.072990][ T5944] usb 1-1: SerialNumber: syz [ 122.116752][ T5944] usb 1-1: config 0 descriptor?? [ 122.122762][ T6687] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 122.162385][ T5944] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 122.252433][ T5944] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 122.276918][ T6707] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 122.326079][ T6707] binder: 6706:6707 ioctl 4018620d 0 returned -22 [ 122.338729][ T5944] usb 1-1: USB disconnect, device number 8 [ 122.344791][ T6307] udevd[6307]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.626201][ T6711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.201'. [ 122.644489][ T6711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.201'. [ 122.654338][ T6711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.201'. [ 122.734210][ T6711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.201'. [ 122.744030][ T6711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.201'. [ 122.770737][ T6711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.201'. [ 122.781365][ T6711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.201'. [ 122.792326][ T6711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.201'. [ 122.802178][ T6711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.201'. [ 122.814446][ T6711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.201'. [ 122.910597][ T6721] AppArmor: change_hat: Invalid input '0ªª»' [ 122.913172][ T6721] syz.0.206: attempt to access beyond end of device [ 122.913172][ T6721] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 122.996154][ T6564] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 123.183110][ T6564] usb 3-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 123.234098][ T6564] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.267061][ T6564] usb 3-1: Product: syz [ 123.271861][ T6733] netlink: 'syz.0.209': attribute type 1 has an invalid length. [ 123.279753][ T6733] netlink: 'syz.0.209': attribute type 6 has an invalid length. [ 123.326055][ T6564] usb 3-1: Manufacturer: syz [ 123.343098][ T6564] usb 3-1: SerialNumber: syz [ 123.406898][ T6564] usb 3-1: config 0 descriptor?? [ 123.813256][ T6585] usb 3-1: USB disconnect, device number 10 [ 123.819394][ T5897] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 124.014704][ T6745] ptrace attach of "./syz-executor exec"[5877] was attempted by "./syz-executor exec"[6745] [ 124.049291][ T5897] usb 4-1: unable to get BOS descriptor or descriptor too short [ 124.067075][ T5897] usb 4-1: not running at top speed; connect to a high speed hub [ 124.103231][ T5897] usb 4-1: config 4 has an invalid descriptor of length 158, skipping remainder of the config [ 124.137949][ T5897] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 124.177436][ T5897] usb 4-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 124.196855][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.204906][ T5897] usb 4-1: Product: syz [ 124.228922][ T5897] usb 4-1: Manufacturer: syz [ 124.242706][ T5897] usb 4-1: SerialNumber: syz [ 124.479930][ T6747] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 124.484645][ T5897] usb 4-1: USB disconnect, device number 5 [ 124.524010][ T6747] @0Ù: renamed from bond_slave_1 (while UP) [ 126.216129][ T5944] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 126.390078][ T5944] usb 2-1: Using ep0 maxpacket: 8 [ 126.407302][ T5944] usb 2-1: config 5 has an invalid interface number: 35 but max is 1 [ 126.415660][ T5944] usb 2-1: config 5 has an invalid interface number: 4 but max is 1 [ 126.440994][ T5944] usb 2-1: config 5 has an invalid interface number: 4 but max is 1 [ 126.520507][ T5944] usb 2-1: config 5 has no interface number 0 [ 126.542916][ T5944] usb 2-1: config 5 has no interface number 1 [ 126.575994][ T5944] usb 2-1: config 5 interface 35 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.650403][ T5944] usb 2-1: config 5 interface 4 altsetting 9 endpoint 0x5 has an invalid bInterval 64, changing to 10 [ 126.686085][ T5944] usb 2-1: config 5 interface 4 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 126.715985][ T5944] usb 2-1: config 5 interface 35 has no altsetting 0 [ 126.722733][ T5944] usb 2-1: config 5 interface 4 has no altsetting 0 [ 126.765231][ T5944] usb 2-1: config 5 interface 4 has no altsetting 1 [ 126.831888][ T5944] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=d4.1b [ 126.843509][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.872170][ T5944] usb 2-1: Product: syz [ 126.895665][ T5944] usb 2-1: Manufacturer: syz [ 126.943118][ T5944] usb 2-1: SerialNumber: syz [ 127.466283][ T5945] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 127.770562][ T5945] usb 5-1: config 0 has no interfaces? [ 127.783061][ T5945] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 127.822186][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.831171][ T5945] usb 5-1: Product: syz [ 127.835439][ T5945] usb 5-1: Manufacturer: syz [ 127.934837][ T5944] ttusbir 2-1:5.35: cannot find expected altsetting [ 127.948635][ T5945] usb 5-1: SerialNumber: syz [ 127.958881][ T5944] ttusbir 2-1:5.4: cannot find expected altsetting [ 127.967350][ T5944] usb 2-1: USB disconnect, device number 15 [ 128.002099][ T5945] usb 5-1: config 0 descriptor?? [ 128.321069][ T6821] __nla_validate_parse: 20 callbacks suppressed [ 128.321091][ T6821] netlink: 20 bytes leftover after parsing attributes in process `syz.2.235'. [ 128.336831][ T6821] netlink: 20 bytes leftover after parsing attributes in process `syz.2.235'. [ 128.638310][ T6827] netlink: 'syz.3.236': attribute type 27 has an invalid length. [ 129.146510][ T6827] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.154044][ T6827] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.204714][ T979] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 129.396547][ T979] usb 4-1: Using ep0 maxpacket: 16 [ 129.403997][ T979] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 129.415458][ T979] usb 4-1: config 0 has no interface number 0 [ 129.424046][ T979] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 129.433566][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.445229][ T979] usb 4-1: Product: syz [ 129.460517][ T979] usb 4-1: Manufacturer: syz [ 129.624752][ T979] usb 4-1: SerialNumber: syz [ 129.637486][ T979] usb 4-1: config 0 descriptor?? [ 129.654590][ T979] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 129.854465][ T6827] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.878595][ T6827] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.089886][ T6827] dummy0: left allmulticast mode [ 130.095553][ T6827] macsec1: left promiscuous mode [ 130.100704][ T6827] macsec1: left allmulticast mode [ 130.201445][ T6828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.210565][ T6828] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.219315][ T6828] dummy0: left promiscuous mode [ 130.363458][ T6828] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 130.515514][ T3013] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.550251][ T3013] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.685558][ T3013] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.728909][ T3013] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.037734][ T6854] netlink: 'syz.1.244': attribute type 27 has an invalid length. [ 131.293210][ T5922] usb 5-1: USB disconnect, device number 7 [ 131.343210][ T979] gspca_spca1528: reg_w err -110 [ 131.397382][ T979] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 131.486217][ T5929] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 131.676099][ T5929] usb 2-1: Using ep0 maxpacket: 16 [ 131.692236][ T5929] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 131.703723][ T6855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.711628][ T5929] usb 2-1: config 0 has no interface number 0 [ 131.719206][ T6855] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.753890][ T6855] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 131.772012][ T5929] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 131.784598][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.980698][ T5929] usb 2-1: Product: syz [ 131.993489][ T5929] usb 2-1: Manufacturer: syz [ 132.005016][ T5929] usb 2-1: SerialNumber: syz [ 132.026723][ T5929] usb 2-1: config 0 descriptor?? [ 132.071582][ T6576] usb 4-1: USB disconnect, device number 6 [ 132.184663][ T5929] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 132.736157][ T979] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 132.757451][ T6875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.247'. [ 132.766778][ T6875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.247'. [ 132.939299][ T6879] loop8: detected capacity change from 0 to 8 [ 132.990999][ T6879] Dev loop8: unable to read RDB block 8 [ 133.006597][ T6879] loop8: unable to read partition table [ 133.017193][ T6879] loop8: partition table beyond EOD, truncated [ 133.024447][ T979] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 133.048708][ T6879] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 133.060991][ T979] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.178757][ T979] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 133.285492][ T6892] fuse: Unknown parameter '‰Ÿ' [ 133.286429][ T5929] gspca_spca1528: reg_w err -110 [ 133.306048][ T5929] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110 [ 133.322515][ T6892] fuse: Unknown parameter '‰Ÿ' [ 133.339584][ T979] usb 4-1: config 1 has no interface number 0 [ 133.406982][ T979] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 133.485195][ T979] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 133.550407][ T979] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 133.565105][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.600157][ T6901] netlink: 'syz.2.255': attribute type 23 has an invalid length. [ 133.656942][ T979] usb 4-1: Product: syz [ 133.718799][ T979] usb 4-1: Manufacturer: syz [ 133.740532][ T979] usb 4-1: SerialNumber: syz [ 133.959797][ T6907] netlink: 48 bytes leftover after parsing attributes in process `syz.4.259'. [ 134.099941][ T5929] usb 2-1: USB disconnect, device number 16 [ 134.182112][ T979] usb 4-1: USB disconnect, device number 7 [ 134.199795][ T6909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.261'. [ 135.018647][ T6924] loop8: detected capacity change from 0 to 8 [ 135.026879][ T6673] Dev loop8: unable to read RDB block 8 [ 135.033270][ T6673] loop8: unable to read partition table [ 135.045456][ T6673] loop8: partition table beyond EOD, truncated [ 135.057105][ T6924] Dev loop8: unable to read RDB block 8 [ 135.057303][ T6925] loop6: detected capacity change from 0 to 7 [ 135.112002][ T6925] Dev loop6: unable to read RDB block 7 [ 135.119122][ T6924] loop8: unable to read partition table [ 135.128094][ T6925] loop6: AHDI p2 p3 [ 135.137897][ T6925] loop6: partition table partially beyond EOD, truncated [ 135.162535][ T6925] loop6: p2 start 3876867210 is beyond EOD, truncated [ 135.206566][ T6924] loop8: partition table beyond EOD, truncated [ 135.240460][ T6924] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 135.360797][ T6927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.267'. [ 135.628876][ T6935] netlink: 48 bytes leftover after parsing attributes in process `syz.3.270'. [ 135.696135][ T979] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 135.868642][ T979] usb 3-1: Using ep0 maxpacket: 8 [ 135.892201][ T979] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 135.912839][ T979] usb 3-1: config 179 has no interface number 0 [ 135.921508][ T979] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 135.935981][ T979] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 135.949688][ T979] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 135.961134][ T10] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 135.972639][ T979] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 135.985274][ T979] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 135.998918][ T5929] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 135.999403][ T979] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 136.015887][ T979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.074150][ T6932] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 136.138415][ T10] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 136.148540][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.172698][ T10] usb 1-1: config 0 has no interface number 0 [ 136.189636][ T10] usb 1-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 136.201885][ T10] usb 1-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 136.205056][ T5929] usb 4-1: Using ep0 maxpacket: 16 [ 136.211013][ T10] usb 1-1: Product: syz [ 136.222620][ T10] usb 1-1: Manufacturer: syz [ 136.227779][ T10] usb 1-1: SerialNumber: syz [ 136.240085][ T5929] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 136.251813][ T10] usb 1-1: config 0 descriptor?? [ 136.258777][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.272919][ T10] usb 1-1: Found UVC 0.00 device syz (046c:14e8) [ 136.276126][ T5929] usb 4-1: Product: syz [ 136.283675][ T5929] usb 4-1: Manufacturer: syz [ 136.286107][ T10] uvcvideo 1-1:0.105: Entity type for entity Output 1 was not initialized! [ 136.293832][ T5929] usb 4-1: SerialNumber: syz [ 136.330072][ T979] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input11 [ 136.336557][ T5929] r8152-cfgselector 4-1: Unknown version 0x0000 [ 136.349758][ T5857] usb 3-1: USB disconnect, device number 11 [ 136.355775][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 136.355822][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 136.379883][ T10] usb 1-1: Failed to create links for entity 1 [ 136.387502][ T10] usb 1-1: Failed to register entities (-22). [ 136.397852][ T5929] r8152-cfgselector 4-1: config 0 descriptor?? [ 136.509023][ T10] usb 1-1: USB disconnect, device number 9 [ 136.834748][ T6576] r8152-cfgselector 4-1: USB disconnect, device number 8 [ 137.442551][ T6985] vlan2: entered promiscuous mode [ 137.466004][ T5857] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 137.638208][ T5857] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 137.650081][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 137.689681][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 137.721320][ T5857] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 137.801903][ T5857] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 137.829187][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.901147][ T5857] usb 5-1: config 0 descriptor?? [ 138.053948][ T7002] netlink: 60 bytes leftover after parsing attributes in process `syz.0.290'. [ 138.161335][ T5929] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 138.228091][ T7006] loop6: detected capacity change from 0 to 7 [ 138.235095][ T7006] Dev loop6: unable to read RDB block 7 [ 138.242586][ T7006] loop6: unable to read partition table [ 138.249370][ T7006] loop6: partition table beyond EOD, truncated [ 138.264714][ T7006] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 138.338492][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.345627][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.371677][ T5857] plantronics 0003:047F:FFFF.0002: ignoring exceeding usage max [ 138.487229][ T5857] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 138.536168][ T5929] usb 2-1: Using ep0 maxpacket: 32 [ 138.550947][ T5929] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 138.587846][ T5929] usb 2-1: config 0 has no interface number 0 [ 138.645572][ T5929] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 138.654924][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.663072][ T5929] usb 2-1: Product: syz [ 138.667412][ T5929] usb 2-1: Manufacturer: syz [ 138.675680][ T5929] usb 2-1: SerialNumber: syz [ 138.686039][ T6576] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 138.736376][ T7012] netlink: 48 bytes leftover after parsing attributes in process `syz.3.297'. [ 138.748340][ T5929] usb 2-1: config 0 descriptor?? [ 138.768669][ T5929] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 138.898918][ T6576] usb 3-1: Using ep0 maxpacket: 8 [ 138.910491][ T6576] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 138.922057][ T6576] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 138.962964][ T6576] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 139.003052][ T5929] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 139.029839][ T6576] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 139.081276][ T5929] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 139.114249][ T6576] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.172480][ T6576] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 139.206327][ T6576] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.262820][ T6576] usb 3-1: config 0 descriptor?? [ 139.381270][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 139.381735][ T10] usb 2-1: USB disconnect, device number 17 [ 139.457282][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 139.510551][ T7009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.524733][ T7009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.561470][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 139.613337][ T10] quatech2 2-1:0.51: device disconnected [ 139.687688][ T5857] usb 3-1: USB disconnect, device number 12 [ 139.886563][ T979] usb 5-1: reset high-speed USB device number 8 using dummy_hcd [ 139.949917][ T7041] loop6: detected capacity change from 0 to 7 [ 139.957595][ T7041] Dev loop6: unable to read RDB block 7 [ 139.963572][ T7041] loop6: unable to read partition table [ 139.972625][ T7041] loop6: partition table beyond EOD, truncated [ 139.982508][ T7041] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 140.087522][ T979] usb 5-1: device descriptor read/64, error -32 [ 140.095439][ T7044] netlink: 'syz.1.305': attribute type 1 has an invalid length. [ 140.103316][ T7044] netlink: 'syz.1.305': attribute type 6 has an invalid length. [ 140.117538][ T7044] netlink: 12 bytes leftover after parsing attributes in process `syz.1.305'. [ 140.357093][ T979] usb 5-1: reset high-speed USB device number 8 using dummy_hcd [ 140.506126][ T979] usb 5-1: device descriptor read/64, error -32 [ 140.516121][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 140.667351][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.677964][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.695283][ T10] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 140.704627][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 140.720870][ T10] usb 3-1: SerialNumber: syz [ 140.756022][ T979] usb 5-1: reset high-speed USB device number 8 using dummy_hcd [ 140.776733][ T979] usb 5-1: device descriptor read/8, error -32 [ 140.827664][ T5929] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 140.952346][ T10] usb 3-1: 0:2 : does not exist [ 140.997319][ T5929] usb 1-1: Using ep0 maxpacket: 8 [ 141.004264][ T10] usb 3-1: USB disconnect, device number 13 [ 141.007926][ T5929] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 141.016014][ T979] usb 5-1: reset high-speed USB device number 8 using dummy_hcd [ 141.025976][ T5929] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 141.063905][ T5861] udevd[5861]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.080064][ T979] usb 5-1: device descriptor read/8, error -32 [ 141.083800][ T5929] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.131895][ T5929] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 141.144763][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.180214][ T5929] usb 1-1: Product: ã…¾ì³Ç“뫪峩㤈쩀Ꭶ㈓ටૃ簋è„誒騦ﲨ䓔ï£ì¼šâ¡™ì³žï¾•å±”뷉享çµè½‰è—쟳穎è´â§–欮朼ئ緕ㅰ襪ȇ똘义៊體å£ä¡¢ì†¦ã´’当ë¿ç±ç™¡ã¼°î¥Šã è°ºãºžçº›ê¹ è«ë¯ªÕˆâ¸Ÿç«·á”«íŠáŸƒç¿¦â«¿ë­­à¥ ã´¡ížŸåª³æ¦ï¢‡í‰¡é„¹åƒ„䇔㳪责宾ì¤ä¿´è²‘屷቙ႉ堟ë½î‘–ê»´ë«ïž  [ 141.218124][ T979] raw-gadget.0 gadget.4: failed to queue suspend event [ 141.260047][ T5929] usb 1-1: Manufacturer: í—°Ê¿ã¼¥ê¶ì‡è¢ƒç§€ë”žç”—嫨梵硟럣ﲨ䦮뤢ᕧ 嫻뇠í½ã¤¸î£šã›¦ëã·ê³ªì„¨ï¾–í“䚑玶㎛鷒퀚䭣ḣ淋푒岻콨鉈濂瞥뤩ﲭ鴼ર [ 141.262651][ T6571] usb 5-1: USB disconnect, device number 8 [ 141.327348][ T6571] raw-gadget.0 gadget.4: failed to queue reset event [ 141.339354][ T5929] usb 1-1: SerialNumber: Ⅳ緜毃ֹ级厌ᯮ⅊齨䋲披鋤ᎀ岲塥듖쬌듥轔붞毙á‘漢笤㔨拨Ƚ⚶䩱밗㥢羡ï…åš¼!苔龜玼ç èŠî† ê™‘î‹Ÿä…•í™æž«êª‡ä½¥ä¶œêŒ‚냈뼈询愶髰ꌲ镎࿘넱В䭘݌ᆵ뽣烊꣫ [ 141.360699][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.440575][ T6571] raw-gadget.0 gadget.4: failed to queue resume event [ 141.484965][ T6981] raw-gadget.0 gadget.4: failed to queue suspend event [ 141.502568][ T6981] raw-gadget.0 gadget.4: failed to queue disconnect event [ 141.576258][ T6571] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 141.589635][ T7049] netlink: 68 bytes leftover after parsing attributes in process `syz.0.308'. [ 142.505887][ T7073] netlink: 36 bytes leftover after parsing attributes in process `syz.1.317'. [ 142.530595][ T7073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.317'. [ 142.666315][ T7073] vlan2: entered promiscuous mode [ 142.690640][ T7073] dummy0: entered promiscuous mode [ 142.770681][ T5929] usb 1-1: 0:2 : does not exist [ 142.832097][ T5929] usb 1-1: USB disconnect, device number 10 [ 142.888728][ T7082] netlink: 20 bytes leftover after parsing attributes in process `syz.4.318'. [ 142.897867][ T7082] netlink: 20 bytes leftover after parsing attributes in process `syz.4.318'. [ 142.947836][ T5861] udevd[5861]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.363999][ T7102] netlink: 'syz.2.326': attribute type 1 has an invalid length. [ 143.372051][ T7102] netlink: 'syz.2.326': attribute type 6 has an invalid length. [ 143.383722][ T7102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.326'. [ 143.594055][ T7105] fuse: Unknown parameter '0x0000000000000004' [ 143.706359][ T7110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.329'. [ 144.002562][ T7113] batadv0: entered promiscuous mode [ 144.016001][ T5929] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 144.036204][ T7113] vlan2: entered promiscuous mode [ 144.056168][ T7116] program syz.1.332 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.189575][ T5929] usb 4-1: Using ep0 maxpacket: 32 [ 144.219250][ T6571] IPVS: starting estimator thread 0... [ 144.231099][ T5929] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 144.242970][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.266470][ T7116] sg_read: process 187 (syz.1.332) changed security contexts after opening file descriptor, this is not allowed. [ 144.305330][ T5929] usb 4-1: config 0 descriptor?? [ 144.329872][ T7118] IPVS: using max 51 ests per chain, 122400 per kthread [ 144.545551][ T5929] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 144.567211][ T5929] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 144.588262][ T5929] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 144.595560][ T5929] usb 4-1: media controller created [ 144.612247][ T5929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 144.709470][ T7135] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 144.809648][ T5929] az6027: usb out operation failed. (-71) [ 144.810378][ T6571] IPVS: starting estimator thread 0... [ 144.821025][ T5929] az6027: usb out operation failed. (-71) [ 144.821043][ T5929] stb0899_attach: Driver disabled by Kconfig [ 144.821054][ T5929] az6027: no front-end attached [ 144.821054][ T5929] [ 144.821378][ T5929] az6027: usb out operation failed. (-71) [ 145.006044][ T7136] IPVS: using max 37 ests per chain, 88800 per kthread [ 145.109504][ T5929] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 145.123225][ T5929] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input12 [ 145.161561][ T5929] dvb-usb: schedule remote query interval to 400 msecs. [ 145.183758][ T5929] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 145.616749][ T5929] usb 4-1: USB disconnect, device number 9 [ 145.911509][ T5929] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 146.499814][ T7158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.342'. [ 147.060956][ T5929] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 147.365750][ T5929] usb 2-1: Using ep0 maxpacket: 16 [ 147.381892][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.398860][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.415007][ T5929] usb 2-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00 [ 147.500702][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.533471][ T5929] usb 2-1: config 0 descriptor?? [ 147.836967][ T5929] viewsonic 0003:0543:E621.0003: hidraw0: USB HID v0.00 Device [HID 0543:e621] on usb-dummy_hcd.1-1/input0 [ 147.893176][ T7189] loop8: detected capacity change from 0 to 8 [ 147.919040][ T7189] Dev loop8: unable to read RDB block 8 [ 147.996038][ T7189] loop8: unable to read partition table [ 148.022082][ T5929] usb 2-1: USB disconnect, device number 18 [ 148.080033][ T7189] loop8: partition table beyond EOD, truncated [ 148.240548][ T7194] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 148.273190][ T7189] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 148.648665][ T7205] sctp: [Deprecated]: syz.3.351 (pid 7205) Use of int in maxseg socket option. [ 148.648665][ T7205] Use struct sctp_assoc_value instead [ 148.786006][ T5929] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 149.007309][ T7198] loop1: detected capacity change from 0 to 7 [ 149.017345][ T7198] Dev loop1: unable to read RDB block 7 [ 149.023053][ T7198] loop1: AHDI p1 p2 [ 149.027190][ T7198] loop1: partition table partially beyond EOD, truncated [ 149.049470][ T7198] loop1: p1 start 1702000233 is beyond EOD, truncated [ 149.326020][ T5929] usb 3-1: unable to get BOS descriptor or descriptor too short [ 149.416094][ T5929] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 149.456332][ T5929] usb 3-1: can't read configurations, error -71 [ 150.211161][ T7232] netlink: 'syz.2.360': attribute type 1 has an invalid length. [ 150.222072][ T7232] netlink: 'syz.2.360': attribute type 6 has an invalid length. [ 150.250861][ T7232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.360'. [ 151.157748][ T7243] loop8: detected capacity change from 0 to 8 [ 151.185405][ T7243] Dev loop8: unable to read RDB block 8 [ 151.224737][ T7243] loop8: unable to read partition table [ 151.256742][ T7243] loop8: partition table beyond EOD, truncated [ 151.294473][ T7243] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 152.395873][ T7280] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 152.402436][ T7280] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 152.410153][ T979] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 152.420454][ T7280] vhci_hcd vhci_hcd.0: Device attached [ 152.706044][ T6588] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 152.723441][ T979] usb 1-1: Using ep0 maxpacket: 16 [ 152.738906][ T979] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 152.749312][ T979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.774901][ T979] usb 1-1: config 0 descriptor?? [ 152.789154][ T979] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 152.938326][ T7286] loop8: detected capacity change from 0 to 8 [ 152.968080][ T7286] Dev loop8: unable to read RDB block 8 [ 152.973756][ T7281] vhci_hcd: connection reset by peer [ 152.979289][ T7286] loop8: unable to read partition table [ 152.985285][ T1332] vhci_hcd: stop threads [ 152.990021][ T1332] vhci_hcd: release socket [ 152.995359][ T1332] vhci_hcd: disconnect device [ 153.003116][ T7286] loop8: partition table beyond EOD, truncated [ 153.010325][ T7286] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 153.048131][ T979] gspca_sonixj: reg_w1 err -71 [ 153.050160][ T7288] bond0: Unable to set down delay as MII monitoring is disabled [ 153.091697][ T979] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 153.141518][ T979] usb 1-1: USB disconnect, device number 11 [ 153.825884][ T7308] vlan2: entered promiscuous mode [ 154.139347][ T7316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.388'. [ 154.148422][ T7316] bridge_slave_1: left allmulticast mode [ 154.154122][ T7316] bridge_slave_1: left promiscuous mode [ 154.160093][ T7316] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.386438][ T7316] bridge_slave_0: left allmulticast mode [ 154.410041][ T7316] bridge_slave_0: left promiscuous mode [ 154.427431][ T7316] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.708891][ T31] audit: type=1326 audit(1755756250.682:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7298 comm="syz.1.383" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f23fc98ebe9 code=0x0 [ 155.149849][ T5929] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 155.186047][ T6585] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 155.327554][ T5929] usb 4-1: config 0 has an invalid interface number: 207 but max is 0 [ 155.337038][ T5929] usb 4-1: config 0 has an invalid descriptor of length 215, skipping remainder of the config [ 155.348835][ T5929] usb 4-1: config 0 has no interface number 0 [ 155.361308][ T5929] usb 4-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 155.387705][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.397216][ T5929] usb 4-1: Product: syz [ 155.402957][ T5929] usb 4-1: Manufacturer: syz [ 155.411324][ T5929] usb 4-1: SerialNumber: syz [ 155.425014][ T5929] usb 4-1: config 0 descriptor?? [ 155.938228][ T7342] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 156.160768][ T5929] usb 4-1: USB disconnect, device number 10 [ 156.497725][ T7347] $Hÿ: renamed from bond0 (while UP) [ 156.515624][ T7347] $Hÿ: entered promiscuous mode [ 156.520998][ T7347] bond_slave_0: entered promiscuous mode [ 156.531753][ T7347] bond_slave_1: entered promiscuous mode [ 157.167718][ T5993] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 157.625377][ T5993] usb 5-1: config 0 has no interfaces? [ 157.751397][ T5993] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 157.769403][ T5993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.778229][ T5993] usb 5-1: Product: syz [ 157.782716][ T5993] usb 5-1: Manufacturer: syz [ 157.788035][ T5993] usb 5-1: SerialNumber: syz [ 157.803357][ T5993] usb 5-1: config 0 descriptor?? [ 157.836192][ T6588] vhci_hcd: vhci_device speed not set [ 157.906308][ T7378] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 157.935511][ T7380] netlink: 44 bytes leftover after parsing attributes in process `syz.1.404'. [ 157.999110][ T7380] netlink: 44 bytes leftover after parsing attributes in process `syz.1.404'. [ 158.060570][ T7380] netlink: 44 bytes leftover after parsing attributes in process `syz.1.404'. [ 158.098655][ T7380] netlink: 44 bytes leftover after parsing attributes in process `syz.1.404'. [ 158.113625][ T7380] netlink: 44 bytes leftover after parsing attributes in process `syz.1.404'. [ 158.129978][ T7380] netlink: 44 bytes leftover after parsing attributes in process `syz.1.404'. [ 158.189390][ T7380] netlink: 44 bytes leftover after parsing attributes in process `syz.1.404'. [ 158.232301][ T7380] netlink: 44 bytes leftover after parsing attributes in process `syz.1.404'. [ 158.242421][ T7380] netlink: 44 bytes leftover after parsing attributes in process `syz.1.404'. [ 158.253239][ T7390] loop8: detected capacity change from 0 to 8 [ 158.261961][ T7390] Dev loop8: unable to read RDB block 8 [ 158.272571][ T7390] loop8: unable to read partition table [ 158.292019][ T7390] loop8: partition table beyond EOD, truncated [ 158.313228][ T7390] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 158.346750][ T6571] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 158.535158][ T6571] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 158.578019][ T6571] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.590355][ T6571] usb 3-1: New USB device found, idVendor=056a, idProduct=0217, bcdDevice= 0.fc [ 158.601589][ T6571] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.615046][ T6571] usb 3-1: config 0 descriptor?? [ 158.745602][ T7402] loop6: detected capacity change from 0 to 7 [ 158.773271][ T5861] Dev loop6: unable to read RDB block 7 [ 158.779054][ T5861] loop6: AHDI p2 p3 [ 158.783780][ T5861] loop6: partition table partially beyond EOD, truncated [ 158.804218][ T5861] loop6: p2 start 3876867210 is beyond EOD, truncated [ 158.824204][ T7402] Dev loop6: unable to read RDB block 7 [ 158.829957][ T6576] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 158.849532][ T7402] loop6: AHDI p2 p3 [ 158.864720][ T7402] loop6: partition table partially beyond EOD, truncated [ 158.896057][ T7402] loop6: p2 start 3876867210 is beyond EOD, truncated [ 158.990409][ T6576] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.015286][ T6576] usb 2-1: New USB device found, idVendor=046d, idProduct=c08a, bcdDevice= 0.00 [ 159.062208][ T6576] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.093511][ T6576] usb 2-1: config 0 descriptor?? [ 159.102005][ T7407] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 159.241152][ T6571] usbhid 3-1:0.0: can't add hid device: -71 [ 159.248945][ T6571] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 159.262723][ T6571] usb 3-1: USB disconnect, device number 16 [ 159.271076][ T5993] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 159.476127][ T5993] usb 1-1: Using ep0 maxpacket: 16 [ 159.488997][ T5993] usb 1-1: New USB device found, idVendor=fed1, idProduct=ffff, bcdDevice=ff.ff [ 159.512875][ T5993] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=255 [ 159.538288][ T5993] usb 1-1: Product: syz [ 159.547763][ T5993] usb 1-1: Manufacturer: syz [ 159.553101][ T5993] usb 1-1: SerialNumber: syz [ 159.573002][ T5993] usb 1-1: config 0 descriptor?? [ 159.744192][ T7422] netlink: 'syz.1.411': attribute type 1 has an invalid length. [ 159.796036][ T6585] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 159.895394][ T7424] loop8: detected capacity change from 0 to 8 [ 159.911443][ T5861] Dev loop8: unable to read RDB block 8 [ 159.917416][ T5861] loop8: unable to read partition table [ 159.923827][ T5861] loop8: partition table beyond EOD, truncated [ 159.934252][ T7424] Dev loop8: unable to read RDB block 8 [ 159.946312][ T7424] loop8: unable to read partition table [ 159.947746][ T6585] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 159.968853][ T6585] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 159.982048][ T6585] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 159.995284][ T6585] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 160.009646][ T7424] loop8: partition table beyond EOD, truncated [ 160.019891][ T7424] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 160.040534][ T6585] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 160.080540][ T6585] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.161540][ T6585] usb 4-1: config 0 descriptor?? [ 160.213596][ T7421] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 160.242186][ T5929] usb 5-1: USB disconnect, device number 10 [ 160.446649][ T6585] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 160.497937][ T6585] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 160.564860][ T6585] usb 4-1: USB disconnect, device number 11 [ 161.089760][ T7440] fido_id[7440]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 161.139240][ T7451] __nla_validate_parse: 23 callbacks suppressed [ 161.139260][ T7451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.429'. [ 161.156131][ T5929] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 161.508476][ T5929] usb 3-1: Using ep0 maxpacket: 8 [ 161.519495][ T5929] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 161.528601][ T5929] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.543768][ T5929] usb 3-1: config 0 has no interfaces? [ 161.550360][ T5929] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 161.565537][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.577372][ T5929] usb 3-1: config 0 descriptor?? [ 161.666107][ T6576] usbhid 2-1:0.0: can't add hid device: -71 [ 161.685796][ T6576] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 161.752530][ T6576] usb 2-1: USB disconnect, device number 20 [ 161.929532][ T7457] tipc: Enabling of bearer rejected, failed to enable media [ 162.005748][ T5993] usb 1-1: USB disconnect, device number 12 [ 162.463917][ T7471] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 162.758283][ T7476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.438'. [ 163.262957][ T7484] macsec1: entered promiscuous mode [ 163.268760][ T7484] team0: entered promiscuous mode [ 163.274777][ T7484] team_slave_0: entered promiscuous mode [ 163.282282][ T7484] team_slave_1: entered promiscuous mode [ 163.288876][ T7484] macsec1: entered allmulticast mode [ 163.294306][ T7484] team0: entered allmulticast mode [ 163.301926][ T7484] team_slave_0: entered allmulticast mode [ 163.317226][ T7484] team_slave_1: entered allmulticast mode [ 163.388924][ T7486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.406085][ T6576] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 163.559051][ T6576] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.586273][ T6576] usb 4-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 163.597675][ T6576] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.609294][ T6576] usb 4-1: config 0 descriptor?? [ 163.711549][ T5929] usb 3-1: USB disconnect, device number 17 [ 163.712737][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058338c00: rx timeout, send abort [ 163.725968][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888058338c00: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 164.025117][ T7497] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 164.689164][ T7509] loop6: detected capacity change from 0 to 7 [ 164.725566][ T7509] Dev loop6: unable to read RDB block 7 [ 164.733056][ T7509] loop6: unable to read partition table [ 164.743126][ T7509] loop6: partition table beyond EOD, truncated [ 164.766682][ T7513] netlink: 24 bytes leftover after parsing attributes in process `syz.4.448'. [ 164.768312][ T7509] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 164.846594][ T7513] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20000 [ 165.188146][ T7519] syz_tun: entered allmulticast mode [ 165.204414][ T7519] dvmrp8: entered allmulticast mode [ 165.488849][ T7527] netlink: 20 bytes leftover after parsing attributes in process `syz.4.454'. [ 165.498095][ T7527] netlink: 20 bytes leftover after parsing attributes in process `syz.4.454'. [ 165.861603][ T7514] syz_tun: left allmulticast mode [ 165.870770][ T7514] dvmrp8: left allmulticast mode [ 166.211547][ T6576] usbhid 4-1:0.0: can't add hid device: -71 [ 166.244823][ T6576] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 166.260675][ T6576] usb 4-1: USB disconnect, device number 12 [ 166.787838][ T6576] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 166.981728][ T6576] usb 4-1: Using ep0 maxpacket: 8 [ 167.007829][ T6576] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 167.034317][ T6576] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.065040][ T6576] usb 4-1: config 0 has no interfaces? [ 167.080122][ T6576] usb 4-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 167.090398][ T6576] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.132274][ T6576] usb 4-1: config 0 descriptor?? [ 167.263229][ T6585] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 167.342754][ T7548] binder: 7539:7548 ioctl c0306201 200000000240 returned -11 [ 167.350466][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 167.406047][ T6585] usb 3-1: device descriptor read/64, error -71 [ 167.485978][ T6576] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 167.517459][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 167.525373][ T10] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 167.533772][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.544501][ T10] usb 1-1: config 0 has no interface number 0 [ 167.621506][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 167.630817][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.640259][ T10] usb 1-1: Product: syz [ 167.645154][ T10] usb 1-1: Manufacturer: syz [ 167.650290][ T10] usb 1-1: SerialNumber: syz [ 167.656050][ T6585] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 167.658738][ T10] usb 1-1: config 0 descriptor?? [ 167.699165][ T6576] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 167.709006][ T6576] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 167.719449][ T6576] usb 5-1: config 0 has no interface number 0 [ 167.728221][ T6576] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 167.731421][ T10] usb 1-1: Found UVC 0.00 device syz (046d:08c3) [ 167.738252][ T6576] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.768734][ T6576] usb 5-1: Product: syz [ 167.772952][ T6576] usb 5-1: Manufacturer: syz [ 167.796567][ T6585] usb 3-1: device descriptor read/64, error -71 [ 167.812476][ T10] usb 1-1: No valid video chain found. [ 167.850813][ T6576] usb 5-1: SerialNumber: syz [ 167.863374][ T6576] usb 5-1: config 0 descriptor?? [ 167.920088][ T6585] usb usb3-port1: attempt power cycle [ 167.933520][ T7551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.942386][ T7551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.953130][ T10] usb 1-1: USB disconnect, device number 13 [ 168.084040][ T7556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.464'. [ 168.103541][ T7556] netlink: 12 bytes leftover after parsing attributes in process `syz.4.464'. [ 168.296063][ T6585] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 168.326538][ T6585] usb 3-1: device descriptor read/8, error -71 [ 168.335406][ T6576] usb 5-1: Found UVC 0.00 device syz (046d:0823) [ 168.342148][ T6576] usb 5-1: No valid video chain found. [ 168.349338][ T6576] usb 5-1: USB disconnect, device number 11 [ 168.366007][ T6571] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 168.496215][ T6571] usb 2-1: device descriptor read/64, error -71 [ 168.566170][ T6585] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 168.598335][ T6585] usb 3-1: device descriptor read/8, error -71 [ 168.707442][ T6585] usb usb3-port1: unable to enumerate USB device [ 168.746017][ T6571] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 168.896031][ T6571] usb 2-1: device descriptor read/64, error -71 [ 169.100100][ T6571] usb usb2-port1: attempt power cycle [ 169.335989][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 169.412440][ T5929] usb 4-1: USB disconnect, device number 13 [ 169.471395][ T6571] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 169.505994][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 169.512222][ T6571] usb 2-1: device descriptor read/8, error -71 [ 169.536734][ T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 169.566643][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 169.614004][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 169.633987][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 169.644758][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.648484][ T7573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.470'. [ 169.659974][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 169.709008][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.786096][ T6571] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 169.807300][ T6571] usb 2-1: device descriptor read/8, error -71 [ 169.926587][ T6571] usb usb2-port1: unable to enumerate USB device [ 169.944618][ T7583] loop6: detected capacity change from 0 to 7 [ 169.955405][ T5861] Dev loop6: unable to read RDB block 7 [ 169.962004][ T5861] loop6: unable to read partition table [ 169.968458][ T5861] loop6: partition table beyond EOD, truncated [ 169.975410][ T7583] Dev loop6: unable to read RDB block 7 [ 169.991265][ T7583] loop6: unable to read partition table [ 170.011664][ T7583] loop6: partition table beyond EOD, truncated [ 170.020486][ T7583] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 170.030927][ T10] usb 5-1: usb_control_msg returned -71 [ 170.040584][ T10] usbtmc 5-1:16.0: can't read capabilities [ 170.083445][ T10] usb 5-1: USB disconnect, device number 12 [ 170.116352][ T5929] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 170.131021][ T7589] netlink: 48 bytes leftover after parsing attributes in process `syz.0.476'. [ 170.276058][ T5929] usb 4-1: Using ep0 maxpacket: 32 [ 170.282808][ T5929] usb 4-1: config index 0 descriptor too short (expected 44, got 36) [ 170.291070][ T5929] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 170.299325][ T5929] usb 4-1: config 0 has no interface number 0 [ 170.305641][ T5929] usb 4-1: too many endpoints for config 0 interface 89 altsetting 0: 252, using maximum allowed: 30 [ 170.317778][ T5929] usb 4-1: config 0 interface 89 altsetting 0 endpoint 0x82 has an invalid bInterval 176, changing to 11 [ 170.329524][ T5929] usb 4-1: config 0 interface 89 altsetting 0 endpoint 0x82 has invalid maxpacket 1871, setting to 1024 [ 170.340871][ T5929] usb 4-1: config 0 interface 89 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 170.352031][ T5929] usb 4-1: config 0 interface 89 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 252 [ 170.367506][ T5929] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0114, bcdDevice= 4.be [ 170.377197][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.385212][ T5929] usb 4-1: Product: syz [ 170.389520][ T5929] usb 4-1: Manufacturer: syz [ 170.394140][ T5929] usb 4-1: SerialNumber: syz [ 170.400179][ T5929] usb 4-1: config 0 descriptor?? [ 170.405713][ T7579] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 170.419213][ T5929] kvaser_usb 4-1:0.89: error -ENODEV: Cannot get usb endpoint(s) [ 170.506008][ T6576] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 170.627800][ T5929] usb 4-1: USB disconnect, device number 14 [ 170.656040][ T6576] usb 3-1: Using ep0 maxpacket: 8 [ 170.662623][ T6576] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 170.671544][ T6576] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.684930][ T6576] usb 3-1: config 0 has no interfaces? [ 170.690502][ T6576] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 170.699693][ T6576] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.709097][ T6576] usb 3-1: config 0 descriptor?? [ 171.242175][ T7610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.483'. [ 171.259464][ T7610] macsec2: entered promiscuous mode [ 171.265100][ T7610] macsec2: entered allmulticast mode [ 171.290802][ T7610] dummy0: entered allmulticast mode [ 172.686768][ T7638] netlink: 16 bytes leftover after parsing attributes in process `syz.1.491'. [ 173.083131][ T7644] netlink: 48 bytes leftover after parsing attributes in process `syz.1.494'. [ 173.210080][ T5929] usb 3-1: USB disconnect, device number 22 [ 174.342971][ T7671] netlink: 12 bytes leftover after parsing attributes in process `syz.4.502'. [ 174.766680][ T7678] tipc: Started in network mode [ 174.800243][ T7678] tipc: Node identity d69552dc285a, cluster identity 4711 [ 174.906264][ T7678] tipc: Enabled bearer , priority 0 [ 175.350140][ T7678] tipc: Disabling bearer [ 175.637887][ T6576] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 175.796008][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 175.816072][ T6576] usb 3-1: Using ep0 maxpacket: 8 [ 175.864655][ T6576] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 175.873598][ T6576] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.894023][ T6576] usb 3-1: config 0 has no interfaces? [ 175.899731][ T5929] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 175.914343][ T6576] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 175.943853][ T6576] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.946056][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 175.967528][ T6576] usb 3-1: config 0 descriptor?? [ 175.979782][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 175.999021][ T10] usb 4-1: config 129 has an invalid interface number: 145 but max is 0 [ 176.023205][ T10] usb 4-1: config 129 has no interface number 0 [ 176.030108][ T10] usb 4-1: config 129 interface 145 has no altsetting 0 [ 176.042836][ T10] usb 4-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= d.2f [ 176.052439][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.066958][ T5929] usb 1-1: Using ep0 maxpacket: 16 [ 176.090627][ T10] usb 4-1: Product: 臇䦶ᰟ芬⿄ረ㺞穦沧隙㬌㡦㥞翓唤ᮛ⡴㸒㣑㎣ïˆà¨”ãºç”°ç»á¼±î‹«å²¥ï¤«ê¨¤à§›ã¡á´‰è¹½ã«¢ç¨·ê°’ã¢é‡“畴胖햋ã™è¹¬ì˜—痋足攴པ⡡ꚨ륽膙ä—é‘᭑┈㯩눻ꊞ奦ë¹â‹ªå›¯è‰ºî½Šïªä»©å‡’㔴ﶌ꼞䶾êŽå‹®ã’›áŒãª·á¥¬è‚”褓嵽픅áŸâ®ä ï•‚䓤਎뮳➟㇃䟞暇 [ 176.132226][ T5929] usb 1-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 176.141758][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.157179][ T5929] usb 1-1: Product: syz [ 176.165837][ T5929] usb 1-1: Manufacturer: syz [ 176.166362][ T10] usb 4-1: Manufacturer: ꚖŌ餦漴㊣é·ç©¦ï–膕뵠 [ 176.176147][ T10] usb 4-1: SerialNumber: syz [ 176.213574][ T5929] usb 1-1: SerialNumber: syz [ 176.226441][ T5929] usb 1-1: config 0 descriptor?? [ 176.239392][ T5929] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 176.408021][ T7696] ======================================================= [ 176.408021][ T7696] WARNING: The mand mount option has been deprecated and [ 176.408021][ T7696] and is ignored by this kernel. Remove the mand [ 176.408021][ T7696] option from the mount to silence this warning. [ 176.408021][ T7696] ======================================================= [ 176.444958][ T5929] gspca_sn9c2028: read1 error -32 [ 176.457552][ T7696] tipc: Cannot configure node identity twice [ 176.461083][ T5929] gspca_sn9c2028: read1 error -32 [ 176.473672][ T7709] netlink: 36 bytes leftover after parsing attributes in process `syz.4.513'. [ 176.482720][ T7709] netlink: 16 bytes leftover after parsing attributes in process `syz.4.513'. [ 176.494753][ T10] usb 4-1: disable ehci-hcd to run US-144 [ 176.499918][ T7709] netlink: 36 bytes leftover after parsing attributes in process `syz.4.513'. [ 176.510796][ T7709] netlink: 36 bytes leftover after parsing attributes in process `syz.4.513'. [ 176.517804][ T10] usb 4-1: USB disconnect, device number 15 [ 177.134839][ T7724] netlink: 16 bytes leftover after parsing attributes in process `syz.1.517'. [ 177.154233][ T7725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.163115][ T7725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.415623][ T10] usb 3-1: USB disconnect, device number 23 [ 178.573345][ T7734] binder: 7730:7734 ioctl c0306201 200000000240 returned -11 [ 178.982029][ T5929] usb 1-1: USB disconnect, device number 14 [ 179.006281][ T6571] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 179.189757][ T7755] netlink: 'syz.0.522': attribute type 1 has an invalid length. [ 179.197769][ T7755] netlink: 'syz.0.522': attribute type 6 has an invalid length. [ 179.216008][ T7755] netlink: 52 bytes leftover after parsing attributes in process `syz.0.522'. [ 179.230666][ T7757] mac80211_hwsim hwsim11 è: renamed from wlan1 [ 179.492018][ T6571] usb 3-1: config 0 has no interfaces? [ 179.513056][ T6571] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 179.527539][ T6571] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.554903][ T6571] usb 3-1: Product: syz [ 179.577568][ T6571] usb 3-1: Manufacturer: syz [ 179.594287][ T6571] usb 3-1: SerialNumber: syz [ 179.810763][ T6571] usb 3-1: config 0 descriptor?? [ 181.657678][ T6571] usb 3-1: USB disconnect, device number 24 [ 181.816106][ T979] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 181.977337][ T979] usb 4-1: Using ep0 maxpacket: 8 [ 181.983922][ T979] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 182.016009][ T6585] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 182.170247][ T979] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.185995][ T979] usb 4-1: config 0 has no interfaces? [ 182.201575][ T979] usb 4-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 182.215304][ T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.233412][ T979] usb 4-1: config 0 descriptor?? [ 182.357202][ T6585] usb 5-1: Using ep0 maxpacket: 32 [ 182.364984][ T6585] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 182.377363][ T6585] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.391938][ T6585] usb 5-1: config 0 descriptor?? [ 182.406075][ T5929] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 182.566121][ T5929] usb 3-1: Using ep0 maxpacket: 8 [ 182.577023][ T5929] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 182.609538][ T7793] loop7: detected capacity change from 0 to 16384 [ 182.633411][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.695645][ T5929] usb 3-1: Product: syz [ 182.732952][ T5929] usb 3-1: Manufacturer: syz [ 182.783787][ T7810] tipc: Enabling of bearer rejected, failed to enable media [ 182.840523][ T5929] usb 3-1: SerialNumber: syz [ 182.845265][ T6585] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 182.867390][ T5929] usb 3-1: config 0 descriptor?? [ 182.888486][ T6585] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 182.890997][ T7808] random: crng reseeded on system resumption [ 182.912050][ T6585] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 182.963228][ T6585] usb 5-1: media controller created [ 182.986014][ T7805] loop7: detected capacity change from 16384 to 0 [ 183.006024][ C0] I/O error, dev loop7, sector 10240 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 2 [ 183.019805][ T6585] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 183.091480][ T5929] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 183.107100][ T5929] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 183.156430][ T5929] usb 3-1: USB disconnect, device number 25 [ 183.167816][ T6585] az6027: usb out operation failed. (-71) [ 183.203388][ T6585] az6027: usb out operation failed. (-71) [ 183.216054][ T6585] stb0899_attach: Driver disabled by Kconfig [ 183.222318][ T6585] az6027: no front-end attached [ 183.222318][ T6585] [ 183.230513][ T6585] az6027: usb out operation failed. (-71) [ 183.237520][ T6585] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 183.253858][ T6585] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input15 [ 183.299891][ T6585] dvb-usb: schedule remote query interval to 400 msecs. [ 183.316357][ T6585] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 183.336214][ T6585] usb 5-1: USB disconnect, device number 13 [ 183.405607][ T6585] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 184.267414][ T979] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 184.291520][ T5929] usb 4-1: USB disconnect, device number 16 [ 184.336122][ T6571] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 184.387204][ T7832] netlink: 12 bytes leftover after parsing attributes in process `syz.3.541'. [ 184.450976][ T979] usb 2-1: config 0 has no interfaces? [ 184.456585][ T6585] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 184.478723][ T979] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 184.488004][ T6571] usb 3-1: Using ep0 maxpacket: 32 [ 184.500431][ T6571] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 184.533939][ T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.542196][ T6571] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.572214][ T979] usb 2-1: Product: syz [ 184.587663][ T6571] usb 3-1: config 0 descriptor?? [ 184.617421][ T979] usb 2-1: Manufacturer: syz [ 184.632434][ T979] usb 2-1: SerialNumber: syz [ 184.633731][ T6585] usb 1-1: config 0 has no interfaces? [ 184.658190][ T979] usb 2-1: config 0 descriptor?? [ 184.727363][ T6585] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 184.770390][ T6585] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.819113][ T6585] usb 1-1: Product: syz [ 184.823365][ T6585] usb 1-1: Manufacturer: syz [ 184.827282][ T6571] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 184.885037][ T6571] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 184.894650][ T6585] usb 1-1: SerialNumber: syz [ 184.932135][ T6571] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 184.964865][ T6585] usb 1-1: config 0 descriptor?? [ 184.971148][ T6571] usb 3-1: media controller created [ 185.129343][ T7844] netlink: 20 bytes leftover after parsing attributes in process `syz.4.544'. [ 185.140855][ T7844] netlink: 20 bytes leftover after parsing attributes in process `syz.4.544'. [ 185.176440][ T6571] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 185.823090][ T7850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.832476][ T7850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.890659][ T6571] az6027: usb out operation failed. (-71) [ 185.909393][ T6571] stb0899_attach: Driver disabled by Kconfig [ 185.921385][ T6571] az6027: no front-end attached [ 185.921385][ T6571] [ 186.032359][ T6571] az6027: usb out operation failed. (-71) [ 186.043175][ T6571] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 186.093836][ T6571] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input16 [ 186.133773][ T6571] dvb-usb: schedule remote query interval to 400 msecs. [ 186.152163][ T6571] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 186.173730][ T6571] usb 3-1: USB disconnect, device number 26 [ 186.214598][ T6571] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 186.409574][ T7858] (unnamed net_device) (uninitialized): (slave sit0): Device is not bonding slave [ 186.435978][ T7858] (unnamed net_device) (uninitialized): option active_slave: invalid value (sit0) [ 186.544155][ T6580] usb 2-1: USB disconnect, device number 25 [ 186.712415][ T7864] netlink: 'syz.1.549': attribute type 27 has an invalid length. [ 186.880674][ T7864] team0: left allmulticast mode [ 186.890650][ T7864] team_slave_0: left allmulticast mode [ 186.943504][ T7864] team_slave_1: left allmulticast mode [ 186.966599][ T7864] team0: left promiscuous mode [ 186.975021][ T7864] team_slave_0: left promiscuous mode [ 186.980880][ T7864] team_slave_1: left promiscuous mode [ 186.986816][ T7864] macsec1: left promiscuous mode [ 186.991817][ T7864] macsec1: left allmulticast mode [ 186.997689][ T7864] dummy0: left allmulticast mode [ 187.003134][ T7864] macsec2: left promiscuous mode [ 187.008219][ T7864] macsec2: left allmulticast mode [ 187.073400][ T7865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.107304][ T7865] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.152458][ T7865] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 187.298228][ T5929] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 187.318981][ T7876] tipc: Started in network mode [ 187.319032][ T7877] netlink: 64 bytes leftover after parsing attributes in process `syz.2.552'. [ 187.333037][ T7876] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 187.417824][ T7876] tipc: Enabling of bearer rejected, failed to enable media [ 187.466132][ T5929] usb 2-1: Using ep0 maxpacket: 16 [ 187.479802][ T5929] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 187.501763][ T5929] usb 2-1: config 0 has no interface number 0 [ 187.518176][ T6585] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 187.566208][ T6576] usb 1-1: USB disconnect, device number 15 [ 187.583373][ T5929] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 187.605033][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.617841][ T5929] usb 2-1: Product: syz [ 187.622045][ T5929] usb 2-1: Manufacturer: syz [ 187.630460][ T5929] usb 2-1: SerialNumber: syz [ 187.643388][ T5929] usb 2-1: config 0 descriptor?? [ 187.656397][ T5929] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 187.713585][ T7888] netlink: 'syz.0.554': attribute type 27 has an invalid length. [ 187.721876][ T6585] usb 4-1: Using ep0 maxpacket: 8 [ 187.753192][ T6585] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 187.777598][ T6585] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.853544][ T6585] usb 4-1: config 0 has no interfaces? [ 187.934980][ T6585] usb 4-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 187.940504][ T7888] $Hÿ: left promiscuous mode [ 187.971118][ T7888] bond_slave_0: left promiscuous mode [ 187.981114][ T7888] bond_slave_1: left promiscuous mode [ 188.056188][ T6585] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.121255][ T7888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.139744][ T7888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.270825][ T6571] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 188.272930][ T6585] usb 4-1: config 0 descriptor?? [ 188.289375][ T7889] $Hÿ: renamed from bond0 (while UP) [ 188.298110][ T7889] $Hÿ: entered promiscuous mode [ 188.325486][ T7889] bond_slave_0: entered promiscuous mode [ 188.337448][ T7889] bond_slave_1: entered promiscuous mode [ 188.398681][ T7890] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 188.410248][ T7890] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.428742][ T7890] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 188.493624][ T1332] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.509749][ T1332] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.546663][ T6571] usb 1-1: Using ep0 maxpacket: 16 [ 188.576843][ T1332] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.656708][ T6571] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 188.665680][ T1332] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.676051][ T6571] usb 1-1: config 0 has no interface number 0 [ 188.688782][ T6571] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 188.698133][ T6571] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.706746][ T6571] usb 1-1: Product: syz [ 188.712791][ T6571] usb 1-1: Manufacturer: syz [ 188.718550][ T6571] usb 1-1: SerialNumber: syz [ 188.732172][ T6571] usb 1-1: config 0 descriptor?? [ 188.755768][ T6571] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 188.976240][ T5929] gspca_spca1528: reg_w err -110 [ 188.996009][ T5929] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110 [ 189.056050][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 189.266137][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 189.273440][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 189.289809][ T9] usb 5-1: config 1 has an invalid descriptor of length 202, skipping remainder of the config [ 189.301267][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 189.311574][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 189.327993][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 189.338864][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.352124][ T9] usb 5-1: Product: syz [ 189.356495][ T9] usb 5-1: Manufacturer: syz [ 189.361836][ T9] usb 5-1: SerialNumber: syz [ 189.396016][ T5929] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 189.526399][ T5929] usb 3-1: device descriptor read/64, error -71 [ 189.581861][ T9] usb 5-1: USB disconnect, device number 14 [ 189.766084][ T5929] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 189.896088][ T5929] usb 3-1: device descriptor read/64, error -71 [ 189.995412][ T2152] usb 2-1: USB disconnect, device number 26 [ 190.008130][ T5929] usb usb3-port1: attempt power cycle [ 190.076200][ T6571] gspca_spca1528: reg_w err -110 [ 190.096005][ T6571] spca1528 1-1:0.1: probe with driver spca1528 failed with error -110 [ 190.253813][ T7901] netlink: 'syz.1.558': attribute type 1 has an invalid length. [ 190.261895][ T7901] netlink: 'syz.1.558': attribute type 6 has an invalid length. [ 190.269636][ T7901] netlink: 52 bytes leftover after parsing attributes in process `syz.1.558'. [ 190.329848][ T6571] usb 4-1: USB disconnect, device number 17 [ 190.356204][ T5929] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 190.458663][ T5929] usb 3-1: device descriptor read/8, error -71 [ 190.521330][ T31] audit: type=1326 audit(1755756286.552:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7907 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f432618ebe9 code=0x7ffc0000 [ 190.521743][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.560'. [ 190.543568][ C1] vkms_vblank_simulate: vblank timer overrun [ 190.561754][ T7908] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 190.569955][ T31] audit: type=1326 audit(1755756286.552:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7907 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f432618ebe9 code=0x7ffc0000 [ 190.592053][ C1] vkms_vblank_simulate: vblank timer overrun [ 190.606397][ T7908] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.684563][ T31] audit: type=1326 audit(1755756286.552:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7907 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f432618ebe9 code=0x7ffc0000 [ 190.706879][ C1] vkms_vblank_simulate: vblank timer overrun [ 190.736001][ T2152] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 190.743717][ T5929] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 190.756104][ T31] audit: type=1326 audit(1755756286.552:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7907 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f432618ebe9 code=0x7ffc0000 [ 190.839101][ T5929] usb 3-1: device descriptor read/8, error -71 [ 190.926005][ T6571] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 190.943020][ T31] audit: type=1326 audit(1755756286.552:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7907 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f432618ebe9 code=0x7ffc0000 [ 190.982247][ T5929] usb usb3-port1: unable to enumerate USB device [ 191.049009][ T6573] usb 1-1: USB disconnect, device number 16 [ 191.066039][ T2152] usb 5-1: config 0 has no interfaces? [ 191.098096][ T6571] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 191.140206][ T31] audit: type=1326 audit(1755756286.552:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7907 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f432618ebe9 code=0x7ffc0000 [ 191.142971][ T6571] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 191.277047][ T6571] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.289040][ T2152] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 191.314499][ T2152] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.318252][ T6571] usb 4-1: Product: syz [ 191.323012][ T31] audit: type=1326 audit(1755756286.552:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7907 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f432618ebe9 code=0x7ffc0000 [ 191.372039][ T2152] usb 5-1: Product: syz [ 191.387485][ T2152] usb 5-1: Manufacturer: syz [ 191.392266][ T6571] usb 4-1: Manufacturer: syz [ 191.397363][ T2152] usb 5-1: SerialNumber: syz [ 191.401693][ T6571] usb 4-1: SerialNumber: syz [ 191.407780][ T2152] usb 5-1: config 0 descriptor?? [ 191.414109][ T31] audit: type=1326 audit(1755756286.552:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7907 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f432618ebe9 code=0x7ffc0000 [ 191.484383][ T6571] usb 4-1: config 0 descriptor?? [ 191.495382][ T6571] powermate 4-1:0.0: probe with driver powermate failed with error -22 [ 191.510629][ T7916] vlan2: entered promiscuous mode [ 191.626012][ T31] audit: type=1326 audit(1755756286.552:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7907 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f432618ebe9 code=0x7ffc0000 [ 191.666056][ T31] audit: type=1326 audit(1755756286.642:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7907 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f432618ebe9 code=0x7ffc0000 [ 191.690968][ C1] vkms_vblank_simulate: vblank timer overrun [ 191.907375][ T7919] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 192.707610][ T7937] mac80211_hwsim hwsim6 è: renamed from wlan1 [ 193.322964][ T7942] netlink: 48 bytes leftover after parsing attributes in process `syz.1.571'. [ 193.363520][ T7944] macsec1: entered promiscuous mode [ 193.380777][ T7944] team0: entered promiscuous mode [ 193.390761][ T7944] team_slave_0: entered promiscuous mode [ 193.401536][ T7944] team_slave_1: entered promiscuous mode [ 193.428294][ T7944] macsec1: entered allmulticast mode [ 193.438811][ T7944] team0: entered allmulticast mode [ 193.444809][ T7944] team_slave_0: entered allmulticast mode [ 193.454223][ T7944] team_slave_1: entered allmulticast mode [ 193.464192][ T7946] netlink: 16 bytes leftover after parsing attributes in process `syz.1.572'. [ 193.542339][ T2152] usb 4-1: USB disconnect, device number 18 [ 193.622551][ T7950] vlan2: entered promiscuous mode [ 193.846952][ T6573] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 194.122991][ T5929] usb 5-1: USB disconnect, device number 15 [ 194.158687][ T6573] usb 1-1: Using ep0 maxpacket: 32 [ 194.192452][ T6573] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 194.211784][ T6573] usb 1-1: config 0 has no interface number 0 [ 194.218468][ T6573] usb 1-1: config 0 interface 12 has no altsetting 0 [ 194.230044][ T6573] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 194.244539][ T6573] usb 1-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 194.253321][ T6573] usb 1-1: Product: syz [ 194.258041][ T6573] usb 1-1: Manufacturer: syz [ 194.262746][ T6573] usb 1-1: SerialNumber: syz [ 194.271165][ T6573] usb 1-1: config 0 descriptor?? [ 194.442890][ T7976] netlink: 'syz.3.580': attribute type 27 has an invalid length. [ 194.756602][ T7978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.771196][ T7978] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.822765][ T7978] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 194.875982][ T6571] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 195.251579][ T7952] netlink: 48 bytes leftover after parsing attributes in process `syz.0.574'. [ 195.260701][ T6571] usb 4-1: Using ep0 maxpacket: 16 [ 195.277075][ T7952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.302257][ T6571] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 195.310600][ T7952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.514048][ T6573] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 195.553696][ T6573] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 195.748662][ T6573] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 195.767390][ T6573] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 195.794419][ T6571] usb 4-1: config 0 has no interface number 0 [ 195.794522][ T6573] usb 1-1: USB disconnect, device number 17 [ 195.928659][ T6571] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 195.938173][ T6571] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.956412][ T6571] usb 4-1: Product: syz [ 195.966156][ T6571] usb 4-1: Manufacturer: syz [ 195.976533][ T6571] usb 4-1: SerialNumber: syz [ 196.007347][ T7989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.022464][ T6571] usb 4-1: config 0 descriptor?? [ 196.048938][ T6571] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 196.179661][ T7991] netlink: 48 bytes leftover after parsing attributes in process `syz.4.584'. [ 196.526789][ T7999] netlink: 'syz.4.587': attribute type 1 has an invalid length. [ 196.534585][ T7999] netlink: 'syz.4.587': attribute type 6 has an invalid length. [ 196.555981][ T7999] netlink: 52 bytes leftover after parsing attributes in process `syz.4.587'. [ 197.194358][ T8012] binder: 7994:8012 ioctl c0306201 200000000240 returned -11 [ 197.456691][ T6571] gspca_spca1528: reg_w err -110 [ 197.496520][ T6571] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 197.570267][ T5929] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 197.910834][ T5929] usb 1-1: config 0 has no interfaces? [ 197.920990][ T5929] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 197.930663][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.977696][ T5929] usb 1-1: Product: syz [ 197.986206][ T5929] usb 1-1: Manufacturer: syz [ 197.996234][ T5929] usb 1-1: SerialNumber: syz [ 198.012787][ T5929] usb 1-1: config 0 descriptor?? [ 198.489202][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.596'. [ 198.532931][ T8025] dummy0: entered promiscuous mode [ 198.544360][ T8025] macsec1: entered promiscuous mode [ 198.559408][ T8025] macsec1: entered allmulticast mode [ 198.570643][ T8025] dummy0: entered allmulticast mode [ 199.049051][ T8039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.600'. [ 199.118086][ T8039] hub 9-0:1.0: USB hub found [ 199.126426][ T8039] hub 9-0:1.0: 1 port detected [ 199.774175][ T6571] usb 4-1: USB disconnect, device number 19 [ 199.783479][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.826117][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.236012][ T6571] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 200.566009][ T6571] usb 4-1: Using ep0 maxpacket: 16 [ 200.573185][ T6571] usb 4-1: unable to get BOS descriptor or descriptor too short [ 200.582541][ T6571] usb 4-1: config 4 has an invalid descriptor of length 217, skipping remainder of the config [ 200.615831][ T6571] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 200.674625][ T6571] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=44.99 [ 200.684123][ T6571] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.700114][ T5929] usb 1-1: USB disconnect, device number 18 [ 200.713719][ T6571] usb 4-1: Product: syz [ 200.764697][ T6571] usb 4-1: Manufacturer: syz [ 200.817588][ T6571] usb 4-1: SerialNumber: syz [ 200.903790][ T8060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.605'. [ 201.148987][ T6571] usb 4-1: USB disconnect, device number 20 [ 201.350941][ T8077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.609'. [ 201.559368][ T8081] netlink: 48 bytes leftover after parsing attributes in process `syz.2.613'. [ 201.706501][ T6587] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 201.769095][ T8084] macsec2: entered promiscuous mode [ 201.781335][ T8084] team0: entered promiscuous mode [ 201.815992][ T8084] team_slave_0: entered promiscuous mode [ 201.846356][ T8084] team_slave_1: entered promiscuous mode [ 201.852590][ T8084] macsec2: entered allmulticast mode [ 201.858107][ T8084] team0: entered allmulticast mode [ 201.864382][ T8084] team_slave_0: entered allmulticast mode [ 201.873144][ T8084] team_slave_1: entered allmulticast mode [ 201.887583][ T6587] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.068078][ T8089] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 202.079884][ T6587] usb 1-1: New USB device found, idVendor=046d, idProduct=c08a, bcdDevice= 0.00 [ 202.100080][ T6587] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.140096][ T6587] usb 1-1: config 0 descriptor?? [ 202.358560][ T5929] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 202.407200][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.618'. [ 202.419495][ T8099] netlink: 24 bytes leftover after parsing attributes in process `syz.1.618'. [ 202.541591][ T5929] usb 3-1: config 0 has no interfaces? [ 202.560979][ T5929] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 202.746027][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.754106][ T5929] usb 3-1: Product: syz [ 202.978972][ T8116] binder: 8107:8116 ioctl c0306201 200000000240 returned -11 [ 203.016958][ T5929] usb 3-1: Manufacturer: syz [ 203.047064][ T5929] usb 3-1: SerialNumber: syz [ 203.236655][ T5929] usb 3-1: config 0 descriptor?? [ 203.313941][ T8119] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.321755][ T8119] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.827493][ T6578] usb 3-1: USB disconnect, device number 31 [ 204.853975][ T8141] netlink: 16 bytes leftover after parsing attributes in process `syz.2.629'. [ 204.938705][ T6587] usbhid 1-1:0.0: can't add hid device: -71 [ 204.959068][ T6587] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 205.088175][ T6587] usb 1-1: USB disconnect, device number 19 [ 205.230777][ T8153] netlink: 'syz.1.630': attribute type 1 has an invalid length. [ 205.238655][ T8153] netlink: 'syz.1.630': attribute type 6 has an invalid length. [ 205.246608][ T8153] netlink: 52 bytes leftover after parsing attributes in process `syz.1.630'. [ 205.318617][ T8154] mac80211_hwsim hwsim7 è: renamed from wlan1 [ 205.357614][ T6571] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 205.578749][ T6571] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.589170][ T6571] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 205.637190][ T6571] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 206.132315][ T6571] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.197492][ T6571] usb 5-1: config 0 descriptor?? [ 206.385956][ T979] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 206.547733][ T979] usb 3-1: config 0 has too many interfaces: 202, using maximum allowed: 32 [ 206.558901][ T979] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.588209][ T8162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.636'. [ 206.615942][ T979] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 202 [ 206.640028][ T979] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 206.666121][ T979] usb 3-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 206.684754][ T979] usb 3-1: Product: syz [ 206.725077][ T979] usb 3-1: Manufacturer: syz [ 206.735174][ T979] usb 3-1: SerialNumber: syz [ 206.755704][ T979] usb 3-1: config 0 descriptor?? [ 206.803844][ T979] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 206.816148][ T6571] usbhid 5-1:0.0: can't add hid device: -71 [ 206.822228][ T6571] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 206.847443][ T6571] usb 5-1: USB disconnect, device number 16 [ 207.015801][ T979] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 207.118690][ T5861] udevd[5861]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 207.309866][ T8160] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 207.319528][ T8160] nvme_fabrics: unknown parameter or missing value 'œ «' in ctrl creation request [ 207.535960][ T8178] binder: 8170:8178 ioctl c0306201 200000000240 returned -11 [ 208.637271][ T979] usb 3-1: USB disconnect, device number 32 [ 208.778485][ T8201] netlink: 'syz.4.644': attribute type 27 has an invalid length. [ 209.107029][ T8207] netlink: 'syz.2.646': attribute type 4 has an invalid length. [ 209.114738][ T8207] netlink: 17 bytes leftover after parsing attributes in process `syz.2.646'. [ 209.193961][ T8215] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 209.410784][ T979] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 209.450777][ T8201] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.462360][ T8201] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.719458][ T979] usb 5-1: Using ep0 maxpacket: 16 [ 209.730493][ T8201] dummy0: left allmulticast mode [ 209.736736][ T8201] macsec1: left promiscuous mode [ 209.744744][ T8201] macsec1: left allmulticast mode [ 209.756813][ T979] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 209.772172][ T979] usb 5-1: config 0 has no interface number 0 [ 209.814585][ T8202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.824126][ T8202] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.832673][ T8202] dummy0: left promiscuous mode [ 209.891700][ T979] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 209.905135][ T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.919149][ T8202] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 209.947648][ T979] usb 5-1: Product: syz [ 209.951890][ T979] usb 5-1: Manufacturer: syz [ 209.958610][ T979] usb 5-1: SerialNumber: syz [ 209.965605][ T3013] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.968023][ T979] usb 5-1: config 0 descriptor?? [ 209.980438][ T3013] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.048310][ T3013] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.061592][ T979] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 210.078366][ T8233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.654'. [ 210.123982][ T3013] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.803953][ T8248] vlan2: entered promiscuous mode [ 211.039803][ T8252] binder: 8245:8252 ioctl c0306201 200000000240 returned -11 [ 211.325979][ T979] gspca_spca1528: reg_w err -110 [ 211.379138][ T979] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 211.548469][ T8262] loop6: detected capacity change from 0 to 7 [ 211.617709][ T8262] Dev loop6: unable to read RDB block 7 [ 211.629915][ T8262] loop6: AHDI p2 p3 [ 211.642508][ T8262] loop6: partition table partially beyond EOD, truncated [ 211.650033][ T8262] loop6: p2 start 3876867210 is beyond EOD, truncated [ 212.088651][ T9] usb 5-1: USB disconnect, device number 17 [ 212.772070][ T8285] netlink: 36 bytes leftover after parsing attributes in process `syz.2.669'. [ 212.866054][ T8285] netlink: 16 bytes leftover after parsing attributes in process `syz.2.669'. [ 212.874970][ T8285] netlink: 36 bytes leftover after parsing attributes in process `syz.2.669'. [ 213.163793][ T8285] netlink: 36 bytes leftover after parsing attributes in process `syz.2.669'. [ 213.280065][ T8299] netlink: 'syz.3.671': attribute type 1 has an invalid length. [ 213.288370][ T8299] netlink: 'syz.3.671': attribute type 6 has an invalid length. [ 213.296219][ T8299] netlink: 52 bytes leftover after parsing attributes in process `syz.3.671'. [ 215.605435][ T8337] netlink: 48 bytes leftover after parsing attributes in process `syz.3.682'. [ 216.180915][ T8367] netlink: 48 bytes leftover after parsing attributes in process `syz.2.690'. [ 216.378563][ T8369] could not allocate digest TFM handle tgr128-generic [ 216.403594][ T8368] could not allocate digest TFM handle tgr128-generic [ 217.242687][ T979] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 217.386110][ T979] usb 2-1: device descriptor read/64, error -71 [ 217.538839][ T8410] netlink: 72 bytes leftover after parsing attributes in process `syz.3.697'. [ 217.656093][ T979] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 217.656245][ T8419] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 217.656245][ T8419] The task syz.3.697 (8419) triggered the difference, watch for misbehavior. [ 217.786048][ T979] usb 2-1: device descriptor read/64, error -71 [ 217.894206][ T8438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.704'. [ 217.909313][ T979] usb usb2-port1: attempt power cycle [ 218.265968][ T979] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 218.297613][ T979] usb 2-1: device descriptor read/8, error -71 [ 218.319120][ T8445] netlink: 36 bytes leftover after parsing attributes in process `syz.2.707'. [ 218.329054][ T8445] netlink: 16 bytes leftover after parsing attributes in process `syz.2.707'. [ 218.338420][ T8445] netlink: 36 bytes leftover after parsing attributes in process `syz.2.707'. [ 218.347997][ T8445] netlink: 36 bytes leftover after parsing attributes in process `syz.2.707'. [ 218.444015][ T8450] loop8: detected capacity change from 0 to 8 [ 218.532587][ T5861] Dev loop8: unable to read RDB block 8 [ 218.538918][ T5861] loop8: unable to read partition table [ 218.552338][ T5861] loop8: partition table beyond EOD, truncated [ 218.576107][ T979] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 218.578655][ T8450] Dev loop8: unable to read RDB block 8 [ 218.601557][ T8450] loop8: unable to read partition table [ 218.617319][ T979] usb 2-1: device descriptor read/8, error -71 [ 218.634825][ T8450] loop8: partition table beyond EOD, truncated [ 218.659146][ T8450] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 218.731468][ T979] usb usb2-port1: unable to enumerate USB device [ 218.892593][ T8457] netlink: 'syz.3.710': attribute type 1 has an invalid length. [ 218.900418][ T8457] netlink: 'syz.3.710': attribute type 6 has an invalid length. [ 218.908183][ T8457] netlink: 52 bytes leftover after parsing attributes in process `syz.3.710'. [ 218.993208][ T6578] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 219.586074][ T6578] usb 3-1: Using ep0 maxpacket: 32 [ 219.598958][ T6578] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 219.611364][ T6578] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 219.623150][ T6578] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice= e.74 [ 219.639909][ T6578] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.649847][ T6578] usb 3-1: Product: syz [ 219.656247][ T6578] usb 3-1: Manufacturer: syz [ 219.660976][ T6578] usb 3-1: SerialNumber: syz [ 219.667401][ T6578] usb 3-1: config 0 descriptor?? [ 219.678909][ T6578] ati_remote 3-1:0.0: ati_remote_probe: Unexpected endpoint_in [ 219.888653][ T6578] usb 3-1: USB disconnect, device number 33 [ 221.236438][ T8511] netlink: 'syz.4.725': attribute type 1 has an invalid length. [ 221.254933][ T8511] netlink: 'syz.4.725': attribute type 6 has an invalid length. [ 221.300231][ T8511] netlink: 52 bytes leftover after parsing attributes in process `syz.4.725'. [ 221.871910][ T8520] netlink: 'syz.3.728': attribute type 1 has an invalid length. [ 222.960824][ T8539] netlink: 48 bytes leftover after parsing attributes in process `syz.4.733'. [ 223.409219][ T8555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.739'. [ 223.959109][ T8571] netlink: 48 bytes leftover after parsing attributes in process `syz.4.742'. [ 224.119696][ T8575] tipc: Started in network mode [ 224.125116][ T8575] tipc: Node identity aa5c69933f9b, cluster identity 4711 [ 224.138095][ T8575] tipc: Enabled bearer , priority 0 [ 224.157988][ T8573] vlan3: entered promiscuous mode [ 224.170249][ T8575] syzkaller0: entered promiscuous mode [ 224.176233][ T8575] syzkaller0: entered allmulticast mode [ 224.187825][ T8575] tipc: Resetting bearer [ 224.194967][ T8574] tipc: Resetting bearer [ 224.205353][ T8574] tipc: Disabling bearer [ 224.415204][ T8581] netlink: 28 bytes leftover after parsing attributes in process `syz.4.747'. [ 224.424809][ T8581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.747'. [ 224.428872][ T8582] bridge_slave_0: left allmulticast mode [ 224.885986][ T8582] bridge_slave_0: left promiscuous mode [ 224.892074][ T8582] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.936502][ T8582] bridge_slave_1: left allmulticast mode [ 224.968090][ T8582] bridge_slave_1: left promiscuous mode [ 224.994802][ T8582] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.030922][ T8582] bond0: (slave bond_slave_0): Releasing backup interface [ 225.041381][ T8592] netlink: 52 bytes leftover after parsing attributes in process `syz.0.750'. [ 225.063335][ T8582] bond0: (slave 4@0Ù): Releasing backup interface [ 225.093556][ T8582] team0: Port device team_slave_0 removed [ 225.109738][ T8582] team0: Port device team_slave_1 removed [ 225.116730][ T8582] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.124814][ T8582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.446165][ T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 225.605409][ T8610] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 225.616124][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 225.632341][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 225.653970][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.678595][ T9] usb 3-1: Product: syz [ 225.687322][ T9] usb 3-1: Manufacturer: syz [ 225.714405][ T9] usb 3-1: SerialNumber: syz [ 225.721485][ T9] usb 3-1: config 0 descriptor?? [ 225.946798][ T9] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 225.949055][ T9] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 225.951675][ T9] usb 3-1: USB disconnect, device number 34 [ 226.157207][ T8632] netlink: 52 bytes leftover after parsing attributes in process `syz.0.763'. [ 226.165293][ T8633] netlink: 12 bytes leftover after parsing attributes in process `syz.4.764'. [ 227.395833][ T8665] snd_dummy snd_dummy.0: control 0:-3:0:syz0:0 is already present [ 228.203047][ T8685] netlink: 112 bytes leftover after parsing attributes in process `syz.3.776'. [ 228.459351][ T8691] loop6: detected capacity change from 0 to 7 [ 228.478870][ T5861] Dev loop6: unable to read RDB block 7 [ 228.489115][ T5861] loop6: AHDI p2 p3 [ 228.502042][ T5861] loop6: partition table partially beyond EOD, truncated [ 228.524248][ T5861] loop6: p2 start 3876867210 is beyond EOD, truncated [ 228.544503][ T8691] Dev loop6: unable to read RDB block 7 [ 228.562049][ T8691] loop6: AHDI p2 p3 [ 228.568934][ T8691] loop6: partition table partially beyond EOD, truncated [ 228.608035][ T8691] loop6: p2 start 3876867210 is beyond EOD, truncated [ 228.956452][ T8701] netlink: 16 bytes leftover after parsing attributes in process `syz.0.782'. [ 229.544253][ T8714] netlink: 12 bytes leftover after parsing attributes in process `syz.1.786'. [ 230.860624][ T8716] netlink: 36 bytes leftover after parsing attributes in process `syz.1.787'. [ 230.869914][ T8716] netlink: 16 bytes leftover after parsing attributes in process `syz.1.787'. [ 230.879838][ T8716] netlink: 36 bytes leftover after parsing attributes in process `syz.1.787'. [ 230.889993][ T8716] netlink: 36 bytes leftover after parsing attributes in process `syz.1.787'. [ 230.960618][ T8724] binder: 8719:8724 ioctl c0306201 200000000240 returned -11 [ 231.167323][ T8729] netlink: 48 bytes leftover after parsing attributes in process `syz.4.791'. [ 231.348328][ T8737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.794'. [ 231.638786][ T8744] netlink: 48 bytes leftover after parsing attributes in process `syz.0.796'. [ 232.146143][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 232.180184][ T8776] netlink: 'syz.2.801': attribute type 12 has an invalid length. [ 232.339641][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 232.342266][ T8785] loop6: detected capacity change from 0 to 7 [ 232.350963][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.350995][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.351032][ T9] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 232.351056][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.353597][ T9] usb 5-1: config 0 descriptor?? [ 232.410171][ T5861] Dev loop6: unable to read RDB block 7 [ 232.416938][ T5861] loop6: AHDI p2 p3 [ 232.424226][ T5861] loop6: partition table partially beyond EOD, truncated [ 232.431531][ T5929] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 232.442702][ T5861] loop6: p2 start 3876867210 is beyond EOD, truncated [ 232.463194][ T8785] Dev loop6: unable to read RDB block 7 [ 232.469022][ T8785] loop6: AHDI p2 p3 [ 232.479111][ T8785] loop6: partition table partially beyond EOD, truncated [ 232.508413][ T8785] loop6: p2 start 3876867210 is beyond EOD, truncated [ 232.755306][ T8794] binder: 8782:8794 ioctl c0306201 200000000240 returned -11 [ 232.830151][ T5929] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 232.867737][ T5929] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 232.902998][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 232.914136][ T5929] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 232.929335][ T5929] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 232.964478][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.004084][ T5929] usb 1-1: Product: syz [ 233.011891][ T5929] usb 1-1: Manufacturer: syz [ 233.019915][ T5929] usb 1-1: SerialNumber: syz [ 233.041174][ T5929] usb 1-1: config 0 descriptor?? [ 233.047483][ T8775] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 233.057137][ T5929] usb 1-1: ucan: probing device on interface #0 [ 233.064088][ T5929] usb 1-1: ucan: invalid in_ep MaxPacketSize [ 233.070642][ T5929] usb 1-1: ucan: probe failed; try to update the device firmware [ 233.236656][ T6587] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 233.263566][ T5929] usb 1-1: USB disconnect, device number 20 [ 233.269921][ T6578] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 233.385996][ T6587] usb 3-1: Using ep0 maxpacket: 8 [ 233.392642][ T6587] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 233.418086][ T6587] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.437882][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 233.460643][ T6578] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 233.469001][ T6578] usb 2-1: config 0 has no interface number 0 [ 233.476508][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 233.490816][ T6587] pvrusb2: Hardware description: Terratec Grabster AV400 [ 233.507031][ T6578] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 233.518999][ T6587] pvrusb2: ********** [ 233.527909][ T6587] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 233.529420][ T9] usb 5-1: USB disconnect, device number 18 [ 233.539997][ T6578] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 233.564838][ T6587] pvrusb2: Important functionality might not be entirely working. [ 233.593912][ T6578] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 233.615156][ T6587] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 233.636107][ T6578] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 233.647616][ T6587] pvrusb2: ********** [ 233.653032][ T6578] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 233.664434][ T6578] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 233.677879][ T6578] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 233.696111][ T6578] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.708040][ T2345] pvrusb2: Invalid write control endpoint [ 233.722406][ T6578] usb 2-1: config 0 descriptor?? [ 233.743771][ T8799] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 233.766265][ T8799] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 233.796368][ T6578] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 233.812289][ T2345] pvrusb2: Invalid write control endpoint [ 233.823406][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 233.847595][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 233.855202][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 233.866562][ T2345] pvrusb2: Device being rendered inoperable [ 233.872664][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 233.880591][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 233.907213][ T2345] pvrusb2: Attached sub-driver cx25840 [ 233.924495][ T6587] usb 3-1: USB disconnect, device number 35 [ 233.934649][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 233.945631][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 234.011580][ T8802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.020827][ T8799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.052095][ T8802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.096555][ T8799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.290137][ T9] usb 2-1: USB disconnect, device number 31 [ 234.307984][ T9] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 234.366997][ T8827] program syz.4.817 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 234.834388][ T8844] binder: 8829:8844 ioctl c0306201 200000000240 returned -11 [ 235.397684][ T8850] loop6: detected capacity change from 0 to 7 [ 235.416308][ T8850] Dev loop6: unable to read RDB block 7 [ 235.423100][ T8850] loop6: AHDI p2 p3 [ 235.471400][ T8850] loop6: partition table partially beyond EOD, truncated [ 235.497697][ T8850] loop6: p2 start 3876867210 is beyond EOD, truncated [ 236.122200][ T8861] __nla_validate_parse: 4 callbacks suppressed [ 236.122216][ T8861] netlink: 48 bytes leftover after parsing attributes in process `syz.2.829'. [ 236.146966][ T8861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.301270][ T8865] netlink: 16 bytes leftover after parsing attributes in process `syz.3.833'. [ 237.001174][ T8874] netlink: 'syz.3.835': attribute type 27 has an invalid length. [ 237.263794][ T8874] team0: left allmulticast mode [ 237.278342][ T8874] team_slave_0: left allmulticast mode [ 237.284056][ T8874] team_slave_1: left allmulticast mode [ 237.308520][ T8874] team0: left promiscuous mode [ 237.320679][ T8874] team_slave_0: left promiscuous mode [ 237.367526][ T8874] team_slave_1: left promiscuous mode [ 237.373297][ T8874] macsec2: left promiscuous mode [ 237.382617][ T8874] macsec2: left allmulticast mode [ 237.424663][ T8878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.452824][ T8878] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.464941][ T8878] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 237.496091][ T6571] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 237.655992][ T6571] usb 4-1: Using ep0 maxpacket: 16 [ 237.662743][ T6571] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 237.671248][ T6571] usb 4-1: config 0 has no interface number 0 [ 237.689959][ T6571] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 237.700008][ T6571] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.749327][ T6571] usb 4-1: Product: syz [ 237.767843][ T6571] usb 4-1: Manufacturer: syz [ 237.788895][ T6571] usb 4-1: SerialNumber: syz [ 237.824669][ T6571] usb 4-1: config 0 descriptor?? [ 237.845755][ T6571] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 238.255696][ T8905] loop6: detected capacity change from 0 to 7 [ 238.290099][ T8905] Dev loop6: unable to read RDB block 7 [ 238.300094][ T8905] loop6: AHDI p2 p3 [ 238.313377][ T8905] loop6: partition table partially beyond EOD, truncated [ 238.325553][ T8905] loop6: p2 start 3876867210 is beyond EOD, truncated [ 238.546085][ T6587] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 238.795152][ T6587] usb 1-1: Using ep0 maxpacket: 8 [ 238.801713][ T6587] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 238.812693][ T6587] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.000555][ T8921] binder: 8916:8921 ioctl c0306201 200000000240 returned -11 [ 239.036838][ T6587] pvrusb2: Hardware description: Terratec Grabster AV400 [ 239.055682][ T6587] pvrusb2: ********** [ 239.067887][ T6587] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 239.120287][ T6587] pvrusb2: Important functionality might not be entirely working. [ 239.133295][ T6587] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 239.149541][ T6587] pvrusb2: ********** [ 239.250145][ T8909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.336330][ T8909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.348605][ T8909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.399195][ T8909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.416527][ T6571] gspca_spca1528: reg_w err -110 [ 239.423305][ T8909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.436120][ T6571] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 239.497385][ T8909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.592895][ T8909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.615482][ T8909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.637327][ T8909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.647413][ T8909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.702034][ T2345] pvrusb2: Invalid write control endpoint [ 239.718439][ T8929] netlink: 16 bytes leftover after parsing attributes in process `syz.4.853'. [ 239.857686][ T2345] pvrusb2: Invalid write control endpoint [ 239.868471][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 239.878873][ T6571] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 239.906830][ T9] usb 1-1: USB disconnect, device number 21 [ 239.913694][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 239.939012][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 239.965488][ T2345] pvrusb2: Device being rendered inoperable [ 239.983711][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 240.003946][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 240.022573][ T2345] pvrusb2: Attached sub-driver cx25840 [ 240.037474][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 240.065997][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 240.076488][ T6571] usb 2-1: too many configurations: 94, using maximum allowed: 8 [ 240.117110][ T5857] usb 4-1: USB disconnect, device number 21 [ 240.177867][ T6571] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 240.193524][ T6571] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.225937][ T6571] usb 2-1: Product: syz [ 240.239148][ T6571] usb 2-1: Manufacturer: syz [ 240.243887][ T6571] usb 2-1: SerialNumber: syz [ 240.272638][ T6571] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 240.290195][ T979] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 240.415078][ T8945] netlink: 20 bytes leftover after parsing attributes in process `syz.3.857'. [ 240.424749][ T8945] netlink: 20 bytes leftover after parsing attributes in process `syz.3.857'. [ 240.589414][ T8954] loop6: detected capacity change from 0 to 7 [ 240.632497][ T8954] Dev loop6: unable to read RDB block 7 [ 240.657659][ T8954] loop6: AHDI p2 p3 [ 240.661755][ T8954] loop6: partition table partially beyond EOD, truncated [ 240.670873][ T8954] loop6: p2 start 3876867210 is beyond EOD, truncated [ 240.766402][ T5857] usb 2-1: USB disconnect, device number 32 [ 240.866540][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 241.019406][ T9] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 241.029296][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.190981][ T8971] netlink: 112 bytes leftover after parsing attributes in process `syz.4.868'. [ 241.252503][ T9] usb 3-1: Product: syz [ 241.292943][ T9] usb 3-1: Manufacturer: syz [ 241.308543][ T9] usb 3-1: SerialNumber: syz [ 241.334318][ T9] usb 3-1: config 0 descriptor?? [ 241.375034][ T979] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 241.398796][ T979] ath9k_htc: Failed to initialize the device [ 241.413440][ T5857] usb 2-1: ath9k_htc: USB layer deinitialized [ 241.609071][ T9] usb 3-1: USB disconnect, device number 36 [ 242.263420][ T9005] dvmrp8: entered allmulticast mode [ 243.260032][ T9039] loop6: detected capacity change from 0 to 7 [ 243.269932][ T9039] Dev loop6: unable to read RDB block 7 [ 243.281347][ T9039] loop6: AHDI p2 p3 [ 243.286694][ T9039] loop6: partition table partially beyond EOD, truncated [ 243.310496][ T9039] loop6: p2 start 3876867210 is beyond EOD, truncated [ 243.782480][ T9067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.842970][ T9068] netlink: 'syz.2.895': attribute type 10 has an invalid length. [ 243.869373][ T9068] $Hÿ: (slave è): Opening slave failed [ 244.709123][ T9085] netlink: 20 bytes leftover after parsing attributes in process `syz.1.902'. [ 244.718292][ T9085] netlink: 20 bytes leftover after parsing attributes in process `syz.1.902'. [ 245.077306][ T979] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 245.098937][ T9091] macsec2: entered promiscuous mode [ 245.111467][ T9091] macvlan1: entered promiscuous mode [ 245.247212][ T979] usb 5-1: Using ep0 maxpacket: 8 [ 245.260281][ T979] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 245.270646][ T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.279065][ T979] usb 5-1: Product: syz [ 245.283399][ T979] usb 5-1: Manufacturer: syz [ 245.680534][ T979] usb 5-1: SerialNumber: syz [ 245.703146][ T979] usb 5-1: config 0 descriptor?? [ 245.928528][ T979] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 246.062177][ T979] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 246.197193][ T979] usb 5-1: USB disconnect, device number 19 [ 246.617896][ T9118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.662088][ T9153] binder: 9140:9153 ioctl c0306201 200000000240 returned -11 [ 249.187803][ T6587] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 249.418906][ T6587] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 249.450662][ T6587] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.490874][ T6587] usb 5-1: Product: syz [ 249.495111][ T6587] usb 5-1: Manufacturer: syz [ 249.503179][ T6587] usb 5-1: SerialNumber: syz [ 249.548237][ T6587] usb 5-1: config 0 descriptor?? [ 249.982374][ T6587] usb 5-1: USB disconnect, device number 20 [ 250.076150][ T979] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 250.258057][ T979] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 250.266108][ T6578] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 250.269488][ T979] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 250.290514][ T979] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 250.299985][ T979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.310502][ T9173] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 250.320466][ T979] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 250.416242][ T6578] usb 2-1: device descriptor read/64, error -71 [ 250.506003][ T6587] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 250.635963][ T6587] usb 5-1: device descriptor read/64, error -71 [ 250.656050][ T6578] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 250.786027][ T6578] usb 2-1: device descriptor read/64, error -71 [ 250.816281][ T5929] usb 1-1: USB disconnect, device number 22 [ 250.876133][ T6587] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 250.896835][ T6578] usb usb2-port1: attempt power cycle [ 251.025987][ T6587] usb 5-1: device descriptor read/64, error -71 [ 251.147942][ T6587] usb usb5-port1: attempt power cycle [ 251.216076][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 251.238505][ T6578] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 251.347588][ T9197] netlink: 112 bytes leftover after parsing attributes in process `syz.2.933'. [ 251.387339][ T6578] usb 2-1: device descriptor read/8, error -71 [ 251.459764][ T9] usb 4-1: config 0 has no interfaces? [ 251.469761][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 251.520567][ T6587] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 251.579370][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.587946][ T9] usb 4-1: Product: syz [ 251.593555][ T9] usb 4-1: Manufacturer: syz [ 251.599572][ T9] usb 4-1: SerialNumber: syz [ 251.605647][ T9] usb 4-1: config 0 descriptor?? [ 251.616986][ T6587] usb 5-1: device descriptor read/8, error -71 [ 251.702288][ T6578] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 251.749045][ T6578] usb 2-1: device descriptor read/8, error -71 [ 251.884881][ T6578] usb usb2-port1: unable to enumerate USB device [ 252.436050][ T5929] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 252.616074][ T5929] usb 1-1: Using ep0 maxpacket: 8 [ 252.627125][ T5929] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 252.648569][ T5929] usb 1-1: config 128 has no interfaces? [ 252.659620][ T5929] usb 1-1: New USB device found, idVendor=66aa, idProduct=a103, bcdDevice=50.49 [ 252.700623][ T5929] usb 1-1: New USB device strings: Mfr=21, Product=254, SerialNumber=3 [ 252.720461][ T5929] usb 1-1: Product: syz [ 252.730611][ T5929] usb 1-1: Manufacturer: syz [ 252.735472][ T5929] usb 1-1: SerialNumber: syz [ 253.131939][ T5929] usb 1-1: USB disconnect, device number 23 [ 253.330898][ T9232] mac80211_hwsim hwsim9 è: renamed from wlan1 [ 253.443485][ T9235] netlink: 16 bytes leftover after parsing attributes in process `syz.4.944'. [ 253.590353][ T9237] capability: warning: `syz.4.945' uses deprecated v2 capabilities in a way that may be insecure [ 253.954852][ T9247] netlink: 12 bytes leftover after parsing attributes in process `syz.2.948'. [ 253.968041][ T5929] usb 4-1: USB disconnect, device number 22 [ 254.633132][ T9270] vlan2: entered promiscuous mode [ 255.322020][ T9293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.965'. [ 255.341541][ T9295] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 255.402408][ T9295] netlink: 1 bytes leftover after parsing attributes in process `syz.1.964'. [ 255.483249][ T9305] netlink: 'syz.3.965': attribute type 1 has an invalid length. [ 256.656000][ T5929] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 256.779316][ T9330] netlink: 48 bytes leftover after parsing attributes in process `syz.3.975'. [ 256.827642][ T5929] usb 1-1: Using ep0 maxpacket: 32 [ 256.847570][ T5929] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 256.855790][ T5929] usb 1-1: config 0 has no interface number 0 [ 256.880583][ T5929] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 256.933122][ T5929] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 256.951713][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.975935][ T5929] usb 1-1: Product: syz [ 256.986425][ T5929] usb 1-1: Manufacturer: syz [ 257.011561][ T5929] usb 1-1: SerialNumber: syz [ 257.055654][ T9336] netlink: 112 bytes leftover after parsing attributes in process `syz.2.976'. [ 257.122363][ T5929] usb 1-1: config 0 descriptor?? [ 257.135662][ T5929] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 257.150012][ T5929] em28xx 1-1:0.132: Video interface 132 found: [ 257.354417][ T9343] netlink: 'syz.3.978': attribute type 27 has an invalid length. [ 257.391067][ T5929] em28xx 1-1:0.132: chip ID is em2710/2820 [ 257.712152][ T5929] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 257.771174][ T5929] em28xx 1-1:0.132: board has no eeprom [ 257.796477][ T9345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.809380][ T9345] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.830393][ T5857] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 257.846147][ T5929] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 257.854142][ T9345] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 257.873795][ T5929] em28xx 1-1:0.132: analog set to bulk mode. [ 257.882863][ T6578] em28xx 1-1:0.132: Registering V4L2 extension [ 257.925652][ T5929] usb 1-1: USB disconnect, device number 24 [ 258.016087][ T5857] usb 4-1: Using ep0 maxpacket: 16 [ 258.023710][ T5857] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 258.034145][ T5857] usb 4-1: config 0 has no interface number 0 [ 258.042442][ T6578] em28xx 1-1:0.132: failed to trigger read from i2c address 0x4a (error=-19) [ 258.060389][ T5929] em28xx 1-1:0.132: Disconnecting em28xx [ 258.079596][ T5857] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 258.166689][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.185764][ T5857] usb 4-1: Product: syz [ 258.194579][ T5857] usb 4-1: Manufacturer: syz [ 258.202580][ T5857] usb 4-1: SerialNumber: syz [ 258.221889][ T5857] usb 4-1: config 0 descriptor?? [ 258.248591][ T5857] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 258.505660][ T6578] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 258.557754][ T6578] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 258.564975][ T6578] em28xx 1-1:0.132: No AC97 audio processor [ 258.591024][ T6578] usb 1-1: Decoder not found [ 258.613480][ T6578] em28xx 1-1:0.132: failed to create media graph [ 258.660671][ T6578] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 258.818708][ T2152] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 258.887353][ T6578] em28xx 1-1:0.132: Remote control support is not available for this card. [ 258.887415][ T5929] em28xx 1-1:0.132: Closing input extension [ 258.887447][ T5929] ================================================================== [ 258.887464][ T5929] BUG: KASAN: slab-use-after-free in media_device_unregister+0x141/0x400 [ 258.887515][ T5929] Read of size 8 at addr ffff88807cf7c210 by task kworker/1:4/5929 [ 258.887535][ T5929] [ 258.887553][ T5929] CPU: 1 UID: 0 PID: 5929 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 258.887577][ T5929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 258.887593][ T5929] Workqueue: usb_hub_wq hub_event [ 258.887626][ T5929] Call Trace: [ 258.887636][ T5929] [ 258.887646][ T5929] dump_stack_lvl+0x189/0x250 [ 258.887673][ T5929] ? rcu_is_watching+0x15/0xb0 [ 258.887697][ T5929] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.887722][ T5929] ? rcu_is_watching+0x15/0xb0 [ 258.887744][ T5929] ? lock_release+0x4b/0x3e0 [ 258.887778][ T5929] ? __virt_addr_valid+0x1c8/0x5c0 [ 258.887808][ T5929] ? __virt_addr_valid+0x4a5/0x5c0 [ 258.887837][ T5929] print_report+0xca/0x240 [ 258.887857][ T5929] ? media_device_unregister+0x141/0x400 [ 258.887886][ T5929] kasan_report+0x118/0x150 [ 258.887915][ T5929] ? media_device_unregister+0x141/0x400 [ 258.887950][ T5929] media_device_unregister+0x141/0x400 [ 258.887989][ T5929] em28xx_release_resources+0xac/0x240 [ 258.888017][ T5929] em28xx_usb_disconnect+0x19f/0x2f0 [ 258.888044][ T5929] usb_unbind_interface+0x26b/0x910 [ 258.888077][ T5929] ? __pfx_usb_unbind_interface+0x10/0x10 [ 258.888107][ T5929] device_release_driver_internal+0x4d9/0x800 [ 258.888148][ T5929] bus_remove_device+0x34d/0x410 [ 258.888183][ T5929] device_del+0x511/0x8e0 [ 258.888206][ T5929] ? kfree+0x18e/0x440 [ 258.888233][ T5929] ? __pfx_device_del+0x10/0x10 [ 258.888255][ T5929] ? kobject_put+0x446/0x480 [ 258.888291][ T5929] usb_disable_device+0x3e9/0x8a0 [ 258.888320][ T5929] usb_disconnect+0x330/0x950 [ 258.888344][ T5929] hub_event+0x1cf5/0x4a20 [ 258.888381][ T5929] ? do_raw_spin_lock+0x121/0x290 [ 258.888409][ T5929] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 258.888444][ T5929] ? __pfx_hub_event+0x10/0x10 [ 258.888468][ T5929] ? rcu_is_watching+0x15/0xb0 [ 258.888489][ T5929] ? lock_acquire+0x5f/0x360 [ 258.888523][ T5929] ? rcu_is_watching+0x15/0xb0 [ 258.888543][ T5929] ? process_scheduled_works+0x9ef/0x17b0 [ 258.888563][ T5929] ? process_scheduled_works+0x9ef/0x17b0 [ 258.888583][ T5929] process_scheduled_works+0xae1/0x17b0 [ 258.888616][ T5929] ? __pfx_process_scheduled_works+0x10/0x10 [ 258.888643][ T5929] worker_thread+0x8a0/0xda0 [ 258.888663][ T5929] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 258.888695][ T5929] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 258.888722][ T5929] ? __kthread_parkme+0x7b/0x200 [ 258.888748][ T5929] kthread+0x70e/0x8a0 [ 258.888770][ T5929] ? __pfx_worker_thread+0x10/0x10 [ 258.888783][ T5929] ? __pfx_kthread+0x10/0x10 [ 258.888801][ T5929] ? rcu_is_watching+0x15/0xb0 [ 258.888816][ T5929] ? __pfx_kthread+0x10/0x10 [ 258.888843][ T5929] ret_from_fork+0x3f9/0x770 [ 258.888866][ T5929] ? __pfx_ret_from_fork+0x10/0x10 [ 258.888889][ T5929] ? __switch_to_asm+0x39/0x70 [ 258.888913][ T5929] ? __switch_to_asm+0x33/0x70 [ 258.888933][ T5929] ? __pfx_kthread+0x10/0x10 [ 258.888951][ T5929] ret_from_fork_asm+0x1a/0x30 [ 258.888984][ T5929] [ 258.888992][ T5929] [ 258.889000][ T5929] Allocated by task 6578: [ 258.889011][ T5929] kasan_save_track+0x3e/0x80 [ 258.889169][ T5929] __kasan_kmalloc+0x93/0xb0 [ 258.889200][ T5929] __kmalloc_cache_noprof+0x230/0x3d0 [ 258.889229][ T5929] em28xx_v4l2_init+0x10b/0x2e70 [ 258.889253][ T5929] em28xx_init_extension+0x11d/0x1c0 [ 258.889273][ T5929] process_scheduled_works+0xae1/0x17b0 [ 258.889289][ T5929] worker_thread+0x8a0/0xda0 [ 258.889302][ T5929] kthread+0x70e/0x8a0 [ 258.889319][ T5929] ret_from_fork+0x3f9/0x770 [ 258.889335][ T5929] ret_from_fork_asm+0x1a/0x30 [ 258.889374][ T5929] [ 258.889380][ T5929] Freed by task 6578: [ 258.889392][ T5929] kasan_save_track+0x3e/0x80 [ 258.889415][ T5929] kasan_save_free_info+0x46/0x50 [ 258.889432][ T5929] __kasan_slab_free+0x5b/0x80 [ 258.889451][ T5929] kfree+0x18e/0x440 [ 258.889468][ T5929] em28xx_v4l2_init+0x1683/0x2e70 [ 258.889488][ T5929] em28xx_init_extension+0x11d/0x1c0 [ 258.889509][ T5929] process_scheduled_works+0xae1/0x17b0 [ 258.889528][ T5929] worker_thread+0x8a0/0xda0 [ 258.889547][ T5929] kthread+0x70e/0x8a0 [ 258.889569][ T5929] ret_from_fork+0x3f9/0x770 [ 258.889584][ T5929] ret_from_fork_asm+0x1a/0x30 [ 258.889604][ T5929] [ 258.889609][ T5929] The buggy address belongs to the object at ffff88807cf7c000 [ 258.889609][ T5929] which belongs to the cache kmalloc-8k of size 8192 [ 258.889623][ T5929] The buggy address is located 528 bytes inside of [ 258.889623][ T5929] freed 8192-byte region [ffff88807cf7c000, ffff88807cf7e000) [ 258.889644][ T5929] [ 258.889651][ T5929] The buggy address belongs to the physical page: [ 258.889676][ T5929] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7cf78 [ 258.889700][ T5929] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 258.889718][ T5929] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 258.889738][ T5929] page_type: f5(slab) [ 258.889753][ T5929] raw: 00fff00000000040 ffff88801a442280 dead000000000122 0000000000000000 [ 258.889767][ T5929] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 258.889785][ T5929] head: 00fff00000000040 ffff88801a442280 dead000000000122 0000000000000000 [ 258.889806][ T5929] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 258.889828][ T5929] head: 00fff00000000003 ffffea0001f3de01 00000000ffffffff 00000000ffffffff [ 258.889847][ T5929] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 258.889859][ T5929] page dumped because: kasan: bad access detected [ 258.889875][ T5929] page_owner tracks the page as allocated [ 258.889882][ T5929] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 9281, tgid 9280 (syz.4.960), ts 255025297560, free_ts 255004078522 [ 258.889908][ T5929] post_alloc_hook+0x240/0x2a0 [ 258.889941][ T5929] get_page_from_freelist+0x21e4/0x22c0 [ 258.889964][ T5929] __alloc_frozen_pages_noprof+0x181/0x370 [ 258.889985][ T5929] alloc_pages_mpol+0x232/0x4a0 [ 258.890013][ T5929] allocate_slab+0x8a/0x370 [ 258.890030][ T5929] ___slab_alloc+0xbeb/0x1410 [ 258.890052][ T5929] __kmalloc_cache_noprof+0x296/0x3d0 [ 258.890072][ T5929] sg_open+0xd48/0x1a10 [ 258.890087][ T5929] chrdev_open+0x4c9/0x5e0 [ 258.890122][ T5929] do_dentry_open+0x950/0x13f0 [ 258.890142][ T5929] vfs_open+0x3b/0x340 [ 258.890162][ T5929] path_openat+0x2ee5/0x3830 [ 258.890248][ T5929] do_filp_open+0x1fa/0x410 [ 258.890278][ T5929] do_sys_openat2+0x121/0x1c0 [ 258.890299][ T5929] __x64_sys_openat+0x138/0x170 [ 258.890321][ T5929] do_syscall_64+0xfa/0x3b0 [ 258.890349][ T5929] page last free pid 9278 tgid 9277 stack trace: [ 258.890362][ T5929] __free_frozen_pages+0xbc4/0xd30 [ 258.890385][ T5929] free_large_kmalloc+0x13a/0x1f0 [ 258.890411][ T5929] bpf_check+0x16552/0x1d2d0 [ 258.890434][ T5929] bpf_prog_load+0x1318/0x1930 [ 258.890472][ T5929] __sys_bpf+0x528/0x870 [ 258.890497][ T5929] __x64_sys_bpf+0x7c/0x90 [ 258.890519][ T5929] do_syscall_64+0xfa/0x3b0 [ 258.890550][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.890571][ T5929] [ 258.890578][ T5929] Memory state around the buggy address: [ 258.890591][ T5929] ffff88807cf7c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 258.890609][ T5929] ffff88807cf7c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 258.890624][ T5929] >ffff88807cf7c200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 258.890635][ T5929] ^ [ 258.890648][ T5929] ffff88807cf7c280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 258.890663][ T5929] ffff88807cf7c300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 258.890675][ T5929] ================================================================== [ 258.964535][ T5929] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 258.964558][ T5929] CPU: 1 UID: 0 PID: 5929 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 258.964583][ T5929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 258.964598][ T5929] Workqueue: usb_hub_wq hub_event [ 258.964632][ T5929] Call Trace: [ 258.964641][ T5929] [ 258.964651][ T5929] dump_stack_lvl+0x99/0x250 [ 258.964680][ T5929] ? __asan_memcpy+0x40/0x70 [ 258.964705][ T5929] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.964730][ T5929] ? __pfx__printk+0x10/0x10 [ 258.964767][ T5929] vpanic+0x281/0x750 [ 258.964793][ T5929] ? preempt_schedule+0xae/0xc0 [ 258.964820][ T5929] ? __pfx_vpanic+0x10/0x10 [ 258.964842][ T5929] ? preempt_schedule_common+0x83/0xd0 [ 258.964878][ T5929] ? preempt_schedule+0xae/0xc0 [ 258.964906][ T5929] ? __pfx_preempt_schedule+0x10/0x10 [ 258.964938][ T5929] panic+0xb9/0xc0 [ 258.964962][ T5929] ? __pfx_panic+0x10/0x10 [ 258.964988][ T5929] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 258.965020][ T5929] ? media_device_unregister+0x141/0x400 [ 258.965055][ T5929] check_panic_on_warn+0x89/0xb0 [ 258.965084][ T5929] ? media_device_unregister+0x141/0x400 [ 258.965118][ T5929] end_report+0x78/0x160 [ 258.965148][ T5929] kasan_report+0x129/0x150 [ 258.965180][ T5929] ? media_device_unregister+0x141/0x400 [ 258.965218][ T5929] media_device_unregister+0x141/0x400 [ 258.965255][ T5929] em28xx_release_resources+0xac/0x240 [ 258.965282][ T5929] em28xx_usb_disconnect+0x19f/0x2f0 [ 258.965307][ T5929] usb_unbind_interface+0x26b/0x910 [ 258.965340][ T5929] ? __pfx_usb_unbind_interface+0x10/0x10 [ 258.965368][ T5929] device_release_driver_internal+0x4d9/0x800 [ 258.965398][ T5929] bus_remove_device+0x34d/0x410 [ 258.965448][ T5929] device_del+0x511/0x8e0 [ 258.965473][ T5929] ? kfree+0x18e/0x440 [ 258.965500][ T5929] ? __pfx_device_del+0x10/0x10 [ 258.965520][ T5929] ? kobject_put+0x446/0x480 [ 258.965558][ T5929] usb_disable_device+0x3e9/0x8a0 [ 258.965586][ T5929] usb_disconnect+0x330/0x950 [ 258.965615][ T5929] hub_event+0x1cf5/0x4a20 [ 258.965655][ T5929] ? do_raw_spin_lock+0x121/0x290 [ 258.965683][ T5929] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 258.965713][ T5929] ? __pfx_hub_event+0x10/0x10 [ 258.965737][ T5929] ? rcu_is_watching+0x15/0xb0 [ 258.965759][ T5929] ? lock_acquire+0x5f/0x360 [ 258.965791][ T5929] ? rcu_is_watching+0x15/0xb0 [ 258.965814][ T5929] ? process_scheduled_works+0x9ef/0x17b0 [ 258.965836][ T5929] ? process_scheduled_works+0x9ef/0x17b0 [ 258.965874][ T5929] process_scheduled_works+0xae1/0x17b0 [ 258.965909][ T5929] ? __pfx_process_scheduled_works+0x10/0x10 [ 258.965939][ T5929] worker_thread+0x8a0/0xda0 [ 258.965972][ T5929] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 258.966004][ T5929] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 258.966032][ T5929] ? __kthread_parkme+0x7b/0x200 [ 258.966059][ T5929] kthread+0x70e/0x8a0 [ 258.966088][ T5929] ? __pfx_worker_thread+0x10/0x10 [ 258.966109][ T5929] ? __pfx_kthread+0x10/0x10 [ 258.966136][ T5929] ? rcu_is_watching+0x15/0xb0 [ 258.966157][ T5929] ? __pfx_kthread+0x10/0x10 [ 258.966183][ T5929] ret_from_fork+0x3f9/0x770 [ 258.966207][ T5929] ? __pfx_ret_from_fork+0x10/0x10 [ 258.966232][ T5929] ? __switch_to_asm+0x39/0x70 [ 258.966259][ T5929] ? __switch_to_asm+0x33/0x70 [ 258.966285][ T5929] ? __pfx_kthread+0x10/0x10 [ 258.966312][ T5929] ret_from_fork_asm+0x1a/0x30 [ 258.966350][ T5929] [ 258.966534][ T5929] Kernel Offset: disabled